$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: 3K+z7tebKiYHmP30YwOIPnWQEVPrmpn74JIxv6N7O3s= Subject key identifier: D7:88:C0:5F:20:C5:3D:65:74:64:93:63:1B:BB:24:C0:04:7C:00:E2 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 43C69EAAD681978C99DBFCE08903D49E3C57B5C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: A6 Signing time: Tue 12 May 2026 09:28:32 +0000 Manifest this update: Tue 12 May 2026 09:23:32 +0000 Manifest next update: Wed 13 May 2026 11:04:32 +0000 Files and hashes: 1: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: KWvA2EhebI4T5htPjySE8NjFm86mWi7SRnVLwjMoPJM=) 2: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 3: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 4: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c6:9e:aa:d6:81:97:8c:99:db:fc:e0:89:03:d4:9e:3c:57:b5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: May 12 09:23:32 2026 GMT Not After : May 13 11:04:32 2026 GMT Subject: CN=D788C05F20C53D65746493631BBB24C0047C00E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:cb:47:63:bc:d0:63:08:c4:57:76:b0:31: f6:eb:0a:a3:2c:9f:e7:d2:8a:ad:10:ea:5e:6e:ca: a3:80:a7:2a:d6:33:ce:77:95:53:57:c2:cb:31:b1: cc:ab:3b:59:5d:c2:45:52:3d:82:90:50:64:c0:30: 6c:3a:72:69:65:d3:b3:76:6e:cf:af:df:32:28:01: 9d:6a:27:61:9e:54:0a:37:9f:3d:66:87:9b:0a:d5: 91:20:c0:be:2b:3c:bd:6b:83:cc:86:76:17:28:43: 9a:c9:c5:81:87:9e:e3:c3:74:93:e9:f4:f7:9a:62: cd:a9:e1:23:46:60:cc:b7:53:ad:7d:2e:b8:f6:2b: e6:a0:d4:97:47:cb:c5:59:6c:71:19:87:6a:6b:1f: 67:8f:02:3c:8c:15:23:6a:47:ff:8e:5b:bc:b2:f4: 12:d9:57:6c:cd:f4:35:85:36:13:ba:ac:1b:74:ea: 1b:db:73:d4:b9:a9:8b:c2:0a:90:10:6a:62:f5:37: 70:b1:fd:2c:3f:a6:02:5e:7c:34:80:fc:e3:17:88: e1:8a:2b:5c:4b:1f:9f:e3:cf:f1:65:98:9d:54:e5: 83:53:2d:63:79:6d:2c:e7:14:c4:0b:cd:8a:ba:d2: 91:21:e3:a8:f9:97:91:f9:39:59:4b:ec:8a:d1:e0: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:88:C0:5F:20:C5:3D:65:74:64:93:63:1B:BB:24:C0:04:7C:00:E2 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:68:5c:41:28:f1:8f:09:55:e3:e4:3d:96:25:2c:ef:06: 81:e2:d3:03:37:9a:37:2e:95:4c:87:c0:d3:12:69:5f:78:7b: 91:17:26:f9:0b:ae:4a:7d:91:7f:19:11:0a:93:75:70:45:75: c5:db:a7:36:32:03:26:76:8e:3d:90:2e:44:46:c0:90:fc:0e: 54:c2:c8:38:7b:2e:4e:c7:19:d7:02:98:14:a7:7b:40:9c:ad: 44:18:71:55:81:82:1b:51:92:27:ba:e5:b3:4f:89:5d:ce:1f: 15:56:54:7d:9d:60:fb:22:06:bc:e0:b2:b9:75:4d:d3:e2:62: e8:07:ee:04:9a:c5:b5:b9:8a:c0:49:d0:75:c5:8d:72:11:b7: ce:87:62:68:ff:97:5b:82:2f:16:ad:5f:7c:00:59:49:d0:80: df:c7:67:a1:ad:d1:80:6d:a3:8c:a5:b4:c7:53:26:b5:67:ba: 14:15:5f:0c:7a:8b:6d:9a:0e:b1:3e:60:6c:4f:55:a0:a4:59: fd:22:aa:5f:d5:e3:71:bb:10:d0:34:76:c0:78:98:4f:ba:39: 53:8b:9b:83:b2:99:31:c0:a0:3b:49:39:13:6c:d0:69:1a:ab: 6b:47:32:04:0e:01:90:e4:29:9a:05:d2:a3:11:f6:b5:18:3d: eb:09:9c:dd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ8aeqtaBl4yZ2/zgiQPUnjxXtckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA1MTIwOTIzMzJaFw0yNjA1MTMxMTA0MzJaMDMxMTAvBgNV BAMTKEQ3ODhDMDVGMjBDNTNENjU3NDY0OTM2MzFCQkIyNEMwMDQ3QzAwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkMtHY7zQYwjEV3awMfbrCqMs n+fSiq0Q6l5uyqOApyrWM853lVNXwssxscyrO1ldwkVSPYKQUGTAMGw6cmll07N2 bs+v3zIoAZ1qJ2GeVAo3nz1mh5sK1ZEgwL4rPL1rg8yGdhcoQ5rJxYGHnuPDdJPp 9PeaYs2p4SNGYMy3U619Lrj2K+ag1JdHy8VZbHEZh2prH2ePAjyMFSNqR/+OW7yy 9BLZV2zN9DWFNhO6rBt06hvbc9S5qYvCCpAQamL1N3Cx/Sw/pgJefDSA/OMXiOGK K1xLH5/jz/FlmJ1U5YNTLWN5bSznFMQLzYq60pEh46j5l5H5OVlL7IrR4E79AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU14jAXyDFPWV0ZJNjG7skwAR8AOIwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIVWhc QSjxjwlV4+Q9liUs7waB4tMDN5o3LpVMh8DTEmlfeHuRFyb5C65KfZF/GREKk3Vw RXXF26c2MgMmdo49kC5ERsCQ/A5Uwsg4ey5OxxnXApgUp3tAnK1EGHFVgYIbUZIn uuWzT4ldzh8VVlR9nWD7Iga84LK5dU3T4mLoB+4EmsW1uYrASdB1xY1yEbfOh2Jo /5dbgi8WrV98AFlJ0IDfx2ehrdGAbaOMpbTHUya1Z7oUFV8Meottmg6xPmBsT1Wg pFn9Iqpf1eNxuxDQNHbAeJhPujlTi5uDspkxwKA7STkTbNBpGqtrRzIEDgGQ5Cma BdKjEfa1GD3rCZzd -----END CERTIFICATE-----Generated at Wed May 13 01:26:21 2026 by rpki-client