$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: wFUwJ/4qoVzavIndnBlqDcC7WhD2FRsoMj8VLBkZt4E= Subject key identifier: C4:EA:7A:A7:65:26:44:A9:35:8D:C6:53:BE:76:EC:23:69:8D:C1:04 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 08BF01B9A496560EEFE7DA931CF451688CD4F185 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0230 Signing time: Tue 12 May 2026 19:40:04 +0000 Manifest this update: Tue 12 May 2026 19:35:04 +0000 Manifest next update: Wed 13 May 2026 23:27:04 +0000 Files and hashes: 1: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 2: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: i/+dDr2u8yOi3Ix/LzIcKFVvPJddLdeLooq2pJttkTc=) 3: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 4: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 5: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 7: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 8: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) 9: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 10: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:01:b9:a4:96:56:0e:ef:e7:da:93:1c:f4:51:68:8c:d4:f1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: May 12 19:35:04 2026 GMT Not After : May 13 23:27:04 2026 GMT Subject: CN=C4EA7AA7652644A9358DC653BE76EC23698DC104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:a1:a0:52:bc:b7:01:06:a9:92:66:9f:cb: 78:af:9c:51:0e:9d:07:bd:12:b5:8b:19:f2:af:00: 3a:c7:e1:0a:91:bc:35:05:30:06:4f:e6:73:98:8f: 88:c4:05:2c:e2:5a:a5:9b:96:c7:a1:b5:31:fe:c8: 0c:c5:c4:7f:93:17:a2:a0:6f:a4:61:d0:01:cb:64: 04:22:d9:3e:9e:0f:73:f3:5a:ad:2a:79:9f:3f:3f: 47:b7:97:42:8f:a2:68:fd:cd:d3:54:28:29:21:3d: 79:32:95:10:cc:31:11:ef:8e:3c:ef:0f:ed:0b:c9: 5a:8c:97:16:8e:4d:32:c5:3b:2b:08:91:c1:fb:02: b9:b2:c3:a9:bb:8e:d9:dc:6c:03:c5:2d:e8:60:b4: 69:04:d5:fa:86:c0:0b:b7:5a:ad:c6:49:cc:fa:98: 8a:b2:bf:38:e1:94:1c:40:24:52:6c:bb:97:bb:83: 5d:1c:f1:72:6a:f9:cb:ea:d9:c2:e6:3b:3c:ae:4f: 0e:ea:eb:25:99:89:59:8f:f5:34:73:0d:b3:82:d1: 4f:fb:0f:3e:c2:45:78:2d:0b:76:a7:9e:4f:8c:32: 8f:79:43:4e:e1:b8:e0:80:f7:c3:7e:61:14:15:f3: 00:49:2a:ac:85:98:8a:12:0b:98:8c:2f:cd:03:7e: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:7A:A7:65:26:44:A9:35:8D:C6:53:BE:76:EC:23:69:8D:C1:04 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e7:e0:bf:ee:3b:3c:79:a4:cc:f4:75:c3:e8:a7:6b:0e:f2: aa:74:6f:0b:a9:cc:8e:41:6d:5c:e3:32:d5:71:74:de:58:ea: 5f:17:69:e6:1a:a4:47:6f:9d:79:fc:79:3b:81:56:f0:ca:81: 60:73:81:fd:27:e2:a8:94:fe:90:e6:7e:87:54:f0:82:99:e9: 30:3a:b4:23:7c:75:9f:94:09:c2:b8:fd:59:03:f1:f4:a1:c6: 93:a2:3c:a0:50:c6:53:b6:c2:75:cf:4a:9f:0c:da:c5:03:b2: a3:2b:15:ec:62:fb:71:ac:a8:d8:e9:18:cd:18:99:47:d2:76: b5:7c:1b:cf:35:a8:33:17:6a:4c:f8:94:d0:c3:64:5d:75:9c: 9f:e6:1d:7a:92:ac:17:17:5d:21:c6:66:3b:22:20:94:75:26: 1b:1f:ec:d7:56:cd:ea:56:8c:b7:e0:3f:44:4e:67:34:8c:cc: 16:db:71:34:03:90:17:c9:50:01:d9:3a:80:1e:97:c6:b1:4e: 16:71:2d:db:c3:c7:ce:7d:3d:08:8a:45:50:46:92:07:ee:03: bf:fe:9c:1d:3a:ea:ed:b8:ee:df:df:dd:e2:57:2e:25:5b:76: 98:40:1f:f6:6a:e8:aa:dc:ff:72:86:34:29:f0:44:77:e2:53: 38:13:b5:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCL8BuaSWVg7v59qTHPRRaIzU8YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA1MTIxOTM1MDRaFw0yNjA1MTMyMzI3MDRaMDMxMTAvBgNV BAMTKEM0RUE3QUE3NjUyNjQ0QTkzNThEQzY1M0JFNzZFQzIzNjk4REMxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzKGgUry3AQapkmafy3ivnFEO nQe9ErWLGfKvADrH4QqRvDUFMAZP5nOYj4jEBSziWqWblsehtTH+yAzFxH+TF6Kg b6Rh0AHLZAQi2T6eD3PzWq0qeZ8/P0e3l0KPomj9zdNUKCkhPXkylRDMMRHvjjzv D+0LyVqMlxaOTTLFOysIkcH7Armyw6m7jtncbAPFLehgtGkE1fqGwAu3Wq3GScz6 mIqyvzjhlBxAJFJsu5e7g10c8XJq+cvq2cLmOzyuTw7q6yWZiVmP9TRzDbOC0U/7 Dz7CRXgtC3annk+MMo95Q07huOCA98N+YRQV8wBJKqyFmIoSC5iML80Dfqo7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxOp6p2UmRKk1jcZTvnbsI2mNwQQwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOfgv+47PHmkzPR1w+in aw7yqnRvC6nMjkFtXOMy1XF03ljqXxdp5hqkR2+defx5O4FW8MqBYHOB/SfiqJT+ kOZ+h1TwgpnpMDq0I3x1n5QJwrj9WQPx9KHGk6I8oFDGU7bCdc9KnwzaxQOyoysV 7GL7cayo2OkYzRiZR9J2tXwbzzWoMxdqTPiU0MNkXXWcn+YdepKsFxddIcZmOyIg lHUmGx/s11bN6laMt+A/RE5nNIzMFttxNAOQF8lQAdk6gB6XxrFOFnEt28PHzn09 CIpFUEaSB+4Dv/6cHTrq7bju39/d4lcuJVt2mEAf9mroqtz/coY0KfBEd+JTOBO1 Gw== -----END CERTIFICATE-----Generated at Wed May 13 02:25:09 2026 by rpki-client