$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: YZcGMNEUYY4y7Rp/JMPQJUPxhjRkNUnkYahpdlKHPxE= Subject key identifier: A3:D9:69:EC:8F:D0:85:EF:21:47:9B:97:04:A4:F1:6F:8C:44:A4:B8 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 1FFBAA396A5475F4329CC193C9149E4D928B9A0F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 0195 Signing time: Sat 13 Jun 2026 00:16:13 +0000 Manifest this update: Sat 13 Jun 2026 00:11:13 +0000 Manifest next update: Sun 14 Jun 2026 00:18:13 +0000 Files and hashes: 1: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: wse8IGi0LnfcVe6VnZlZJ5FMBhf0Ru+MUnFUwCd5WCQ=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 4: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 6: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 8: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fb:aa:39:6a:54:75:f4:32:9c:c1:93:c9:14:9e:4d:92:8b:9a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jun 13 00:11:13 2026 GMT Not After : Jun 14 00:18:13 2026 GMT Subject: CN=A3D969EC8FD085EF21479B9704A4F16F8C44A4B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:49:37:c8:0a:ba:f1:ef:d2:9d:17:ec:8b: 62:4b:09:f2:dc:f3:af:9d:7b:45:91:1c:63:6a:d1: 07:d1:db:43:4b:12:bb:93:e5:b1:c5:2d:ee:93:9f: 74:c1:70:ee:27:94:3f:12:5a:31:d9:64:d2:a5:d2: c7:96:db:e0:93:1b:2a:49:3b:01:4c:78:5a:6b:b2: bd:e3:be:21:df:f2:86:01:47:72:18:9e:75:37:70: b1:dc:11:28:a7:5f:9c:7d:95:b2:d1:bf:84:3a:bc: 31:84:a7:13:bb:1c:fd:ee:c8:5d:56:0f:69:ee:8f: b9:0b:2b:e6:66:6f:08:ee:0a:f1:2a:68:63:e1:c0: 7c:96:a7:2e:bd:c1:f9:4d:24:9b:78:11:84:90:bb: 90:38:c7:47:70:3d:5d:7d:f3:87:ef:61:e2:d1:83: 2b:5e:2a:1c:44:bd:7b:79:17:d1:57:07:4a:d6:09: ce:7e:35:f2:b8:23:33:0f:d9:71:12:40:af:8f:b7: 7b:f4:30:72:9b:2c:0b:20:e2:83:22:5b:6b:08:b3: 9a:32:54:da:bc:e5:47:43:3c:63:2c:d2:72:cb:64: ba:b2:a6:17:f2:3c:26:8a:00:eb:67:87:32:f4:f1: 8f:ac:15:e9:c1:d2:71:47:58:27:45:18:bd:32:b4: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:69:EC:8F:D0:85:EF:21:47:9B:97:04:A4:F1:6F:8C:44:A4:B8 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a4:6e:ef:2b:d2:71:f5:90:e4:bc:3a:45:09:c3:7b:da:ab: e2:04:4c:cc:b3:84:ae:68:6c:c0:3a:93:8b:e8:1c:0d:99:21: b2:b1:27:0f:bf:d2:02:08:50:3b:41:8d:b7:3b:3e:85:40:e5: d3:ba:40:15:ba:dd:a6:f2:58:ed:70:2b:04:fa:0c:56:ae:cc: a2:df:d2:8a:78:a6:7c:6e:17:28:a9:2a:60:4f:de:5a:c7:d1: 41:ed:22:9c:25:65:67:cf:f0:00:26:93:e3:0a:5a:3d:f7:21: b0:8b:b1:0b:c2:e0:b7:94:8f:d0:94:ec:fa:75:78:8f:8b:cf: ae:f1:aa:80:ca:4e:69:bf:82:7b:03:d5:8f:16:04:35:3e:78: cf:e5:c2:14:81:2b:ff:d8:7a:e3:35:cc:08:ae:fc:ac:91:54: ac:85:28:42:41:2f:52:a6:e2:b1:e5:04:bd:91:a8:c9:22:2b: 61:89:e0:a5:ec:9b:f1:5c:be:54:37:de:31:ce:44:55:39:50: 5b:f9:e4:77:78:1b:db:6e:1b:f0:18:e7:80:3b:19:46:cd:70: 97:48:f0:fc:99:21:20:3a:55:7c:e3:0e:01:4c:fd:11:70:2c: fa:bc:e1:ad:19:6a:85:b3:9e:1c:e5:59:55:99:b3:b8:0d:d0: bb:fe:44:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH/uqOWpUdfQynMGTyRSeTZKLmg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA2MTMwMDExMTNaFw0yNjA2MTQwMDE4MTNaMDMxMTAvBgNV BAMTKEEzRDk2OUVDOEZEMDg1RUYyMTQ3OUI5NzA0QTRGMTZGOEM0NEE0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRFEk3yAq68e/SnRfsi2JLCfLc 86+de0WRHGNq0QfR20NLEruT5bHFLe6Tn3TBcO4nlD8SWjHZZNKl0seW2+CTGypJ OwFMeFprsr3jviHf8oYBR3IYnnU3cLHcESinX5x9lbLRv4Q6vDGEpxO7HP3uyF1W D2nuj7kLK+ZmbwjuCvEqaGPhwHyWpy69wflNJJt4EYSQu5A4x0dwPV1984fvYeLR gyteKhxEvXt5F9FXB0rWCc5+NfK4IzMP2XESQK+Pt3v0MHKbLAsg4oMiW2sIs5oy VNq85UdDPGMs0nLLZLqyphfyPCaKAOtnhzL08Y+sFenB0nFHWCdFGL0ytGiVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo9lp7I/Qhe8hR5uXBKTxb4xEpLgwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVpG7v K9Jx9ZDkvDpFCcN72qviBEzMs4SuaGzAOpOL6BwNmSGysScPv9ICCFA7QY23Oz6F QOXTukAVut2m8ljtcCsE+gxWrsyi39KKeKZ8bhcoqSpgT95ax9FB7SKcJWVnz/AA JpPjClo99yGwi7ELwuC3lI/QlOz6dXiPi8+u8aqAyk5pv4J7A9WPFgQ1PnjP5cIU gSv/2HrjNcwIrvyskVSshShCQS9SpuKx5QS9kajJIithieCl7JvxXL5UN94xzkRV OVBb+eR3eBvbbhvwGOeAOxlGzXCXSPD8mSEgOlV84w4BTP0RcCz6vOGtGWqFs54c 5VlVmbO4DdC7/kTl -----END CERTIFICATE-----Generated at Sat Jun 13 08:42:49 2026 by rpki-client