$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: 63KjHyKtxdDWdrinNjP1hYjftn9B6wM3YD2OtnP4b/w= Subject key identifier: D2:EE:46:BA:FE:89:37:49:18:45:46:61:8A:71:0E:70:AA:3F:DF:8C Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 7D96603D8F5F9E0AF7AB523BB1EA7A0810EFE10A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 0282 Signing time: Sat 13 Jun 2026 08:40:24 +0000 Manifest this update: Sat 13 Jun 2026 08:35:24 +0000 Manifest next update: Sun 14 Jun 2026 08:46:24 +0000 Files and hashes: 1: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=) 2: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=) 3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: RA7GYNlYKGkn30TDoCUpuZRS2nt6JdplfzELQKNQZHE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:96:60:3d:8f:5f:9e:0a:f7:ab:52:3b:b1:ea:7a:08:10:ef:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Jun 13 08:35:24 2026 GMT Not After : Jun 14 08:46:24 2026 GMT Subject: CN=D2EE46BAFE893749184546618A710E70AA3FDF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:25:12:1a:bb:34:9e:a4:fa:b9:e9:83:74: 3d:27:17:47:5b:20:dc:45:17:e9:ea:3e:b7:6d:f3: 38:ac:6a:79:ab:b8:98:eb:0f:50:0e:17:cc:49:2d: 00:78:20:bc:4e:0b:52:b2:f1:9d:1d:ac:98:20:c3: 81:07:30:be:17:61:55:9f:b7:01:01:95:4b:2e:07: 07:1e:dc:38:ec:7d:49:ea:d3:17:e6:10:23:15:62: 21:b1:64:9d:f7:29:da:93:49:b8:bf:45:0f:58:89: 85:0b:fd:af:55:41:47:b3:9e:fd:0c:78:16:00:6c: 13:32:ff:23:a6:9c:b7:37:01:24:c5:b4:5a:fa:22: 0f:52:b8:a6:05:64:27:86:c4:1b:e6:2f:28:cf:01: 02:f6:a8:e8:1f:ef:1a:31:71:eb:36:dd:da:c9:2b: 2f:dd:3b:7a:98:f6:9d:02:c6:79:e0:2f:75:c3:e4: a0:a7:8a:b1:7e:b4:94:89:47:27:23:77:1d:3f:77: f0:9a:37:6f:5b:93:b2:71:bd:81:cb:3f:59:ae:99: a8:d1:6b:f1:f9:51:13:61:c2:06:d5:6c:cd:d3:42: 98:8c:ef:54:95:e6:e5:51:0f:8a:e1:a1:7b:70:37: 43:90:24:fc:e4:ab:40:dc:16:d1:84:33:35:e6:de: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:46:BA:FE:89:37:49:18:45:46:61:8A:71:0E:70:AA:3F:DF:8C X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8e:c6:77:eb:42:70:1a:a1:0c:a7:4a:10:71:89:4e:01:6e: 86:86:02:ae:7e:cb:f0:aa:57:a4:ae:af:f5:3a:f6:23:d4:56: d2:5a:85:97:02:22:52:ef:c4:95:fd:d1:13:ae:cd:45:84:56: 85:da:76:c9:21:15:38:01:69:ae:b8:d7:af:96:68:af:02:0f: 39:ae:67:6e:cc:23:eb:cc:50:6c:80:14:7b:75:ad:2a:f1:aa: 73:5c:1f:aa:29:03:78:e0:bb:99:8a:f3:ee:c7:26:63:10:02: 02:99:6e:b4:a6:7c:6c:07:0f:64:e9:6d:43:2b:3d:0c:9f:3a: 82:89:1b:f8:11:76:ff:1a:46:0f:d3:f0:a1:cd:f7:75:7a:af: 3d:45:3c:c6:6c:ba:92:b5:c2:e5:cd:ab:b8:15:b7:ca:0d:7d: 2d:26:34:0e:ac:03:98:d3:5c:3e:06:46:a7:3e:7c:69:b6:d9: 9c:9e:87:ca:b4:e1:16:b4:6d:95:7b:39:32:d3:a4:87:67:f3: 76:ee:11:ee:64:76:ed:3d:ea:11:0a:70:21:cc:36:51:30:69: ac:32:03:25:21:91:45:ad:a5:55:84:16:c2:10:ad:d1:7c:0f: e7:14:b9:33:cb:d4:b8:07:7f:aa:e8:f0:39:d4:dd:bc:da:bb: e8:a1:e9:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfZZgPY9fngr3q1I7sep6CBDv4QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNjA2MTMwODM1MjRaFw0yNjA2MTQwODQ2MjRaMDMxMTAvBgNV BAMTKEQyRUU0NkJBRkU4OTM3NDkxODQ1NDY2MThBNzEwRTcwQUEzRkRGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgACUSGrs0nqT6uemDdD0nF0db INxFF+nqPrdt8zisanmruJjrD1AOF8xJLQB4ILxOC1Ky8Z0drJggw4EHML4XYVWf twEBlUsuBwce3DjsfUnq0xfmECMVYiGxZJ33KdqTSbi/RQ9YiYUL/a9VQUeznv0M eBYAbBMy/yOmnLc3ASTFtFr6Ig9SuKYFZCeGxBvmLyjPAQL2qOgf7xoxces23drJ Ky/dO3qY9p0CxnngL3XD5KCnirF+tJSJRycjdx0/d/CaN29bk7JxvYHLP1mumajR a/H5URNhwgbVbM3TQpiM71SV5uVRD4rhoXtwN0OQJPzkq0DcFtGEMzXm3sunAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0u5Guv6JN0kYRUZhinEOcKo/34wwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0jsZ3 60JwGqEMp0oQcYlOAW6GhgKufsvwqlekrq/1OvYj1FbSWoWXAiJS78SV/dETrs1F hFaF2nbJIRU4AWmuuNevlmivAg85rmduzCPrzFBsgBR7da0q8apzXB+qKQN44LuZ ivPuxyZjEAICmW60pnxsBw9k6W1DKz0MnzqCiRv4EXb/GkYP0/Chzfd1eq89RTzG bLqStcLlzau4FbfKDX0tJjQOrAOY01w+BkanPnxpttmcnofKtOEWtG2Vezky06SH Z/N27hHuZHbtPeoRCnAhzDZRMGmsMgMlIZFFraVVhBbCEK3RfA/nFLkzy9S4B3+q 6PA51N282rvooemm -----END CERTIFICATE-----Generated at Sat Jun 13 20:45:11 2026 by rpki-client