$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: aXzSpnJfux24FqPxsOLJAPR1GWoQ/zeiFd9SphWfJ84= Subject key identifier: 47:28:78:C5:51:75:93:66:4E:26:64:06:0D:D8:7F:57:B7:8F:29:EB Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 138873A5081C4D829A2C18E41259449C983095DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 048B Signing time: Thu 16 Apr 2026 18:44:42 +0000 Manifest this update: Thu 16 Apr 2026 18:39:42 +0000 Manifest next update: Fri 17 Apr 2026 20:26:42 +0000 Files and hashes: 1: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: Rj80gl/I6FrO6w9QX9q+Ry/C2K1gxfH5cpFFvV83Uu8=) 2: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 3: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 4: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 5: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 6: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 7: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 8: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 9: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 10: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 11: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:73:a5:08:1c:4d:82:9a:2c:18:e4:12:59:44:9c:98:30:95:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Apr 16 18:39:42 2026 GMT Not After : Apr 17 20:26:42 2026 GMT Subject: CN=472878C5517593664E2664060DD87F57B78F29EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:d3:b1:66:91:c9:c2:44:69:aa:ca:c7:e6: 6c:45:84:f3:79:c3:e3:62:22:b2:32:6f:33:65:43: 76:b3:99:8a:26:a3:f6:76:e2:0b:f1:b5:42:1f:96: 44:06:8e:d0:20:05:0b:6c:77:6f:2f:4e:bd:59:19: c8:ac:d4:8f:ed:40:76:48:13:11:d2:91:06:b8:66: ea:f9:86:b7:75:cf:a2:72:05:ae:79:e3:70:5f:51: 56:bc:42:d9:c1:67:4f:95:a3:7a:2e:8f:e8:f8:c8: 2b:4c:73:dc:7e:02:ee:0c:05:73:0e:ff:db:cb:77: 38:f9:61:32:b9:20:c3:8b:20:28:1a:c8:a6:ff:eb: ee:94:16:29:d5:cd:d1:d3:c1:fa:7b:ef:64:ae:f8: 21:42:5a:ce:ce:17:e6:64:35:da:1c:66:ec:9d:cb: 84:e0:5c:7b:f4:15:d6:e6:11:c2:65:03:00:dd:51: b5:78:b1:37:82:a9:5f:d9:1c:f1:8b:58:80:76:67: 0c:11:97:7f:12:1e:d9:8b:e5:eb:7d:a5:cd:4e:c7: 36:9d:80:12:aa:8d:6b:18:ef:9a:15:63:d6:fa:93: 4d:f2:19:b3:51:fd:f8:20:7d:0c:55:14:aa:9b:0c: f8:65:4c:11:4f:07:62:bd:a7:5f:c7:3a:8c:a0:ea: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:28:78:C5:51:75:93:66:4E:26:64:06:0D:D8:7F:57:B7:8F:29:EB X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:de:f5:a5:80:f7:d3:f2:fa:eb:e2:71:d5:7e:ac:30:56:ec: 1d:f1:1d:e5:4a:b5:d3:73:13:26:29:02:32:39:ec:e6:c4:65: ef:f4:6f:e1:81:95:6a:74:7a:3f:7c:c6:a0:75:9d:ea:f6:84: 1f:1b:1f:09:78:f0:75:4e:24:11:77:c3:6f:df:34:ab:5b:c9: 39:12:4e:48:27:b3:39:c4:19:34:d8:33:3e:d5:ac:5d:cf:93: af:9b:2e:0f:3d:8c:97:ef:cd:b7:e3:e4:c8:48:e5:7d:66:71: f9:03:e3:99:46:82:82:63:5b:55:7f:30:68:30:11:c7:25:95: 00:3e:3f:3e:b3:c7:45:8f:7d:49:a0:e9:12:9f:63:93:45:b9: fc:2c:de:c7:b7:ea:de:60:3b:e8:72:fb:d7:b1:27:5c:0f:f4: 4e:12:bb:18:5d:bf:c8:c0:33:06:e1:41:b8:7f:f7:de:d2:78: 4b:e3:96:b5:41:f8:a7:31:bc:fd:20:54:d0:a7:3d:86:49:24: b5:25:29:ce:4e:ff:c0:35:49:a3:b9:00:7d:69:de:4e:9b:8e: 23:f4:97:7a:77:fb:39:bc:99:f9:f0:42:e5:cd:2f:6c:76:2a: 6c:79:0a:88:35:01:3a:fb:4e:e5:36:50:26:a1:99:60:fe:9f: d9:8a:a3:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE4hzpQgcTYKaLBjkEllEnJgwld8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA0MTYxODM5NDJaFw0yNjA0MTcyMDI2NDJaMDMxMTAvBgNV BAMTKDQ3Mjg3OEM1NTE3NTkzNjY0RTI2NjQwNjBERDg3RjU3Qjc4RjI5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXdOxZpHJwkRpqsrH5mxFhPN5 w+NiIrIybzNlQ3azmYomo/Z24gvxtUIflkQGjtAgBQtsd28vTr1ZGcis1I/tQHZI ExHSkQa4Zur5hrd1z6JyBa5543BfUVa8QtnBZ0+Vo3ouj+j4yCtMc9x+Au4MBXMO /9vLdzj5YTK5IMOLICgayKb/6+6UFinVzdHTwfp772Su+CFCWs7OF+ZkNdocZuyd y4TgXHv0FdbmEcJlAwDdUbV4sTeCqV/ZHPGLWIB2ZwwRl38SHtmL5et9pc1Oxzad gBKqjWsY75oVY9b6k03yGbNR/fggfQxVFKqbDPhlTBFPB2K9p1/HOoyg6kbjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURyh4xVF1k2ZOJmQGDdh/V7ePKeswHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf971pYD30/L66+Jx1X6s MFbsHfEd5Uq103MTJikCMjns5sRl7/Rv4YGVanR6P3zGoHWd6vaEHxsfCXjwdU4k EXfDb980q1vJORJOSCezOcQZNNgzPtWsXc+Tr5suDz2Ml+/Nt+PkyEjlfWZx+QPj mUaCgmNbVX8waDARxyWVAD4/PrPHRY99SaDpEp9jk0W5/Czex7fq3mA76HL717En XA/0ThK7GF2/yMAzBuFBuH/33tJ4S+OWtUH4pzG8/SBU0Kc9hkkktSUpzk7/wDVJ o7kAfWneTpuOI/SXenf7ObyZ+fBC5c0vbHYqbHkKiDUBOvtO5TZQJqGZYP6f2Yqj 7g== -----END CERTIFICATE-----Generated at Fri Apr 17 06:53:14 2026 by rpki-client