$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: c7nvgQAy0YDOITZYnQf19ceSw7khM2meiItOXyHfky4= Subject key identifier: 89:58:4D:7C:EC:71:B8:2D:86:C1:2A:0F:48:4D:DF:E1:39:0B:C3:07 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 29088E6735299632344F209DDBDC60AE6FC99015 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: DB Signing time: Sat 18 Apr 2026 22:22:39 +0000 Manifest this update: Sat 18 Apr 2026 22:17:39 +0000 Manifest next update: Sun 19 Apr 2026 22:25:39 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: G4THPwRJDB3z4fuxCH6Wrr2gKTtvcWdCf9yOy6HHHIg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:08:8e:67:35:29:96:32:34:4f:20:9d:db:dc:60:ae:6f:c9:90:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Apr 18 22:17:39 2026 GMT Not After : Apr 19 22:25:39 2026 GMT Subject: CN=89584D7CEC71B82D86C12A0F484DDFE1390BC307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:60:9a:b4:13:88:1b:ae:b3:9c:f6:ce:ab: 7a:6b:51:4c:7c:c4:89:b3:f2:08:36:1f:7e:05:0c: 9d:8a:5f:e6:d0:d4:9d:a6:04:c3:dd:e6:b1:c1:2c: 2b:e5:57:a0:66:1b:03:6d:33:d7:e9:24:3f:7f:af: 18:d5:21:26:61:2d:d4:fe:9f:0b:df:70:13:72:22: 1e:da:88:3c:83:98:c2:d7:b3:14:54:ef:a3:b3:a9: 30:11:3a:7f:e7:34:5b:48:1a:15:ef:37:34:02:ca: 31:a6:5a:97:88:c3:f8:2a:13:9a:6b:f9:f9:06:d1: db:86:08:23:b5:a5:56:01:73:c0:00:2f:3a:bf:2d: 31:d8:ce:c9:e5:cb:1c:ac:23:45:f4:61:f6:a3:86: c6:fd:d0:f7:80:48:9a:66:02:27:5e:53:ae:89:28: fc:8d:39:ea:35:ad:6b:f6:17:2a:84:2e:ff:e4:e4: e1:27:08:e9:e6:92:3c:d8:ac:eb:16:a7:49:39:1c: 9b:28:50:d1:2a:fe:55:5c:ce:70:6c:54:f9:a8:a7: ec:e0:fe:ea:d6:f0:f0:55:79:fe:02:28:1f:8a:cc: bb:5f:0e:f8:1a:f8:28:84:55:c2:0c:d6:d6:54:e3: 11:c3:d5:19:4e:df:72:41:32:48:49:cb:56:9c:72: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:4D:7C:EC:71:B8:2D:86:C1:2A:0F:48:4D:DF:E1:39:0B:C3:07 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c4:3a:25:71:09:9c:d4:f5:c6:b0:21:26:ed:ef:11:25:e1: 57:33:60:ef:cb:c1:c0:7a:4d:9b:21:d2:d5:f4:fd:af:a4:69: fe:ab:25:91:43:f2:80:fd:da:99:48:d0:cd:cb:c8:eb:30:7e: 52:88:d1:b4:97:f3:93:e2:4d:8a:33:3a:c3:ba:ec:1e:83:58: a8:70:38:90:b3:16:53:a0:df:05:a5:06:9d:18:86:f9:cb:36: ab:3b:ce:cc:77:37:b3:97:23:30:38:f5:bf:e8:d8:f0:e7:0a: f8:39:c4:1e:80:bd:68:a9:31:57:fe:15:78:f9:64:c7:b5:e0: 84:f4:3b:40:ec:86:71:e4:47:af:14:44:c9:45:4f:f5:88:5b: 20:4f:50:18:24:6f:9d:bc:29:cc:3c:08:71:a3:67:5f:42:4b: f9:b7:7c:a9:74:ce:e4:0b:0f:40:a0:c9:ec:6c:88:5a:ce:ae: bc:49:92:c0:b1:3c:b7:20:2a:88:cb:74:de:d2:8a:2a:68:1a: 04:81:e2:b6:f2:bb:82:d1:9b:da:53:3e:c8:76:a0:45:48:c2: c2:1f:92:55:d2:d7:7c:22:8b:1c:75:48:bc:ed:85:59:96:3f: 80:dd:26:01:e6:d6:69:18:10:a3:9b:9e:68:d3:30:f9:3c:3a: d2:21:1f:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKQiOZzUpljI0TyCd29xgrm/JkBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjA0MTgyMjE3MzlaFw0yNjA0MTkyMjI1MzlaMDMxMTAvBgNV BAMTKDg5NTg0RDdDRUM3MUI4MkQ4NkMxMkEwRjQ4NERERkUxMzkwQkMzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYdmCatBOIG66znPbOq3prUUx8 xImz8gg2H34FDJ2KX+bQ1J2mBMPd5rHBLCvlV6BmGwNtM9fpJD9/rxjVISZhLdT+ nwvfcBNyIh7aiDyDmMLXsxRU76OzqTAROn/nNFtIGhXvNzQCyjGmWpeIw/gqE5pr +fkG0duGCCO1pVYBc8AALzq/LTHYzsnlyxysI0X0Yfajhsb90PeASJpmAideU66J KPyNOeo1rWv2FyqELv/k5OEnCOnmkjzYrOsWp0k5HJsoUNEq/lVcznBsVPmop+zg /urW8PBVef4CKB+KzLtfDvga+CiEVcIM1tZU4xHD1RlO33JBMkhJy1accn4nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiVhNfOxxuC2GwSoPSE3f4TkLwwcwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdxDol cQmc1PXGsCEm7e8RJeFXM2Dvy8HAek2bIdLV9P2vpGn+qyWRQ/KA/dqZSNDNy8jr MH5SiNG0l/OT4k2KMzrDuuweg1iocDiQsxZToN8FpQadGIb5yzarO87MdzezlyMw OPW/6Njw5wr4OcQegL1oqTFX/hV4+WTHteCE9DtA7IZx5EevFETJRU/1iFsgT1AY JG+dvCnMPAhxo2dfQkv5t3ypdM7kCw9AoMnsbIhazq68SZLAsTy3ICqIy3Te0ooq aBoEgeK28ruC0ZvaUz7IdqBFSMLCH5JV0td8IoscdUi87YVZlj+A3SYB5tZpGBCj m55o0zD5PDrSIR/V -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:59 2026 by rpki-client