$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft (raw, json) Hash identifier: ohN40bH/7Mbp0wP0JWZTl87h+opFCXuRRdyLDB0s+xI= Subject key identifier: D7:F3:41:43:29:F1:A5:7F:31:80:28:D5:67:FC:FD:B2:D7:AF:4D:64 Authority key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 Certificate issuer: /CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Certificate serial: 7422B7BAE9C17F208C1956570401C00A3EB9AFA2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft Manifest number: 2B Signing time: Wed 13 May 2026 09:16:41 +0000 Manifest this update: Wed 13 May 2026 09:11:41 +0000 Manifest next update: Thu 14 May 2026 22:59:41 +0000 Files and hashes: 1: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl (hash: 4A3/54bNqqOfHY97lU8s98U8JQY7r08X5NgiBDndrPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:22:b7:ba:e9:c1:7f:20:8c:19:56:57:04:01:c0:0a:3e:b9:af:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Validity Not Before: May 13 09:11:41 2026 GMT Not After : May 14 22:59:41 2026 GMT Subject: CN=D7F3414329F1A57F318028D567FCFDB2D7AF4D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:e9:ac:d8:b9:2f:49:6e:bf:4c:49:3b:c8: 1d:dc:87:5c:d8:6f:15:69:46:4c:ac:99:23:95:76: ed:8d:d0:55:48:37:e8:9b:24:c4:ce:57:0f:89:32: 82:45:0c:2b:00:39:8d:22:89:27:c1:6a:2a:7a:4c: 32:b4:89:e7:2c:f7:e3:4c:88:3e:b4:ba:33:10:9f: 69:94:96:83:6c:15:2b:36:25:c3:37:72:0a:a0:06: 85:26:21:27:3b:40:55:57:5a:5d:94:fb:f2:b1:60: de:02:52:b9:5a:e1:d2:e6:a6:96:5b:c1:72:f3:ce: 62:6e:6f:00:dc:eb:01:7b:ee:38:d0:0d:b5:21:ef: c5:09:e4:e8:ff:2f:3c:bb:f9:b6:51:67:86:15:3d: 17:c3:33:81:3f:dc:02:b5:6e:7d:d7:fb:69:04:6a: 6a:31:df:ec:dc:58:95:c0:be:20:75:51:ce:4b:bc: 3f:ea:d6:f1:09:70:17:ca:a2:de:f6:e9:a6:99:e5: df:44:6c:31:f9:ec:f4:9e:a4:14:b0:cc:9b:07:77: 65:2f:ba:b0:48:80:f7:98:9c:38:f8:a6:4e:77:f1: d7:45:31:eb:0c:7b:73:46:84:a2:27:9d:5b:ef:e5: 24:71:e0:f0:03:bb:26:26:aa:d0:f7:17:7f:a1:e1: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:41:43:29:F1:A5:7F:31:80:28:D5:67:FC:FD:B2:D7:AF:4D:64 X509v3 Authority Key Identifier: keyid:10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:dd:9e:8d:52:aa:59:86:0e:f1:7d:42:25:35:95:d7:d3: d5:ab:cb:1e:1a:60:d3:04:4a:e9:38:a7:01:85:09:47:9b:9f: cc:6e:0b:24:11:02:3f:40:2e:97:a8:84:7f:25:6c:a2:05:c6: f0:43:7f:9b:5c:35:2f:bd:a3:35:ce:98:80:a9:36:40:1f:3f: a1:af:62:a6:ab:05:40:99:03:3c:63:f8:bb:0d:4e:68:74:c7: 1d:44:64:5c:51:cd:fd:10:61:f8:52:87:55:16:ae:ff:89:ad: 42:5f:d9:04:f3:9a:9f:4e:54:97:1c:d3:0b:12:44:21:a2:c0: 0a:66:f8:f6:12:ee:4e:b2:bf:34:3f:bf:1a:32:9a:0a:8c:42: b6:83:21:4a:76:30:51:fd:48:c9:18:52:4f:aa:72:7e:ac:7a: 55:f1:70:83:c4:5d:41:3d:8b:ad:e0:d7:58:00:ae:c0:e0:0f: 85:04:14:ea:9b:4e:e0:d5:aa:53:27:fb:7f:e6:f9:5f:15:96: 1e:0e:fa:3b:d0:2c:05:15:a3:4d:da:1a:38:7b:c7:88:6e:d6: a5:5c:d8:59:18:aa:e0:2c:81:e1:ff:a8:04:0b:e3:65:f7:37: 6f:b2:f3:df:36:e3:31:ee:b0:09:25:1a:97:af:7f:e5:d6:80: 49:5f:bd:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdCK3uunBfyCMGVZXBAHACj65r6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5 NUUyNTNDODAeFw0yNjA1MTMwOTExNDFaFw0yNjA1MTQyMjU5NDFaMDMxMTAvBgNV BAMTKEQ3RjM0MTQzMjlGMUE1N0YzMTgwMjhENTY3RkNGREIyRDdBRjRENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCOms2LkvSW6/TEk7yB3ch1zY bxVpRkysmSOVdu2N0FVIN+ibJMTOVw+JMoJFDCsAOY0iiSfBaip6TDK0iecs9+NM iD60ujMQn2mUloNsFSs2JcM3cgqgBoUmISc7QFVXWl2U+/KxYN4CUrla4dLmppZb wXLzzmJubwDc6wF77jjQDbUh78UJ5Oj/Lzy7+bZRZ4YVPRfDM4E/3AK1bn3X+2kE amox3+zcWJXAviB1Uc5LvD/q1vEJcBfKot726aaZ5d9EbDH57PSepBSwzJsHd2Uv urBIgPeYnDj4pk538ddFMesMe3NGhKInnVvv5SRx4PADuyYmqtD3F3+h4e5/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1/NBQynxpX8xgCjVZ/z9stevTWQwHwYDVR0j BBgwFoAUEMpiNc+y9MW9ZAsuLhGe+5XiU8gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzMvMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5NUUyNTNDOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xMENBNjIzNUNGQjJGNEM1QkQ2NDBCMkUy RTExOUVGQjk1RTI1M0M4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8zLzEwQ0E2MjM1 Q0ZCMkY0QzVCRDY0MEIyRTJFMTE5RUZCOTVFMjUzQzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA82N2e jVKqWYYO8X1CJTWV19PVq8seGmDTBErpOKcBhQlHm5/MbgskEQI/QC6XqIR/JWyi BcbwQ3+bXDUvvaM1zpiAqTZAHz+hr2KmqwVAmQM8Y/i7DU5odMcdRGRcUc39EGH4 UodVFq7/ia1CX9kE85qfTlSXHNMLEkQhosAKZvj2Eu5Osr80P78aMpoKjEK2gyFK djBR/UjJGFJPqnJ+rHpV8XCDxF1BPYut4NdYAK7A4A+FBBTqm07g1apTJ/t/5vlf FZYeDvo70CwFFaNN2ho4e8eIbtalXNhZGKrgLIHh/6gEC+Nl9zdvsvPfNuMx7rAJ JRqXr3/l1oBJX73+ -----END CERTIFICATE-----Generated at Wed May 13 14:09:27 2026 by rpki-client