$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: 3Ck1rrC5mDkiUA+5Ar+whx9kg1F3SK+Q4uZvGvtNXFI= Subject key identifier: AA:FB:F4:52:72:00:2E:89:49:31:83:88:96:43:70:F7:8D:AE:12:71 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 403F44AB621407C0CC1A7DC742CC59B4752D1B9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 05E5 Signing time: Wed 17 Jun 2026 01:42:01 +0000 Manifest this update: Wed 17 Jun 2026 01:37:01 +0000 Manifest next update: Thu 18 Jun 2026 02:19:01 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 2: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 3: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 4: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 5: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 7: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: LgDJM4Ml7QPh9Kzq5pCjwR13bN5dwWeR9MUKmQr4AZY=) 8: 3138352e322e3136302e302f32332d3234203d3e203430363736.roa (hash: O3J2SAXtmg62ikqS6buGe0VGwNezma9salxJz05yb48=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 10: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 11: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 12: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 13: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3f:44:ab:62:14:07:c0:cc:1a:7d:c7:42:cc:59:b4:75:2d:1b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jun 17 01:37:01 2026 GMT Not After : Jun 18 02:19:01 2026 GMT Subject: CN=AAFBF45272002E8949318388964370F78DAE1271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:0f:d9:e3:ff:1d:e4:5f:bf:0a:d5:81:d8: 45:98:b9:38:e3:dc:d0:54:73:22:ff:fd:8d:60:fc: a8:fa:28:f1:d1:05:6c:9b:c4:4b:a5:3f:03:5d:cf: 42:3b:4a:7f:be:01:25:1c:c1:7b:a6:19:c4:42:e8: fc:40:58:78:07:5e:31:12:72:f8:a1:b8:17:4d:19: 19:50:a0:42:5a:e6:df:cf:e0:89:e0:85:1d:08:60: 9a:8e:fe:de:a0:cc:4f:cb:c9:2c:a4:39:61:51:e9: 48:0e:ca:64:b9:ea:b1:4e:3a:fd:38:f6:82:d8:c8: 31:09:93:14:32:9c:0d:85:c5:d7:cc:e0:52:88:4e: a5:b8:8d:d8:c9:74:96:84:d0:10:73:e4:b5:61:71: 88:ea:8e:57:f3:46:7c:0e:dd:5d:ec:50:3b:c9:6a: 62:59:9e:41:91:3d:e1:4c:1a:ac:93:71:c9:23:b9: ef:a8:07:bd:3a:ef:e4:de:4a:53:91:29:30:f3:19: 73:7b:cf:b2:3e:b9:2f:d5:cb:7e:7d:d9:20:df:73: ea:58:d7:f2:44:90:2b:e5:e8:de:a3:d3:16:d1:96: 41:32:6e:f6:54:53:1a:69:69:8c:8b:3a:34:20:65: 67:2c:25:55:6d:44:3f:cf:57:f8:ec:35:f9:14:0b: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FB:F4:52:72:00:2E:89:49:31:83:88:96:43:70:F7:8D:AE:12:71 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:b2:be:9d:1f:ae:7f:c9:67:96:e2:40:85:63:b4:16:b5: 38:f8:f4:c5:7d:91:fe:23:c1:b7:ef:79:e5:02:2b:24:64:cd: 36:c7:08:26:fe:f0:ce:09:c8:ac:c8:2c:77:b5:e0:95:50:d6: a4:4a:49:87:1a:ca:68:ee:9b:de:d2:fd:20:3e:9a:8c:7c:e6: 91:0b:42:29:f1:de:51:da:61:d2:8f:ec:bb:68:09:af:fa:e7: f9:98:2c:c4:14:24:a2:0d:ff:17:f7:dd:7c:5d:40:38:18:02: 9b:c2:39:d5:0f:5f:7c:2b:86:b4:9c:9b:1f:25:6e:bb:15:74: 96:e6:40:db:bf:83:01:e1:c1:81:f0:2d:13:16:ab:03:ec:85: 78:f2:30:77:0e:d7:6e:c2:39:2f:57:c3:ee:3e:22:bf:6e:0a: f5:32:4a:e2:86:4d:4d:62:7f:0b:cf:10:d2:74:19:0b:f9:21: fe:69:8a:51:8e:de:04:31:fc:6d:92:5f:dd:e9:f8:a3:08:6f: 2c:9b:0d:3f:2d:2e:d3:89:44:95:8a:c5:ef:17:7e:49:1a:89: d4:73:80:cd:9f:a1:da:f0:c7:93:79:59:81:f6:55:11:89:2f: d0:b7:84:1b:b1:d1:b7:f9:bd:e6:09:20:bf:ae:58:11:61:5a: a2:fe:17:f9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQD9Eq2IUB8DMGn3HQsxZtHUtG5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA2MTcwMTM3MDFaFw0yNjA2MTgwMjE5MDFaMDMxMTAvBgNV BAMTKEFBRkJGNDUyNzIwMDJFODk0OTMxODM4ODk2NDM3MEY3OERBRTEyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHA/Z4/8d5F+/CtWB2EWYuTjj 3NBUcyL//Y1g/Kj6KPHRBWybxEulPwNdz0I7Sn++ASUcwXumGcRC6PxAWHgHXjES cvihuBdNGRlQoEJa5t/P4InghR0IYJqO/t6gzE/LySykOWFR6UgOymS56rFOOv04 9oLYyDEJkxQynA2FxdfM4FKITqW4jdjJdJaE0BBz5LVhcYjqjlfzRnwO3V3sUDvJ amJZnkGRPeFMGqyTcckjue+oB7067+TeSlORKTDzGXN7z7I+uS/Vy3592SDfc+pY 1/JEkCvl6N6j0xbRlkEybvZUUxppaYyLOjQgZWcsJVVtRD/PV/jsNfkUC0npAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqvv0UnIALolJMYOIlkNw942uEnEwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjyyvp0frn/JZ5biQIVj tBa1OPj0xX2R/iPBt+955QIrJGTNNscIJv7wzgnIrMgsd7XglVDWpEpJhxrKaO6b 3tL9ID6ajHzmkQtCKfHeUdph0o/su2gJr/rn+ZgsxBQkog3/F/fdfF1AOBgCm8I5 1Q9ffCuGtJybHyVuuxV0luZA27+DAeHBgfAtExarA+yFePIwdw7XbsI5L1fD7j4i v24K9TJK4oZNTWJ/C88Q0nQZC/kh/mmKUY7eBDH8bZJf3en4owhvLJsNPy0u04lE lYrF7xd+SRqJ1HOAzZ+h2vDHk3lZgfZVEYkv0LeEG7HRt/m95gkgv65YEWFaov4X +Q== -----END CERTIFICATE-----Generated at Wed Jun 17 08:44:57 2026 by rpki-client