$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: a4WHKgML5U16+BO0cCj8aZIXAgXBaOFRwJzH7tncFKA= Subject key identifier: D9:36:76:72:8E:81:07:E6:20:43:46:79:A5:C6:45:99:81:B4:6A:F9 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 6E16EAFB829079A0502640AA5D0C1AEBFC7CFFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 29 Signing time: Tue 12 May 2026 18:04:56 +0000 Manifest this update: Tue 12 May 2026 17:59:56 +0000 Manifest next update: Wed 13 May 2026 18:30:56 +0000 Files and hashes: 1: 34362e31382e39302e302f32342d3234203d3e20323037313538.roa (hash: c3XGP2QOaAegFM0BJ/uAWNxnHJgzHzZj7rsmxO7Bggk=) 2: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 3: 34362e31382e38392e302f32342d3234203d3e20343032323831.roa (hash: PPj+d7eGo2PBJtltoQXVruPJaCtqJLk7W5YnaZT/qog=) 4: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (hash: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=) 5: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (hash: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=) 6: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: VXdVmqt+St+kK9GMRDLuxnAwYx//gpqYEACAJjh31nw=) 7: 3138352e3131362e39302e302f32342d3234203d3e20343032323839.roa (hash: +Ui26OpR2rnRNb3YOnuRkkVtjIfm7ZTC4lRerOfEZ6k=) 8: 34362e31382e39312e302f32342d3234203d3e20323032373932.roa (hash: ntblaebzWfMZkapnZj/wCZOlMJjioVqZTa39aOgNWdQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:16:ea:fb:82:90:79:a0:50:26:40:aa:5d:0c:1a:eb:fc:7c:ff:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: May 12 17:59:56 2026 GMT Not After : May 13 18:30:56 2026 GMT Subject: CN=D93676728E8107E620434679A5C6459981B46AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:79:3b:ab:64:4b:9c:e0:62:6d:80:e2:5a: fe:c6:6c:51:65:08:28:50:d4:0e:13:e1:3a:e7:be: 7f:ce:ad:9c:f2:63:67:b9:ed:26:7f:58:d1:c6:eb: 1d:22:95:e5:36:20:73:86:51:e5:5f:53:04:6b:6e: c7:60:08:cb:96:e4:8e:67:fc:c3:7f:11:7d:af:b7: 72:8e:34:22:80:49:c6:11:ee:e9:da:fa:7e:8a:c8: 49:d4:b8:7a:ba:a0:06:57:a7:00:0a:05:f8:dc:1a: 51:19:10:32:59:77:d8:d1:5a:d2:4d:39:89:86:6b: d5:53:0d:11:3e:11:6e:47:06:31:1f:b6:d7:a7:40: a7:64:55:d2:2b:df:32:e6:8c:e8:4d:8f:5d:98:d8: 8e:b5:c6:40:11:3e:84:0b:b3:2a:45:a5:87:be:a4: 44:0b:cd:cd:03:5c:7c:13:a2:27:4b:d5:6f:04:87: 09:0d:df:52:7e:ac:df:a7:1a:3c:9c:52:c2:6f:a3: a8:d1:d6:9b:1a:c9:c4:b0:2e:b6:9c:73:65:46:73: de:2c:ea:a3:9a:aa:1a:79:e9:29:4a:d3:a0:d9:d2: cf:6c:bf:01:f3:2e:cd:89:88:c4:87:af:28:35:e0: a2:b8:8c:1d:3c:71:ee:c6:d3:60:61:53:f5:44:bb: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:36:76:72:8E:81:07:E6:20:43:46:79:A5:C6:45:99:81:B4:6A:F9 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1f:87:db:db:42:27:92:f9:74:f0:f0:3f:1b:1a:aa:6d:2a: a8:95:50:04:21:7d:95:17:96:a3:bc:51:41:8f:d0:13:c8:4c: 1f:d2:80:db:00:60:1d:c1:f4:be:b6:14:90:e0:ab:17:dd:0b: 6d:61:ac:1d:3f:18:7a:60:b1:03:56:75:ac:2f:2f:a6:02:f8: 3f:e2:63:bf:dc:3d:c0:42:cf:56:99:6a:d1:55:2a:67:7a:3b: 7d:1f:c3:3a:b3:b4:78:00:02:7a:53:89:2f:a6:c9:0f:1a:a3: 3b:c4:6e:f6:24:c6:8d:67:d7:f4:a1:e3:f8:ce:02:e2:7c:0f: 36:fc:54:2a:78:ae:76:38:7b:3b:a8:2e:d5:82:95:b0:e6:60: 63:29:cf:76:3e:9d:1b:55:a8:d1:ef:6c:b4:35:9f:ea:50:c3: e9:bf:05:88:c8:63:eb:19:fd:d9:7e:65:2a:37:c8:4b:83:54: 00:f2:c6:d3:6f:40:9a:8b:13:d6:bc:8f:77:4f:1c:f3:f6:e3: e2:d1:42:84:d2:0c:40:09:2d:bf:2a:7c:f2:d9:b4:d7:31:c1: 04:5e:d5:ab:67:8e:1c:44:cd:9b:44:da:a4:bd:8d:6a:dd:e3: ac:bd:24:61:21:23:0a:f6:d6:46:66:c3:87:68:09:7d:74:60: e1:d2:ea:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbhbq+4KQeaBQJkCqXQwa6/x8/+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA1MTIxNzU5NTZaFw0yNjA1MTMxODMwNTZaMDMxMTAvBgNV BAMTKEQ5MzY3NjcyOEU4MTA3RTYyMDQzNDY3OUE1QzY0NTk5ODFCNDZBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlXk7q2RLnOBibYDiWv7GbFFl CChQ1A4T4Trnvn/OrZzyY2e57SZ/WNHG6x0ileU2IHOGUeVfUwRrbsdgCMuW5I5n /MN/EX2vt3KONCKAScYR7una+n6KyEnUuHq6oAZXpwAKBfjcGlEZEDJZd9jRWtJN OYmGa9VTDRE+EW5HBjEfttenQKdkVdIr3zLmjOhNj12Y2I61xkARPoQLsypFpYe+ pEQLzc0DXHwToidL1W8EhwkN31J+rN+nGjycUsJvo6jR1psaycSwLracc2VGc94s 6qOaqhp56SlK06DZ0s9svwHzLs2JiMSHryg14KK4jB08ce7G02BhU/VEu+VxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2TZ2co6BB+YgQ0Z5pcZFmYG0avkwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh+H29tCJ5L5dPDwPxsa qm0qqJVQBCF9lReWo7xRQY/QE8hMH9KA2wBgHcH0vrYUkOCrF90LbWGsHT8YemCx A1Z1rC8vpgL4P+Jjv9w9wELPVplq0VUqZ3o7fR/DOrO0eAACelOJL6bJDxqjO8Ru 9iTGjWfX9KHj+M4C4nwPNvxUKniudjh7O6gu1YKVsOZgYynPdj6dG1Wo0e9stDWf 6lDD6b8FiMhj6xn92X5lKjfIS4NUAPLG029AmosT1ryPd08c8/bj4tFChNIMQAkt vyp88tm01zHBBF7Vq2eOHETNm0TapL2Nat3jrL0kYSEjCvbWRmbDh2gJfXRg4dLq fg== -----END CERTIFICATE-----Generated at Tue May 12 21:15:38 2026 by rpki-client