$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: QkzlDcNXmKUNg5spaaPGtp+RKr/879ZdgdapF45+FYs= Subject key identifier: 85:8B:23:6E:63:9A:CA:BF:B6:7B:4A:0F:49:76:26:36:3D:FF:93:9D Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 3B4E77D78EAFA792B2BEDE9F437D0D6740BFBD3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 0147 Signing time: Fri 17 Apr 2026 05:48:52 +0000 Manifest this update: Fri 17 Apr 2026 05:43:52 +0000 Manifest next update: Sat 18 Apr 2026 09:06:52 +0000 Files and hashes: 1: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 2: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 3: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 5: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: 6FM52BZMEwdfkUeAYScOvEa+xpGcYTr2MGIZM9ZhwPo=) 6: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4e:77:d7:8e:af:a7:92:b2:be:de:9f:43:7d:0d:67:40:bf:bd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Apr 17 05:43:52 2026 GMT Not After : Apr 18 09:06:52 2026 GMT Subject: CN=858B236E639ACABFB67B4A0F497626363DFF939D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:40:64:d1:85:72:85:24:08:c0:75:12:32: 9a:95:86:e6:4b:3d:ea:52:52:44:7f:6c:89:48:01: 6a:f9:d9:3f:28:18:3c:78:d0:25:75:01:58:ef:38: 44:af:27:8b:a6:d6:f9:78:ec:2b:5b:8b:20:08:9f: 39:35:e6:2d:f3:87:f2:9e:5d:b2:f9:13:87:30:16: ba:15:f0:e5:9a:27:cb:7d:28:04:a4:c0:f8:6d:09: 10:ca:aa:90:30:00:fa:f0:0a:d3:40:15:f7:21:1c: e9:c4:25:58:84:c4:e6:4a:6b:b0:d2:78:65:c1:2c: ee:6d:f8:e7:46:4f:76:8b:7a:5e:05:1c:17:39:ac: 2a:10:94:c2:78:bc:14:c3:b0:20:7a:ce:cc:28:a1: 5d:3d:b8:d9:23:5a:1a:46:1a:a3:23:a2:a1:82:48: 02:92:06:f9:ba:f1:e2:95:97:86:88:28:da:09:0e: b3:53:5e:1c:11:9c:77:34:77:60:e6:77:a0:ed:20: 6a:3f:3f:a0:7b:9f:5b:32:09:29:63:ed:b0:20:9d: 22:e3:dc:a1:fa:8b:1b:2d:c0:1d:5b:6b:4c:1c:cc: 30:c8:e0:99:bb:1c:b3:9e:94:3f:15:84:f2:6a:d0: af:d1:f2:87:23:5b:b4:ea:b5:a7:b0:ed:c6:77:00: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8B:23:6E:63:9A:CA:BF:B6:7B:4A:0F:49:76:26:36:3D:FF:93:9D X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f3:48:23:c9:d6:c6:5a:bf:1c:f4:64:14:0d:42:90:97:0b: ff:ff:e5:22:86:59:e3:23:6c:9a:49:86:6e:db:43:26:75:83: 11:0f:64:6b:1b:5d:e7:64:a8:4a:a3:77:68:50:31:66:a2:d4: d1:22:13:27:3a:2e:7b:29:aa:30:7b:b8:4e:62:86:ef:ed:a0: be:b0:71:7a:81:15:d8:7a:03:99:5f:64:b3:e6:a7:d8:71:c1: f4:af:13:e1:67:e6:0b:2b:86:34:39:c1:02:2c:fa:f2:14:58: 7f:6e:c6:a8:8e:12:31:10:58:64:1a:9d:c5:d8:ad:9e:c0:63: 96:54:bc:99:f1:2e:4f:27:2f:26:bd:de:a3:d6:4d:c3:fd:0a: 64:83:8b:0b:9e:32:37:a8:d5:18:d7:60:f4:f6:1a:94:f0:b1: de:f1:f0:b9:26:a6:0e:98:69:3c:30:a4:e8:de:7a:b7:b6:75: 7c:8c:e5:ff:d0:13:d7:00:d6:55:2c:04:ed:1a:52:7b:a0:fe: 45:04:69:11:a8:ab:48:c5:55:3a:f2:2b:f2:c6:af:55:c9:aa: e8:fa:10:43:49:4f:6a:0c:64:2a:b7:68:e8:b5:b2:e0:c6:c1: fb:0a:f2:e0:ca:77:07:d8:5a:27:f7:fc:f5:cd:9e:e1:12:4b: 38:d8:83:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO053146vp5Kyvt6fQ30NZ0C/vT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjA0MTcwNTQzNTJaFw0yNjA0MTgwOTA2NTJaMDMxMTAvBgNV BAMTKDg1OEIyMzZFNjM5QUNBQkZCNjdCNEEwRjQ5NzYyNjM2M0RGRjkzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTkBk0YVyhSQIwHUSMpqVhuZL PepSUkR/bIlIAWr52T8oGDx40CV1AVjvOESvJ4um1vl47CtbiyAInzk15i3zh/Ke XbL5E4cwFroV8OWaJ8t9KASkwPhtCRDKqpAwAPrwCtNAFfchHOnEJViExOZKa7DS eGXBLO5t+OdGT3aLel4FHBc5rCoQlMJ4vBTDsCB6zswooV09uNkjWhpGGqMjoqGC SAKSBvm68eKVl4aIKNoJDrNTXhwRnHc0d2Dmd6DtIGo/P6B7n1syCSlj7bAgnSLj 3KH6ixstwB1ba0wczDDI4Jm7HLOelD8VhPJq0K/R8ocjW7Tqtaew7cZ3AMZnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhYsjbmOayr+2e0oPSXYmNj3/k50wHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAR80gj ydbGWr8c9GQUDUKQlwv//+UihlnjI2yaSYZu20MmdYMRD2RrG13nZKhKo3doUDFm otTRIhMnOi57Kaowe7hOYobv7aC+sHF6gRXYegOZX2Sz5qfYccH0rxPhZ+YLK4Y0 OcECLPryFFh/bsaojhIxEFhkGp3F2K2ewGOWVLyZ8S5PJy8mvd6j1k3D/Qpkg4sL njI3qNUY12D09hqU8LHe8fC5JqYOmGk8MKTo3nq3tnV8jOX/0BPXANZVLATtGlJ7 oP5FBGkRqKtIxVU68ivyxq9Vyaro+hBDSU9qDGQqt2jotbLgxsH7CvLgyncH2Fon 9/z1zZ7hEks42IOx -----END CERTIFICATE-----Generated at Fri Apr 17 16:55:20 2026 by rpki-client