$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: ZzeU9AhaZdIloPfygMukw+XSmQALBr5YCdsyldi3PYE= Subject key identifier: 27:BD:1A:B2:66:CA:5B:29:9A:D0:DC:E9:CB:1E:BE:24:D2:C4:5E:94 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 101593A0E5100ABAFB75F509E99CF0569287E14E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 1B Signing time: Tue 12 May 2026 20:10:34 +0000 Manifest this update: Tue 12 May 2026 20:05:34 +0000 Manifest next update: Wed 13 May 2026 22:56:34 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: uhKX8C1ogB+Qxz6YRAKpIVN2fw1K5/t6J2ZvzFxkXSA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:93:a0:e5:10:0a:ba:fb:75:f5:09:e9:9c:f0:56:92:87:e1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: May 12 20:05:34 2026 GMT Not After : May 13 22:56:34 2026 GMT Subject: CN=27BD1AB266CA5B299AD0DCE9CB1EBE24D2C45E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:49:09:73:47:b4:d0:6d:4a:4b:e5:6f:2e: fe:97:65:1d:09:5e:46:f6:68:b8:c9:14:1c:39:97: 62:0e:d4:e2:a6:0c:dd:a2:fd:48:d9:de:5e:4c:25: d2:5e:92:3b:fc:2d:5d:66:e7:4a:6c:bc:41:22:d9: 58:6f:9f:9c:a5:63:72:04:7c:ec:00:97:0d:6a:a6: 0f:45:77:e6:4d:ad:65:22:8c:ca:a8:49:6e:cd:f2: 14:95:b8:e9:87:b9:2f:da:16:9c:a7:78:38:66:52: 71:d0:14:1b:53:27:de:e0:1b:c7:7d:c2:79:ca:98: 9f:14:6f:78:3b:cb:26:ba:16:bd:7d:ac:cd:49:45: a7:03:38:a2:b8:9f:0b:32:4b:ba:29:63:df:78:28: 44:e2:97:69:4b:44:ed:1c:f2:4e:65:77:1f:7e:18: c0:4b:56:1d:94:33:47:89:ec:72:f6:8a:5e:f0:1e: d2:b7:b3:cf:5f:87:06:7f:b7:a4:6b:ae:3d:3e:63: f9:06:b1:60:5d:a7:05:7a:d1:be:96:72:82:6e:3b: de:16:91:59:6f:57:8e:c4:04:af:4a:1c:78:4d:fe: 14:f3:0f:a6:cb:58:48:88:b4:52:6e:6c:a7:a9:dd: 9d:27:79:8a:62:ba:9a:46:fb:34:2f:b9:85:b3:a6: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:1A:B2:66:CA:5B:29:9A:D0:DC:E9:CB:1E:BE:24:D2:C4:5E:94 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a9:e1:45:c4:e6:4b:ac:15:e5:c2:d6:07:eb:4e:13:7e:d8: 07:4d:ac:78:2c:c5:2f:cd:30:fa:fc:82:04:57:3f:3d:c7:6b: 1c:19:18:7a:4d:57:66:4d:bd:09:d9:fb:68:c4:5c:0b:a6:4f: c2:f9:9b:31:0d:0f:47:83:bf:c2:45:25:11:41:b0:e2:03:d4: 54:0b:3b:3a:40:84:87:8e:05:81:aa:3f:dd:c4:83:20:0b:81: 4e:11:1c:fd:d6:94:ea:5e:0a:1f:de:51:2d:26:9e:0c:81:5c: 80:69:3c:e4:72:4e:dd:c0:2c:03:f9:40:e0:1d:04:fc:38:06: 76:61:19:ac:d9:37:66:e8:cb:c0:89:52:e6:5b:f5:6f:38:ad: 80:89:b1:e8:eb:59:eb:27:3e:c7:a9:2d:0f:1f:50:02:e2:e2: da:5a:75:b2:05:c6:f3:22:e6:a1:6d:6b:23:2e:e6:7c:a4:92: 91:0b:9d:c4:65:ec:76:fc:0c:e8:83:76:83:98:23:b6:c7:55: ff:a7:ec:b8:6f:da:fa:be:ec:0b:e8:1c:dd:5e:a6:1d:aa:22: 03:33:c7:6f:c3:d2:c4:00:3c:02:fc:86:a4:f0:8f:04:90:c4: 25:4b:4c:5b:41:09:b7:2d:06:f7:cf:78:92:47:09:71:58:1d: ae:30:0f:e2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEBWToOUQCrr7dfUJ6ZzwVpKH4U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA1MTIyMDA1MzRaFw0yNjA1MTMyMjU2MzRaMDMxMTAvBgNV BAMTKDI3QkQxQUIyNjZDQTVCMjk5QUQwRENFOUNCMUVCRTI0RDJDNDVFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSaUkJc0e00G1KS+VvLv6XZR0J Xkb2aLjJFBw5l2IO1OKmDN2i/UjZ3l5MJdJekjv8LV1m50psvEEi2Vhvn5ylY3IE fOwAlw1qpg9Fd+ZNrWUijMqoSW7N8hSVuOmHuS/aFpyneDhmUnHQFBtTJ97gG8d9 wnnKmJ8Ub3g7yya6Fr19rM1JRacDOKK4nwsyS7opY994KETil2lLRO0c8k5ldx9+ GMBLVh2UM0eJ7HL2il7wHtK3s89fhwZ/t6Rrrj0+Y/kGsWBdpwV60b6WcoJuO94W kVlvV47EBK9KHHhN/hTzD6bLWEiItFJubKep3Z0neYpiuppG+zQvuYWzpjXVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ70asmbKWyma0Nzpyx6+JNLEXpQwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKqeFF xOZLrBXlwtYH604TftgHTax4LMUvzTD6/IIEVz89x2scGRh6TVdmTb0J2ftoxFwL pk/C+ZsxDQ9Hg7/CRSURQbDiA9RUCzs6QISHjgWBqj/dxIMgC4FOERz91pTqXgof 3lEtJp4MgVyAaTzkck7dwCwD+UDgHQT8OAZ2YRms2Tdm6MvAiVLmW/VvOK2AibHo 61nrJz7HqS0PH1AC4uLaWnWyBcbzIuahbWsjLuZ8pJKRC53EZex2/Azog3aDmCO2 x1X/p+y4b9r6vuwL6BzdXqYdqiIDM8dvw9LEADwC/Iak8I8EkMQlS0xbQQm3LQb3 z3iSRwlxWB2uMA/i -----END CERTIFICATE-----Generated at Wed May 13 06:04:42 2026 by rpki-client