$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: 11t+XLwBdbSKSJchz9oKvYc0jmL99ZF74vuK7inTzCk= Subject key identifier: 5B:4A:A3:45:E7:42:AA:B1:7F:BE:77:DA:1A:8A:B5:4A:C8:E2:A3:AE Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 6B413F91E57F53F09A99FA86312938F6CC16B7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0591 Signing time: Thu 16 Apr 2026 15:19:42 +0000 Manifest this update: Thu 16 Apr 2026 15:14:42 +0000 Manifest next update: Fri 17 Apr 2026 16:14:42 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 2: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 3: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: h62Oynpjb6E0ukUNrcUTqktA8ye8rzLFA/Hr2+PmTFg=) 4: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 6: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 7: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 8: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 9: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 10: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 11: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 12: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 13: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 14: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:41:3f:91:e5:7f:53:f0:9a:99:fa:86:31:29:38:f6:cc:16:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Apr 16 15:14:42 2026 GMT Not After : Apr 17 16:14:42 2026 GMT Subject: CN=5B4AA345E742AAB17FBE77DA1A8AB54AC8E2A3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:d0:fe:f3:06:54:38:a4:22:d2:f6:9b:ee: 4b:e6:91:57:a9:67:cb:64:f8:56:ba:61:da:f8:f0: 6f:73:9a:34:13:99:2a:9d:c1:bc:32:b7:f7:39:56: 24:49:a3:2e:3b:b4:bf:0b:a2:3b:dd:d8:a7:53:b8: 25:bf:f9:67:0b:82:3a:e0:59:c4:04:16:ae:b3:c9: 25:89:d3:76:81:53:9b:8f:af:e9:f6:d4:a6:e5:e4: e1:8a:22:cb:c2:b6:ab:df:0a:3a:ac:26:45:2b:08: 5e:23:b9:a1:93:df:4c:39:67:01:31:90:d1:05:81: 9a:69:93:63:c4:e7:67:f3:8a:ae:df:3c:95:f7:8d: 62:97:fb:c8:58:91:e2:c5:45:fd:8f:b9:cf:5e:5c: c1:51:08:f7:a9:ea:a2:c9:b3:e9:0e:f0:20:2f:02: e6:61:36:ac:5e:4a:0a:c2:bd:d7:cf:1d:aa:61:b2: 96:e8:f3:c9:cb:ff:52:96:ea:7f:4c:78:b3:16:12: c4:b4:d9:78:96:eb:89:6f:31:ee:a8:f7:b4:c0:0c: 11:bb:05:76:bd:d9:37:2b:43:50:30:ef:87:95:cf: 3b:04:9a:e8:d1:d2:d7:03:47:bc:8b:ed:6d:4a:49: 5f:11:f6:68:cc:e6:d6:7a:19:c9:e1:1d:32:7e:79: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4A:A3:45:E7:42:AA:B1:7F:BE:77:DA:1A:8A:B5:4A:C8:E2:A3:AE X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d4:04:d8:82:b0:81:47:c8:32:67:e2:26:dd:5e:7b:03:4d: 5b:7e:6d:26:1e:0c:3e:c4:9d:ba:80:60:52:61:14:66:8c:3c: 25:0b:78:05:60:5b:e3:2c:36:b0:3e:59:90:1e:d6:06:c2:93: 1d:a4:50:97:e8:55:ae:29:b5:66:84:eb:35:24:20:11:4b:7a: ff:0b:82:2e:6d:93:e1:51:b6:64:b4:43:12:14:52:5b:fc:84: ab:c6:c9:02:cf:e7:dd:6d:ca:83:82:b2:3c:c2:a4:1a:7e:97: 66:55:47:88:dc:d5:f0:8b:b3:f2:8a:01:c2:45:fe:51:4b:34: b5:f6:5f:54:60:8c:7b:31:62:90:1a:4e:28:a8:95:46:04:55: 0a:56:c7:8a:85:ff:dc:a9:e5:5a:55:1d:0a:bf:30:7c:36:39: 4f:03:b8:4b:d5:ee:34:72:47:d6:ff:0d:dd:ce:7a:04:88:9c: 00:a9:2a:48:21:03:51:4b:76:9d:05:9b:9a:72:3e:be:91:d1: 76:ad:83:76:97:31:c6:ab:75:c1:e4:3a:5b:68:f8:6d:75:43: 1a:0c:fc:68:ed:26:69:e7:b8:e9:da:c9:e7:65:42:34:4d:13: 01:71:46:2f:d7:a0:76:35:b3:47:c8:69:b0:3e:b0:db:d4:d4: e2:af:70:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa0E/keV/U/CamfqGMSk49swWt6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA0MTYxNTE0NDJaFw0yNjA0MTcxNjE0NDJaMDMxMTAvBgNV BAMTKDVCNEFBMzQ1RTc0MkFBQjE3RkJFNzdEQTFBOEFCNTRBQzhFMkEzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMl9D+8wZUOKQi0vab7kvmkVep Z8tk+Fa6Ydr48G9zmjQTmSqdwbwyt/c5ViRJoy47tL8Lojvd2KdTuCW/+WcLgjrg WcQEFq6zySWJ03aBU5uPr+n21Kbl5OGKIsvCtqvfCjqsJkUrCF4juaGT30w5ZwEx kNEFgZppk2PE52fziq7fPJX3jWKX+8hYkeLFRf2Puc9eXMFRCPep6qLJs+kO8CAv AuZhNqxeSgrCvdfPHaphspbo88nL/1KW6n9MeLMWEsS02XiW64lvMe6o97TADBG7 BXa92TcrQ1Aw74eVzzsEmujR0tcDR7yL7W1KSV8R9mjM5tZ6GcnhHTJ+eUIVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW0qjRedCqrF/vnfaGoq1Ssjio64wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNQE2IKwgUfIMmfiJt1e ewNNW35tJh4MPsSduoBgUmEUZow8JQt4BWBb4yw2sD5ZkB7WBsKTHaRQl+hVrim1 ZoTrNSQgEUt6/wuCLm2T4VG2ZLRDEhRSW/yEq8bJAs/n3W3Kg4KyPMKkGn6XZlVH iNzV8Iuz8ooBwkX+UUs0tfZfVGCMezFikBpOKKiVRgRVClbHioX/3KnlWlUdCr8w fDY5TwO4S9XuNHJH1v8N3c56BIicAKkqSCEDUUt2nQWbmnI+vpHRdq2Ddpcxxqt1 weQ6W2j4bXVDGgz8aO0maee46drJ52VCNE0TAXFGL9egdjWzR8hpsD6w29TU4q9w qg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:13:12 2026 by rpki-client