$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: 1I9GfgACXUC68j2EU+8u6tNSFw52J/KHUuUcI+X8Jz0= Subject key identifier: 6F:B2:68:3E:B9:D8:F9:0F:15:DC:F0:DF:69:88:50:3E:FA:75:72:CE Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 3257EB73EA2C1E18730409895C6DD7EA92608384 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 025B Signing time: Fri 17 Apr 2026 01:37:12 +0000 Manifest this update: Fri 17 Apr 2026 01:32:12 +0000 Manifest next update: Sat 18 Apr 2026 05:28:12 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: sGrh158rqw5mkZg5SjXgTdwy52r8DzUC3lv9JqxKm+8=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:eb:73:ea:2c:1e:18:73:04:09:89:5c:6d:d7:ea:92:60:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Apr 17 01:32:12 2026 GMT Not After : Apr 18 05:28:12 2026 GMT Subject: CN=6FB2683EB9D8F90F15DCF0DF6988503EFA7572CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:70:60:78:bf:46:0e:ad:eb:27:e1:15:07: 98:31:3a:19:3f:33:27:7f:57:77:7f:b7:76:44:75: ba:90:88:b5:ba:cb:9b:71:f0:e6:b1:35:71:17:a0: 09:0b:b3:a1:07:ab:9d:c6:92:97:19:ea:13:2e:0c: 86:a8:f2:70:bc:45:a2:3a:d3:37:e6:61:d0:31:1e: b3:61:34:13:30:b4:49:fe:62:cb:8f:ca:67:36:ad: ee:7c:a1:2d:8d:45:dd:e4:51:7d:b8:1c:c6:23:74: b9:f7:3c:29:5b:72:25:98:26:a5:77:45:6c:34:de: cf:ed:64:37:b5:f0:4f:16:26:7a:d4:43:f1:49:da: cf:b6:5b:e7:71:25:c1:03:5c:ef:63:a0:13:11:06: 68:99:e2:01:1e:1e:31:bb:91:ac:59:23:69:fa:13: fe:9b:02:03:14:a2:fb:b1:04:a4:59:0f:a4:fc:04: 23:15:f0:63:23:f1:eb:8d:a2:c0:d9:87:20:1f:5c: e5:ed:d3:3c:23:d8:10:37:4f:4c:61:06:77:0b:f8: f6:07:9e:21:54:fd:e2:b5:c2:1f:80:61:1e:77:b2: 34:3a:66:b9:86:42:a5:e6:78:62:b4:14:d0:67:28: 31:8b:c8:d2:b0:1f:1b:d6:60:28:77:e0:77:8f:70: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:68:3E:B9:D8:F9:0F:15:DC:F0:DF:69:88:50:3E:FA:75:72:CE X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:22:87:03:78:a2:69:89:b2:91:f4:a4:3b:77:2e:fa:40: ab:f7:93:c5:3e:8b:bd:41:9d:d1:ce:49:e9:51:45:60:a3:3f: 15:83:19:82:4d:51:b1:78:90:ea:8a:79:5e:63:8c:4a:05:ba: 7b:5b:4f:af:c0:42:ea:17:6b:c1:12:fe:92:f9:0b:f5:7c:82: 27:2a:29:99:f8:66:03:8b:01:98:87:13:2e:10:60:d5:a8:1a: b4:75:70:50:6f:dc:af:b1:df:ad:58:34:61:a1:6d:5b:31:e8: 2e:a4:6e:93:4c:88:1f:f4:c6:87:64:70:40:f3:b1:b6:fb:d4: 97:83:09:7c:9a:91:ea:69:bf:63:8b:ef:fa:de:eb:84:46:1d: 94:8e:03:2a:1c:8e:41:2b:4e:00:2e:88:a2:0d:e3:26:5f:a6: f8:a3:46:31:a7:5d:75:23:bf:a3:b7:8f:7f:23:29:6a:af:25: 38:0d:90:86:f0:57:8d:2d:ca:0a:48:2f:14:7a:57:c4:a8:ce: cc:37:01:c9:06:6a:6a:b4:29:29:6f:18:c2:0b:f4:32:c6:c1: e5:72:23:22:ac:16:0a:b6:cf:7a:23:da:ff:62:1d:82:ab:54: 40:a3:a1:0f:d2:e1:84:8e:4a:65:a1:9c:c4:2e:50:03:7f:ff: 74:18:f7:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMlfrc+osHhhzBAmJXG3X6pJgg4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA0MTcwMTMyMTJaFw0yNjA0MTgwNTI4MTJaMDMxMTAvBgNV BAMTKDZGQjI2ODNFQjlEOEY5MEYxNURDRjBERjY5ODg1MDNFRkE3NTcyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu83BgeL9GDq3rJ+EVB5gxOhk/ Myd/V3d/t3ZEdbqQiLW6y5tx8OaxNXEXoAkLs6EHq53GkpcZ6hMuDIao8nC8RaI6 0zfmYdAxHrNhNBMwtEn+YsuPymc2re58oS2NRd3kUX24HMYjdLn3PClbciWYJqV3 RWw03s/tZDe18E8WJnrUQ/FJ2s+2W+dxJcEDXO9joBMRBmiZ4gEeHjG7kaxZI2n6 E/6bAgMUovuxBKRZD6T8BCMV8GMj8euNosDZhyAfXOXt0zwj2BA3T0xhBncL+PYH niFU/eK1wh+AYR53sjQ6ZrmGQqXmeGK0FNBnKDGLyNKwHxvWYCh34HePcNjjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUb7JoPrnY+Q8V3PDfaYhQPvp1cs4wHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnySKH A3iiaYmykfSkO3cu+kCr95PFPou9QZ3RzknpUUVgoz8VgxmCTVGxeJDqinleY4xK Bbp7W0+vwELqF2vBEv6S+Qv1fIInKimZ+GYDiwGYhxMuEGDVqBq0dXBQb9yvsd+t WDRhoW1bMegupG6TTIgf9MaHZHBA87G2+9SXgwl8mpHqab9ji+/63uuERh2UjgMq HI5BK04ALoiiDeMmX6b4o0Yxp111I7+jt49/IylqryU4DZCG8FeNLcoKSC8UelfE qM7MNwHJBmpqtCkpbxjCC/QyxsHlciMirBYKts96I9r/Yh2Cq1RAo6EP0uGEjkpl oZzELlADf/90GPdj -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:23 2026 by rpki-client