$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: A16ArHadUfBDP1FqbI77PqBHeA2lEiLN+Sdbk4sAYN4= Subject key identifier: 34:64:50:C0:AF:84:85:6E:53:09:77:B8:15:7C:B8:04:54:74:AA:F3 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 4B7AD7A9164F42687F3965CCD8C98B3C4630B453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 48 Signing time: Tue 12 May 2026 16:30:43 +0000 Manifest this update: Tue 12 May 2026 16:25:43 +0000 Manifest next update: Wed 13 May 2026 18:51:43 +0000 Files and hashes: 1: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: fhW1e3cyYnCn6pBoTo2nNC75xbtgpt4yU6QsI6Z3e9s=) 2: 3138352e3230302e3231312e302f32342d3234203d3e203136353039.roa (hash: gHl9NlfVjA+KTXiLSEpXJhNXImzXFqsKFvp5vKD6g+c=) 3: 3138352e3230302e3230392e302f32342d3234203d3e203136353039.roa (hash: CuXfjWH6sNSmDX0CVenmxSFqV6xo/B4MPUYw4r8/ALk=) 4: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: OMM4AAJyddq4tTwMGOyj9sORQZk+xfOh9hmGpJF0SX4=) 5: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: G6lIA/eIW9SxYnXkDwa8m2NW9IQOTL6PtYyIcf8oEII=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7a:d7:a9:16:4f:42:68:7f:39:65:cc:d8:c9:8b:3c:46:30:b4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: May 12 16:25:43 2026 GMT Not After : May 13 18:51:43 2026 GMT Subject: CN=346450C0AF84856E530977B8157CB8045474AAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:47:de:c6:da:57:e1:ae:4c:87:b0:c2:a0: 6a:f0:de:4e:99:21:37:1c:1b:10:d0:97:c1:0e:b7: 5c:b6:65:41:5a:74:c7:53:6f:4b:72:94:eb:f2:2d: 94:d5:51:a3:3b:04:bf:64:52:3b:ff:59:22:d5:1b: ca:52:0c:42:93:dd:a4:e4:fb:cd:23:7a:1a:d7:e7: ba:22:08:7d:fc:62:cc:0b:76:3a:0e:d6:ea:b6:a3: ac:59:7f:e7:42:b0:f9:52:a3:26:80:6a:8a:58:82: 88:7f:14:c1:f9:38:f4:68:42:e1:43:f4:49:84:44: f8:fa:42:25:68:f2:24:05:16:95:1d:dd:77:7c:6c: e1:58:f1:0a:c1:3f:3e:4c:75:08:04:16:c6:11:5a: 65:e1:44:7c:24:55:74:d5:fe:36:88:a6:e6:73:2b: c4:11:91:11:eb:88:4d:df:c2:16:f2:8f:19:79:5a: 6b:55:c2:24:52:c6:d7:61:7c:cd:b8:5b:0e:58:12: 4f:38:98:6a:c8:de:af:bd:d9:d5:3f:02:2f:d0:59: bc:60:35:3e:83:ca:20:16:58:b4:32:0e:9f:9f:06: 3b:94:7a:20:b1:6a:77:61:1e:97:bd:d4:64:ef:f1: 58:59:37:c0:b6:17:95:76:5f:6c:69:8f:37:05:29: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:50:C0:AF:84:85:6E:53:09:77:B8:15:7C:B8:04:54:74:AA:F3 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:60:34:16:1c:88:b6:51:c5:2a:3a:13:48:97:32:ad:63:17: 4a:35:b6:e3:1d:85:9f:29:d9:39:ce:b3:c1:37:b6:fa:ce:17: 7f:ff:97:3a:e5:66:fb:fe:f7:46:0a:9f:9d:63:13:f2:7b:b1: 01:2f:76:c0:23:99:e6:1a:01:c2:31:ba:56:2e:31:15:8d:24: a7:6d:01:6e:e9:d8:04:b2:c4:fb:cd:a0:f0:0c:56:51:f2:7b: 83:24:eb:5e:08:cc:9d:bd:b7:fb:75:51:9f:d0:ee:0f:d7:bf: 21:47:70:8a:47:ed:03:f3:b8:8e:a1:52:bb:e1:03:32:5f:17: 3f:5c:09:89:dc:78:f5:1d:b3:19:e9:3a:0a:c7:af:71:14:e7: 07:52:37:ea:31:6a:66:9b:16:57:8b:b4:57:ac:df:1c:6c:dd: 1c:e3:47:7e:4a:68:68:5d:2b:0c:38:76:b2:36:65:d1:34:42: 50:8f:b6:c5:7f:a4:62:17:a1:01:f8:f2:3a:57:bc:4c:e3:30: 6a:3b:a7:4d:68:f8:b9:d4:37:51:f0:81:5b:d3:15:d6:ef:2f: 4e:e5:c2:2e:80:92:21:54:88:c9:03:d4:13:97:ca:7c:e6:30: 4f:79:a5:49:f9:51:1c:89:3a:53:07:ba:3f:37:4c:a6:70:a0: a3:4c:68:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS3rXqRZPQmh/OWXM2MmLPEYwtFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA1MTIxNjI1NDNaFw0yNjA1MTMxODUxNDNaMDMxMTAvBgNV BAMTKDM0NjQ1MEMwQUY4NDg1NkU1MzA5NzdCODE1N0NCODA0NTQ3NEFBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdEfextpX4a5Mh7DCoGrw3k6Z ITccGxDQl8EOt1y2ZUFadMdTb0tylOvyLZTVUaM7BL9kUjv/WSLVG8pSDEKT3aTk +80jehrX57oiCH38YswLdjoO1uq2o6xZf+dCsPlSoyaAaopYgoh/FMH5OPRoQuFD 9EmERPj6QiVo8iQFFpUd3Xd8bOFY8QrBPz5MdQgEFsYRWmXhRHwkVXTV/jaIpuZz K8QRkRHriE3fwhbyjxl5WmtVwiRSxtdhfM24Ww5YEk84mGrI3q+92dU/Ai/QWbxg NT6DyiAWWLQyDp+fBjuUeiCxandhHpe91GTv8VhZN8C2F5V2X2xpjzcFKQ/tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNGRQwK+EhW5TCXe4FXy4BFR0qvMwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGA0FhyItlHFKjoTSJcy rWMXSjW24x2FnynZOc6zwTe2+s4Xf/+XOuVm+/73RgqfnWMT8nuxAS92wCOZ5hoB wjG6Vi4xFY0kp20BbunYBLLE+82g8AxWUfJ7gyTrXgjMnb23+3VRn9DuD9e/IUdw ikftA/O4jqFSu+EDMl8XP1wJidx49R2zGek6CsevcRTnB1I36jFqZpsWV4u0V6zf HGzdHONHfkpoaF0rDDh2sjZl0TRCUI+2xX+kYhehAfjyOle8TOMwajunTWj4udQ3 UfCBW9MV1u8vTuXCLoCSIVSIyQPUE5fKfOYwT3mlSflRHIk6Uwe6PzdMpnCgo0xo rQ== -----END CERTIFICATE-----Generated at Wed May 13 05:58:24 2026 by rpki-client