$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: fQFRWKp14+oy8gXfykw9mtkqzcTVK0a+6iKmkbHV+jI= Subject key identifier: 37:3D:22:11:3B:FB:FB:C3:75:57:5E:E0:72:96:10:C1:D8:E4:E9:B7 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 75513390B38BB741A855384B2902D2D41B10A710 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 02A6 Signing time: Wed 13 May 2026 00:02:36 +0000 Manifest this update: Tue 12 May 2026 23:57:36 +0000 Manifest next update: Thu 14 May 2026 13:54:36 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: jN5NDdGiQxsqRhTuGrkHEkJscq1fXF/T2lUI/NSowBE=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:51:33:90:b3:8b:b7:41:a8:55:38:4b:29:02:d2:d4:1b:10:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: May 12 23:57:36 2026 GMT Not After : May 14 13:54:36 2026 GMT Subject: CN=373D22113BFBFBC375575EE0729610C1D8E4E9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:9a:dc:54:67:a6:5f:1e:76:21:35:7f:66: 84:90:59:84:b4:dc:7a:88:da:5f:71:8a:cb:e7:3a: 2e:9f:14:b7:ed:ac:ba:17:3f:5e:9b:28:f8:a2:05: 8c:d2:6d:4a:b8:93:e3:bf:33:ab:c8:97:30:dd:11: 25:08:be:9f:d1:78:89:86:0a:07:15:67:7e:8f:8c: 39:af:e6:b9:51:e9:55:90:64:99:1f:ba:f0:85:3b: 0c:e6:bc:25:0f:25:d3:4b:87:51:89:64:b6:41:4f: 6f:3f:49:4a:df:c5:ea:8e:5b:58:0e:c7:d9:c7:15: 92:9a:57:de:40:5b:1e:93:75:ff:5f:25:3d:9f:a8: ec:cc:27:a3:f0:15:6a:a6:e0:70:5c:ce:e8:c5:53: b8:5e:0c:16:5f:37:40:e1:6a:60:f2:f0:f6:b7:49: 5a:54:94:a4:c3:86:67:c3:73:10:fc:a2:35:57:a5: e9:bc:aa:45:65:99:4c:d6:11:90:50:ff:97:b7:be: f5:df:9f:e1:f0:b3:77:79:94:e8:0a:7b:4f:50:d8: a0:99:5b:fd:9b:75:47:40:10:07:02:80:5a:23:21: be:aa:c3:29:42:c1:57:e4:88:4c:96:f6:de:64:5f: d1:70:3b:62:58:db:99:5a:1d:5d:8d:40:29:c1:96: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:22:11:3B:FB:FB:C3:75:57:5E:E0:72:96:10:C1:D8:E4:E9:B7 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:1c:25:41:28:aa:ee:e9:fd:f4:68:86:8f:69:98:8b:5f:23: 3a:85:b5:ad:ea:dc:a6:da:84:bd:ef:62:54:02:b8:fd:93:79: 1e:11:e3:9a:e5:10:dc:c6:44:09:ac:ea:8f:5f:e0:36:ef:5a: 97:5b:43:a6:58:6c:9b:0e:ce:51:56:95:1f:a9:a5:e1:48:4e: c2:64:ef:3b:33:fc:ca:19:6a:fb:c2:1e:6c:7d:78:80:18:39: d2:03:ce:4e:9b:79:78:c9:de:e0:67:e8:7c:3c:53:12:9f:e3: 4e:0f:9b:0f:66:b8:af:cf:5a:8b:38:ac:1a:11:e0:b7:56:70: bf:dd:35:af:5d:ce:71:7d:05:2f:55:7b:e4:d3:0e:35:f7:a3: b8:f0:60:a4:8d:1c:8b:77:bd:19:56:78:97:3a:6e:9f:bf:75: 34:14:54:3b:7e:a6:d6:31:b8:0e:c7:dc:fa:f8:bb:7f:be:81: 43:5c:15:9a:9a:39:84:96:9a:3e:05:a6:9a:f7:2d:5f:0b:5c: 0d:8a:1a:a0:b7:ac:4a:ff:1f:20:94:b6:ef:1c:2d:6e:d9:fd: 8c:79:e3:2d:c5:89:8c:e6:9f:2b:44:45:ec:db:c8:82:62:8a: 65:6a:79:22:6e:dc:bc:36:ff:6b:32:10:d3:cc:3c:b0:33:64: f6:f2:ee:a3 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdVEzkLOLt0GoVThLKQLS1BsQpxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA1MTIyMzU3MzZaFw0yNjA1MTQxMzU0MzZaMDMxMTAvBgNV BAMTKDM3M0QyMjExM0JGQkZCQzM3NTU3NUVFMDcyOTYxMEMxRDhFNEU5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1J5rcVGemXx52ITV/ZoSQWYS0 3HqI2l9xisvnOi6fFLftrLoXP16bKPiiBYzSbUq4k+O/M6vIlzDdESUIvp/ReImG CgcVZ36PjDmv5rlR6VWQZJkfuvCFOwzmvCUPJdNLh1GJZLZBT28/SUrfxeqOW1gO x9nHFZKaV95AWx6Tdf9fJT2fqOzMJ6PwFWqm4HBczujFU7heDBZfN0DhamDy8Pa3 SVpUlKTDhmfDcxD8ojVXpem8qkVlmUzWEZBQ/5e3vvXfn+Hws3d5lOgKe09Q2KCZ W/2bdUdAEAcCgFojIb6qwylCwVfkiEyW9t5kX9FwO2JY25laHV2NQCnBlitJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUNz0iETv7+8N1V17gcpYQwdjk6bcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxwlQSiq7un99GiGj2mY i18jOoW1rercptqEve9iVAK4/ZN5HhHjmuUQ3MZECazqj1/gNu9al1tDplhsmw7O UVaVH6ml4UhOwmTvOzP8yhlq+8IebH14gBg50gPOTpt5eMne4GfofDxTEp/jTg+b D2a4r89aizisGhHgt1Zwv901r13OcX0FL1V75NMONfejuPBgpI0ci3e9GVZ4lzpu n791NBRUO36m1jG4Dsfc+vi7f76BQ1wVmpo5hJaaPgWmmvctXwtcDYoaoLesSv8f IJS27xwtbtn9jHnjLcWJjOafK0RF7NvIgmKKZWp5Im7cvDb/azIQ08w8sDNk9vLu ow== -----END CERTIFICATE-----Generated at Wed May 13 06:34:19 2026 by rpki-client