$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: wp+KsvO5QlZ1X1BFGN2Kt3exdczrxfCA3Kv5Su8RD6A= Subject key identifier: FF:FA:C7:4F:81:5F:75:CD:EA:F6:4A:1F:85:49:51:95:FC:4F:97:FD Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 788F9E38B078343E836038BC94627481A10DA7C8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 0192 Signing time: Sat 13 Jun 2026 16:02:39 +0000 Manifest this update: Sat 13 Jun 2026 15:57:39 +0000 Manifest next update: Sun 14 Jun 2026 16:40:39 +0000 Files and hashes: 1: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 2: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 3: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 4: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 5: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: gl+DItWWdkqbsI3QLnV2fmiaAgmhkS6lYlUfqSVNVII=) 6: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:9e:38:b0:78:34:3e:83:60:38:bc:94:62:74:81:a1:0d:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Jun 13 15:57:39 2026 GMT Not After : Jun 14 16:40:39 2026 GMT Subject: CN=FFFAC74F815F75CDEAF64A1F85495195FC4F97FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:43:ce:86:e7:67:4b:ce:cf:e7:92:66:ae: 4b:a4:2c:57:84:ff:b3:11:c3:09:ab:77:52:1a:55: e9:d9:bd:11:7e:ca:c9:d9:a6:50:bd:4a:5f:fa:c5: 4f:e5:1f:cf:92:e0:8b:40:54:68:ac:de:60:4d:7a: 53:37:bc:6f:e6:66:4b:eb:ff:08:74:a0:65:71:63: 75:7d:31:9c:0c:f2:17:70:de:d8:3b:1f:56:86:d8: 09:a1:7d:67:61:1d:fc:33:0c:4d:34:ef:11:e5:c2: b5:e7:de:33:af:b8:b2:ec:88:95:25:c5:65:c9:38: 96:36:8c:42:bc:bb:b8:47:dc:68:43:a4:c8:36:bd: 6f:49:93:c4:05:97:44:51:1f:91:15:38:04:59:30: a0:46:44:1f:b2:08:98:99:cc:9c:57:c2:22:35:d4: 36:b0:78:01:cc:3c:bd:1f:90:7e:6e:86:10:be:4e: 20:6f:45:9c:0e:fb:88:fe:96:77:90:dd:91:06:b8: e7:24:f5:f8:a1:d0:67:86:58:2b:24:03:93:69:62: fb:85:b4:10:ed:6f:3e:ba:58:6c:69:3b:51:b5:7a: b3:27:2a:2a:a9:5d:b4:13:f9:4a:4a:09:d1:25:63: f1:e9:0d:fd:d3:14:1b:25:51:74:1c:da:2a:9e:aa: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FA:C7:4F:81:5F:75:CD:EA:F6:4A:1F:85:49:51:95:FC:4F:97:FD X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7e:2a:50:39:06:69:75:9b:e6:4a:19:ce:25:31:66:e5:40: 75:ac:4a:01:31:6d:a9:b1:85:81:bc:3a:73:c3:8f:e0:32:ef: 40:a7:1b:43:80:83:02:ff:fd:e1:2e:8e:a4:e6:ee:2e:8d:5f: 86:eb:5e:49:22:20:ff:cd:29:1f:fc:25:38:ea:78:f1:ba:59: f6:09:81:f2:32:75:54:24:6d:d4:2d:24:5d:18:96:24:31:57: 79:35:2c:53:4d:da:be:7f:c7:3a:cf:89:27:68:23:50:31:f6: da:82:90:02:92:8a:b7:47:ee:6e:64:b7:d3:46:a1:3f:15:23: e2:86:da:5e:71:4c:25:66:00:a3:6d:5e:a4:a6:41:ca:ea:1a: 7f:cd:69:d6:4a:5d:62:02:c8:ba:62:e9:f7:42:72:fb:ab:58: 9b:cb:18:6c:e6:55:2c:72:5b:8e:33:b3:44:6a:0c:6b:fe:d9: e1:75:89:29:6b:b4:6d:79:05:fd:39:45:18:99:13:15:07:45: 40:b4:26:59:ec:43:c2:4e:1b:e0:22:bd:5e:a7:09:ce:4a:28: 33:73:ba:bf:b1:f3:3f:49:4e:41:9f:ee:db:23:2a:99:06:a7: 85:62:7a:26:06:32:b3:1c:b5:b5:5b:4a:42:6f:12:48:d7:2d: 28:64:f0:5c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeI+eOLB4ND6DYDi8lGJ0gaENp8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjA2MTMxNTU3MzlaFw0yNjA2MTQxNjQwMzlaMDMxMTAvBgNV BAMTKEZGRkFDNzRGODE1Rjc1Q0RFQUY2NEExRjg1NDk1MTk1RkM0Rjk3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuUPOhudnS87P55JmrkukLFeE /7MRwwmrd1IaVenZvRF+ysnZplC9Sl/6xU/lH8+S4ItAVGis3mBNelM3vG/mZkvr /wh0oGVxY3V9MZwM8hdw3tg7H1aG2AmhfWdhHfwzDE007xHlwrXn3jOvuLLsiJUl xWXJOJY2jEK8u7hH3GhDpMg2vW9Jk8QFl0RRH5EVOARZMKBGRB+yCJiZzJxXwiI1 1DaweAHMPL0fkH5uhhC+TiBvRZwO+4j+lneQ3ZEGuOck9fih0GeGWCskA5NpYvuF tBDtbz66WGxpO1G1erMnKiqpXbQT+UpKCdElY/HpDf3TFBslUXQc2iqeqrrdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU//rHT4Ffdc3q9kofhUlRlfxPl/0wHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKfipQ OQZpdZvmShnOJTFm5UB1rEoBMW2psYWBvDpzw4/gMu9ApxtDgIMC//3hLo6k5u4u jV+G615JIiD/zSkf/CU46njxuln2CYHyMnVUJG3ULSRdGJYkMVd5NSxTTdq+f8c6 z4knaCNQMfbagpACkoq3R+5uZLfTRqE/FSPihtpecUwlZgCjbV6kpkHK6hp/zWnW Sl1iAsi6Yun3QnL7q1ibyxhs5lUscluOM7NEagxr/tnhdYkpa7RteQX9OUUYmRMV B0VAtCZZ7EPCThvgIr1epwnOSigzc7q/sfM/SU5Bn+7bIyqZBqeFYnomBjKzHLW1 W0pCbxJI1y0oZPBc -----END CERTIFICATE-----Generated at Sat Jun 13 20:31:08 2026 by rpki-client