$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: RO3ft/Sbe3eigX/6HHWD3AWAUI6zFTsXJCYLfXOweC8= Subject key identifier: 1D:3C:5C:A5:F3:67:3E:20:BC:AA:A8:8F:86:C0:7A:C7:15:9B:F5:A6 Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 45472CF4CCED0595D3C5F410174902985CB762C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 53 Signing time: Tue 12 May 2026 16:30:44 +0000 Manifest this update: Tue 12 May 2026 16:25:44 +0000 Manifest next update: Wed 13 May 2026 19:17:44 +0000 Files and hashes: 1: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: Pi7jb86RL1qTVro49qeYYyL2u6gvRg+kD6xKi4CT7Tw=) 2: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: d/CmPiO5JUfnF2gFVcri638ip6aV92gtPzH5XcEYrHY=) 3: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: tiGxLyiD4oEC91u1YGCBYe1ppRtRB68+LdcQBDphgDY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:47:2c:f4:cc:ed:05:95:d3:c5:f4:10:17:49:02:98:5c:b7:62:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: May 12 16:25:44 2026 GMT Not After : May 13 19:17:44 2026 GMT Subject: CN=1D3C5CA5F3673E20BCAAA88F86C07AC7159BF5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:54:d1:89:17:9c:28:e2:32:85:61:ef:f2: 7a:70:43:25:7c:47:b9:76:d5:51:d6:8d:1b:59:d4: bd:15:30:7c:3f:d7:f8:e0:fa:7e:39:3c:58:27:54: 1d:0a:16:12:27:46:65:e3:1c:78:db:a1:4d:19:8b: fa:04:9d:ce:29:21:fc:39:4e:dd:0f:c8:87:9d:bf: 96:9f:78:58:a3:b9:b8:82:f7:e4:24:23:f2:f6:32: 41:b0:63:48:bd:5f:e1:33:a4:73:9d:46:b1:90:c6: b0:5c:31:6a:ae:fe:f4:1f:00:42:a4:16:7b:3a:51: ed:b4:1f:3c:2d:83:52:cb:b2:48:8f:a1:ad:29:85: 88:57:15:ad:ff:9a:01:5d:52:be:f9:31:18:75:c7: af:c4:db:11:e2:bb:f4:23:ba:fd:8a:33:9e:eb:9a: 20:71:30:2c:12:ed:67:9d:6b:a5:02:c4:1d:fb:dd: d1:fb:3d:73:72:9a:f8:ec:7a:05:74:aa:71:da:43: a7:a5:cf:c5:e2:a6:4c:af:63:0c:3f:c5:7e:60:37: 5c:13:40:2c:08:b4:38:1b:66:57:3e:2e:69:6e:76: dc:f4:2d:0b:50:99:d0:21:12:38:df:84:c5:2a:91: fe:1a:f1:d3:b6:61:58:96:5a:dc:d7:04:94:d5:76: 74:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:5C:A5:F3:67:3E:20:BC:AA:A8:8F:86:C0:7A:C7:15:9B:F5:A6 X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:02:ed:d6:5a:d9:b9:cd:59:6b:2c:5b:4c:63:18:22:34: af:8f:fd:f5:4b:68:52:14:de:de:b9:d2:5f:97:db:5e:ba:6f: e4:e3:02:f3:09:e8:94:82:34:84:aa:61:fe:f2:b8:c1:1d:bf: 9e:31:28:f6:2c:3e:6b:36:96:c7:5e:87:69:5c:38:be:6a:46: a7:73:85:0e:cb:68:53:72:44:7a:c1:ae:7c:fc:73:88:af:3c: 5b:34:b0:4a:fc:8b:1a:c5:55:31:45:6a:6d:fc:fb:1e:39:d3: 80:83:7c:ad:8a:cb:32:61:94:18:83:55:30:2c:ab:9b:63:7c: ad:90:a8:d1:e6:0e:1c:15:e1:c7:ae:6d:56:57:3d:f2:6a:21: 94:b8:b7:3c:ab:7c:7f:08:b8:cb:18:93:97:7d:85:0f:b7:bc: 31:ff:a0:c9:d9:13:e9:d2:39:d6:06:45:64:b8:2c:5d:6a:aa: 46:9a:db:52:dc:e1:01:8b:77:e2:5b:e7:a3:de:38:c9:0d:a7: a3:c2:9a:eb:ac:ed:95:7f:f9:fd:4c:92:00:ba:f5:ac:b5:71: 02:26:a6:2c:74:c8:aa:e4:aa:b7:19:a8:0f:c2:1e:46:e9:53: fd:2e:23:ed:23:fc:e9:d6:fd:0c:7c:1d:43:a0:71:d9:4d:0c: aa:e9:c2:15 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURUcs9MztBZXTxfQQF0kCmFy3YsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA1MTIxNjI1NDRaFw0yNjA1MTMxOTE3NDRaMDMxMTAvBgNV BAMTKDFEM0M1Q0E1RjM2NzNFMjBCQ0FBQTg4Rjg2QzA3QUM3MTU5QkY1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGFTRiRecKOIyhWHv8npwQyV8 R7l21VHWjRtZ1L0VMHw/1/jg+n45PFgnVB0KFhInRmXjHHjboU0Zi/oEnc4pIfw5 Tt0PyIedv5afeFijubiC9+QkI/L2MkGwY0i9X+EzpHOdRrGQxrBcMWqu/vQfAEKk Fns6Ue20Hzwtg1LLskiPoa0phYhXFa3/mgFdUr75MRh1x6/E2xHiu/Qjuv2KM57r miBxMCwS7Weda6UCxB373dH7PXNymvjsegV0qnHaQ6elz8XipkyvYww/xX5gN1wT QCwItDgbZlc+Lmludtz0LQtQmdAhEjjfhMUqkf4a8dO2YViWWtzXBJTVdnQRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHTxcpfNnPiC8qqiPhsB6xxWb9aYwHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbMC7dZa2bnNWWssW0xj GCI0r4/99UtoUhTe3rnSX5fbXrpv5OMC8wnolII0hKph/vK4wR2/njEo9iw+azaW x16HaVw4vmpGp3OFDstoU3JEesGufPxziK88WzSwSvyLGsVVMUVqbfz7HjnTgIN8 rYrLMmGUGINVMCyrm2N8rZCo0eYOHBXhx65tVlc98mohlLi3PKt8fwi4yxiTl32F D7e8Mf+gydkT6dI51gZFZLgsXWqqRprbUtzhAYt34lvno944yQ2no8Ka66ztlX/5 /UySALr1rLVxAiamLHTIquSqtxmoD8IeRulT/S4j7SP86db9DHwdQ6Bx2U0MqunC FQ== -----END CERTIFICATE-----Generated at Wed May 13 05:56:14 2026 by rpki-client