$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: USlfGDcr0hzLW1aWJJ4FGnwVT+30DlE4CrBTehkWwLg= Subject key identifier: 9E:C3:7B:F7:ED:70:9E:A4:81:04:D1:E7:89:7E:59:E9:E7:CD:47:D8 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 60D494EFB24DAB9F98C57E20FEAAA34E89DFE6E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 05CB Signing time: Tue 12 May 2026 09:44:48 +0000 Manifest this update: Tue 12 May 2026 09:39:48 +0000 Manifest next update: Wed 13 May 2026 11:10:48 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 9SmK4vE99uuMwH6GACYCn5VT9yxIuRGQd1kqb9/B6+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d4:94:ef:b2:4d:ab:9f:98:c5:7e:20:fe:aa:a3:4e:89:df:e6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: May 12 09:39:48 2026 GMT Not After : May 13 11:10:48 2026 GMT Subject: CN=9EC37BF7ED709EA48104D1E7897E59E9E7CD47D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:dc:9e:85:50:5e:08:cb:2a:ff:9f:c7:e8: 6f:08:82:00:53:3e:8f:dc:bd:6b:74:d2:a0:c2:fe: 8b:8e:e2:f2:17:35:ec:ac:c1:6c:8a:54:19:f2:c9: 60:7d:c5:a5:d5:34:83:e3:70:b8:a9:8d:57:c7:a0: 6a:b1:7a:4a:b8:70:eb:12:c0:13:b7:be:ea:33:f2: 0f:64:2d:c9:3a:32:67:d4:b2:ed:ee:d0:99:cd:fe: 91:49:32:16:75:b1:90:2f:7c:8a:03:96:37:72:cf: 1e:fe:a2:66:6e:77:36:86:d9:86:8a:83:59:52:20: d3:c2:64:85:be:ac:a1:fc:2b:01:a2:a9:f0:39:15: 32:b9:e6:6c:41:5a:79:3b:03:cb:09:9f:ac:4c:95: c3:b5:3e:c7:5a:0a:54:e4:22:fa:2b:b0:b8:ea:75: 3d:c5:a3:fa:97:8f:76:27:11:a6:26:9c:50:71:cb: 74:00:d9:b3:40:99:57:86:59:71:45:50:ec:38:f0: b4:64:64:38:83:88:5b:7f:ab:ff:27:08:98:4d:3a: 6e:68:b9:a4:29:05:b0:12:0a:80:0b:a7:0c:06:e9: d4:4a:71:db:af:1a:95:9e:b2:da:ef:1e:61:78:22: 0e:57:4c:fd:c8:7c:00:59:c0:d7:02:bc:7a:ce:2d: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C3:7B:F7:ED:70:9E:A4:81:04:D1:E7:89:7E:59:E9:E7:CD:47:D8 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9f:bf:3a:ae:df:d0:ca:dc:80:de:78:33:b4:6a:8c:d9:55: 24:9e:85:fc:20:37:28:33:6f:1c:0e:f6:0a:07:c7:11:f2:c9: 82:e6:45:89:78:ad:6c:1c:e4:39:d9:0a:be:06:ab:eb:65:59: 09:0c:01:a7:6e:1e:a3:f4:ef:30:49:1c:44:1d:34:93:df:d8: 03:07:2f:60:1b:76:3e:84:0d:6d:ad:8e:4a:02:66:af:7c:7c: 43:87:86:3b:eb:5b:32:50:c0:88:5e:0e:6b:08:9d:98:d7:51: 00:09:f4:6f:bc:90:18:aa:b7:83:d4:31:73:fd:59:f3:57:ed: 25:54:93:40:5b:43:d8:d9:52:87:c1:12:16:0b:7c:39:de:a4: 8a:89:3b:42:00:04:fe:78:f7:37:73:55:81:65:e4:4c:83:7d: 62:10:4a:17:d5:ca:e3:d7:5c:6e:17:75:8b:27:f5:4e:d8:7c: a3:47:c9:b0:af:7e:4f:1c:d0:47:03:e4:c6:1f:fc:25:23:a5: 0b:a7:be:83:36:1d:2b:b6:ef:0f:e3:af:5b:c7:83:8e:09:b1: 9b:54:04:31:0d:64:4c:99:1a:55:03:8b:cb:e7:5a:30:9c:40: 51:c2:b7:40:26:7b:c3:9b:c2:8e:65:69:16:75:95:a9:f3:09: 87:86:c7:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYNSU77JNq5+YxX4g/qqjTonf5ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjA1MTIwOTM5NDhaFw0yNjA1MTMxMTEwNDhaMDMxMTAvBgNV BAMTKDlFQzM3QkY3RUQ3MDlFQTQ4MTA0RDFFNzg5N0U1OUU5RTdDRDQ3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YtyehVBeCMsq/5/H6G8IggBT Po/cvWt00qDC/ouO4vIXNeyswWyKVBnyyWB9xaXVNIPjcLipjVfHoGqxekq4cOsS wBO3vuoz8g9kLck6MmfUsu3u0JnN/pFJMhZ1sZAvfIoDljdyzx7+omZudzaG2YaK g1lSINPCZIW+rKH8KwGiqfA5FTK55mxBWnk7A8sJn6xMlcO1PsdaClTkIvorsLjq dT3Fo/qXj3YnEaYmnFBxy3QA2bNAmVeGWXFFUOw48LRkZDiDiFt/q/8nCJhNOm5o uaQpBbASCoALpwwG6dRKcduvGpWestrvHmF4Ig5XTP3IfABZwNcCvHrOLbSBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnsN79+1wnqSBBNHniX5Z6efNR9gwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3n786 rt/QytyA3ngztGqM2VUknoX8IDcoM28cDvYKB8cR8smC5kWJeK1sHOQ52Qq+Bqvr ZVkJDAGnbh6j9O8wSRxEHTST39gDBy9gG3Y+hA1trY5KAmavfHxDh4Y761syUMCI Xg5rCJ2Y11EACfRvvJAYqreD1DFz/VnzV+0lVJNAW0PY2VKHwRIWC3w53qSKiTtC AAT+ePc3c1WBZeRMg31iEEoX1crj11xuF3WLJ/VO2HyjR8mwr35PHNBHA+TGH/wl I6ULp76DNh0rtu8P469bx4OOCbGbVAQxDWRMmRpVA4vL51ownEBRwrdAJnvDm8KO ZWkWdZWp8wmHhsfs -----END CERTIFICATE-----Generated at Wed May 13 03:08:48 2026 by rpki-client