$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: ntD1XDr9pgI+Ej8UZW8E6U/QFFoh4ogsiBqIkqZPRNY= Subject key identifier: 95:9E:49:AE:A5:75:31:54:0A:AD:77:48:E1:2D:52:16:27:EC:82:62 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 4144EBAE73C639A5E18172CF687EEB28515551AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 0223 Signing time: Fri 12 Jun 2026 15:32:38 +0000 Manifest this update: Fri 12 Jun 2026 15:27:38 +0000 Manifest next update: Sat 13 Jun 2026 16:49:38 +0000 Files and hashes: 1: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=) 2: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: kBwEK18YCfMx0ouzbMGql3wfMadnMbnDgpYbNfw03+g=) 3: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) 4: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: p3HN3B2rv/+NxGhidBSDdRumaxXj7LbzGWJGeCzuS7g=) 5: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: aQqyppfq1G0dtgfce5qUTiEgqU4ipo9uY/suA4axV58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 16:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:44:eb:ae:73:c6:39:a5:e1:81:72:cf:68:7e:eb:28:51:55:51:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Jun 12 15:27:38 2026 GMT Not After : Jun 13 16:49:38 2026 GMT Subject: CN=959E49AEA57531540AAD7748E12D521627EC8262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:b5:7c:ee:a3:45:f5:65:4a:06:6a:46:63: ec:c0:bf:bb:f4:e7:e7:5f:db:2c:7b:db:3b:73:be: 69:6d:7b:01:bf:91:1a:c5:3b:f3:ef:7a:c0:8c:ae: ea:24:1f:de:5e:fa:a0:49:aa:83:0e:e8:a6:c6:a9: f1:1f:81:b5:38:3e:74:d7:10:38:43:ee:04:a0:76: 45:82:c8:bc:56:2b:f7:da:81:2b:62:8a:d7:e3:fc: 65:95:f3:ab:d7:d8:85:60:16:48:ed:df:1f:d5:2a: 94:b2:b1:f2:a1:d0:df:31:f6:1c:73:c0:d0:7b:41: 7f:de:64:de:66:08:ca:b7:48:91:4c:90:03:0c:6c: 86:2e:e8:7b:86:93:ae:8e:32:f8:a2:5c:3c:36:cd: a9:06:a7:8b:6c:2e:3e:9e:b4:7e:60:18:e5:86:4d: b8:d8:b2:ae:50:ef:43:cf:81:a6:bf:58:9d:3f:94: c8:25:20:41:ca:33:7d:6a:4a:6e:09:37:d4:e8:9b: 0a:07:ec:7a:76:50:95:bd:0f:4e:7e:d2:19:38:c5: d0:6a:6e:4b:43:8f:a6:95:65:7d:51:07:c5:b7:7f: dd:82:8d:15:48:f5:9c:b0:d0:ae:8c:65:85:f2:22: 26:e5:00:c5:0b:77:0f:cf:11:ea:d9:2e:2e:d0:ad: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:49:AE:A5:75:31:54:0A:AD:77:48:E1:2D:52:16:27:EC:82:62 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:07:06:56:63:e4:ce:c1:b8:8f:f0:2f:a5:49:2b:19:79:60: 0e:e9:ca:37:f7:9b:be:45:c3:26:73:b4:ef:bf:09:96:e1:41: 87:3b:1f:4b:48:ce:4c:01:08:0a:42:dc:1c:47:ed:dd:1d:6b: 9c:77:d9:5e:f2:44:19:ca:40:d1:f7:64:95:e0:a9:12:12:9e: 8f:7c:1a:50:81:f1:17:f2:4c:26:a5:62:1e:8e:26:1f:a1:ce: 94:00:eb:8e:2c:64:97:81:f4:76:05:d4:8d:c0:09:e2:33:09: 1a:d8:b5:9a:1c:81:22:61:7e:0b:37:86:29:73:0c:4a:79:d1: 92:b3:3d:1f:c4:a1:04:c1:36:73:e1:6f:30:c2:bd:1d:b0:af: 31:59:48:b5:a8:26:06:8f:7e:d3:d8:82:1c:b1:17:94:0a:ae: 48:26:54:7d:a6:e4:c3:15:41:5b:54:70:dd:99:4c:02:d0:d4: bc:ad:7c:b9:38:b1:e6:06:c7:97:e5:c4:5c:64:74:a3:21:19: 34:a4:0f:b0:a5:17:05:01:c8:c6:33:c9:2b:cc:a4:3c:4f:c5: dc:d5:28:6b:02:74:67:22:72:9a:d1:5b:13:b8:6d:09:bf:42: 27:1f:7e:5c:10:ee:70:35:ad:9c:06:0c:7e:57:e4:61:be:f3: 2d:83:74:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQUTrrnPGOaXhgXLPaH7rKFFVUa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjA2MTIxNTI3MzhaFw0yNjA2MTMxNjQ5MzhaMDMxMTAvBgNV BAMTKDk1OUU0OUFFQTU3NTMxNTQwQUFENzc0OEUxMkQ1MjE2MjdFQzgyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rLV87qNF9WVKBmpGY+zAv7v0 5+df2yx72ztzvmltewG/kRrFO/PvesCMruokH95e+qBJqoMO6KbGqfEfgbU4PnTX EDhD7gSgdkWCyLxWK/fagStiitfj/GWV86vX2IVgFkjt3x/VKpSysfKh0N8x9hxz wNB7QX/eZN5mCMq3SJFMkAMMbIYu6HuGk66OMviiXDw2zakGp4tsLj6etH5gGOWG TbjYsq5Q70PPgaa/WJ0/lMglIEHKM31qSm4JN9TomwoH7Hp2UJW9D05+0hk4xdBq bktDj6aVZX1RB8W3f92CjRVI9Zyw0K6MZYXyIiblAMULdw/PEerZLi7QrWFPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlZ5JrqV1MVQKrXdI4S1SFifsgmIwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQcGVmPkzsG4j/AvpUkr GXlgDunKN/ebvkXDJnO0778JluFBhzsfS0jOTAEICkLcHEft3R1rnHfZXvJEGcpA 0fdkleCpEhKej3waUIHxF/JMJqViHo4mH6HOlADrjixkl4H0dgXUjcAJ4jMJGti1 mhyBImF+CzeGKXMMSnnRkrM9H8ShBME2c+FvMMK9HbCvMVlItagmBo9+09iCHLEX lAquSCZUfabkwxVBW1Rw3ZlMAtDUvK18uTix5gbHl+XEXGR0oyEZNKQPsKUXBQHI xjPJK8ykPE/F3NUoawJ0ZyJymtFbE7htCb9CJx9+XBDucDWtnAYMflfkYb7zLYN0 Bg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:10:47 2026 by rpki-client