$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft (raw, json) Hash identifier: cnxuxaiFuEVQWeDseWuamN9/iJynJXMve9q4A/7tj8c= Subject key identifier: C1:94:8A:5B:75:DA:36:B5:E8:31:BF:AA:43:52:63:3F:98:AE:56:B3 Authority key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 Certificate issuer: /CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Certificate serial: 3E33DA669C9B51D94105E58B067907CB7B41A5EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft Manifest number: 67 Signing time: Sat 13 Jun 2026 12:31:42 +0000 Manifest this update: Sat 13 Jun 2026 12:26:42 +0000 Manifest next update: Mon 15 Jun 2026 01:35:42 +0000 Files and hashes: 1: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl (hash: MGPbD6DZiQc1a9OTQ8xYSMYhH1B1ceq36AfzWL8W/ZY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:33:da:66:9c:9b:51:d9:41:05:e5:8b:06:79:07:cb:7b:41:a5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Validity Not Before: Jun 13 12:26:42 2026 GMT Not After : Jun 15 01:35:42 2026 GMT Subject: CN=C1948A5B75DA36B5E831BFAA4352633F98AE56B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:c1:0c:7f:05:32:f2:6c:9b:57:95:e2:b9: 8b:ed:e4:1b:b6:64:d1:c5:fd:42:f8:6f:b5:6e:c3: 20:ca:e5:b4:b9:a9:88:3f:6f:1e:ef:2d:54:e6:b9: 96:c5:a8:52:00:0c:8e:fc:80:54:be:2c:d0:b5:67: e8:6b:4f:98:36:1f:5b:25:c4:f6:24:83:5e:bd:62: d2:6c:a8:63:ab:6e:cb:c5:ab:38:ea:87:4c:b6:83: b7:85:58:e2:2c:e0:cc:84:35:08:99:6a:45:80:f3: 92:0b:dd:fa:73:e6:3d:fb:38:4a:35:8c:9c:5e:32: 10:77:e3:56:fa:58:c7:92:4d:9f:f5:ff:1f:ff:39: 3d:51:e9:da:f5:56:a1:97:3d:07:89:f0:d7:b8:c9: 73:0d:4a:66:d8:ee:0e:64:9d:95:ee:19:f8:0e:46: be:9a:a7:25:12:41:c5:4b:31:82:5e:00:66:33:32: 2f:07:65:5b:36:51:03:c8:19:fa:ef:97:06:b1:90: a0:b0:0b:cd:2e:5d:c8:f6:dd:34:6b:79:06:1b:4f: 2b:09:c0:54:5b:c1:b6:22:60:9c:7b:79:07:d5:43: b4:55:a5:9e:99:3b:71:b0:38:02:64:4e:c5:0f:6b: f6:12:93:16:ac:b9:4b:18:0d:9c:b3:7d:39:50:37: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:8A:5B:75:DA:36:B5:E8:31:BF:AA:43:52:63:3F:98:AE:56:B3 X509v3 Authority Key Identifier: keyid:10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7c:32:c7:81:1c:c6:e3:d7:5d:44:2d:34:55:02:ae:fa:9d: bb:36:15:ec:28:15:c8:7d:36:4a:b2:b5:f5:c9:63:e7:f8:5e: 9e:f5:ac:16:32:16:9a:84:b0:d0:ea:36:18:d9:bc:5f:f7:27: 9e:1e:5d:2a:a1:1e:e0:54:b0:1a:c9:f6:15:a6:d0:d3:fc:0b: 3e:7a:c2:95:66:0b:05:dc:08:fe:66:11:d2:81:a0:b6:65:08: 5e:34:26:64:9f:35:f8:6c:cd:27:c0:36:16:61:36:9c:e6:26: 2c:0c:e8:c5:b9:a1:a9:44:92:dd:d3:93:78:c6:11:8f:cb:00: 07:ff:19:42:43:5f:6f:53:15:07:18:8f:7e:5b:8b:94:5e:0f: 97:9e:68:b6:47:41:98:19:57:0a:cc:ac:6c:a3:5e:e9:77:5b: 0b:d6:b0:77:62:a0:59:c9:ff:b8:22:46:e9:aa:52:a0:59:e8: 6a:b3:40:e6:71:f9:5a:e0:ec:fe:18:a7:68:f8:c6:c9:f5:b1: e1:f5:b0:34:80:7c:ad:16:a3:4e:8f:09:4d:1f:da:a1:a3:15: e6:92:11:38:89:9c:ca:3e:f8:5d:74:2b:48:c3:e9:17:09:dc: 1d:07:4b:40:b8:04:4b:00:e0:14:46:3e:5e:42:d7:76:0f:db: 7d:b1:8d:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPjPaZpybUdlBBeWLBnkHy3tBpeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5 NUUyNTNDODAeFw0yNjA2MTMxMjI2NDJaFw0yNjA2MTUwMTM1NDJaMDMxMTAvBgNV BAMTKEMxOTQ4QTVCNzVEQTM2QjVFODMxQkZBQTQzNTI2MzNGOThBRTU2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R8EMfwUy8mybV5XiuYvt5Bu2 ZNHF/UL4b7VuwyDK5bS5qYg/bx7vLVTmuZbFqFIADI78gFS+LNC1Z+hrT5g2H1sl xPYkg169YtJsqGOrbsvFqzjqh0y2g7eFWOIs4MyENQiZakWA85IL3fpz5j37OEo1 jJxeMhB341b6WMeSTZ/1/x//OT1R6dr1VqGXPQeJ8Ne4yXMNSmbY7g5knZXuGfgO Rr6apyUSQcVLMYJeAGYzMi8HZVs2UQPIGfrvlwaxkKCwC80uXcj23TRreQYbTysJ wFRbwbYiYJx7eQfVQ7RVpZ6ZO3GwOAJkTsUPa/YSkxasuUsYDZyzfTlQN+ATAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwZSKW3XaNrXoMb+qQ1JjP5iuVrMwHwYDVR0j BBgwFoAUEMpiNc+y9MW9ZAsuLhGe+5XiU8gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzMvMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5NUUyNTNDOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xMENBNjIzNUNGQjJGNEM1QkQ2NDBCMkUy RTExOUVGQjk1RTI1M0M4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8zLzEwQ0E2MjM1 Q0ZCMkY0QzVCRDY0MEIyRTJFMTE5RUZCOTVFMjUzQzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBfDLH gRzG49ddRC00VQKu+p27NhXsKBXIfTZKsrX1yWPn+F6e9awWMhaahLDQ6jYY2bxf 9yeeHl0qoR7gVLAayfYVptDT/As+esKVZgsF3Aj+ZhHSgaC2ZQheNCZknzX4bM0n wDYWYTac5iYsDOjFuaGpRJLd05N4xhGPywAH/xlCQ19vUxUHGI9+W4uUXg+Xnmi2 R0GYGVcKzKxso17pd1sL1rB3YqBZyf+4IkbpqlKgWehqs0Dmcfla4Oz+GKdo+MbJ 9bHh9bA0gHytFqNOjwlNH9qhoxXmkhE4iZzKPvhddCtIw+kXCdwdB0tAuARLAOAU Rj5eQtd2D9t9sY0h -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:55 2026 by rpki-client