$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: JIVT8Uxqa6EFfy2Q0EhdSwJKTJKlIuDHAMzgMSf2eGs= Subject key identifier: DE:C2:51:A5:6D:90:B8:D2:10:8C:C7:20:73:E9:49:E0:E8:7D:A9:8E Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 191061F22B24CABFCB5E8BA41E9B7691DF98457F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: E6 Signing time: Sat 13 Jun 2026 16:11:42 +0000 Manifest this update: Sat 13 Jun 2026 16:06:42 +0000 Manifest next update: Sun 14 Jun 2026 16:22:42 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: P1urN7d75tKNWQ5jrvGLNIageK55XivbTn0vOvTf/Jo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:10:61:f2:2b:24:ca:bf:cb:5e:8b:a4:1e:9b:76:91:df:98:45:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jun 13 16:06:42 2026 GMT Not After : Jun 14 16:22:42 2026 GMT Subject: CN=DEC251A56D90B8D2108CC72073E949E0E87DA98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:04:c1:13:a4:74:5a:75:2a:35:dc:27:5a: 52:6a:e9:98:9a:8d:7c:d6:43:72:da:dd:44:44:20: bf:b0:12:89:f7:62:0c:0b:00:ea:c7:c8:26:00:0e: ca:c7:3a:18:9e:c4:67:ff:80:9c:f1:d9:cc:19:bd: 5c:79:7c:11:68:2a:68:8b:c1:2a:f0:28:61:ef:8e: 93:66:72:b4:ee:48:7f:70:e5:c3:34:a5:a4:fb:e9: 0a:c9:a6:89:39:5a:38:a6:32:37:1c:51:ff:78:1a: 83:8d:01:7b:57:eb:3f:09:96:eb:f6:ed:de:13:65: 90:2c:6a:ad:f8:11:4b:a9:72:56:fd:ad:be:be:74: 47:e5:ea:58:7a:91:12:7b:9d:7d:bf:ad:6e:fc:6b: f9:78:5b:83:f3:f5:61:4e:c9:0e:74:f6:b5:25:49: 70:70:9f:4d:31:1a:e9:8b:1f:42:4a:41:7c:61:2c: 03:fe:2f:66:78:39:c0:b6:f8:34:af:cc:c2:42:dd: ee:ee:b9:fa:de:1a:71:33:06:76:eb:28:e8:55:5c: 98:93:24:d8:97:35:d9:64:2d:a9:6f:3d:40:30:15: 1b:ee:1f:17:f6:c4:8e:f7:f0:e2:c6:19:60:c2:02: ac:f6:48:2d:1c:e2:56:80:87:fd:3e:9d:27:84:77: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:51:A5:6D:90:B8:D2:10:8C:C7:20:73:E9:49:E0:E8:7D:A9:8E X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:38:5e:1f:9e:bc:82:be:b5:d9:ab:76:ef:b5:60:f1:82:be: ea:26:bd:96:46:06:a3:02:5c:8e:4d:a3:cc:58:09:79:c1:85: f6:71:52:f5:5a:6b:4d:cc:41:e1:8c:e5:b5:39:46:c4:b6:37: 1e:1f:65:fa:15:f7:82:c5:2b:d0:88:04:bf:95:c4:f2:9a:1b: 94:98:89:47:82:c5:ae:95:94:16:83:4b:ef:5c:db:af:c2:ce: 05:88:da:46:d9:af:96:56:dd:55:c8:0f:10:26:bd:3d:a6:c3: 18:fd:fa:04:fd:f8:c2:df:7d:07:1a:aa:0f:53:1a:78:23:63: f0:62:f9:fb:da:7b:44:fc:26:3c:f7:31:f4:0a:93:e1:76:a1: 36:ff:82:c3:e0:e4:ad:7a:e4:57:c7:cf:d1:fa:02:ee:83:31: 39:90:cd:8f:dd:7c:6b:14:0c:40:4f:1d:95:5d:54:fb:c7:2e: 67:d4:14:a9:60:2f:66:d3:7e:3c:40:cc:74:0b:25:2d:cc:fd: 2e:8b:5b:20:d0:da:76:00:6b:1c:26:29:ed:44:63:61:0d:bd: 70:cd:82:f8:1a:ee:20:db:96:a1:63:9d:b0:fa:d3:a2:8d:12: 8d:64:07:ab:e5:19:88:f2:0c:fe:6d:08:0f:9f:ba:79:d7:fd: 37:45:99:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGRBh8iskyr/LXoukHpt2kd+YRX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA2MTMxNjA2NDJaFw0yNjA2MTQxNjIyNDJaMDMxMTAvBgNV BAMTKERFQzI1MUE1NkQ5MEI4RDIxMDhDQzcyMDczRTk0OUUwRTg3REE5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EATBE6R0WnUqNdwnWlJq6Zia jXzWQ3La3UREIL+wEon3YgwLAOrHyCYADsrHOhiexGf/gJzx2cwZvVx5fBFoKmiL wSrwKGHvjpNmcrTuSH9w5cM0paT76QrJpok5WjimMjccUf94GoONAXtX6z8Jluv2 7d4TZZAsaq34EUupclb9rb6+dEfl6lh6kRJ7nX2/rW78a/l4W4Pz9WFOyQ509rUl SXBwn00xGumLH0JKQXxhLAP+L2Z4OcC2+DSvzMJC3e7uufreGnEzBnbrKOhVXJiT JNiXNdlkLalvPUAwFRvuHxf2xI738OLGGWDCAqz2SC0c4laAh/0+nSeEd+71AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3sJRpW2QuNIQjMcgc+lJ4Oh9qY4wHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfOF4f nryCvrXZq3bvtWDxgr7qJr2WRgajAlyOTaPMWAl5wYX2cVL1WmtNzEHhjOW1OUbE tjceH2X6FfeCxSvQiAS/lcTymhuUmIlHgsWulZQWg0vvXNuvws4FiNpG2a+WVt1V yA8QJr09psMY/foE/fjC330HGqoPUxp4I2PwYvn72ntE/CY89zH0CpPhdqE2/4LD 4OSteuRXx8/R+gLugzE5kM2P3XxrFAxATx2VXVT7xy5n1BSpYC9m0348QMx0CyUt zP0ui1sg0Np2AGscJintRGNhDb1wzYL4Gu4g25ahY52w+tOijRKNZAer5RmI8gz+ bQgPn7p51/03RZm1 -----END CERTIFICATE-----Generated at Sat Jun 13 19:29:00 2026 by rpki-client