$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: UFBs+fjWUxo6l6WRjzSakwj1JMMFoufHy0AFiMxNmwI= Subject key identifier: 2A:AD:14:88:BA:BA:35:D4:1D:00:F2:71:26:9C:33:A5:ED:0F:F2:01 Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 3F0A729DF2BE76BFDF5F5B4F8E3A1802C691823C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: 12 Signing time: Tue 12 May 2026 05:36:57 +0000 Manifest this update: Tue 12 May 2026 05:31:57 +0000 Manifest next update: Wed 13 May 2026 09:32:57 +0000 Files and hashes: 1: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: Tpa4pbyLWA1jhsfki+IwcLcyDPc6fPduO8Hfbu5DAcE=) 2: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 3: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) 4: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 5: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 6: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 09:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0a:72:9d:f2:be:76:bf:df:5f:5b:4f:8e:3a:18:02:c6:91:82:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: May 12 05:31:57 2026 GMT Not After : May 13 09:32:57 2026 GMT Subject: CN=2AAD1488BABA35D41D00F271269C33A5ED0FF201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:46:2e:c8:6d:c0:b9:ae:e4:eb:b6:21:5a: 9e:40:37:88:03:2b:bd:70:aa:82:42:20:6f:44:bb: e3:0e:13:f1:e0:67:72:85:2e:67:c4:ea:90:5a:4d: 46:73:7a:87:54:63:b6:58:d2:3b:a1:88:41:13:eb: df:bd:2c:55:f5:59:ba:99:af:12:20:76:48:f8:c3: 42:bd:ab:41:e1:fd:d4:ad:33:94:04:be:0f:a7:9c: ad:78:93:aa:9e:8f:a3:02:f9:78:11:c4:34:d6:30: 91:c2:fc:8e:c8:ec:f9:1e:6b:cd:a8:97:be:56:18: 46:21:d5:13:15:15:55:0d:ec:6e:4d:29:6c:d5:55: c4:9c:06:3a:a5:26:dd:e3:1c:61:94:06:b0:db:46: 18:28:13:07:86:dd:40:8f:af:0a:04:b7:a4:05:fd: 91:b7:3f:fc:f2:6f:b0:5f:31:4c:2d:33:b8:2e:85: 80:94:ae:c5:2a:a4:ef:f7:26:8e:c2:01:d6:e8:03: b0:61:ce:23:2c:ef:f2:13:be:9b:85:40:9e:f5:9a: 79:0d:f2:42:ed:49:f2:b8:65:68:2e:fe:5f:a5:bc: 6a:4a:7d:75:cb:4e:3d:63:08:7f:b4:59:72:9f:c0: bf:0b:19:7a:31:36:ed:78:b5:90:d6:c7:82:18:83: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AD:14:88:BA:BA:35:D4:1D:00:F2:71:26:9C:33:A5:ED:0F:F2:01 X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:56:d8:9a:1c:fb:1a:10:af:d8:48:0c:6f:65:f4:9f:ca:26: 85:06:6b:6e:9a:cd:e0:51:92:d7:31:2f:f7:5a:62:8d:07:63: be:35:b1:4f:bf:7c:9a:4c:10:7e:6b:f2:dc:ae:e0:5b:a3:93: 1f:fb:28:b8:34:0c:ad:63:e4:28:4a:22:13:1b:96:e6:c0:05: 42:22:61:41:e7:34:1f:88:0b:14:b6:ed:4d:c1:f3:be:5d:ad: eb:49:74:88:b5:f8:b6:eb:2d:a0:41:27:15:6c:aa:a3:46:ec: ae:08:1f:8c:fe:2f:df:7e:f1:a5:16:a0:4b:7c:5a:74:00:f1: 27:b0:53:bc:37:ee:e1:3c:21:ea:bd:2f:5b:b8:c0:0f:78:e8: 2c:7f:da:90:9f:02:b4:1d:93:c3:b3:25:16:5f:30:38:41:c8: 78:d7:4e:39:39:a5:a2:32:3b:8e:26:d1:ec:65:20:3f:12:34: ba:e2:9f:c9:8e:fb:64:ed:57:de:02:a7:59:9e:69:df:9e:3c: d9:f8:54:e5:98:f0:47:17:a1:04:98:13:ca:04:64:cc:15:4b: 57:87:c7:15:26:1a:53:76:6c:96:7d:33:a8:69:aa:ec:c4:09: 00:07:a6:ab:82:b6:a8:61:c0:98:b1:20:74:a6:c0:3a:66:8a: 2e:8d:1f:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPwpynfK+dr/fX1tPjjoYAsaRgjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA1MTIwNTMxNTdaFw0yNjA1MTMwOTMyNTdaMDMxMTAvBgNV BAMTKDJBQUQxNDg4QkFCQTM1RDQxRDAwRjI3MTI2OUMzM0E1RUQwRkYyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71UYuyG3Aua7k67YhWp5AN4gD K71wqoJCIG9Eu+MOE/HgZ3KFLmfE6pBaTUZzeodUY7ZY0juhiEET69+9LFX1WbqZ rxIgdkj4w0K9q0Hh/dStM5QEvg+nnK14k6qej6MC+XgRxDTWMJHC/I7I7Pkea82o l75WGEYh1RMVFVUN7G5NKWzVVcScBjqlJt3jHGGUBrDbRhgoEweG3UCPrwoEt6QF /ZG3P/zyb7BfMUwtM7guhYCUrsUqpO/3Jo7CAdboA7BhziMs7/ITvpuFQJ71mnkN 8kLtSfK4ZWgu/l+lvGpKfXXLTj1jCH+0WXKfwL8LGXoxNu14tZDWx4IYg/SNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKq0UiLq6NdQdAPJxJpwzpe0P8gEwHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlbYmhz7GhCv2EgMb2X0 n8omhQZrbprN4FGS1zEv91pijQdjvjWxT798mkwQfmvy3K7gW6OTH/souDQMrWPk KEoiExuW5sAFQiJhQec0H4gLFLbtTcHzvl2t60l0iLX4tustoEEnFWyqo0bsrggf jP4v337xpRagS3xadADxJ7BTvDfu4Twh6r0vW7jAD3joLH/akJ8CtB2Tw7MlFl8w OEHIeNdOOTmlojI7jibR7GUgPxI0uuKfyY77ZO1X3gKnWZ5p35482fhU5ZjwRxeh BJgTygRkzBVLV4fHFSYaU3Zsln0zqGmq7MQJAAemq4K2qGHAmLEgdKbAOmaKLo0f Fw== -----END CERTIFICATE-----Generated at Tue May 12 21:42:25 2026 by rpki-client