$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: cl3fCeVOlqG0dJbrBzsbRtnDFtA8TPCn06+HA46IdVU= Subject key identifier: 00:BE:FB:E0:E1:C6:F9:61:52:A3:67:3F:9D:8D:68:4B:44:49:DD:63 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 3859AB01BCB2177327B58B5E911AE8D2EA19F318 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 02CB Signing time: Sat 13 Jun 2026 07:03:11 +0000 Manifest this update: Sat 13 Jun 2026 06:58:11 +0000 Manifest next update: Sun 14 Jun 2026 07:13:11 +0000 Files and hashes: 1: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: ygBBRr8MSyxH8KOMkujDN0hy9Tz6h2CN+L1l0TTiPlM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:59:ab:01:bc:b2:17:73:27:b5:8b:5e:91:1a:e8:d2:ea:19:f3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Jun 13 06:58:11 2026 GMT Not After : Jun 14 07:13:11 2026 GMT Subject: CN=00BEFBE0E1C6F96152A3673F9D8D684B4449DD63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:70:2d:5f:53:14:e4:e2:5c:16:19:59:75: 11:ba:cd:e9:7f:79:fb:d4:3a:c7:c4:17:0d:1c:c0: 1f:c5:3b:91:c7:8f:c0:9e:2d:7a:60:a5:1a:b5:49: 48:ff:d5:db:90:fb:10:6a:e6:c6:2f:af:b2:98:3d: 97:6f:58:36:67:dd:7b:fe:b8:70:52:94:ef:08:21: be:ac:2a:37:3d:54:75:ed:25:1b:c5:e4:38:04:74: 76:86:87:85:29:db:33:b9:3a:04:41:ad:bc:b0:62: 98:40:2d:9d:39:70:42:9c:54:c0:e1:7e:b3:72:65: 5a:f7:b5:90:bf:7b:25:d7:ba:58:97:98:57:39:88: 1d:09:ec:b8:b2:80:67:18:9c:13:67:c3:b2:d2:66: de:f4:5f:a4:77:44:61:1b:a7:27:43:53:9a:42:1f: 4c:24:32:a1:c3:6b:4d:37:97:af:4e:f7:b4:96:ec: 75:27:de:af:5d:d0:21:68:7f:5b:af:60:c6:a4:ec: f9:93:b6:d0:cd:b9:35:bb:75:c3:f0:80:5f:16:73: 47:4c:46:29:b1:37:e7:a5:da:c1:7b:4d:42:96:ac: 50:a4:b8:00:42:f8:4f:27:a9:47:03:18:80:14:21: 54:f7:87:8f:2f:8a:f6:07:73:5a:df:4b:1f:56:92: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:FB:E0:E1:C6:F9:61:52:A3:67:3F:9D:8D:68:4B:44:49:DD:63 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:75:ba:b4:1b:96:9f:e1:57:3e:55:5c:4a:4b:ac:30:dc:f5: cf:a2:98:63:0b:07:81:94:9e:64:3c:fa:2b:e3:cc:8f:23:c5: 6a:65:89:03:73:32:91:c0:ed:47:27:8b:b3:79:66:8b:c3:bf: f8:2e:a9:90:f6:45:48:ee:bb:39:38:b7:33:1d:be:44:aa:25: 8d:9e:8f:8f:10:d6:a2:1d:6e:a0:16:c4:29:47:a6:bd:6b:bf: ed:9b:b7:0b:f3:42:91:cf:63:6c:45:8f:0c:f4:3a:05:89:fa: 2b:30:b5:6d:25:a9:d0:4b:40:69:28:a5:d7:7f:1b:03:b9:46: ea:af:c8:3d:13:b4:fa:93:0c:d4:c7:e0:c0:41:c4:be:bb:b5: 89:10:4e:90:f3:67:3f:b6:0e:75:e3:e0:3d:da:73:51:65:04: db:8b:1d:f7:e4:c9:e3:63:52:c4:c6:36:50:71:55:d7:04:ae: d1:61:31:cd:cd:4a:08:9a:d1:1d:fa:05:18:79:a8:bf:0b:3e: 13:82:2b:25:89:04:87:83:3c:41:ab:3b:86:22:47:e1:4a:bf: 26:b1:f2:5c:9d:17:e4:de:a1:02:00:a1:d0:eb:26:54:e4:71: 46:62:3b:7a:b5:95:99:76:b5:49:f5:19:0b:41:cc:bb:72:75: 1f:e7:46:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOFmrAbyyF3MntYtekRro0uoZ8xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNjA2MTMwNjU4MTFaFw0yNjA2MTQwNzEzMTFaMDMxMTAvBgNV BAMTKDAwQkVGQkUwRTFDNkY5NjE1MkEzNjczRjlEOEQ2ODRCNDQ0OURENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwHAtX1MU5OJcFhlZdRG6zel/ efvUOsfEFw0cwB/FO5HHj8CeLXpgpRq1SUj/1duQ+xBq5sYvr7KYPZdvWDZn3Xv+ uHBSlO8IIb6sKjc9VHXtJRvF5DgEdHaGh4Up2zO5OgRBrbywYphALZ05cEKcVMDh frNyZVr3tZC/eyXXuliXmFc5iB0J7LiygGcYnBNnw7LSZt70X6R3RGEbpydDU5pC H0wkMqHDa003l69O97SW7HUn3q9d0CFof1uvYMak7PmTttDNuTW7dcPwgF8Wc0dM RimxN+el2sF7TUKWrFCkuABC+E8nqUcDGIAUIVT3h48vivYHc1rfSx9WkixbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAL774OHG+WFSo2c/nY1oS0RJ3WMwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5dbq0 G5af4Vc+VVxKS6ww3PXPophjCweBlJ5kPPor48yPI8VqZYkDczKRwO1HJ4uzeWaL w7/4LqmQ9kVI7rs5OLczHb5EqiWNno+PENaiHW6gFsQpR6a9a7/tm7cL80KRz2Ns RY8M9DoFiforMLVtJanQS0BpKKXXfxsDuUbqr8g9E7T6kwzUx+DAQcS+u7WJEE6Q 82c/tg514+A92nNRZQTbix335MnjY1LExjZQcVXXBK7RYTHNzUoImtEd+gUYeai/ Cz4TgisliQSHgzxBqzuGIkfhSr8msfJcnRfk3qECAKHQ6yZU5HFGYjt6tZWZdrVJ 9RkLQcy7cnUf50Z0 -----END CERTIFICATE-----Generated at Sat Jun 13 14:48:22 2026 by rpki-client