$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: xgtMRtIE+FtV1Ktg/IbP/+Ij9aYoxDVEknu7TdDuL+Y= Subject key identifier: F1:D3:8E:4E:36:FA:50:47:30:13:B6:82:F0:DD:C6:BB:8A:FE:27:D6 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 3FA5AA15B328302C21F4AE751880483F0CA761A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 0168 Signing time: Tue 12 May 2026 14:01:29 +0000 Manifest this update: Tue 12 May 2026 13:56:29 +0000 Manifest next update: Wed 13 May 2026 14:15:29 +0000 Files and hashes: 1: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 2: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 3: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: iv/NbUx2sjwRLZl73EPJnMnP43P1nfuCWXb0buHLueU=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 5: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 6: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a5:aa:15:b3:28:30:2c:21:f4:ae:75:18:80:48:3f:0c:a7:61:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: May 12 13:56:29 2026 GMT Not After : May 13 14:15:29 2026 GMT Subject: CN=F1D38E4E36FA50473013B682F0DDC6BB8AFE27D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:9b:99:f7:5c:ac:66:03:1a:a5:46:27:2d: ea:c4:55:76:cb:75:75:66:5b:5d:0d:67:41:b8:ce: 43:55:b0:5d:6e:a5:ef:6d:f7:09:e7:8b:e0:e0:eb: 0d:9f:49:0f:36:cf:e6:b2:8c:13:79:af:fb:8c:3b: 3d:8b:b5:ba:4b:29:a1:b7:d9:4b:ef:3d:03:4e:c3: 7c:5c:8e:04:e5:cb:94:c5:5d:ab:c8:c3:d8:46:ff: 32:63:bd:3c:97:bd:ff:51:9d:89:ac:07:7f:64:12: 1a:3c:bf:72:c0:cd:a8:dc:13:6e:10:e5:ab:24:03: 57:2a:0e:8b:7d:73:4e:71:49:67:ee:69:22:fd:c6: 27:12:ff:a8:e6:26:30:ab:99:f6:69:74:37:8b:09: 0f:a1:39:20:78:d3:ed:91:0a:05:22:b1:c0:25:4a: 65:54:db:00:8f:f7:f0:49:a7:29:b9:24:71:49:8c: 04:d1:c3:f1:9d:4b:3e:79:d8:8d:09:f0:9a:57:c9: a3:3e:a3:d5:19:77:8a:28:73:a5:ab:8b:2a:04:e7: 3a:a8:c7:3d:40:23:3a:a9:a9:b3:6b:a9:c3:93:bc: 76:e0:58:4a:1a:80:4d:81:86:f5:66:cc:60:b4:8d: a8:11:6c:51:77:de:c3:cb:ec:43:c0:e8:52:05:b7: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D3:8E:4E:36:FA:50:47:30:13:B6:82:F0:DD:C6:BB:8A:FE:27:D6 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:25:58:f6:d6:89:8e:0a:7a:e1:39:07:de:4d:9f:df:b5: 94:18:7c:d6:6b:7a:4f:0a:e3:c5:8f:e2:8a:0a:c9:61:0f:74: 25:5d:08:7b:e9:d7:02:6d:f3:a4:b8:ad:b3:64:e0:53:c9:2d: 51:bc:9e:c3:d1:8e:03:3e:de:1c:79:19:8a:fc:e3:7e:06:45: ab:68:0f:92:bf:d9:45:75:8e:cc:f6:1b:42:b8:8c:12:23:30: 6e:31:cf:7d:8d:87:0a:ca:b5:64:ea:e7:dd:00:47:c4:84:28: 5a:d3:0e:80:1f:48:a5:52:95:6e:15:bf:00:0b:a3:96:0b:f6: 56:94:81:f1:9f:ed:f0:21:56:9d:84:8d:c2:60:cf:6c:3b:13: d3:24:91:ae:89:82:56:53:4d:3c:2f:b0:d8:f9:c1:67:6f:01: cd:b2:c2:7e:c9:f7:f5:e1:b7:c2:86:7c:12:7c:34:f6:94:5a: 98:5e:05:e9:e9:62:ca:51:a9:19:81:2a:b0:0d:ed:34:fd:89: d9:91:3e:96:ec:44:b5:2e:de:38:dd:69:e1:5b:1c:19:34:d5: ad:cc:1d:74:c6:04:5d:75:a4:66:1e:7e:9c:d7:86:c9:d7:89: f7:4f:a1:3a:75:3e:10:b2:c5:6f:eb:96:b0:9c:4a:78:08:bb: c6:70:fb:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP6WqFbMoMCwh9K51GIBIPwynYagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjA1MTIxMzU2MjlaFw0yNjA1MTMxNDE1MjlaMDMxMTAvBgNV BAMTKEYxRDM4RTRFMzZGQTUwNDczMDEzQjY4MkYwRERDNkJCOEFGRTI3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw5uZ91ysZgMapUYnLerEVXbL dXVmW10NZ0G4zkNVsF1upe9t9wnni+Dg6w2fSQ82z+ayjBN5r/uMOz2LtbpLKaG3 2UvvPQNOw3xcjgTly5TFXavIw9hG/zJjvTyXvf9RnYmsB39kEho8v3LAzajcE24Q 5askA1cqDot9c05xSWfuaSL9xicS/6jmJjCrmfZpdDeLCQ+hOSB40+2RCgUiscAl SmVU2wCP9/BJpym5JHFJjATRw/GdSz552I0J8JpXyaM+o9UZd4ooc6WriyoE5zqo xz1AIzqpqbNrqcOTvHbgWEoagE2BhvVmzGC0jagRbFF33sPL7EPA6FIFt1SfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8dOOTjb6UEcwE7aC8N3Gu4r+J9YwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaziVY 9taJjgp64TkH3k2f37WUGHzWa3pPCuPFj+KKCslhD3QlXQh76dcCbfOkuK2zZOBT yS1RvJ7D0Y4DPt4ceRmK/ON+BkWraA+Sv9lFdY7M9htCuIwSIzBuMc99jYcKyrVk 6ufdAEfEhCha0w6AH0ilUpVuFb8AC6OWC/ZWlIHxn+3wIVadhI3CYM9sOxPTJJGu iYJWU008L7DY+cFnbwHNssJ+yff14bfChnwSfDT2lFqYXgXp6WLKUakZgSqwDe00 /YnZkT6W7ES1Lt443WnhWxwZNNWtzB10xgRddaRmHn6c14bJ14n3T6E6dT4QssVv 65awnEp4CLvGcPsa -----END CERTIFICATE-----Generated at Wed May 13 08:44:29 2026 by rpki-client