$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: QIOxzwUK938nTjrZmPhQ/YPrtwBu5/LFUWKPZ92LorM= Subject key identifier: F6:5A:15:24:43:BF:A3:A0:43:ED:BC:8E:8A:46:DB:54:C0:B9:3E:EC Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 5F03AF32A09A559F2308D64112EA7EC7E452F21E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 0124 Signing time: Sat 13 Jun 2026 11:08:40 +0000 Manifest this update: Sat 13 Jun 2026 11:03:40 +0000 Manifest next update: Sun 14 Jun 2026 13:14:40 +0000 Files and hashes: 1: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) 2: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 3: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: +xOGn6u2MQ3bBxo6h4LuLadUXeOdSh0j8fqzUdlNJ2k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:03:af:32:a0:9a:55:9f:23:08:d6:41:12:ea:7e:c7:e4:52:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Jun 13 11:03:40 2026 GMT Not After : Jun 14 13:14:40 2026 GMT Subject: CN=F65A152443BFA3A043EDBC8E8A46DB54C0B93EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:7f:1a:88:43:97:8e:1b:c4:e1:82:c2:f0: 2a:e6:d6:91:5a:57:1c:f8:9a:59:72:04:24:a1:1c: 02:08:b8:30:3a:f0:89:6e:0f:a9:1e:af:01:a2:fb: b9:b3:b9:84:fd:c4:41:79:5e:91:42:96:f6:a0:d4: ba:55:f0:b8:42:fe:46:0e:eb:80:74:a1:ba:34:16: 30:26:b2:52:cc:13:fd:61:32:9d:80:6c:3e:28:5d: 9a:31:a5:ef:3c:5b:95:36:04:64:59:d7:df:68:31: 05:d4:81:93:e8:00:78:dc:2e:2e:ea:7a:0e:a8:fe: ed:51:c4:cc:4a:b0:89:fd:e4:96:94:67:b2:aa:2d: 04:aa:b3:dc:15:0d:fa:f4:97:49:49:bc:ed:2b:78: d5:c3:9b:e7:5c:c6:94:78:52:9f:c8:3b:45:ae:e2: 31:48:5b:6c:2d:a2:0b:ce:ff:01:81:74:ea:03:0e: e3:09:80:6c:4b:ac:a7:df:f9:dc:63:b4:1e:a3:f3: 8e:af:c8:38:f1:6e:13:31:ae:35:72:8b:e5:0c:31: 9c:62:9b:c2:67:27:20:1d:28:1b:7e:26:3b:3e:a2: eb:b8:50:a0:52:fd:d9:43:4e:ef:9d:4a:7d:57:78: 02:29:22:e0:5e:6a:11:56:b0:30:46:94:4b:3e:59: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5A:15:24:43:BF:A3:A0:43:ED:BC:8E:8A:46:DB:54:C0:B9:3E:EC X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:84:15:dc:65:36:3f:0f:da:df:ff:cc:ea:27:2e:34:85:76: 23:a1:14:0a:86:a1:ae:97:c6:07:db:c1:96:79:47:e5:aa:1b: 9e:24:f2:87:4e:85:ff:39:ec:4f:99:07:fe:78:63:db:dc:89: 7f:c9:13:14:f1:3d:5f:cf:1b:3a:d8:2b:23:ea:8f:ff:b4:5d: 69:93:57:5f:40:ea:a5:d2:2c:b6:d0:c3:24:81:e3:0d:96:6a: aa:81:d4:f3:fb:02:30:17:67:68:ea:fa:9b:04:c3:53:85:fa: c1:42:31:52:dd:22:c6:b3:d8:33:a1:ed:eb:d9:d9:35:bc:0b: 39:7c:00:fe:b1:52:7b:c0:aa:1f:0e:07:4b:70:e5:9f:52:c4: 01:3e:4d:fd:26:44:9a:b6:56:61:e8:26:ff:d1:db:d4:be:15: ca:6f:a8:e2:b3:e1:09:a1:e9:cd:24:2a:18:b6:96:74:bc:ac: c5:52:1c:a5:95:86:e2:70:27:18:83:90:13:fa:da:be:62:b9: ae:44:89:eb:1b:17:33:cc:27:65:1b:80:d0:61:c5:cf:fa:64: b8:70:2d:51:07:1f:4f:3d:da:c9:ec:f1:94:d4:3b:22:9b:89: a0:af:8a:ba:63:29:77:f6:c7:41:26:3c:09:2e:89:e1:85:41: 4e:85:2a:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXwOvMqCaVZ8jCNZBEup+x+RS8h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjA2MTMxMTAzNDBaFw0yNjA2MTQxMzE0NDBaMDMxMTAvBgNV BAMTKEY2NUExNTI0NDNCRkEzQTA0M0VEQkM4RThBNDZEQjU0QzBCOTNFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSH8aiEOXjhvE4YLC8Crm1pFa Vxz4mllyBCShHAIIuDA68IluD6kerwGi+7mzuYT9xEF5XpFClvag1LpV8LhC/kYO 64B0obo0FjAmslLME/1hMp2AbD4oXZoxpe88W5U2BGRZ199oMQXUgZPoAHjcLi7q eg6o/u1RxMxKsIn95JaUZ7KqLQSqs9wVDfr0l0lJvO0reNXDm+dcxpR4Up/IO0Wu 4jFIW2wtogvO/wGBdOoDDuMJgGxLrKff+dxjtB6j846vyDjxbhMxrjVyi+UMMZxi m8JnJyAdKBt+Jjs+ouu4UKBS/dlDTu+dSn1XeAIpIuBeahFWsDBGlEs+WY1jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9loVJEO/o6BD7byOikbbVMC5PuwwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDThBXc ZTY/D9rf/8zqJy40hXYjoRQKhqGul8YH28GWeUflqhueJPKHToX/OexPmQf+eGPb 3Il/yRMU8T1fzxs62Csj6o//tF1pk1dfQOql0iy20MMkgeMNlmqqgdTz+wIwF2do 6vqbBMNThfrBQjFS3SLGs9gzoe3r2dk1vAs5fAD+sVJ7wKofDgdLcOWfUsQBPk39 JkSatlZh6Cb/0dvUvhXKb6jis+EJoenNJCoYtpZ0vKzFUhyllYbicCcYg5AT+tq+ YrmuRInrGxczzCdlG4DQYcXP+mS4cC1RBx9PPdrJ7PGU1Dsim4mgr4q6Yyl39sdB JjwJLonhhUFOhSrx -----END CERTIFICATE-----Generated at Sat Jun 13 20:31:01 2026 by rpki-client