$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: JHpJdEH+R2omcbOeXRIFJw2ck93Z85JpGAhFixl2lxw= Subject key identifier: 61:18:FF:07:04:6E:70:C3:CD:47:AC:96:50:A0:C2:09:54:5E:9E:C0 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 01FF0D26C76C022A630B374A495D2E4254A6BF15 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: C0 Signing time: Fri 12 Jun 2026 20:10:36 +0000 Manifest this update: Fri 12 Jun 2026 20:05:36 +0000 Manifest next update: Sat 13 Jun 2026 20:51:36 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: EDm+e5nZrBee4G8X4sFAovvGw5ujSU7Hdu15MHpNnBU=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 20:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:0d:26:c7:6c:02:2a:63:0b:37:4a:49:5d:2e:42:54:a6:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jun 12 20:05:36 2026 GMT Not After : Jun 13 20:51:36 2026 GMT Subject: CN=6118FF07046E70C3CD47AC9650A0C209545E9EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:f3:da:60:fc:1a:06:09:61:b4:36:95:ee: 30:c8:dd:58:ea:f9:5a:c4:34:52:a9:44:d6:12:a4: 24:8d:6a:67:53:e5:a2:43:00:67:70:b0:2b:1b:c1: a1:e9:67:b2:d9:ae:5c:ab:c5:ba:2c:12:c3:5e:9a: be:fe:b8:89:ef:95:86:c7:7d:f8:c8:43:18:d3:31: 00:28:3c:12:89:6b:35:43:67:8e:c9:4e:6c:05:cc: df:d4:06:c5:9b:44:64:dc:75:4e:cd:bd:50:3b:bf: f9:c2:2c:89:e8:53:ad:b4:f0:14:7b:4a:0f:18:17: 5e:01:5e:cf:69:5a:91:b5:45:4d:ef:7f:a4:68:c2: 9f:59:ad:25:d0:1d:46:ac:96:35:c3:83:5c:44:88: 83:a6:bf:39:95:f2:de:44:41:ce:03:1b:a3:ad:43: 52:cb:dd:9d:38:f0:37:bf:f0:b8:de:a9:d2:22:ea: 22:75:08:08:37:5e:9e:6e:8b:e4:b7:c5:f8:6f:71: 10:c6:e9:be:26:9e:8a:50:5a:21:dd:29:88:a3:d7: 96:57:dd:a0:b9:16:e0:a8:6d:55:81:46:10:78:42: 86:26:f6:c7:38:10:87:75:15:37:19:e1:d4:3d:72: 70:ba:e1:89:f0:5c:d3:8a:2e:19:9f:0e:8c:99:3c: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:18:FF:07:04:6E:70:C3:CD:47:AC:96:50:A0:C2:09:54:5E:9E:C0 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b7:d5:c3:2c:c6:7a:54:d6:ee:a4:36:6a:33:19:61:71:d6: c5:33:71:78:42:e8:0b:83:34:e1:18:cc:6b:98:cd:4a:f1:35: c8:b2:e7:8b:72:9d:c4:db:12:3c:a4:f9:23:01:82:14:da:ba: ed:a3:0d:be:be:67:db:40:8e:aa:80:3c:cb:81:77:56:fc:e7: 25:ab:fb:c0:d8:84:94:da:04:ba:4f:47:2b:35:b6:a3:b7:4e: eb:d7:db:b8:70:be:cc:14:fb:a4:bc:a2:ca:1e:a6:76:35:73: 54:93:27:a6:04:a8:f2:6a:4c:8a:f1:8b:c7:a3:95:fe:2e:c7: d4:93:4c:48:98:31:21:35:d6:3f:d1:31:41:ee:c1:7e:6e:75: 7e:36:f6:d9:7e:cf:9a:f6:af:a3:2f:01:54:8b:c6:34:8d:7f: ff:de:1b:2c:d4:38:55:3b:06:c4:3e:f3:55:d2:22:74:d3:f1: 72:15:ab:c3:2f:67:84:7c:f2:c5:74:76:66:3a:88:27:7c:83: e8:49:77:f2:84:ad:4f:02:39:5e:3e:23:e3:b7:65:3a:68:b2: 6b:a6:16:a2:70:e9:15:0a:b4:f4:1b:53:79:f6:eb:de:b1:ef: 1f:f2:0d:66:f8:2d:55:f5:78:21:61:ad:84:d5:56:49:a6:5c: ea:94:0d:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAf8NJsdsAipjCzdKSV0uQlSmvxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA2MTIyMDA1MzZaFw0yNjA2MTMyMDUxMzZaMDMxMTAvBgNV BAMTKDYxMThGRjA3MDQ2RTcwQzNDRDQ3QUM5NjUwQTBDMjA5NTQ1RTlFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurfPaYPwaBglhtDaV7jDI3Vjq +VrENFKpRNYSpCSNamdT5aJDAGdwsCsbwaHpZ7LZrlyrxbosEsNemr7+uInvlYbH ffjIQxjTMQAoPBKJazVDZ47JTmwFzN/UBsWbRGTcdU7NvVA7v/nCLInoU6208BR7 Sg8YF14BXs9pWpG1RU3vf6Rowp9ZrSXQHUasljXDg1xEiIOmvzmV8t5EQc4DG6Ot Q1LL3Z048De/8LjeqdIi6iJ1CAg3Xp5ui+S3xfhvcRDG6b4mnopQWiHdKYij15ZX 3aC5FuCobVWBRhB4QoYm9sc4EId1FTcZ4dQ9cnC64YnwXNOKLhmfDoyZPHOvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYRj/BwRucMPNR6yWUKDCCVRensAwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvt9XD LMZ6VNbupDZqMxlhcdbFM3F4QugLgzThGMxrmM1K8TXIsueLcp3E2xI8pPkjAYIU 2rrtow2+vmfbQI6qgDzLgXdW/Oclq/vA2ISU2gS6T0crNbajt07r19u4cL7MFPuk vKLKHqZ2NXNUkyemBKjyakyK8YvHo5X+LsfUk0xImDEhNdY/0TFB7sF+bnV+NvbZ fs+a9q+jLwFUi8Y0jX//3hss1DhVOwbEPvNV0iJ00/FyFavDL2eEfPLFdHZmOogn fIPoSXfyhK1PAjlePiPjt2U6aLJrphaicOkVCrT0G1N59uvese8f8g1m+C1V9Xgh Ya2E1VZJplzqlA0h -----END CERTIFICATE-----Generated at Sat Jun 13 14:59:10 2026 by rpki-client