$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: U99e4nzK7r+oOdVlOSM9R1oauOODCmY1fmg11E68Yzg= Subject key identifier: 1E:98:3F:34:D2:42:EF:AE:56:DC:DB:33:20:14:FD:7A:F7:12:71:BC Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 0D4B670900F6A42A01D3900BC323EF273B25000D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 016B Signing time: Tue 12 May 2026 14:34:54 +0000 Manifest this update: Tue 12 May 2026 14:29:54 +0000 Manifest next update: Wed 13 May 2026 16:32:54 +0000 Files and hashes: 1: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: YH/4StjM3inNwxWniVaYwxpPA43mZntCuVOcKM9qJl0=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 4: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 5: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 7: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 8: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4b:67:09:00:f6:a4:2a:01:d3:90:0b:c3:23:ef:27:3b:25:00:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: May 12 14:29:54 2026 GMT Not After : May 13 16:32:54 2026 GMT Subject: CN=1E983F34D242EFAE56DCDB332014FD7AF71271BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:58:40:ba:ff:fa:06:41:e6:bc:b2:43:ae: 73:dd:e5:f9:0c:a0:06:86:89:01:e7:ea:aa:7c:99: de:32:04:6d:b0:d8:09:3e:9c:69:6d:46:e3:0a:a6: 8a:b6:4c:80:24:b4:dc:a0:f8:27:47:6f:04:35:22: 74:8b:59:61:68:57:05:4f:ca:33:a4:17:e7:6b:c4: f4:ad:fc:bc:ae:2c:14:9b:45:1b:d4:b2:58:50:d2: c0:94:b4:2a:24:86:51:6a:ee:dd:42:be:ad:f7:2b: c5:65:76:0c:71:ea:f2:a8:bd:d9:18:04:85:21:11: 27:42:c9:7c:da:69:20:45:d4:b0:24:dd:c6:e3:90: 37:1d:d7:3f:61:b2:12:79:b3:6f:ec:c1:93:a0:77: c0:8d:b4:01:3c:b9:6e:02:c9:ba:e1:9f:ab:d1:cf: ba:d5:5b:e9:d6:d3:a4:98:1e:d9:3e:f6:3b:a8:07: a3:2c:92:1c:81:24:81:fe:40:92:77:ba:d7:6f:da: 3f:2a:01:43:1f:ad:f3:6b:99:61:b4:4f:76:10:b8: 0a:59:4a:ae:06:e9:f9:15:7a:8b:88:aa:0f:6e:f0: 73:25:44:f1:6b:ed:36:50:e9:1b:10:a0:bf:76:63: 56:a5:91:38:8d:59:2e:9f:bc:20:93:c0:cb:8e:25: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:3F:34:D2:42:EF:AE:56:DC:DB:33:20:14:FD:7A:F7:12:71:BC X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9c:c7:cf:4c:3f:f4:d8:c3:0d:e9:1a:82:f8:36:2e:2a:1a: 9c:2a:3d:d4:91:87:a5:6a:f6:27:20:bc:44:b2:a0:6e:69:38: 6d:95:31:21:66:47:ef:b9:1b:20:16:bf:75:51:87:03:64:94: 00:ab:ca:a5:d8:98:31:2e:48:7e:6b:cc:ae:51:4c:8d:99:21: 35:51:82:73:43:a8:6e:4c:33:e3:1f:0d:1f:bc:59:13:13:7e: 85:b4:6c:29:10:c4:15:22:95:92:b3:bd:02:6d:79:44:74:26: 43:83:96:93:ee:4f:6a:e4:7d:07:fe:8d:f4:21:f0:23:7a:63: 30:0a:9a:92:cd:e4:d9:e4:d7:d6:ef:2f:41:95:d8:a7:ce:a0: c6:59:1b:1e:10:1b:38:07:1a:48:48:10:ba:26:43:71:36:1a: 71:01:12:36:4b:92:ad:47:b3:5c:93:ff:33:5b:fd:80:e5:2c: 0a:bc:5c:46:90:15:e2:7a:73:95:b1:74:05:f1:dd:17:fd:cf: b1:d4:2d:9a:9e:94:64:5b:a5:7c:0d:7f:6b:ac:58:fa:0b:55: aa:d2:47:03:12:d9:aa:21:2d:08:13:90:22:48:6a:54:9b:e4: 73:48:0f:af:be:4e:ff:16:54:d2:1f:ff:c0:0d:c7:51:6c:bc: 17:c9:d0:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDUtnCQD2pCoB05ALwyPvJzslAA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA1MTIxNDI5NTRaFw0yNjA1MTMxNjMyNTRaMDMxMTAvBgNV BAMTKDFFOTgzRjM0RDI0MkVGQUU1NkRDREIzMzIwMTRGRDdBRjcxMjcxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdlhAuv/6BkHmvLJDrnPd5fkM oAaGiQHn6qp8md4yBG2w2Ak+nGltRuMKpoq2TIAktNyg+CdHbwQ1InSLWWFoVwVP yjOkF+drxPSt/LyuLBSbRRvUslhQ0sCUtCokhlFq7t1Cvq33K8Vldgxx6vKovdkY BIUhESdCyXzaaSBF1LAk3cbjkDcd1z9hshJ5s2/swZOgd8CNtAE8uW4Cybrhn6vR z7rVW+nW06SYHtk+9juoB6MskhyBJIH+QJJ3utdv2j8qAUMfrfNrmWG0T3YQuApZ Sq4G6fkVeouIqg9u8HMlRPFr7TZQ6RsQoL92Y1alkTiNWS6fvCCTwMuOJT0RAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHpg/NNJC765W3NszIBT9evcScbwwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0nMfP TD/02MMN6RqC+DYuKhqcKj3UkYelavYnILxEsqBuaThtlTEhZkfvuRsgFr91UYcD ZJQAq8ql2JgxLkh+a8yuUUyNmSE1UYJzQ6huTDPjHw0fvFkTE36FtGwpEMQVIpWS s70CbXlEdCZDg5aT7k9q5H0H/o30IfAjemMwCpqSzeTZ5NfW7y9BldinzqDGWRse EBs4BxpISBC6JkNxNhpxARI2S5KtR7Nck/8zW/2A5SwKvFxGkBXienOVsXQF8d0X /c+x1C2anpRkW6V8DX9rrFj6C1Wq0kcDEtmqIS0IE5AiSGpUm+RzSA+vvk7/FlTS H//ADcdRbLwXydBv -----END CERTIFICATE-----Generated at Wed May 13 05:18:26 2026 by rpki-client