$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: TbFIobxrykHtriQvC2DNe8mW7aI78+ptozKps5SUzMI= Subject key identifier: A3:9B:D2:B2:D5:D0:C4:CC:38:94:DA:F4:88:65:E0:1B:20:77:36:A7 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 2E99782506A0830BB460D26C1CF84D6473BDC44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 05FF Signing time: Sat 13 Jun 2026 11:34:53 +0000 Manifest this update: Sat 13 Jun 2026 11:29:53 +0000 Manifest next update: Sun 14 Jun 2026 12:17:53 +0000 Files and hashes: 1: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 2: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 3: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 4: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (hash: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=) 5: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: W8fiW+v7ZBOGqcfPYNASEepfh9hGQqXmOGxY+K3ryK4=) 6: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 7: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 8: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 9: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 10: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 11: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 12: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 12:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:99:78:25:06:a0:83:0b:b4:60:d2:6c:1c:f8:4d:64:73:bd:c4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jun 13 11:29:53 2026 GMT Not After : Jun 14 12:17:53 2026 GMT Subject: CN=A39BD2B2D5D0C4CC3894DAF48865E01B207736A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:66:ca:b8:8b:38:cf:86:8a:77:d0:83:e6: 11:6f:ea:21:03:8a:3b:d8:cf:b2:b7:3b:ff:16:02: 3c:10:7d:f8:e3:a0:65:42:4e:6d:dc:83:89:60:01: f1:f0:51:37:5e:65:57:de:f3:52:29:b4:f4:ae:3e: 1d:0e:f0:84:71:26:26:9b:24:67:91:14:81:8e:9e: d6:16:4c:c0:cb:a8:62:ab:49:ef:d8:6d:05:0e:30: a6:79:2b:99:05:92:ad:7a:fa:61:c4:ac:dd:e4:a8: 0a:f6:7c:0a:8c:ce:f8:c7:f2:63:07:f5:1d:e0:5c: f8:1e:9a:98:6d:32:46:85:e7:84:51:e3:0e:e1:7c: a8:73:db:8d:75:fc:93:92:20:fb:fc:85:49:c5:8b: 27:7e:82:bb:64:f6:c6:ce:d7:d6:a8:b1:19:ff:ee: 29:4c:53:6e:48:8d:28:4c:a1:41:c5:3b:0e:aa:f9: 6d:1d:1f:84:22:f2:61:de:52:ec:14:bf:4b:fa:70: 66:6d:31:f7:90:ed:68:ee:e6:31:24:d0:b2:20:f8: b3:e4:a3:e7:79:41:60:ae:88:f2:cc:a5:ad:42:cd: 9a:2e:94:3e:a0:25:e4:b9:fe:19:9c:c6:f9:e4:27: 4b:e9:10:5a:2b:56:aa:a1:4a:92:01:0e:92:9e:cd: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:D2:B2:D5:D0:C4:CC:38:94:DA:F4:88:65:E0:1B:20:77:36:A7 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6e:2d:b0:e7:cc:83:f4:01:55:94:d2:12:e1:9d:6c:0d:51: 5f:41:6d:f9:47:fd:ae:eb:ab:66:cd:45:5b:e8:0b:b6:98:db: 56:3d:40:54:67:07:2b:96:0a:08:80:b9:4b:d2:19:68:58:15: e6:c1:58:e2:88:78:b4:3a:f7:cb:6e:c8:32:10:95:51:cc:00: b8:52:88:d5:6d:c2:60:71:40:5b:73:50:7d:8b:6b:6e:2c:e3: 2e:16:45:52:b9:b8:c7:8c:f0:8c:88:a5:eb:bd:cd:59:f5:a0: 26:8e:d9:33:88:2f:c6:3f:7c:dc:ed:4f:7c:87:26:93:6d:aa: b1:9e:33:b1:65:11:9c:e4:fa:4d:6d:0c:c4:98:23:6f:11:ae: a8:79:7b:61:07:9c:b2:e1:a9:5f:9a:1f:7b:55:40:e6:82:90: 1a:b9:f4:c9:6e:39:74:b3:cc:81:16:eb:d6:19:1c:63:21:6f: 16:98:e8:23:54:48:77:b1:dc:8a:9b:69:c0:d8:3d:dd:27:23: c8:2a:5e:aa:b6:a8:48:27:a7:7a:1f:ab:f6:83:13:ed:b7:e9: 52:a8:d3:aa:05:52:60:87:37:cd:b5:68:31:6f:fc:8f:da:39: 7d:9f:0b:95:10:05:84:d0:e8:ce:e2:50:ca:15:bc:6b:67:3e: 58:e3:eb:9f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULpl4JQaggwu0YNJsHPhNZHO9xEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA2MTMxMTI5NTNaFw0yNjA2MTQxMjE3NTNaMDMxMTAvBgNV BAMTKEEzOUJEMkIyRDVEMEM0Q0MzODk0REFGNDg4NjVFMDFCMjA3NzM2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuWbKuIs4z4aKd9CD5hFv6iED ijvYz7K3O/8WAjwQffjjoGVCTm3cg4lgAfHwUTdeZVfe81IptPSuPh0O8IRxJiab JGeRFIGOntYWTMDLqGKrSe/YbQUOMKZ5K5kFkq16+mHErN3kqAr2fAqMzvjH8mMH 9R3gXPgemphtMkaF54RR4w7hfKhz2411/JOSIPv8hUnFiyd+grtk9sbO19aosRn/ 7ilMU25IjShMoUHFOw6q+W0dH4Qi8mHeUuwUv0v6cGZtMfeQ7Wju5jEk0LIg+LPk o+d5QWCuiPLMpa1CzZoulD6gJeS5/hmcxvnkJ0vpEForVqqhSpIBDpKezZ5xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUo5vSstXQxMw4lNr0iGXgGyB3NqcwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj24tsOfMg/QBVZTSEuGd bA1RX0Ft+Uf9ruurZs1FW+gLtpjbVj1AVGcHK5YKCIC5S9IZaFgV5sFY4oh4tDr3 y27IMhCVUcwAuFKI1W3CYHFAW3NQfYtrbizjLhZFUrm4x4zwjIil673NWfWgJo7Z M4gvxj983O1PfIcmk22qsZ4zsWURnOT6TW0MxJgjbxGuqHl7YQecsuGpX5ofe1VA 5oKQGrn0yW45dLPMgRbr1hkcYyFvFpjoI1RId7HciptpwNg93ScjyCpeqraoSCen eh+r9oMT7bfpUqjTqgVSYIc3zbVoMW/8j9o5fZ8LlRAFhNDozuJQyhW8a2c+WOPr nw== -----END CERTIFICATE-----Generated at Sat Jun 13 23:24:27 2026 by rpki-client