$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: DEsFRs+a5fzJ3NAPPh7biYhFroTeqove3jyKiXrWVlg= Subject key identifier: 8B:08:FC:84:E0:05:05:10:F2:E4:6C:4C:95:B2:62:AF:6C:27:AA:0F Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 13E75AB35C465C5CC2EB6BC551DA24BAD34CA5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: 3C Signing time: Fri 12 Jun 2026 13:53:44 +0000 Manifest this update: Fri 12 Jun 2026 13:48:44 +0000 Manifest next update: Sat 13 Jun 2026 16:33:44 +0000 Files and hashes: 1: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 2: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 3: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 4: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: /iFTpH40+DUNrhVEm2nbKRXRjxtUibX0e8byqtP8+Q0=) 5: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 16:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e7:5a:b3:5c:46:5c:5c:c2:eb:6b:c5:51:da:24:ba:d3:4c:a5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Jun 12 13:48:44 2026 GMT Not After : Jun 13 16:33:44 2026 GMT Subject: CN=8B08FC84E0050510F2E46C4C95B262AF6C27AA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:c1:46:37:a2:49:b5:0a:77:6e:42:1f:0f: 30:23:e7:a5:75:d9:3a:eb:ec:ab:62:a1:3b:5e:e8: 8c:7b:97:f7:20:5a:02:27:3a:d9:aa:cc:15:96:f6: d3:8e:b5:21:fb:b0:38:93:43:59:53:12:1e:50:8c: a2:93:86:50:28:fb:58:ca:a8:72:70:50:4c:41:81: 2d:56:2a:1a:76:8c:ba:10:29:03:4b:5b:21:4d:ae: de:4a:85:30:17:c5:81:4f:63:e6:cb:b9:90:c4:15: e8:4f:3b:ac:22:99:a7:a8:ca:c7:42:d6:7a:8b:22: b4:02:7a:a1:e1:d9:ff:35:c4:bd:a2:8f:06:99:ef: 49:00:c9:7c:42:b0:8a:aa:0a:85:f4:19:7b:db:03: a4:d1:bc:58:fe:bd:6d:c8:54:00:ca:03:a4:aa:7d: 4d:cd:25:57:a5:74:f0:f5:6d:2f:86:6f:f7:49:b2: a0:09:65:67:5e:84:f1:ed:26:c0:46:98:8e:e5:ca: b2:44:21:5c:59:e0:fb:8d:f9:6d:f9:df:40:49:a8: da:d5:ba:05:7b:24:cf:44:b0:9f:b5:db:db:9f:9e: 72:44:9d:c3:ce:d8:28:e5:3b:9f:a4:a9:d5:07:02: 8a:79:a9:63:75:cc:c9:aa:1e:f2:00:f8:c8:93:74: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:08:FC:84:E0:05:05:10:F2:E4:6C:4C:95:B2:62:AF:6C:27:AA:0F X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:8e:c8:50:5d:3b:8e:93:7a:a7:98:c4:66:c5:45:1f:cf: eb:ee:5d:4f:c3:cd:62:d3:2d:11:a7:63:ad:e7:7d:0d:1f:94: 88:d2:53:b1:72:2f:01:a1:f3:d8:c5:7f:d5:d3:8f:19:a3:e9: ea:d3:2b:c5:bc:ab:b0:f3:1c:d8:d7:ae:75:2c:3f:bc:f5:ec: 9c:56:fe:88:09:b8:8e:9a:1a:6f:7b:2d:f4:be:7a:00:4a:27: 12:cc:dc:be:32:20:cf:56:9c:61:c5:3a:a8:33:28:16:e3:b3: d7:21:aa:28:8d:9c:9f:3d:d2:0b:74:22:9e:da:78:38:2c:b7: 83:b0:76:a5:6b:a3:7a:19:88:df:b7:5d:98:c4:4d:55:2f:87: 72:71:1b:90:bb:23:5c:5b:33:1b:d2:88:1e:1a:1c:9d:de:c8: 8e:79:02:24:ec:b1:0e:0e:60:8b:22:86:51:82:6c:92:a9:c7: fb:f8:c9:2f:97:5c:38:f6:71:28:08:2e:cb:ef:88:6f:f9:df: 40:ec:b0:dd:9e:84:20:22:35:d9:54:cb:46:b6:4b:4f:ba:3a: 97:13:5a:eb:f5:49:28:bc:f1:08:69:70:65:aa:80:91:3c:e1: d3:47:59:0f:42:d3:97:89:23:81:ce:19:58:ad:c0:88:45:b7: 59:cb:66:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE+das1xGXFzC62vFUdokutNMpd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA2MTIxMzQ4NDRaFw0yNjA2MTMxNjMzNDRaMDMxMTAvBgNV BAMTKDhCMDhGQzg0RTAwNTA1MTBGMkU0NkM0Qzk1QjI2MkFGNkMyN0FBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpcFGN6JJtQp3bkIfDzAj56V1 2Trr7KtioTte6Ix7l/cgWgInOtmqzBWW9tOOtSH7sDiTQ1lTEh5QjKKThlAo+1jK qHJwUExBgS1WKhp2jLoQKQNLWyFNrt5KhTAXxYFPY+bLuZDEFehPO6wimaeoysdC 1nqLIrQCeqHh2f81xL2ijwaZ70kAyXxCsIqqCoX0GXvbA6TRvFj+vW3IVADKA6Sq fU3NJVeldPD1bS+Gb/dJsqAJZWdehPHtJsBGmI7lyrJEIVxZ4PuN+W3530BJqNrV ugV7JM9EsJ+129ufnnJEncPO2CjlO5+kqdUHAop5qWN1zMmqHvIA+MiTdHMvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiwj8hOAFBRDy5GxMlbJir2wnqg8wHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp+OyFBdO46TeqeYxGbF RR/P6+5dT8PNYtMtEadjred9DR+UiNJTsXIvAaHz2MV/1dOPGaPp6tMrxbyrsPMc 2NeudSw/vPXsnFb+iAm4jpoab3st9L56AEonEszcvjIgz1acYcU6qDMoFuOz1yGq KI2cnz3SC3Qintp4OCy3g7B2pWujehmI37ddmMRNVS+HcnEbkLsjXFszG9KIHhoc nd7IjnkCJOyxDg5giyKGUYJskqnH+/jJL5dcOPZxKAguy++Ib/nfQOyw3Z6EICI1 2VTLRrZLT7o6lxNa6/VJKLzxCGlwZaqAkTzh00dZD0LTl4kjgc4ZWK3AiEW3Wctm QQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:05:46 2026 by rpki-client