$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: DOdd8dNvhi++ZaAvf+h/ltkSP+4X8zx13P5mArDAHxA= Subject key identifier: 33:87:49:84:32:EE:44:FB:EE:96:F9:FB:CC:96:1F:B5:D1:1D:95:4E Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 321D09BA184AEB5949287C076430DF83E82FCC14 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 6F Signing time: Tue 12 May 2026 10:02:32 +0000 Manifest this update: Tue 12 May 2026 09:57:32 +0000 Manifest next update: Wed 13 May 2026 13:06:32 +0000 Files and hashes: 1: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 2: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: TUu6sIjqBJgRiXgR1u+Q4NSf91bYqyNcpd4rX2twgvg=) 3: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 4: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 5: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 6: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 7: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 8: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 9: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 04:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1d:09:ba:18:4a:eb:59:49:28:7c:07:64:30:df:83:e8:2f:cc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: May 12 09:57:32 2026 GMT Not After : May 13 13:06:32 2026 GMT Subject: CN=3387498432EE44FBEE96F9FBCC961FB5D11D954E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:31:7b:24:c1:9f:6c:1e:3e:46:95:bd:5c:da: 06:e7:f9:1b:92:f3:4f:88:ca:76:34:dc:90:44:6c: 62:64:95:79:95:db:2a:5c:fd:de:fa:ae:fb:3d:68: 41:55:75:5a:c2:44:1a:1a:ce:2d:e6:e4:2a:ef:5f: 3c:53:d2:f0:8c:1f:f0:18:de:90:fa:f1:27:49:ce: 84:92:58:a7:6d:87:c5:77:6d:e6:79:99:4a:bd:08: 3b:d6:0b:71:4d:52:b8:52:a0:9b:e3:b6:50:bb:c5: 9e:55:d2:24:70:de:55:a8:27:6c:c5:0c:24:9a:6b: 22:bb:90:72:db:8d:c4:d3:60:82:6b:18:cd:ed:03: b9:34:57:92:e7:90:ea:af:cb:92:35:cd:24:cb:6a: 29:d8:2e:70:de:b6:bb:4e:25:97:9a:0d:23:7c:f9: 54:c5:72:0c:07:a2:86:5b:e9:6b:e7:49:a5:12:7d: 44:51:0e:cc:15:68:f8:17:1b:b7:d4:23:1a:17:d8: 6e:cf:41:ce:87:86:49:81:af:26:3d:26:93:5d:aa: 4a:8e:23:0a:4c:e6:28:6d:59:03:21:d7:97:4a:94: ce:d2:29:e0:f5:b0:41:e3:df:66:84:07:58:16:e3: f5:5f:bb:c7:7d:b3:e3:07:25:e3:c6:91:3b:a5:da: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:87:49:84:32:EE:44:FB:EE:96:F9:FB:CC:96:1F:B5:D1:1D:95:4E X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6b:d4:c7:c2:d6:37:23:ef:e8:0a:f9:61:8d:34:a4:77:8c: ee:94:d2:a3:82:9e:98:01:d8:2c:56:28:95:14:8b:bd:de:a7: 8b:e0:01:3d:00:a5:5e:ef:be:88:31:68:ce:ec:f6:e4:15:7f: d3:7e:13:49:85:6b:7c:3f:4d:eb:98:f5:e7:00:e2:49:22:c8: ea:fb:d3:af:1d:b6:74:9e:b1:51:87:4c:48:72:a9:1b:f5:4b: 11:9c:5d:60:e1:a3:3d:f2:88:21:88:f8:a6:2b:5c:ac:fe:6b: 0d:35:55:5c:e5:5f:59:57:86:ed:1b:79:aa:f9:e5:f0:f6:72: ff:b6:25:c9:36:e0:bb:64:ae:f4:85:0f:f6:55:69:cb:9b:15: eb:4d:a6:71:54:26:53:01:ae:d5:2c:9c:a2:7a:b3:8c:9d:45: a6:65:e2:88:92:05:99:ae:91:c5:b6:c1:23:95:43:dd:1c:72: f1:a1:94:4f:59:49:7c:83:40:78:7c:0c:0c:4e:0d:a3:53:eb: af:bf:44:ab:e1:d3:a3:69:d7:cc:94:4a:c0:cc:51:fd:35:b2: 64:eb:24:3f:8e:12:48:6a:33:c1:a2:f7:d1:e3:79:5c:93:dc: 9d:8e:e1:a3:1a:c5:aa:ed:df:0b:79:21:a8:c4:3b:43:75:35: 8a:b5:a6:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMh0JuhhK61lJKHwHZDDfg+gvzBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA1MTIwOTU3MzJaFw0yNjA1MTMxMzA2MzJaMDMxMTAvBgNV BAMTKDMzODc0OTg0MzJFRTQ0RkJFRTk2RjlGQkNDOTYxRkI1RDExRDk1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyMXskwZ9sHj5Glb1c2gbn+RuS 80+IynY03JBEbGJklXmV2ypc/d76rvs9aEFVdVrCRBoazi3m5CrvXzxT0vCMH/AY 3pD68SdJzoSSWKdth8V3beZ5mUq9CDvWC3FNUrhSoJvjtlC7xZ5V0iRw3lWoJ2zF DCSaayK7kHLbjcTTYIJrGM3tA7k0V5LnkOqvy5I1zSTLainYLnDetrtOJZeaDSN8 +VTFcgwHooZb6WvnSaUSfURRDswVaPgXG7fUIxoX2G7PQc6HhkmBryY9JpNdqkqO IwpM5ihtWQMh15dKlM7SKeD1sEHj32aEB1gW4/Vfu8d9s+MHJePGkTul2tlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM4dJhDLuRPvulvn7zJYftdEdlU4wHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMa9TH wtY3I+/oCvlhjTSkd4zulNKjgp6YAdgsViiVFIu93qeL4AE9AKVe776IMWjO7Pbk FX/TfhNJhWt8P03rmPXnAOJJIsjq+9OvHbZ0nrFRh0xIcqkb9UsRnF1g4aM98ogh iPimK1ys/msNNVVc5V9ZV4btG3mq+eXw9nL/tiXJNuC7ZK70hQ/2VWnLmxXrTaZx VCZTAa7VLJyierOMnUWmZeKIkgWZrpHFtsEjlUPdHHLxoZRPWUl8g0B4fAwMTg2j U+uvv0Sr4dOjadfMlErAzFH9NbJk6yQ/jhJIajPBovfR43lck9ydjuGjGsWq7d8L eSGoxDtDdTWKtaaP -----END CERTIFICATE-----Generated at Tue May 12 22:07:38 2026 by rpki-client