$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: wRqrjoBmtUj4Ja8QfqiNSNemhC1fUYoAfy12jnC/Bss= Subject key identifier: AC:08:AD:53:D9:C2:6F:5F:CE:41:09:19:A5:37:A9:EE:CC:5F:9A:A5 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 3D64278DBE3ADBD4B63FC232D1C7AEC900A2C7E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: 4F Signing time: Wed 17 Jun 2026 04:53:41 +0000 Manifest this update: Wed 17 Jun 2026 04:48:41 +0000 Manifest next update: Thu 18 Jun 2026 07:21:41 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: 15O/gpJIj8LNCHWHCYdlUotxmVJ+bDidiu4U6RC/7l8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:64:27:8d:be:3a:db:d4:b6:3f:c2:32:d1:c7:ae:c9:00:a2:c7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Jun 17 04:48:41 2026 GMT Not After : Jun 18 07:21:41 2026 GMT Subject: CN=AC08AD53D9C26F5FCE410919A537A9EECC5F9AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:15:7a:b1:9c:c7:c9:92:70:54:3a:0f:91: b6:f7:f0:c9:d3:d5:3e:8f:b6:d4:b6:8f:c2:0b:38: 57:e7:59:c5:e0:44:dc:7d:a3:2c:7f:8c:2f:05:ef: f5:f1:cf:c3:cd:8e:5f:4f:de:54:ea:a8:f8:ea:f9: c7:d2:d5:0e:1e:1a:b8:bc:bf:22:60:98:e2:c6:30: 77:69:93:78:c8:d9:c1:e0:15:96:8b:36:41:ae:af: 07:e8:04:54:6d:07:5c:ad:10:d6:87:af:01:cd:73: 6e:4a:75:a6:29:36:2e:a7:24:1d:36:c6:46:44:0f: ca:0f:eb:49:d1:c4:23:1b:52:93:9e:b5:e1:49:ff: e9:6f:5b:41:05:b3:b4:b8:9c:0c:7f:31:dc:93:87: 07:5a:78:59:c4:6b:f4:97:cf:c1:61:14:5e:c1:56: 0b:cf:7f:b6:50:c4:55:30:e9:ef:c2:b7:d2:84:ff: 5f:be:62:f2:50:f4:6e:95:82:a5:76:ff:e5:06:1c: 33:f8:a2:24:e7:a1:80:cc:0a:fb:d3:cf:d3:7a:f9: 69:81:4e:64:f1:d5:1f:b2:ba:df:61:64:06:b8:14: 39:9c:74:8f:8d:ca:e9:f6:fb:4e:33:2a:a7:ed:ea: aa:27:e7:24:52:84:00:8d:35:7e:5c:f8:6c:f8:d8: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:AD:53:D9:C2:6F:5F:CE:41:09:19:A5:37:A9:EE:CC:5F:9A:A5 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f3:d6:ef:e7:50:26:f5:a1:2f:80:34:c0:20:64:cc:7c:95: 74:25:cf:12:cf:2e:21:14:9a:eb:14:d3:4a:df:72:62:95:f8: cc:49:76:fc:2b:0a:0e:8b:46:3b:24:75:6a:30:82:ac:25:91: b0:58:49:c6:8a:d1:03:e7:e4:4c:8a:16:91:61:38:90:92:3a: e8:84:2a:9d:fc:c5:ef:ff:66:4a:10:0d:a6:0d:09:3b:19:9a: 18:e0:1b:b5:0f:e3:c4:0a:9b:1e:eb:a6:d1:0b:0f:d9:fa:94: 78:13:ba:6e:5b:14:71:0d:ba:8f:92:57:d6:7f:8c:54:b1:7b: 33:3b:d8:34:de:c8:00:3c:40:ec:d6:0d:02:cc:fb:75:45:28: ad:02:3c:38:00:5d:e7:fa:5e:85:4d:85:d4:0d:fd:74:6e:a9: f4:f5:75:5c:f4:94:90:f2:9e:11:bb:91:66:01:f3:fb:b0:62: e6:25:da:f9:fa:0e:38:17:72:94:2a:2f:73:73:50:3f:e1:86: 2b:ef:f8:bc:b6:58:48:16:0a:9a:09:7f:37:6e:a6:54:7e:85: b5:7b:2e:2e:3e:65:9d:ca:d3:0d:a0:85:28:66:8c:55:66:08: bd:43:70:d7:34:1f:b2:f7:19:b1:e2:8a:36:17:8c:cd:4a:c6: d3:5a:3c:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPWQnjb4629S2P8Iy0ceuyQCix+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA2MTcwNDQ4NDFaFw0yNjA2MTgwNzIxNDFaMDMxMTAvBgNV BAMTKEFDMDhBRDUzRDlDMjZGNUZDRTQxMDkxOUE1MzdBOUVFQ0M1RjlBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RBV6sZzHyZJwVDoPkbb38MnT 1T6PttS2j8ILOFfnWcXgRNx9oyx/jC8F7/Xxz8PNjl9P3lTqqPjq+cfS1Q4eGri8 vyJgmOLGMHdpk3jI2cHgFZaLNkGurwfoBFRtB1ytENaHrwHNc25KdaYpNi6nJB02 xkZED8oP60nRxCMbUpOeteFJ/+lvW0EFs7S4nAx/MdyThwdaeFnEa/SXz8FhFF7B VgvPf7ZQxFUw6e/Ct9KE/1++YvJQ9G6VgqV2/+UGHDP4oiTnoYDMCvvTz9N6+WmB TmTx1R+yut9hZAa4FDmcdI+Nyun2+04zKqft6qon5yRShACNNX5c+Gz42BlLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrAitU9nCb1/OQQkZpTep7sxfmqUwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe89bv 51Am9aEvgDTAIGTMfJV0Jc8Szy4hFJrrFNNK33JilfjMSXb8KwoOi0Y7JHVqMIKs JZGwWEnGitED5+RMihaRYTiQkjrohCqd/MXv/2ZKEA2mDQk7GZoY4Bu1D+PECpse 66bRCw/Z+pR4E7puWxRxDbqPklfWf4xUsXszO9g03sgAPEDs1g0CzPt1RSitAjw4 AF3n+l6FTYXUDf10bqn09XVc9JSQ8p4Ru5FmAfP7sGLmJdr5+g44F3KUKi9zc1A/ 4YYr7/i8tlhIFgqaCX83bqZUfoW1ey4uPmWdytMNoIUoZoxVZgi9Q3DXNB+y9xmx 4oo2F4zNSsbTWjxb -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:20 2026 by rpki-client