$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: ElbJIoRQxOPPcmDtQrkJRr25ti1oF5OYa3GUgFGKpnI= Subject key identifier: 4A:26:F2:A9:C6:59:5D:8B:A4:60:BB:C0:EB:9B:91:0D:06:D4:29:78 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 09E176BDFBAA333485D952AD310756975ED28B4A Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 02DE Signing time: Sat 13 Jun 2026 04:21:42 +0000 Manifest this update: Sat 13 Jun 2026 04:16:42 +0000 Manifest next update: Sun 14 Jun 2026 18:40:42 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: UNeYXdOlxyVvLlbpqM78XKgEIwbM6XDmC7YzPKlENxk=) 2: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 3: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 4: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e1:76:bd:fb:aa:33:34:85:d9:52:ad:31:07:56:97:5e:d2:8b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jun 13 04:16:42 2026 GMT Not After : Jun 14 18:40:42 2026 GMT Subject: CN=4A26F2A9C6595D8BA460BBC0EB9B910D06D42978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:4d:31:14:19:cc:83:e3:7b:58:53:52:ab: 94:8c:9a:2d:df:aa:26:fb:23:a4:4c:23:7a:f0:d0: 8e:69:1d:5a:b8:9b:83:04:07:5d:37:e6:e2:cf:1b: bf:b3:b5:ee:e5:ed:00:c8:0e:7a:3b:37:96:29:35: 8f:bb:e7:a4:e8:da:6d:44:45:fc:5c:29:b0:13:b7: 32:20:95:5b:f9:e6:32:d2:e0:84:34:fc:18:4d:5b: 50:27:4f:65:29:55:dd:5a:ed:22:a4:db:da:f2:e8: 2d:b5:24:a8:d5:49:c6:ec:cb:3a:fb:e7:95:0b:4b: 9e:59:c3:b2:f5:a2:42:92:d1:18:18:c7:00:03:17: ed:a1:86:b2:2d:e0:d5:55:99:ce:44:7d:5c:30:2b: 22:f6:c5:d8:20:74:0f:a3:1f:cd:9f:cc:14:6b:ad: fb:72:71:25:01:f7:8d:a5:26:16:6e:a0:bf:87:04: ed:92:b4:df:ed:f8:f0:7b:22:f5:dc:19:19:d1:e0: 16:cf:3d:16:1c:cc:e4:f1:71:10:f5:e8:da:2f:48: 2b:64:4a:6d:fd:84:db:95:49:67:7b:08:d5:4c:01: be:4e:dd:77:15:3c:06:c4:8e:b0:3d:da:f5:3e:f8: 5f:17:c4:c2:20:40:0a:bf:14:14:0b:fe:5b:92:cf: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:F2:A9:C6:59:5D:8B:A4:60:BB:C0:EB:9B:91:0D:06:D4:29:78 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4c:19:3a:16:91:f9:2c:62:77:23:f6:00:fd:fe:7f:d8:34: 57:e3:f8:2a:99:42:bf:dd:9e:f1:ac:39:22:43:ea:bf:55:c7: a9:fb:c3:05:3a:4e:12:1d:40:75:e9:a6:17:5c:6a:10:1f:d3: d6:de:85:b9:89:75:54:f9:c9:70:d2:d0:a7:30:22:8b:4a:b8: 90:64:8b:7d:90:e0:dd:96:77:5e:5a:2a:a8:d6:01:db:a6:61: 7b:64:b0:29:df:fd:31:27:dd:9c:02:b1:67:02:39:39:b7:ec: 63:4e:cd:52:43:9f:82:0e:ad:33:fe:12:c8:15:02:b7:c8:94: 96:e5:45:fa:14:de:65:73:43:05:cd:a7:d6:23:6c:fe:24:e4: f2:e2:ff:a2:66:ec:6b:c3:9c:74:d5:27:30:2c:1f:06:a3:97: 80:11:59:49:cc:bb:f6:81:22:b9:98:ba:62:9a:eb:09:1d:0f: bb:cd:b1:b2:b5:e5:e6:22:47:bb:75:2b:19:e0:fd:6c:64:49: 2a:53:ae:75:42:e5:d5:00:aa:9b:c4:d2:b9:af:25:cc:9b:6f: 84:88:ae:a7:9b:ef:db:2c:a7:d3:c8:ef:9a:72:ab:6a:53:99: 51:b1:08:c2:c7:7a:a9:5f:c9:c2:6a:3f:3c:7f:bc:f0:22:42: 3f:5e:e5:b4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCeF2vfuqMzSF2VKtMQdWl17Si0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA2MTMwNDE2NDJaFw0yNjA2MTQxODQwNDJaMDMxMTAvBgNV BAMTKDRBMjZGMkE5QzY1OTVEOEJBNDYwQkJDMEVCOUI5MTBEMDZENDI5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtX00xFBnMg+N7WFNSq5SMmi3f qib7I6RMI3rw0I5pHVq4m4MEB1035uLPG7+zte7l7QDIDno7N5YpNY+756To2m1E RfxcKbATtzIglVv55jLS4IQ0/BhNW1AnT2UpVd1a7SKk29ry6C21JKjVScbsyzr7 55ULS55Zw7L1okKS0RgYxwADF+2hhrIt4NVVmc5EfVwwKyL2xdggdA+jH82fzBRr rftycSUB942lJhZuoL+HBO2StN/t+PB7IvXcGRnR4BbPPRYczOTxcRD16NovSCtk Sm39hNuVSWd7CNVMAb5O3XcVPAbEjrA92vU++F8XxMIgQAq/FBQL/luSz7Z7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUSibyqcZZXYukYLvA65uRDQbUKXgwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUwZOhaR+SxidyP2AP3+ f9g0V+P4KplCv92e8aw5IkPqv1XHqfvDBTpOEh1AdemmF1xqEB/T1t6FuYl1VPnJ cNLQpzAii0q4kGSLfZDg3ZZ3XloqqNYB26Zhe2SwKd/9MSfdnAKxZwI5ObfsY07N UkOfgg6tM/4SyBUCt8iUluVF+hTeZXNDBc2n1iNs/iTk8uL/ombsa8OcdNUnMCwf BqOXgBFZScy79oEiuZi6YprrCR0Pu82xsrXl5iJHu3UrGeD9bGRJKlOudULl1QCq m8TSua8lzJtvhIiup5vv2yyn08jvmnKralOZUbEIwsd6qV/Jwmo/PH+88CJCP17l tA== -----END CERTIFICATE-----Generated at Sat Jun 13 16:13:49 2026 by rpki-client