$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: H+X9JjfSFDOQNFT/U3iwz73hsGRDYJLOI4BLhG186Wg= Subject key identifier: ED:E4:F7:FB:4D:B5:F3:C1:56:F0:23:9D:46:42:0C:36:EA:76:F0:C4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 08154A030441DFF7707673A56BE4BDBB9DD55E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 04AF Signing time: Tue 12 May 2026 18:04:56 +0000 Manifest this update: Tue 12 May 2026 17:59:56 +0000 Manifest next update: Wed 13 May 2026 19:18:56 +0000 Files and hashes: 1: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 2: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 3: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 4: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 5: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 6: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 7: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 8: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 9: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 10: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: yzTiRYEZZTCiSpwYOeCJG+m81/z8wk5oLmVZze7J87s=) 11: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:15:4a:03:04:41:df:f7:70:76:73:a5:6b:e4:bd:bb:9d:d5:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: May 12 17:59:56 2026 GMT Not After : May 13 19:18:56 2026 GMT Subject: CN=EDE4F7FB4DB5F3C156F0239D46420C36EA76F0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:f1:35:de:ff:b1:b1:ef:f2:31:a8:c2:c0: 2c:80:98:9d:9a:dd:eb:60:a1:40:f1:9a:08:a1:08: f1:c9:25:24:20:6c:3a:ad:5a:ba:c5:93:65:33:d9: eb:8c:ad:8b:ac:57:4e:07:4f:fa:1d:71:aa:9b:cf: 25:b9:7a:5c:30:d3:b3:11:46:94:e6:cb:7a:e1:d3: 88:a1:0b:db:c7:4f:12:14:86:4b:c9:ce:76:93:f0: e8:49:56:bf:71:50:bc:53:c9:32:95:c9:a2:8c:d5: d2:13:bb:8f:bf:3b:95:fd:c8:2f:c6:a8:3c:bd:64: 03:1e:ab:22:c8:8b:7f:55:6c:39:eb:f7:ac:b6:93: fe:c3:9a:a4:a7:d6:19:1b:9b:07:c3:85:18:13:f6: c1:cc:98:b2:c2:c6:b0:98:60:04:5b:51:65:fe:55: 8b:b0:97:7c:96:91:48:34:92:3d:ec:e1:7e:76:10: 3f:b9:b4:64:ca:0c:2d:6c:1d:aa:b7:91:9d:f5:58: 00:2e:85:2a:9b:19:e9:e2:21:93:bd:bb:1e:88:43: a5:16:f6:1a:af:a2:38:da:3b:21:c8:e5:e0:65:4c: 37:3c:47:27:c9:16:88:95:61:7a:79:fb:5e:31:0a: 33:cd:42:ea:37:63:17:3b:ed:f2:f6:20:26:76:60: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E4:F7:FB:4D:B5:F3:C1:56:F0:23:9D:46:42:0C:36:EA:76:F0:C4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:05:59:77:1f:0f:05:8c:eb:c4:eb:2e:09:00:5b:49:a6:b6: ad:65:03:48:5b:40:1b:1f:78:54:47:33:1e:f8:ab:21:9c:20: 9f:40:72:2a:16:0f:b2:1f:b1:22:a0:65:83:fc:9a:8a:7f:b2: 58:f4:3a:f6:c3:99:48:ae:37:36:6f:a7:7b:fa:9a:f1:86:6e: f1:a4:10:7e:4b:f7:a8:da:8b:14:38:9c:a3:a9:05:05:aa:c3: 3d:b2:5e:bd:a4:89:19:fe:d4:c1:82:9b:29:0b:bb:57:db:4f: fe:cd:17:ad:d4:d0:6f:35:b8:6c:93:a0:02:27:7b:79:8e:e8: b5:1f:68:74:fb:6a:c8:ae:8b:e6:8b:01:a6:24:3a:a5:a8:f2: 68:e8:62:cd:3e:ab:0b:fe:b9:03:6f:3c:7c:30:50:3a:19:7b: ce:10:65:14:26:5f:a6:48:83:da:57:4b:b3:f5:16:7d:0a:bf: 24:e5:62:04:3a:5e:18:8e:2b:4c:da:21:71:37:37:fc:a2:16: 24:91:d4:29:6b:33:84:b3:95:11:e7:42:b5:60:39:de:c1:34: 04:60:53:32:f1:11:6a:a6:2e:bd:c5:01:4e:bf:f8:ab:91:af: c2:84:89:49:b1:84:a3:65:90:62:c4:f0:f2:a2:78:69:b7:b9: 37:89:f7:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCBVKAwRB3/dwdnOla+S9u53VXhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA1MTIxNzU5NTZaFw0yNjA1MTMxOTE4NTZaMDMxMTAvBgNV BAMTKEVERTRGN0ZCNERCNUYzQzE1NkYwMjM5RDQ2NDIwQzM2RUE3NkYwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtivE13v+xse/yMajCwCyAmJ2a 3etgoUDxmgihCPHJJSQgbDqtWrrFk2Uz2euMrYusV04HT/odcaqbzyW5elww07MR RpTmy3rh04ihC9vHTxIUhkvJznaT8OhJVr9xULxTyTKVyaKM1dITu4+/O5X9yC/G qDy9ZAMeqyLIi39VbDnr96y2k/7DmqSn1hkbmwfDhRgT9sHMmLLCxrCYYARbUWX+ VYuwl3yWkUg0kj3s4X52ED+5tGTKDC1sHaq3kZ31WAAuhSqbGeniIZO9ux6IQ6UW 9hqvojjaOyHI5eBlTDc8RyfJFoiVYXp5+14xCjPNQuo3Yxc77fL2ICZ2YCjJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7eT3+02188FW8COdRkIMNup28MQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQVZdx8PBYzrxOsuCQBb Saa2rWUDSFtAGx94VEczHvirIZwgn0ByKhYPsh+xIqBlg/yain+yWPQ69sOZSK43 Nm+ne/qa8YZu8aQQfkv3qNqLFDico6kFBarDPbJevaSJGf7UwYKbKQu7V9tP/s0X rdTQbzW4bJOgAid7eY7otR9odPtqyK6L5osBpiQ6pajyaOhizT6rC/65A288fDBQ Ohl7zhBlFCZfpkiD2ldLs/UWfQq/JOViBDpeGI4rTNohcTc3/KIWJJHUKWszhLOV EedCtWA53sE0BGBTMvERaqYuvcUBTr/4q5GvwoSJSbGEo2WQYsTw8qJ4abe5N4n3 mg== -----END CERTIFICATE-----Generated at Wed May 13 05:04:33 2026 by rpki-client