$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: qfq9oB5aNZYxSz5SC+9OIbvPsu+Nd4Z6mfLu+8FSEU4= Subject key identifier: 73:5B:58:7A:50:A3:C1:54:8C:21:7D:BD:0F:0C:02:FC:0F:C0:DF:56 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 3F1218775B0D22B385E885FF6B89A18CF938BE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 020D Signing time: Fri 17 Apr 2026 07:29:42 +0000 Manifest this update: Fri 17 Apr 2026 07:24:42 +0000 Manifest next update: Sat 18 Apr 2026 08:01:42 +0000 Files and hashes: 1: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: AF9d8gTz/h/5sLAP7aUaKEuMp/rG9VGWbETlVO5ewZI=) 2: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 3: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 4: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 5: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 6: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) 7: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 8: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 10: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:12:18:77:5b:0d:22:b3:85:e8:85:ff:6b:89:a1:8c:f9:38:be:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Apr 17 07:24:42 2026 GMT Not After : Apr 18 08:01:42 2026 GMT Subject: CN=735B587A50A3C1548C217DBD0F0C02FC0FC0DF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:0b:40:6a:52:2a:bb:34:04:d9:98:27:d3: a8:35:b5:82:2b:40:4c:30:76:71:4b:a1:5d:4a:86: 8b:70:39:4c:70:e1:38:5a:f6:da:33:21:42:0c:8f: 5e:16:a6:03:f2:64:47:77:36:60:fd:56:ca:5c:35: 76:07:0a:3d:fd:5c:1e:90:4f:22:88:e7:1b:97:d4: 93:6b:90:00:78:19:a3:42:98:e2:68:97:8a:40:30: 68:1e:08:1a:a0:1d:eb:f6:69:b9:1e:ff:c7:d2:41: d3:74:35:46:cd:01:9b:3a:5a:a8:72:b9:1d:70:ae: 90:9c:19:c9:b2:6c:7a:e8:ad:3d:9f:39:f4:99:cc: f7:d6:1e:c8:89:16:8e:03:e8:7f:0c:be:83:3e:9c: 08:8e:d4:da:e8:4c:3b:09:c5:c9:bf:66:0a:71:14: 30:8f:39:ab:d8:40:3d:e1:06:32:38:a1:5d:84:16: 13:df:99:ff:9a:20:8c:a1:67:a2:b5:07:8a:f4:a7: af:1a:14:82:b0:17:ac:23:e3:9d:be:09:fb:0a:88: 6f:fa:5a:aa:10:4e:22:5f:23:78:b1:af:fd:17:b7: ce:57:51:79:43:7f:67:69:83:b5:cc:ec:3f:6d:fb: 5d:37:4a:17:b8:28:e3:1f:3a:f6:a6:4d:c9:ad:d9: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5B:58:7A:50:A3:C1:54:8C:21:7D:BD:0F:0C:02:FC:0F:C0:DF:56 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e1:6b:54:b1:3a:82:56:6f:00:3d:ea:36:d9:d1:bb:a8:7f: 78:5b:be:c6:9b:e8:17:03:81:ef:c9:f1:8c:00:08:39:e4:30: 1e:66:ac:8e:67:c2:26:b2:62:c1:e0:33:4e:1f:f2:9c:77:0e: fe:dd:95:45:73:ba:be:01:4d:81:72:39:c0:fc:8f:ca:c9:9c: 27:d9:30:09:0c:fd:5d:ce:a3:2e:6d:60:fd:74:bf:5b:21:7d: 9b:5b:d0:f7:05:2f:2a:ad:92:7c:24:23:57:58:77:3d:54:a7: 06:d2:af:c9:d1:1b:70:27:b7:da:e6:8e:da:c1:a8:00:6a:5c: 15:42:ef:a0:2c:46:66:fb:62:fd:26:eb:cc:e0:b1:b4:24:c5: f5:dc:11:a2:d1:c9:86:7c:86:5d:49:70:05:aa:0d:64:e9:24: cc:e9:67:36:3a:86:25:27:50:e5:78:22:26:48:1a:84:5d:06: e4:fa:49:7c:eb:4a:35:f1:fe:8a:26:d0:c2:ab:32:a8:fd:e4: d8:9c:88:e0:53:8f:cb:95:5f:01:24:b9:d5:47:a9:b2:2b:92: e7:87:1e:9a:2e:8d:64:f8:d4:5a:15:83:32:53:37:a1:39:85: 7f:63:aa:e1:c4:0e:1d:f7:54:18:f5:60:5f:fe:02:59:92:42: 56:8e:6c:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPxIYd1sNIrOF6IX/a4mhjPk4vkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA0MTcwNzI0NDJaFw0yNjA0MTgwODAxNDJaMDMxMTAvBgNV BAMTKDczNUI1ODdBNTBBM0MxNTQ4QzIxN0RCRDBGMEMwMkZDMEZDMERGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrQtAalIquzQE2Zgn06g1tYIr QEwwdnFLoV1KhotwOUxw4Tha9tozIUIMj14WpgPyZEd3NmD9VspcNXYHCj39XB6Q TyKI5xuX1JNrkAB4GaNCmOJol4pAMGgeCBqgHev2abke/8fSQdN0NUbNAZs6Wqhy uR1wrpCcGcmybHrorT2fOfSZzPfWHsiJFo4D6H8MvoM+nAiO1NroTDsJxcm/Zgpx FDCPOavYQD3hBjI4oV2EFhPfmf+aIIyhZ6K1B4r0p68aFIKwF6wj452+CfsKiG/6 WqoQTiJfI3ixr/0Xt85XUXlDf2dpg7XM7D9t+103She4KOMfOvamTcmt2QH5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc1tYelCjwVSMIX29DwwC/A/A31YwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOFrVLE6glZvAD3qNtnR u6h/eFu+xpvoFwOB78nxjAAIOeQwHmasjmfCJrJiweAzTh/ynHcO/t2VRXO6vgFN gXI5wPyPysmcJ9kwCQz9Xc6jLm1g/XS/WyF9m1vQ9wUvKq2SfCQjV1h3PVSnBtKv ydEbcCe32uaO2sGoAGpcFULvoCxGZvti/SbrzOCxtCTF9dwRotHJhnyGXUlwBaoN ZOkkzOlnNjqGJSdQ5XgiJkgahF0G5PpJfOtKNfH+iibQwqsyqP3k2JyI4FOPy5Vf ASS51UepsiuS54cemi6NZPjUWhWDMlM3oTmFf2Oq4cQOHfdUGPVgX/4CWZJCVo5s qA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:41:59 2026 by rpki-client