$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: oqMAbxTK+6WiVg+LZittoMHZEA5g92zWZ5Gqesd9KeI= Subject key identifier: C8:88:2C:AE:68:70:35:C3:30:73:85:80:02:7D:00:F4:B2:D7:6C:61 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 6617CD8BEE57DA427B15B6084B1EB8F25B785ED7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 0589 Signing time: Wed 25 Mar 2026 21:49:44 +0000 Manifest this update: Wed 25 Mar 2026 21:44:44 +0000 Manifest next update: Thu 26 Mar 2026 22:41:44 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: DyzcVPwJV1xLZrU1SeITB/a33+la1Uts/HUiP22otmo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:17:cd:8b:ee:57:da:42:7b:15:b6:08:4b:1e:b8:f2:5b:78:5e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Mar 25 21:44:44 2026 GMT Not After : Mar 26 22:41:44 2026 GMT Subject: CN=C8882CAE687035C330738580027D00F4B2D76C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:41:85:1c:4a:f4:f2:4c:c1:ac:38:a4:25: 89:7b:6e:5a:12:0b:f7:68:c6:2c:37:31:f1:ea:89: 79:ef:2a:84:62:32:ac:75:ca:89:3a:00:55:48:d0: 64:ac:48:cc:44:4b:9e:a5:90:76:ba:9c:81:07:0e: a7:2f:2a:9e:32:5e:42:be:f0:69:c1:62:07:5f:c6: 7c:8c:ce:69:a7:76:e2:0d:ad:27:3c:d8:2f:44:66: 1f:7c:40:4b:04:20:e0:91:4f:35:2b:f3:c2:03:6a: ec:df:ce:fd:31:be:62:4f:51:8c:e7:4e:cb:96:d9: 70:65:34:e8:64:d6:6b:1b:dd:b6:21:9b:df:d6:d9: ad:a4:6d:f9:19:02:22:93:81:bb:01:1c:1c:91:87: a6:32:8a:79:26:4b:b9:aa:5a:63:a3:59:03:0b:d7: 79:af:ae:78:3d:ac:9b:0e:8c:56:4e:0c:4f:53:31: e0:d5:df:68:36:ad:98:ec:03:2c:7c:5d:63:2a:c8: b1:8f:44:56:b1:f5:d3:e7:6a:a1:fb:20:fb:d5:4e: e6:11:d5:50:8a:35:3f:87:7f:0c:03:17:9a:a2:6e: 80:39:2f:78:74:c6:69:9f:e8:9b:c5:f3:37:c4:3a: 45:8e:93:29:ab:20:de:31:5a:3d:16:e9:97:7d:d9: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:88:2C:AE:68:70:35:C3:30:73:85:80:02:7D:00:F4:B2:D7:6C:61 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:6c:02:de:18:93:ba:29:5d:25:fd:48:7d:22:d5:d3:f6: 47:38:ff:88:94:ab:d6:9b:95:b7:1b:48:ed:0a:53:40:46:e2: 25:cc:dd:aa:67:56:72:68:1a:c4:34:a9:14:7e:0e:be:7f:22: d7:15:ea:50:66:d3:e2:12:cc:5a:31:d4:c5:2d:65:2b:ab:96: 65:de:f6:64:ea:20:e2:3b:5f:1e:d0:33:16:49:67:1a:da:98: 25:95:a3:bf:e6:06:13:0d:ba:3a:96:d2:37:5b:37:d3:10:f9: 6c:93:7f:bf:5f:50:46:f8:c6:8b:b0:20:91:c8:3a:24:36:de: 39:65:56:01:5a:ad:a5:34:6d:d7:da:cd:ae:94:13:ef:f0:ff: 2c:5b:17:83:57:ae:1a:99:79:b1:1b:53:9f:37:69:a4:20:a7: 99:80:0d:5a:82:2c:aa:3a:18:dd:2a:e4:68:1b:e3:92:27:83: 21:d3:ed:38:89:a9:83:79:9d:fe:ac:15:97:78:46:d2:a4:4a: 73:b8:95:0e:71:a2:67:82:84:2a:38:a2:a4:f5:fc:7f:82:13: f2:85:ea:ba:57:5d:39:12:3a:75:dc:84:83:b7:5e:d4:d8:39: 25:41:4e:22:9d:61:db:69:c4:98:dd:c3:7b:c6:1b:49:47:3c: f9:f0:f2:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZhfNi+5X2kJ7FbYISx648lt4XtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjAzMjUyMTQ0NDRaFw0yNjAzMjYyMjQxNDRaMDMxMTAvBgNV BAMTKEM4ODgyQ0FFNjg3MDM1QzMzMDczODU4MDAyN0QwMEY0QjJENzZDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLEGFHEr08kzBrDikJYl7bloS C/doxiw3MfHqiXnvKoRiMqx1yok6AFVI0GSsSMxES56lkHa6nIEHDqcvKp4yXkK+ 8GnBYgdfxnyMzmmnduINrSc82C9EZh98QEsEIOCRTzUr88IDauzfzv0xvmJPUYzn TsuW2XBlNOhk1msb3bYhm9/W2a2kbfkZAiKTgbsBHByRh6YyinkmS7mqWmOjWQML 13mvrng9rJsOjFZODE9TMeDV32g2rZjsAyx8XWMqyLGPRFax9dPnaqH7IPvVTuYR 1VCKNT+HfwwDF5qiboA5L3h0xmmf6JvF8zfEOkWOkymrIN4xWj0W6Zd92ZkXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyIgsrmhwNcMwc4WAAn0A9LLXbGEwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNO2wC 3hiTuildJf1IfSLV0/ZHOP+IlKvWm5W3G0jtClNARuIlzN2qZ1ZyaBrENKkUfg6+ fyLXFepQZtPiEsxaMdTFLWUrq5Zl3vZk6iDiO18e0DMWSWca2pgllaO/5gYTDbo6 ltI3WzfTEPlsk3+/X1BG+MaLsCCRyDokNt45ZVYBWq2lNG3X2s2ulBPv8P8sWxeD V64amXmxG1OfN2mkIKeZgA1agiyqOhjdKuRoG+OSJ4Mh0+04iamDeZ3+rBWXeEbS pEpzuJUOcaJngoQqOKKk9fx/ghPyheq6V105Ejp13ISDt17U2DklQU4inWHbacSY 3cN7xhtJRzz58PIj -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:49 2026 by rpki-client