$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: WpjndEXdHio7CzUClnYE2nwvn1ODfB3fnQAqAJmnab0= Subject key identifier: 57:1E:75:A4:B9:5D:80:65:DB:66:63:61:2C:7B:7E:D7:40:2C:42:FC Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 7EB8CA655FE4DD8D25F0834A55856EA283AE4554 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 92 Signing time: Tue 12 May 2026 20:10:41 +0000 Manifest this update: Tue 12 May 2026 20:05:41 +0000 Manifest next update: Wed 13 May 2026 23:41:41 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: mHXbd1it2+A3ZXuP82225rjRqXOCfJcDnrgosS4qvvs=) 2: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (hash: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc=) 3: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b8:ca:65:5f:e4:dd:8d:25:f0:83:4a:55:85:6e:a2:83:ae:45:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: May 12 20:05:41 2026 GMT Not After : May 13 23:41:41 2026 GMT Subject: CN=571E75A4B95D8065DB6663612C7B7ED7402C42FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:aa:a9:bf:c9:9d:0b:f3:e6:d4:7a:8c:38: 0a:59:10:85:7b:b8:cf:04:24:3b:41:68:26:9b:18: 59:29:a4:64:3f:76:01:5b:cb:3b:0f:93:9d:29:67: a6:f6:af:d3:61:41:c6:b9:95:b6:a2:87:28:3b:69: 6d:ac:84:a5:db:e8:e7:68:67:f1:a2:d5:b2:1d:59: db:78:97:63:6b:90:18:cc:91:20:8f:7d:6e:78:d0: aa:0f:28:0b:c4:e9:89:fa:e1:53:ca:6f:35:0c:70: f4:a0:8e:ee:83:2d:48:5d:a9:f0:e7:20:97:65:32: d6:ee:68:20:f4:fc:60:d4:f6:8c:bd:de:ab:1c:42: 6e:c0:2b:2b:c0:3d:27:bd:14:b0:f8:12:8c:d7:ae: 0c:2d:12:a7:8c:e1:8b:77:8b:f6:d6:d7:b8:53:60: 0f:8d:3d:c8:60:c0:b9:f2:69:ff:56:27:07:38:e3: b7:e4:95:2f:4d:94:d0:c3:8c:a1:3e:5d:29:8b:20: e9:e0:dd:d1:75:50:84:28:cd:22:47:50:02:f3:9f: d0:2f:f2:10:9f:50:58:c1:21:50:9d:52:89:ac:6c: 07:d7:35:7d:fc:43:a6:1b:23:45:8f:73:c4:cd:43: 67:14:a9:1a:20:82:2d:32:e7:fc:5c:f0:72:a3:1d: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:75:A4:B9:5D:80:65:DB:66:63:61:2C:7B:7E:D7:40:2C:42:FC X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bd:49:7f:73:24:46:27:2a:f5:d0:cf:d1:d6:9d:fe:a8:c2: 92:48:6b:d3:e2:45:f8:b5:50:da:4d:04:b2:3e:d2:10:4b:ae: b7:77:57:a7:43:43:75:e7:b9:61:ae:97:8d:51:ae:57:a7:b7: 70:72:a8:7b:f4:71:33:8f:aa:6c:7d:ce:a4:3a:9a:41:9e:d9: 1b:ef:11:f1:58:c5:e2:d7:33:5e:ef:f4:cb:ac:2e:39:a9:e0: 0f:03:8c:26:7b:9e:dc:a1:59:20:7e:78:67:cb:61:a8:36:77: 01:14:8f:ab:49:17:91:37:9b:37:7b:12:0c:c2:62:08:1a:f6: e3:03:8f:55:6d:e2:20:27:5a:38:75:b1:71:a2:0c:32:07:8d: 02:88:c0:fd:f8:1c:23:25:04:19:a2:24:84:d3:0e:18:c4:4f: 64:f2:f1:26:8f:dc:a7:9f:e9:50:c7:ff:47:6e:c8:bc:4d:41: 81:b1:63:87:74:df:2a:3f:22:13:00:e1:f0:80:f7:4e:e8:ed: 05:b1:f2:46:8f:42:98:1f:9d:35:eb:1e:88:38:f7:c3:cc:69: bd:c1:bb:a6:db:e3:3d:26:a6:68:26:2c:9a:03:49:35:a3:2e: 4d:ed:61:34:a7:ef:01:56:07:21:46:49:e7:b3:e5:91:41:16: e3:a2:17:02 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfrjKZV/k3Y0l8INKVYVuooOuRVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA1MTIyMDA1NDFaFw0yNjA1MTMyMzQxNDFaMDMxMTAvBgNV BAMTKDU3MUU3NUE0Qjk1RDgwNjVEQjY2NjM2MTJDN0I3RUQ3NDAyQzQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvqqpv8mdC/Pm1HqMOApZEIV7 uM8EJDtBaCabGFkppGQ/dgFbyzsPk50pZ6b2r9NhQca5lbaihyg7aW2shKXb6Odo Z/Gi1bIdWdt4l2NrkBjMkSCPfW540KoPKAvE6Yn64VPKbzUMcPSgju6DLUhdqfDn IJdlMtbuaCD0/GDU9oy93qscQm7AKyvAPSe9FLD4EozXrgwtEqeM4Yt3i/bW17hT YA+NPchgwLnyaf9WJwc447fklS9NlNDDjKE+XSmLIOng3dF1UIQozSJHUALzn9Av 8hCfUFjBIVCdUomsbAfXNX38Q6YbI0WPc8TNQ2cUqRoggi0y5/xc8HKjHZGJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVx51pLldgGXbZmNhLHt+10AsQvwwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUvUl/ cyRGJyr10M/R1p3+qMKSSGvT4kX4tVDaTQSyPtIQS663d1enQ0N157lhrpeNUa5X p7dwcqh79HEzj6psfc6kOppBntkb7xHxWMXi1zNe7/TLrC45qeAPA4wme57coVkg fnhny2GoNncBFI+rSReRN5s3exIMwmIIGvbjA49VbeIgJ1o4dbFxogwyB40CiMD9 +BwjJQQZoiSE0w4YxE9k8vEmj9ynn+lQx/9Hbsi8TUGBsWOHdN8qPyITAOHwgPdO 6O0FsfJGj0KYH5016x6IOPfDzGm9wbum2+M9JqZoJiyaA0k1oy5N7WE0p+8BVgch Rknns+WRQRbjohcC -----END CERTIFICATE-----Generated at Wed May 13 06:53:06 2026 by rpki-client