$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: XN1oteD3fvQDDORDPkWTrH4M/+JSwgq/r9PMp+/IVM4= Subject key identifier: B9:52:87:9C:B5:62:96:69:EA:AA:A2:8C:75:A4:FD:15:10:83:89:05 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4FADC442F0C86A600A5436C49413EABA9653A6E8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 040F Signing time: Tue 12 May 2026 19:01:02 +0000 Manifest this update: Tue 12 May 2026 18:56:02 +0000 Manifest next update: Wed 13 May 2026 19:22:02 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: Xhmmkgmr51E4KRyiop+9/WzsvnUjpgcxZCjAeanZIjw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ad:c4:42:f0:c8:6a:60:0a:54:36:c4:94:13:ea:ba:96:53:a6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: May 12 18:56:02 2026 GMT Not After : May 13 19:22:02 2026 GMT Subject: CN=B952879CB5629669EAAAA28C75A4FD1510838905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:43:4f:e0:d1:45:4e:55:04:ff:91:fe:04:2d: 64:c9:14:bc:5c:43:3d:6b:d1:3e:06:36:5c:80:51: 46:da:bf:27:bb:34:78:17:44:c1:af:79:c6:fd:65: da:99:9f:63:00:72:5e:9e:92:2d:97:4e:c6:65:13: 71:0d:9f:5e:39:da:3b:ae:c3:e9:6f:2d:a2:42:83: 00:92:bc:df:75:e6:47:e4:ee:c7:02:65:02:d4:b6: e4:08:25:c8:81:7d:26:a9:7d:af:65:e3:8e:77:e4: 0f:29:80:e0:65:8e:04:54:c7:73:51:cf:b2:88:ea: d9:17:18:39:f0:d7:ba:87:ee:61:9e:d0:4c:62:96: c2:8b:22:d7:ae:e1:0b:c6:81:be:a6:46:1c:dd:65: 27:00:fe:19:ed:16:bd:4d:48:03:4e:81:31:c1:0d: 8f:fc:94:3b:db:45:3a:60:f1:89:5a:ca:c6:4d:68: b6:f1:d1:99:c2:a8:ce:28:27:19:62:9a:67:8a:fc: 88:52:46:7a:d6:48:bb:cc:23:38:22:d5:9c:fb:fb: a5:87:2d:c0:fb:ad:78:7a:20:87:5c:5e:e0:22:7d: 39:0b:9b:4f:6c:75:63:fe:15:c2:9b:7a:8d:df:12: e4:96:54:a8:75:20:c5:58:ae:be:25:25:59:6c:4d: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:87:9C:B5:62:96:69:EA:AA:A2:8C:75:A4:FD:15:10:83:89:05 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2d:4f:49:dc:b0:2d:46:f9:c4:84:b6:da:fc:ae:98:99:1c: 24:73:db:d1:1b:34:8f:e7:7d:50:97:90:73:94:af:f9:08:b9: 71:ce:b9:16:da:c6:07:95:a5:c6:74:c6:26:86:e4:6d:c2:54: a1:d7:14:dc:e2:b8:87:d4:ff:ea:2e:48:73:a4:d1:62:02:6b: c5:9c:b3:bf:bd:17:c6:f9:cd:5c:4c:99:bf:65:67:09:af:24: 83:96:7b:b6:89:6a:6d:4e:3f:2b:13:28:96:4a:b4:0b:9b:0f: 17:6c:aa:fe:a2:35:16:01:b8:af:2c:40:41:b0:2c:f8:56:40: 53:df:5e:43:3c:66:a1:d9:a0:11:b4:c3:20:a9:c9:34:94:8d: 77:bf:79:95:ed:83:2b:3c:ed:7a:f3:83:85:96:ce:1f:3e:a4: 14:6f:3b:c4:c7:dd:51:2e:6c:17:f7:5a:1d:fd:3f:d8:7e:59: 3d:4e:1a:55:9d:7c:bf:27:fa:b4:63:8a:c2:f7:17:c7:87:85: 24:f5:44:f2:ba:d3:8b:78:9f:5b:2d:8a:3f:2f:f1:76:2a:e3: 99:c9:2d:06:80:ec:62:99:74:f0:52:98:05:d1:3b:5d:6d:28: 63:e7:d1:da:7f:d7:92:03:8f:c0:5a:6d:7a:a9:8a:a7:30:84: 40:15:59:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT63EQvDIamAKVDbElBPqupZTpugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA1MTIxODU2MDJaFw0yNjA1MTMxOTIyMDJaMDMxMTAvBgNV BAMTKEI5NTI4NzlDQjU2Mjk2NjlFQUFBQTI4Qzc1QTRGRDE1MTA4Mzg5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGQ0/g0UVOVQT/kf4ELWTJFLxc Qz1r0T4GNlyAUUbavye7NHgXRMGvecb9ZdqZn2MAcl6eki2XTsZlE3ENn1452juu w+lvLaJCgwCSvN915kfk7scCZQLUtuQIJciBfSapfa9l44535A8pgOBljgRUx3NR z7KI6tkXGDnw17qH7mGe0ExilsKLIteu4QvGgb6mRhzdZScA/hntFr1NSANOgTHB DY/8lDvbRTpg8YlaysZNaLbx0ZnCqM4oJxlimmeK/IhSRnrWSLvMIzgi1Zz7+6WH LcD7rXh6IIdcXuAifTkLm09sdWP+FcKbeo3fEuSWVKh1IMVYrr4lJVlsTdXTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuVKHnLVilmnqqqKMdaT9FRCDiQUwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhLU9J 3LAtRvnEhLba/K6YmRwkc9vRGzSP531Ql5BzlK/5CLlxzrkW2sYHlaXGdMYmhuRt wlSh1xTc4riH1P/qLkhzpNFiAmvFnLO/vRfG+c1cTJm/ZWcJrySDlnu2iWptTj8r EyiWSrQLmw8XbKr+ojUWAbivLEBBsCz4VkBT315DPGah2aARtMMgqck0lI13v3mV 7YMrPO1684OFls4fPqQUbzvEx91RLmwX91od/T/Yflk9ThpVnXy/J/q0Y4rC9xfH h4Uk9UTyutOLeJ9bLYo/L/F2KuOZyS0GgOximXTwUpgF0TtdbShj59Haf9eSA4/A Wm16qYqnMIRAFVkg -----END CERTIFICATE-----Generated at Wed May 13 04:41:25 2026 by rpki-client