$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: KsxmbG5Ay47kZWT15TY4KhAyIDxZX5IQFSi2IpbG4qQ= Subject key identifier: 14:E0:6E:F9:89:8B:86:72:72:72:EB:87:30:74:AB:E3:5C:9D:5F:81 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 4AB0271B674F332663196F50AB31CAB981D9009A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 02A7 Signing time: Sat 13 Jun 2026 13:48:11 +0000 Manifest this update: Sat 13 Jun 2026 13:43:11 +0000 Manifest next update: Sun 14 Jun 2026 17:36:11 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: baCE2xBARn5GLrl4flRxAP5H5n8nbmJFPuXBAzqQsQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b0:27:1b:67:4f:33:26:63:19:6f:50:ab:31:ca:b9:81:d9:00:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jun 13 13:43:11 2026 GMT Not After : Jun 14 17:36:11 2026 GMT Subject: CN=14E06EF9898B86727272EB873074ABE35C9D5F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:37:b9:f4:fd:67:36:d2:9f:25:e5:c9:ab: a1:cc:b8:8c:7a:55:c5:3b:b2:81:fd:a6:3c:30:59: 44:8b:de:39:db:1e:85:e4:e8:98:fa:28:82:58:5b: 38:26:f1:2b:6d:b9:14:99:7a:06:bd:a6:91:92:bf: b9:30:06:de:8c:4b:40:2a:2c:c6:84:05:fa:c8:e9: c9:24:db:d3:27:56:f6:66:bd:26:cc:b1:3a:3e:18: 7b:06:a8:db:03:88:9b:83:70:54:18:82:5c:59:5e: fb:ab:2b:90:e4:a7:d1:6a:ac:84:67:07:8f:db:63: be:36:b9:f0:37:a3:c2:04:48:e9:49:4b:77:5e:85: 0f:e7:71:12:15:3f:83:84:fe:3a:16:b1:84:92:aa: c6:62:ee:3c:5f:82:79:81:7a:ea:ad:a6:94:9e:8e: 18:0a:88:68:eb:74:8b:05:e2:ec:4d:99:89:63:3f: a1:0c:7e:83:dd:af:34:f1:84:66:e9:14:ac:78:fe: 1e:94:78:3c:7d:80:e0:15:38:f2:6f:52:ca:1e:2e: 81:21:e7:68:4d:b0:e2:bc:e0:dc:d2:ca:6b:7b:50: 33:7f:e8:2d:db:37:08:82:4a:5b:0d:d9:50:94:95: 45:66:82:c1:7f:76:8d:e1:30:23:9d:59:0a:1a:9f: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E0:6E:F9:89:8B:86:72:72:72:EB:87:30:74:AB:E3:5C:9D:5F:81 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:46:cb:95:27:f5:82:91:5e:15:bc:40:9f:f1:1a:e9:65:b6: 05:04:c8:d9:a7:87:f0:46:6c:0b:6e:9a:0e:fa:bc:f4:29:af: ea:53:51:4e:1e:95:fb:8a:96:e5:fd:50:ab:e4:49:4c:3c:59: 73:81:14:a4:1f:e2:58:36:6a:c2:77:29:14:ec:2f:80:90:e6: 89:eb:b8:e9:03:df:10:5e:05:b5:f4:d7:3b:0d:f0:e5:f6:4e: 46:b4:ee:80:8d:10:15:d8:e1:d1:e7:6e:35:b5:2f:33:68:b8: 90:6f:61:6f:25:7d:25:c9:32:bc:c9:a0:32:fa:b3:d9:27:ca: 42:93:72:e0:a3:db:2a:64:3b:9b:b8:ed:b4:10:bc:d1:5b:d5: 4d:22:b0:0f:eb:1f:96:43:17:1d:30:e3:f8:80:ad:1b:c9:cb: 81:a9:e4:55:41:40:2d:09:f3:0e:57:11:96:54:f7:79:70:d1: 9d:97:ba:42:e0:93:43:50:16:76:5a:91:18:f7:2c:51:84:2f: 09:8c:5b:01:8b:22:13:1c:9a:4a:3f:1a:61:18:33:0b:bd:0c: 2f:46:5e:d3:55:32:20:99:11:32:b2:3f:87:54:4a:1d:45:0a: c2:de:d6:52:0d:d7:19:a4:28:c4:e2:a9:e4:26:01:81:e1:e6: 6c:66:32:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSrAnG2dPMyZjGW9QqzHKuYHZAJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA2MTMxMzQzMTFaFw0yNjA2MTQxNzM2MTFaMDMxMTAvBgNV BAMTKDE0RTA2RUY5ODk4Qjg2NzI3MjcyRUI4NzMwNzRBQkUzNUM5RDVGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWje59P1nNtKfJeXJq6HMuIx6 VcU7soH9pjwwWUSL3jnbHoXk6Jj6KIJYWzgm8SttuRSZega9ppGSv7kwBt6MS0Aq LMaEBfrI6ckk29MnVvZmvSbMsTo+GHsGqNsDiJuDcFQYglxZXvurK5Dkp9FqrIRn B4/bY742ufA3o8IESOlJS3dehQ/ncRIVP4OE/joWsYSSqsZi7jxfgnmBeuqtppSe jhgKiGjrdIsF4uxNmYljP6EMfoPdrzTxhGbpFKx4/h6UeDx9gOAVOPJvUsoeLoEh 52hNsOK84NzSymt7UDN/6C3bNwiCSlsN2VCUlUVmgsF/do3hMCOdWQoan40dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFOBu+YmLhnJycuuHMHSr41ydX4EwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIRsuV J/WCkV4VvECf8RrpZbYFBMjZp4fwRmwLbpoO+rz0Ka/qU1FOHpX7ipbl/VCr5ElM PFlzgRSkH+JYNmrCdykU7C+AkOaJ67jpA98QXgW19Nc7DfDl9k5GtO6AjRAV2OHR 5241tS8zaLiQb2FvJX0lyTK8yaAy+rPZJ8pCk3Lgo9sqZDubuO20ELzRW9VNIrAP 6x+WQxcdMOP4gK0bycuBqeRVQUAtCfMOVxGWVPd5cNGdl7pC4JNDUBZ2WpEY9yxR hC8JjFsBiyITHJpKPxphGDMLvQwvRl7TVTIgmREysj+HVEodRQrC3tZSDdcZpCjE 4qnkJgGB4eZsZjK6 -----END CERTIFICATE-----Generated at Sun Jun 14 00:39:21 2026 by rpki-client