$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft File: 0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft (raw, json) Hash identifier: x+rcQnRhunV8FAuUYLlcDiej/otplFNgH9OKC7zJdVs= Subject key identifier: 86:F9:89:71:DE:7C:A2:D0:F4:FC:6C:91:87:B6:F9:C9:97:77:C6:31 Authority key identifier: 0D:05:6B:AC:6B:22:FD:1E:D0:81:2C:4C:73:FF:09:A5:9A:40:9A:6E Certificate issuer: /CN=0d056bac6b22fd1ed0812c4c73ff09a59a409a6e Certificate serial: 0F56DBBE7AAD1706FFED09D8DE1646D84F0DCEAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQVrrGsi_R7QgSxMc_8JpZpAmm4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft Manifest number: 05 Signing time: Sun 19 Apr 2026 04:48:25 +0000 Manifest this update: Sun 19 Apr 2026 04:43:25 +0000 Manifest next update: Mon 20 Apr 2026 08:22:25 +0000 Files and hashes: 1: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: /ywDrcg69RinQSaJq5qK1DkqX2kU3IcAj/TtRmkAN0I=) 2: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: Id9Zf8+JCeW09y5eLtPMq8sTxFHunLxKCRu7r423igg=) 3: AS213279.asa (hash: vuGX2bKZLGEQ7kLEqAkWLdVw1B/3GNVY0Vz7Axoqgi0=) 4: 0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.crl (hash: 1t03W6kYfDhZ334RxGaWPfgkIx1X6XKbQ3iJgDkYDw8=) 5: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: MPDWzEveSeqr5REDNZ7vahiUYH6XirhHXiielY71rvw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft rsync://rpki.ripe.net/repository/DEFAULT/DQVrrGsi_R7QgSxMc_8JpZpAmm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:db:be:7a:ad:17:06:ff:ed:09:d8:de:16:46:d8:4f:0d:ce:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d056bac6b22fd1ed0812c4c73ff09a59a409a6e Validity Not Before: Apr 19 04:43:25 2026 GMT Not After : Apr 20 08:22:25 2026 GMT Subject: CN=86F98971DE7CA2D0F4FC6C9187B6F9C99777C631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:76:5a:de:76:27:fc:01:c9:63:db:0d:e1: a8:09:21:2e:53:d7:db:20:fa:99:7b:f1:f5:72:16: ce:7c:d1:c7:1c:b6:21:cd:0f:1f:d8:3c:ee:07:13: f2:72:67:79:ec:e4:06:ab:f2:82:b3:a3:21:26:40: eb:5b:93:65:56:b2:56:30:41:73:c3:be:8b:72:15: f0:6a:f0:ef:c4:6f:72:b3:b9:01:a7:0a:de:87:24: 85:a4:e0:2f:81:c1:2a:95:a5:98:bf:2d:d7:c4:8f: 00:90:98:52:01:e9:0c:44:ae:66:cb:7b:b1:8c:9b: 28:5b:2b:ba:fd:03:17:5b:06:d7:d1:9c:a7:2e:f6: de:db:67:f5:06:2a:93:8a:37:9f:06:f1:8d:ba:be: 59:50:3f:d6:c7:13:7c:c1:f9:47:26:75:04:71:b2: 65:12:64:7a:02:5c:ac:dd:d4:3f:7d:5a:4b:b6:17: e8:da:d7:db:a5:22:90:b3:ee:2a:94:5d:13:c0:84: 8a:a3:a6:75:ae:73:b1:e4:22:ef:ca:8d:69:21:a4: 3c:bd:ca:fc:d2:f5:0f:ab:36:7f:27:6e:ff:5e:ca: d7:70:06:62:b0:e7:de:e8:4a:2a:1d:d7:8e:e9:a0: b6:d4:39:1a:4a:60:cb:68:ec:42:c5:2e:16:57:df: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:89:71:DE:7C:A2:D0:F4:FC:6C:91:87:B6:F9:C9:97:77:C6:31 X509v3 Authority Key Identifier: keyid:0D:05:6B:AC:6B:22:FD:1E:D0:81:2C:4C:73:FF:09:A5:9A:40:9A:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQVrrGsi_R7QgSxMc_8JpZpAmm4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:dd:3f:55:7c:f8:de:78:04:58:60:e8:22:1f:c8:40:4b:76: 3c:88:36:c0:86:a1:e9:93:fa:70:20:27:c1:51:da:b7:74:4b: 8f:a7:8b:da:ba:46:8c:50:d2:28:59:3f:d2:dc:a1:6e:df:f2: a3:c2:ae:bc:77:f6:fb:7b:ad:4b:5c:40:8f:44:d8:ea:9c:14: bd:94:d5:56:eb:64:79:05:00:14:6c:34:62:ed:a7:f8:7c:c5: d8:93:f6:6f:c5:36:e3:6e:35:d9:99:05:d6:ee:64:6a:23:50: 8d:00:a4:10:6c:c9:07:57:7c:6f:0b:e7:e4:db:46:7c:81:ef: 14:3d:d6:64:b4:3e:65:ab:06:3a:e6:2e:59:9e:48:d7:4c:fe: f6:fc:a8:a8:31:30:c5:8c:5c:3c:7f:9b:84:c6:1a:31:c4:8d: c5:15:9a:1b:8c:b1:96:64:cc:24:75:b0:b1:bf:e0:44:b2:9a: 0e:97:8a:a1:44:93:95:9b:1d:2d:36:2b:cd:ae:b0:ff:ec:0d: e3:d7:df:b3:e3:2c:48:c1:23:9e:77:5b:61:85:ac:e5:47:bf: 2a:ea:4d:01:5d:f7:b8:de:0e:ca:58:eb:34:35:e6:01:7a:5a: ef:7d:a9:68:1b:48:1a:81:40:1d:46:a4:4c:32:c9:7a:d1:b0: 1a:22:90:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD1bbvnqtFwb/7QnY3hZG2E8Nzq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTZiYWM2YjIyZmQxZWQwODEyYzRjNzNmZjA5YTU5 YTQwOWE2ZTAeFw0yNjA0MTkwNDQzMjVaFw0yNjA0MjAwODIyMjVaMDMxMTAvBgNV BAMTKDg2Rjk4OTcxREU3Q0EyRDBGNEZDNkM5MTg3QjZGOUM5OTc3N0M2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf83Za3nYn/AHJY9sN4agJIS5T 19sg+pl78fVyFs580ccctiHNDx/YPO4HE/JyZ3ns5Aar8oKzoyEmQOtbk2VWslYw QXPDvotyFfBq8O/Eb3KzuQGnCt6HJIWk4C+BwSqVpZi/LdfEjwCQmFIB6QxErmbL e7GMmyhbK7r9AxdbBtfRnKcu9t7bZ/UGKpOKN58G8Y26vllQP9bHE3zB+UcmdQRx smUSZHoCXKzd1D99Wku2F+ja19ulIpCz7iqUXRPAhIqjpnWuc7HkIu/KjWkhpDy9 yvzS9Q+rNn8nbv9eytdwBmKw597oSiod147poLbUORpKYMto7ELFLhZX32RZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhvmJcd58otD0/GyRh7b5yZd3xjEwHwYDVR0j BBgwFoAUDQVrrGsi/R7QgSxMc/8JpZpAmm4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzAvMEQwNTZCQUM2QjIyRkQxRUQwODEyQzRDNzNGRjA5QTU5QTQwOUE2RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRVnJyR3NpX1I3UWdTeE1jXzhKcFpw QW1tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMC8wRDA1NkJBQzZCMjJGRDFFRDA4 MTJDNEM3M0ZGMDlBNTlBNDA5QTZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd0/VXz43ngEWGDoIh/I QEt2PIg2wIah6ZP6cCAnwVHat3RLj6eL2rpGjFDSKFk/0tyhbt/yo8KuvHf2+3ut S1xAj0TY6pwUvZTVVutkeQUAFGw0Yu2n+HzF2JP2b8U242412ZkF1u5kaiNQjQCk EGzJB1d8bwvn5NtGfIHvFD3WZLQ+ZasGOuYuWZ5I10z+9vyoqDEwxYxcPH+bhMYa McSNxRWaG4yxlmTMJHWwsb/gRLKaDpeKoUSTlZsdLTYrza6w/+wN49ffs+MsSMEj nndbYYWs5Ue/KupNAV33uN4OyljrNDXmAXpa732paBtIGoFAHUakTDLJetGwGiKQ kQ== -----END CERTIFICATE-----Generated at Sun Apr 19 14:40:32 2026 by rpki-client