$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: 4ZmqJTf+JxdFk9tgHXjEcHQc3w240pJwmdLFYiEp1Gk= Subject key identifier: 21:FB:DF:2D:27:6D:96:08:A5:35:8C:29:33:81:09:54:41:CB:65:3C Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 44E1D3019A71E6450F5D8250D3345431FC2D1E79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 36 Signing time: Tue 12 May 2026 20:10:41 +0000 Manifest this update: Tue 12 May 2026 20:05:41 +0000 Manifest next update: Wed 13 May 2026 23:38:41 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: QlnDm06MJ64TAPVcfUadtF3MJhdUgpzcg4Jkeqfa5eU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e1:d3:01:9a:71:e6:45:0f:5d:82:50:d3:34:54:31:fc:2d:1e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: May 12 20:05:41 2026 GMT Not After : May 13 23:38:41 2026 GMT Subject: CN=21FBDF2D276D9608A5358C293381095441CB653C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:f4:e9:1f:bd:f6:96:5e:c7:53:30:3b:e6: 91:9c:92:5d:b0:03:39:6d:cb:d0:12:1a:59:13:03: 85:10:38:41:68:00:9e:c9:63:83:c9:fe:bb:64:40: f7:67:fa:14:77:65:ef:b9:7f:0b:ea:bb:3c:a9:d4: 52:c2:be:67:ae:6b:3f:cb:6c:50:e8:46:b4:02:19: 4a:59:c6:ce:f4:9e:80:60:1c:4e:f5:bb:8b:58:fb: 2d:28:c3:0f:07:1d:0c:e5:96:69:de:74:b2:5b:a7: 28:af:13:5d:5c:23:46:04:60:d1:22:c9:a4:e9:63: ee:cb:c5:7e:0f:17:58:cb:15:6a:3b:0d:d1:35:52: bc:b5:8a:a9:70:63:5f:f2:f5:16:a7:04:dd:a6:99: 1a:68:52:cb:48:15:12:2f:32:a3:a3:30:a0:47:a7: 1d:b1:17:4b:29:84:5e:15:8e:04:89:49:f3:7a:fe: bd:da:a8:10:83:67:08:1d:80:bc:39:37:96:8b:4e: 98:ea:f2:c1:5b:1d:df:17:ec:d8:15:e6:da:bd:bd: d5:c3:e0:99:c6:51:fb:fd:ae:46:29:7f:a9:6c:67: 2b:b0:20:d3:08:0d:98:90:a1:e6:0e:6c:ad:87:c3: 72:54:74:53:ec:33:1c:cd:f1:51:97:58:00:25:e7: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:DF:2D:27:6D:96:08:A5:35:8C:29:33:81:09:54:41:CB:65:3C X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9c:63:dc:38:11:35:e1:d2:e4:73:b0:d3:1f:8e:85:1c:01: 9c:3a:2d:5d:36:bd:e0:19:aa:34:bc:b4:65:42:ee:d5:23:77: 5f:e9:e2:54:d5:fe:b7:9d:21:b7:5f:aa:59:54:4f:13:c2:ad: 63:48:e1:43:e1:a5:f5:b0:c2:aa:34:f1:84:bb:7f:3d:55:6c: e8:cb:b2:20:22:52:3a:bd:bf:e5:67:c3:0c:c3:67:de:42:23: b3:cf:8d:97:7d:3a:88:63:30:71:72:f9:2f:a4:f5:7e:d1:f0: bf:fd:4f:ab:5e:5e:ba:92:1d:88:eb:6e:5f:cb:b3:86:8d:80: 6d:3c:f9:75:c8:ea:24:bf:3d:c6:68:67:4d:f3:a7:5c:2e:cc: 1c:70:4e:ce:1c:4b:df:cb:d4:a4:f7:52:cc:56:29:a7:0c:a5: f6:6c:5e:9f:21:9a:6d:cb:c2:ff:04:ec:60:b6:da:a8:33:4b: 0a:5d:07:6d:09:7e:b5:86:a3:c7:37:72:1a:92:af:27:3d:7f: 51:e0:db:b5:11:61:ef:db:75:12:3d:06:4b:91:8f:1f:17:df: 8a:03:3d:85:51:39:ad:4f:97:eb:3a:c5:90:9f:90:ed:f3:0f: a2:c7:21:58:06:43:54:1d:27:df:ce:42:42:b5:7a:51:18:37: 83:54:4f:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUROHTAZpx5kUPXYJQ0zRUMfwtHnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA1MTIyMDA1NDFaFw0yNjA1MTMyMzM4NDFaMDMxMTAvBgNV BAMTKDIxRkJERjJEMjc2RDk2MDhBNTM1OEMyOTMzODEwOTU0NDFDQjY1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDPTpH732ll7HUzA75pGckl2w Azlty9ASGlkTA4UQOEFoAJ7JY4PJ/rtkQPdn+hR3Ze+5fwvquzyp1FLCvmeuaz/L bFDoRrQCGUpZxs70noBgHE71u4tY+y0oww8HHQzllmnedLJbpyivE11cI0YEYNEi yaTpY+7LxX4PF1jLFWo7DdE1Ury1iqlwY1/y9RanBN2mmRpoUstIFRIvMqOjMKBH px2xF0sphF4VjgSJSfN6/r3aqBCDZwgdgLw5N5aLTpjq8sFbHd8X7NgV5tq9vdXD 4JnGUfv9rkYpf6lsZyuwINMIDZiQoeYObK2Hw3JUdFPsMxzN8VGXWAAl5wO3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIfvfLSdtlgilNYwpM4EJVEHLZTwwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJnGPc OBE14dLkc7DTH46FHAGcOi1dNr3gGao0vLRlQu7VI3df6eJU1f63nSG3X6pZVE8T wq1jSOFD4aX1sMKqNPGEu389VWzoy7IgIlI6vb/lZ8MMw2feQiOzz42XfTqIYzBx cvkvpPV+0fC//U+rXl66kh2I625fy7OGjYBtPPl1yOokvz3GaGdN86dcLswccE7O HEvfy9Sk91LMVimnDKX2bF6fIZpty8L/BOxgttqoM0sKXQdtCX61hqPHN3Iakq8n PX9R4Nu1EWHv23USPQZLkY8fF9+KAz2FUTmtT5frOsWQn5Dt8w+ixyFYBkNUHSff zkJCtXpRGDeDVE+N -----END CERTIFICATE-----Generated at Wed May 13 07:46:43 2026 by rpki-client