$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: UiRIxO7dOu2K3GqZCTzfry5EDLwZgf/iKF2GRk8JXok= Subject key identifier: FF:E5:A6:73:4D:1C:29:1A:E6:14:7C:92:75:B7:64:5D:56:72:56:60 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 60FCDD48476549D76B010946A6AB307D94B21ADA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: FA Signing time: Tue 12 May 2026 21:50:24 +0000 Manifest this update: Tue 12 May 2026 21:45:24 +0000 Manifest next update: Thu 14 May 2026 00:50:24 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: cICrHkF7AyRl1rmd4nK+24l8ZUYSh0fbag7vhOj4AYU=) 3: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fc:dd:48:47:65:49:d7:6b:01:09:46:a6:ab:30:7d:94:b2:1a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: May 12 21:45:24 2026 GMT Not After : May 14 00:50:24 2026 GMT Subject: CN=FFE5A6734D1C291AE6147C9275B7645D56725660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:79:dd:c3:83:11:a8:a8:f1:65:d3:7c:4f: ed:17:26:59:4b:e3:3d:27:df:c4:52:f8:77:1a:0e: 77:f8:28:43:e0:3d:f2:15:e7:4b:b4:02:cd:d0:bf: 6e:e9:5b:92:82:60:6c:63:20:bf:95:db:b8:5a:27: 06:ef:36:67:aa:61:80:5f:81:ed:ab:ce:52:3e:77: b7:92:22:3b:4c:0c:d4:e4:d6:86:7b:de:6d:8b:eb: 1b:5b:f2:9f:a4:8b:f2:8a:19:75:f2:97:cf:a9:d9: a7:a8:c9:55:fd:8a:e4:a1:ee:72:d2:9a:88:da:04: 55:0f:2b:83:6f:60:8a:66:69:68:91:ec:6c:44:e7: fc:37:83:4e:73:f8:d6:02:95:e5:3e:cb:85:fd:65: 72:26:d0:2a:c6:2c:a1:12:23:6e:ac:c1:08:40:f5: c2:fd:9e:4b:ed:6d:70:fe:e6:a0:2b:9d:aa:5a:3a: e5:a9:e1:0a:57:2a:6d:0e:0b:a2:1c:9e:a3:aa:67: 37:6c:f4:c7:ca:d1:51:6c:c7:c0:b3:95:32:36:ad: b1:97:3f:f4:95:8a:5d:97:82:54:29:48:6d:d1:5f: dc:e2:67:03:42:f3:13:29:a1:05:92:c1:60:f6:69: 96:4e:9d:ab:6a:ca:84:71:0f:f4:0b:d4:53:f0:47: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E5:A6:73:4D:1C:29:1A:E6:14:7C:92:75:B7:64:5D:56:72:56:60 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:3a:99:5f:f8:e2:cb:cd:c9:4d:c0:9d:07:14:03:43:9c: f4:c8:f0:87:22:00:c4:b1:e4:3e:1c:76:ec:d0:6d:aa:08:0b: dd:f2:32:ab:33:89:f0:91:2f:0e:9c:af:4d:d7:17:b0:87:ad: d9:51:65:ac:0e:28:24:88:54:6e:60:da:bc:fa:a6:c5:09:55: 7b:ab:4a:51:71:3b:58:0f:d5:9b:a0:16:f1:c0:fd:04:88:5c: 82:be:62:58:76:17:4c:68:f8:09:9a:4e:3e:ac:a2:60:06:37: bf:fa:22:1c:61:6c:ec:a5:e0:7e:12:b1:8a:4d:34:4c:b0:15: 58:f5:bd:51:d2:dc:ff:c5:b4:72:5e:91:34:35:4f:01:73:6a: 62:6c:e8:3e:51:83:2d:00:48:6d:14:fe:a0:0b:96:94:b6:36: 8b:41:39:30:83:ba:39:80:b3:98:f0:67:cc:9a:88:aa:71:9d: 3a:1b:35:50:16:e9:12:40:b7:f8:71:83:b7:d7:e1:ef:d5:b6: 43:a4:e2:9d:23:22:f5:43:34:4a:d8:c6:ea:fb:c7:80:01:ec: 8c:d8:96:62:58:8c:e5:4a:f4:75:dc:35:93:87:b3:b5:d8:41: 80:e1:95:0a:e9:e9:38:ef:af:3d:00:f2:a5:65:95:e9:69:e6: c6:40:e7:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYPzdSEdlSddrAQlGpqswfZSyGtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjA1MTIyMTQ1MjRaFw0yNjA1MTQwMDUwMjRaMDMxMTAvBgNV BAMTKEZGRTVBNjczNEQxQzI5MUFFNjE0N0M5Mjc1Qjc2NDVENTY3MjU2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOnndw4MRqKjxZdN8T+0XJllL 4z0n38RS+HcaDnf4KEPgPfIV50u0As3Qv27pW5KCYGxjIL+V27haJwbvNmeqYYBf ge2rzlI+d7eSIjtMDNTk1oZ73m2L6xtb8p+ki/KKGXXyl8+p2aeoyVX9iuSh7nLS mojaBFUPK4NvYIpmaWiR7GxE5/w3g05z+NYCleU+y4X9ZXIm0CrGLKESI26swQhA 9cL9nkvtbXD+5qArnapaOuWp4QpXKm0OC6IcnqOqZzds9MfK0VFsx8CzlTI2rbGX P/SVil2XglQpSG3RX9ziZwNC8xMpoQWSwWD2aZZOnatqyoRxD/QL1FPwRyeJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/+Wmc00cKRrmFHySdbdkXVZyVmAwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCp3zqZ X/jiy83JTcCdBxQDQ5z0yPCHIgDEseQ+HHbs0G2qCAvd8jKrM4nwkS8OnK9N1xew h63ZUWWsDigkiFRuYNq8+qbFCVV7q0pRcTtYD9WboBbxwP0EiFyCvmJYdhdMaPgJ mk4+rKJgBje/+iIcYWzspeB+ErGKTTRMsBVY9b1R0tz/xbRyXpE0NU8Bc2pibOg+ UYMtAEhtFP6gC5aUtjaLQTkwg7o5gLOY8GfMmoiqcZ06GzVQFukSQLf4cYO31+Hv 1bZDpOKdIyL1QzRK2Mbq+8eAAeyM2JZiWIzlSvR13DWTh7O12EGA4ZUK6ek47689 APKlZZXpaebGQOc4 -----END CERTIFICATE-----Generated at Wed May 13 03:01:42 2026 by rpki-client