$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: L8aH0J3PGx34CF8U9309ab+Ig9BP8cvw0d1E759o/0Y= Subject key identifier: 2F:4C:60:72:88:44:64:C8:C9:2D:17:F3:E0:8E:80:F3:10:83:EF:12 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 4377413BF43FAF3B4D35A687972263AD81D3909B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 99 Signing time: Thu 16 Apr 2026 21:02:12 +0000 Manifest this update: Thu 16 Apr 2026 20:57:12 +0000 Manifest next update: Sat 18 Apr 2026 00:02:12 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: CJEgEaiMrFC5+5iGum/Nz4hJB6T0DCVrjwq2XHHRiVA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:77:41:3b:f4:3f:af:3b:4d:35:a6:87:97:22:63:ad:81:d3:90:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Apr 16 20:57:12 2026 GMT Not After : Apr 18 00:02:12 2026 GMT Subject: CN=2F4C6072884464C8C92D17F3E08E80F31083EF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:61:ae:1b:d5:e4:58:8a:ee:b9:10:db:b9:ff: fd:c5:cc:29:36:2a:7a:89:9b:67:76:ed:c1:c7:a4: 95:a1:b9:55:5d:c8:3a:13:a1:be:fb:18:00:a9:85: 54:54:98:e3:7c:df:2c:2a:51:54:20:df:d8:1a:98: 89:b8:11:6c:81:92:63:4c:ed:bf:72:e7:5f:b2:b9: 48:b4:31:f4:ef:2c:a6:21:23:91:36:90:4d:f0:3f: 5b:d9:97:e8:78:a8:38:bc:58:5e:2d:d6:79:19:5c: 6e:0d:9b:48:fb:9b:01:bb:d1:33:b9:8a:18:73:a8: 29:c9:82:de:35:e0:70:ee:8b:b8:1f:b4:05:86:48: 7e:50:e7:a0:1b:1a:79:1e:f5:37:67:38:70:22:72: 4e:22:6a:a1:1d:3a:fe:25:40:a1:23:ce:95:cd:bb: 86:a9:bb:85:1f:8f:9e:6c:63:18:49:d1:1a:77:52: 83:8f:5e:f1:94:a5:cb:f4:83:5f:6f:06:06:23:9f: d2:7b:3a:dd:a9:8c:ca:6d:99:55:e4:95:cc:ae:c5: 97:e9:83:21:67:64:f3:a0:da:52:7a:d1:e8:80:65: 95:9e:67:9c:99:af:70:ae:3e:24:63:bb:fe:65:2e: 53:8f:55:49:f8:f4:e3:f0:87:1c:03:ab:6b:c5:9d: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:60:72:88:44:64:C8:C9:2D:17:F3:E0:8E:80:F3:10:83:EF:12 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3e:05:a9:23:a5:4c:36:fd:26:ae:f5:cf:6c:2f:41:b0:fa: f9:e6:08:1d:af:35:c0:e7:91:0e:2e:d8:66:7d:93:6b:29:88: c9:b6:c8:fc:59:c6:ce:44:cc:59:a3:a7:c1:6d:dc:63:28:6e: 70:fb:b0:60:36:8f:6d:15:38:8a:f6:97:31:37:bc:3e:64:e8: 97:00:07:93:87:00:d8:eb:c2:94:ca:af:d8:5e:8e:9e:19:b6: 4e:b1:f0:d5:c7:6d:5d:7f:32:8e:90:8e:ff:3a:74:6b:34:73: 1e:b4:12:92:14:c6:3c:2c:de:90:2c:42:c7:93:a3:8f:f4:5d: cd:58:f7:ec:5e:60:54:f5:45:47:72:17:46:08:d2:1b:ec:55: 46:1e:85:88:58:60:f0:5a:81:41:0e:f4:01:55:f0:a2:07:04: 75:94:fd:4e:c9:dd:a0:bf:90:ed:55:25:64:4c:1f:23:e6:02: ea:77:6e:e9:ad:50:a1:58:bc:cb:89:fe:58:ac:14:d8:99:c0: d2:24:bd:d4:d6:21:86:aa:47:8c:ec:15:6d:c6:14:14:56:4a: c4:c4:bb:35:59:10:cd:27:2b:e2:d1:e5:6e:12:77:83:6f:58: ca:5e:fd:d0:e6:e2:31:f4:90:2e:9d:b5:76:46:cf:9a:69:ba: 4f:d0:da:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ3dBO/Q/rztNNaaHlyJjrYHTkJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA0MTYyMDU3MTJaFw0yNjA0MTgwMDAyMTJaMDMxMTAvBgNV BAMTKDJGNEM2MDcyODg0NDY0QzhDOTJEMTdGM0UwOEU4MEYzMTA4M0VGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYa4b1eRYiu65ENu5//3FzCk2 KnqJm2d27cHHpJWhuVVdyDoTob77GACphVRUmON83ywqUVQg39gamIm4EWyBkmNM 7b9y51+yuUi0MfTvLKYhI5E2kE3wP1vZl+h4qDi8WF4t1nkZXG4Nm0j7mwG70TO5 ihhzqCnJgt414HDui7gftAWGSH5Q56AbGnke9TdnOHAick4iaqEdOv4lQKEjzpXN u4apu4Ufj55sYxhJ0Rp3UoOPXvGUpcv0g19vBgYjn9J7Ot2pjMptmVXklcyuxZfp gyFnZPOg2lJ60eiAZZWeZ5yZr3CuPiRju/5lLlOPVUn49OPwhxwDq2vFnRnVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUL0xgcohEZMjJLRfz4I6A8xCD7xIwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSPgWp I6VMNv0mrvXPbC9BsPr55ggdrzXA55EOLthmfZNrKYjJtsj8WcbORMxZo6fBbdxj KG5w+7BgNo9tFTiK9pcxN7w+ZOiXAAeThwDY68KUyq/YXo6eGbZOsfDVx21dfzKO kI7/OnRrNHMetBKSFMY8LN6QLELHk6OP9F3NWPfsXmBU9UVHchdGCNIb7FVGHoWI WGDwWoFBDvQBVfCiBwR1lP1Oyd2gv5DtVSVkTB8j5gLqd27prVChWLzLif5YrBTY mcDSJL3U1iGGqkeM7BVtxhQUVkrExLs1WRDNJyvi0eVuEneDb1jKXv3Q5uIx9JAu nbV2Rs+aabpP0NrN -----END CERTIFICATE-----Generated at Fri Apr 17 14:19:13 2026 by rpki-client