$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: vySuvPdaHuuIyyDWPy9eyip7+PMHLmIIR1cFNYcrPFI= Subject key identifier: D7:6A:BC:28:E1:B2:2B:4F:10:1C:70:01:0F:0E:02:FC:F8:3B:9A:99 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 4B88160081AB72AAE1D4AA84995CAE9BFED1D222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 05B4 Signing time: Tue 12 May 2026 21:20:10 +0000 Manifest this update: Tue 12 May 2026 21:15:10 +0000 Manifest next update: Thu 14 May 2026 00:56:10 +0000 Files and hashes: 1: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 2: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 3: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 4: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 6/eS+kh5YgsBCI76SLRpCVMigN7ah1QQd8pQbSrrUnA=) 6: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 7: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 8: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 9: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 10: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 11: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 12: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 13: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 14: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:88:16:00:81:ab:72:aa:e1:d4:aa:84:99:5c:ae:9b:fe:d1:d2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: May 12 21:15:10 2026 GMT Not After : May 14 00:56:10 2026 GMT Subject: CN=D76ABC28E1B22B4F101C70010F0E02FCF83B9A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:27:4d:8c:cd:cb:51:16:42:1d:e2:6e:a1: c2:fd:91:f6:c7:06:87:40:04:77:f3:3c:28:52:4a: 54:21:e2:49:86:ea:da:83:e1:3d:08:0c:9d:ee:d8: 24:b6:b5:5d:44:61:73:66:8c:fe:2c:b1:3b:42:d9: e7:c6:d7:47:6c:ba:96:c3:46:19:f8:c8:d7:08:89: 9d:47:01:bb:b2:b0:f8:4d:97:9b:df:d6:7a:ac:80: 38:34:13:bc:37:0f:19:76:e1:78:6f:18:1d:72:bc: 8e:84:4e:00:2b:77:aa:35:fd:05:7c:16:73:34:cb: 1f:8d:d1:f2:86:08:e0:88:44:04:bc:40:61:f1:7d: 6b:6e:a4:a6:bc:bb:9d:f7:62:af:bd:12:72:0d:86: 55:6c:be:1f:e0:e5:d9:3b:09:5d:e8:a2:fc:ee:03: ef:ee:41:ae:14:d3:38:40:35:b2:d2:1b:6b:ef:de: ce:6f:22:82:00:94:77:99:53:f0:79:e6:4c:14:22: f0:c5:a8:48:21:95:fe:59:39:d5:f9:cc:43:ed:8c: 23:78:7d:e4:23:9a:14:ac:0b:f5:00:d6:30:67:a3: 88:5f:b1:05:1f:59:13:23:1d:7c:d6:94:9f:fd:72: 47:8c:19:42:e9:71:bf:0f:a7:fa:fc:d0:52:ab:fb: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:BC:28:E1:B2:2B:4F:10:1C:70:01:0F:0E:02:FC:F8:3B:9A:99 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cc:44:e1:b9:2d:0d:cb:b2:4c:14:65:f8:d0:b9:46:7d:db: ff:79:cd:a1:0e:bb:e1:33:22:8f:0c:30:0c:60:fb:36:2e:fa: b9:64:7d:2c:35:97:80:33:e4:4f:d8:82:8e:e3:e6:7a:db:14: 39:3f:6e:97:f8:14:e8:ac:6f:fd:1c:5d:ea:a3:ca:ff:87:da: d0:5f:97:f2:f1:be:22:12:0c:af:48:cd:2a:00:cf:4a:02:94: 04:36:a4:d2:86:20:7b:b3:77:47:1c:ef:30:4b:8c:a8:3d:51: 93:15:b5:06:01:9e:78:9f:85:ba:19:62:0c:dd:79:96:79:76: 6c:35:b9:49:7d:a7:4d:c8:34:f2:ba:fd:17:3a:7b:10:e3:a9: 8a:1c:b4:2a:4a:51:a3:52:a2:2f:bf:e4:79:f3:ad:47:8c:14: d4:d4:35:15:65:ed:ed:f4:cb:71:fc:ce:9c:5e:d6:bb:c2:38: cb:8e:5e:6a:0e:ec:f2:0b:73:4a:7b:5b:08:80:43:7d:71:0d: b9:91:33:6d:d1:74:65:83:80:5a:dd:44:65:ef:0a:ec:6f:9d: 9b:bc:e1:14:36:e3:72:a0:8b:da:f8:83:f6:ea:84:1f:76:46: 26:f3:9f:c7:ff:12:70:47:5b:0d:49:9f:93:17:24:ad:a3:52: 63:4d:f9:07 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS4gWAIGrcqrh1KqEmVyum/7R0iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA1MTIyMTE1MTBaFw0yNjA1MTQwMDU2MTBaMDMxMTAvBgNV BAMTKEQ3NkFCQzI4RTFCMjJCNEYxMDFDNzAwMTBGMEUwMkZDRjgzQjlBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRCdNjM3LURZCHeJuocL9kfbH BodABHfzPChSSlQh4kmG6tqD4T0IDJ3u2CS2tV1EYXNmjP4ssTtC2efG10dsupbD Rhn4yNcIiZ1HAbuysPhNl5vf1nqsgDg0E7w3Dxl24XhvGB1yvI6ETgArd6o1/QV8 FnM0yx+N0fKGCOCIRAS8QGHxfWtupKa8u533Yq+9EnINhlVsvh/g5dk7CV3oovzu A+/uQa4U0zhANbLSG2vv3s5vIoIAlHeZU/B55kwUIvDFqEghlf5ZOdX5zEPtjCN4 feQjmhSsC/UA1jBno4hfsQUfWRMjHXzWlJ/9ckeMGULpcb8Pp/r80FKr+wd3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU12q8KOGyK08QHHABDw4C/Pg7mpkwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcxE4bktDcuyTBRl+NC5 Rn3b/3nNoQ674TMijwwwDGD7Ni76uWR9LDWXgDPkT9iCjuPmetsUOT9ul/gU6Kxv /Rxd6qPK/4fa0F+X8vG+IhIMr0jNKgDPSgKUBDak0oYge7N3RxzvMEuMqD1RkxW1 BgGeeJ+FuhliDN15lnl2bDW5SX2nTcg08rr9Fzp7EOOpihy0KkpRo1KiL7/kefOt R4wU1NQ1FWXt7fTLcfzOnF7Wu8I4y45eag7s8gtzSntbCIBDfXENuZEzbdF0ZYOA Wt1EZe8K7G+dm7zhFDbjcqCL2viD9uqEH3ZGJvOfx/8ScEdbDUmfkxckraNSY035 Bw== -----END CERTIFICATE-----Generated at Wed May 13 02:27:48 2026 by rpki-client