$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: +yEmv5/QTayi0kBdscoCTtu3LTj+CeDKUOuBT1jafsM= Subject key identifier: B4:6E:8E:0C:D7:96:91:39:6D:F3:BE:E2:B2:BB:14:81:1D:1A:A8:13 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 7AD8620E217DB6DCD96728C3A7AABB50F1A03F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 63 Signing time: Fri 12 Jun 2026 23:52:05 +0000 Manifest this update: Fri 12 Jun 2026 23:47:05 +0000 Manifest next update: Sun 14 Jun 2026 02:50:05 +0000 Files and hashes: 1: AS213900.asa (hash: vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=) 2: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 3: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 4: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 5: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: 8WHSb81UNPvLwI4wU9hhf1ZV1B/r5a6W25JqCAl13hk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d8:62:0e:21:7d:b6:dc:d9:67:28:c3:a7:aa:bb:50:f1:a0:3f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Jun 12 23:47:05 2026 GMT Not After : Jun 14 02:50:05 2026 GMT Subject: CN=B46E8E0CD79691396DF3BEE2B2BB14811D1AA813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:81:77:e4:91:1f:fe:d1:80:80:b5:43:96: 41:ef:d8:25:c1:d3:38:e1:37:c4:b9:2f:b5:5b:83: 07:0f:c5:08:7b:05:f7:a1:7b:fa:f4:08:26:e0:fb: 86:21:c5:c5:bc:4a:75:d4:75:66:bc:a1:d0:1d:d4: 1a:d4:10:73:de:09:29:e5:88:05:80:da:4f:03:65: 6a:a2:ca:0a:9f:0c:5d:3d:64:06:33:27:ca:77:96: d7:f8:d8:4f:44:6a:49:8e:af:7f:ee:a1:3e:10:19: ca:48:06:75:6a:26:3b:fb:de:40:a4:94:e9:90:16: 88:87:1c:b0:58:a6:28:76:e7:4b:5a:fb:32:d5:c4: 2c:1e:4c:bb:d1:27:a0:a6:75:35:00:09:ec:5c:09: 91:00:49:68:59:5f:b2:d4:bc:d8:d9:13:5a:8d:06: f0:3e:9d:0d:65:90:58:87:1f:e7:7e:3d:30:0a:f5: 98:a7:4a:e2:38:cb:2d:05:f9:93:68:52:c9:c8:85: 4e:f9:31:74:17:95:c5:5e:06:46:83:2b:30:f3:cd: 87:e4:00:af:9a:8a:94:af:1f:e7:b3:51:47:ac:8b: cf:05:e3:89:7a:cf:bd:9f:bf:8f:b2:e8:e1:10:61: 11:b9:3d:0f:b6:77:e9:5c:ed:0f:2f:5a:c1:59:f4: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:8E:0C:D7:96:91:39:6D:F3:BE:E2:B2:BB:14:81:1D:1A:A8:13 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5e:9d:7e:29:64:ac:c0:3b:42:92:69:37:0f:62:d3:74:fd: 99:a9:52:1b:f1:ba:96:11:78:41:76:33:2d:df:e0:c4:6b:d9: f4:07:09:66:1e:82:0a:09:9f:6a:f7:bb:ab:da:e1:17:c9:4a: d0:c3:8f:20:7a:42:bd:84:39:3b:d3:7e:cb:a2:ef:4c:5b:a6: 8a:9c:90:d7:7d:0e:9d:f6:af:f0:dc:a5:11:4c:bd:12:0b:93: 2f:16:dc:83:c5:01:91:be:32:8d:c1:77:45:17:b5:46:a4:9f: 32:b9:21:8e:c1:ea:86:80:42:95:73:84:e5:78:d0:34:e6:d8: ec:36:4b:02:5c:20:2a:6a:ec:f1:ea:04:7b:2b:cd:1f:70:19: 3b:b8:af:81:2e:d8:1a:3b:51:e9:39:fa:63:55:42:9e:23:7f: 49:fe:fd:fb:07:4c:e9:e4:f7:af:5c:3c:0c:f5:88:72:f3:f5: a1:a1:09:8b:4c:35:f1:a2:e1:3b:ca:4c:cc:1f:e0:e9:2a:e6: 34:38:a0:74:3c:8c:22:f4:9f:d3:1c:77:9d:f8:92:9e:76:99: 87:9c:d8:5b:7c:a6:9f:32:2f:61:d3:0c:0b:72:2a:e9:7f:35: 8c:00:09:73:64:c2:ee:d2:a6:7e:e0:a7:18:8b:76:d7:43:10: d8:07:8e:60 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUethiDiF9ttzZZyjDp6q7UPGgPwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA2MTIyMzQ3MDVaFw0yNjA2MTQwMjUwMDVaMDMxMTAvBgNV BAMTKEI0NkU4RTBDRDc5NjkxMzk2REYzQkVFMkIyQkIxNDgxMUQxQUE4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjYF35JEf/tGAgLVDlkHv2CXB 0zjhN8S5L7VbgwcPxQh7Bfehe/r0CCbg+4YhxcW8SnXUdWa8odAd1BrUEHPeCSnl iAWA2k8DZWqiygqfDF09ZAYzJ8p3ltf42E9EakmOr3/uoT4QGcpIBnVqJjv73kCk lOmQFoiHHLBYpih250ta+zLVxCweTLvRJ6CmdTUACexcCZEASWhZX7LUvNjZE1qN BvA+nQ1lkFiHH+d+PTAK9ZinSuI4yy0F+ZNoUsnIhU75MXQXlcVeBkaDKzDzzYfk AK+aipSvH+ezUUesi88F44l6z72fv4+y6OEQYRG5PQ+2d+lc7Q8vWsFZ9ObnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtG6ODNeWkTlt877isrsUgR0aqBMwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl6dfilkrMA7QpJpNw9i 03T9malSG/G6lhF4QXYzLd/gxGvZ9AcJZh6CCgmfave7q9rhF8lK0MOPIHpCvYQ5 O9N+y6LvTFumipyQ130Onfav8NylEUy9EguTLxbcg8UBkb4yjcF3RRe1RqSfMrkh jsHqhoBClXOE5XjQNObY7DZLAlwgKmrs8eoEeyvNH3AZO7ivgS7YGjtR6Tn6Y1VC niN/Sf79+wdM6eT3r1w8DPWIcvP1oaEJi0w18aLhO8pMzB/g6SrmNDigdDyMIvSf 0xx3nfiSnnaZh5zYW3ymnzIvYdMMC3Iq6X81jAAJc2TC7tKmfuCnGIt210MQ2AeO YA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:08:07 2026 by rpki-client