$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: /ImNWdlXglfKVPXPQ5oV5LjLLWjy9/mh4Wr8FnyIoTA= Subject key identifier: 4D:3B:5E:03:DB:30:91:1D:FF:C8:19:32:1D:D0:26:74:BA:05:9D:D7 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 4349961B5053BFA013EBE613569A9F5E3F9B80D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 46 Signing time: Sat 13 Jun 2026 13:59:35 +0000 Manifest this update: Sat 13 Jun 2026 13:54:35 +0000 Manifest next update: Sun 14 Jun 2026 17:30:35 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: 4/zoie6HPag8wKyd5W61f6feMjPKQIkkw0Do4hzCiTg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 02:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:49:96:1b:50:53:bf:a0:13:eb:e6:13:56:9a:9f:5e:3f:9b:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Jun 13 13:54:35 2026 GMT Not After : Jun 14 17:30:35 2026 GMT Subject: CN=4D3B5E03DB30911DFFC819321DD02674BA059DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:e5:04:b6:a5:2c:36:d2:fd:dc:99:23:e4: 18:f2:22:4e:eb:5a:2f:e8:e7:bc:21:1b:b3:bb:2b: 9e:6f:fd:2b:34:88:b2:cc:ff:e8:44:c7:e7:05:94: 30:b2:c3:a2:f8:c1:bf:ba:c6:8f:36:2c:70:7d:56: b5:4c:2c:0a:11:5d:5c:e1:a5:42:bb:26:86:83:e8: fa:9d:ea:0c:63:87:04:f7:28:a2:e3:e7:9f:3e:f1: 89:86:1a:f6:8c:23:f4:b9:ae:eb:15:62:0c:4f:45: d6:54:dd:81:be:e9:9e:1b:2e:94:c5:61:24:28:5f: 50:7d:f4:25:0a:d1:7d:d6:bd:dc:53:ac:9c:ee:d5: 28:f1:45:29:b0:05:9c:b1:93:01:c2:45:f9:33:75: 52:e9:06:5a:1c:89:89:ec:b1:f6:06:c9:3a:2d:e2: 6c:4e:74:9f:11:15:91:32:73:b1:28:4a:24:cc:ae: 98:4b:69:43:06:c6:8d:86:f8:d1:71:10:fd:84:40: 2c:2f:ef:43:dd:08:12:25:ec:b3:2a:69:ea:d0:17: 72:c0:0b:96:cd:da:0c:eb:5c:b5:eb:69:c4:d2:3b: 1e:7e:c4:87:f8:d6:ae:4b:c3:14:82:2f:ec:bc:dd: a1:13:dc:0d:89:43:11:03:ce:02:ec:42:03:47:9e: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:5E:03:DB:30:91:1D:FF:C8:19:32:1D:D0:26:74:BA:05:9D:D7 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ce:8d:af:09:39:ce:fc:0d:59:e4:5b:67:42:3a:9d:68:18: cc:4c:a7:82:fd:56:5b:18:c4:f0:f0:75:1b:7b:e8:e2:48:e9: d7:cd:dd:19:cd:24:47:44:e3:39:e1:4c:dd:28:08:1e:d3:82: bf:ce:86:49:b7:c9:0a:af:45:f6:02:14:94:4d:16:82:c8:05: d8:dc:5f:38:70:27:93:58:10:49:78:dc:8b:d6:0d:29:ac:b6: f9:aa:56:d8:af:53:2e:eb:c6:ea:50:69:9f:38:17:6c:dd:c7: 35:1f:d5:4d:33:5c:cd:e5:61:1c:b3:40:32:4b:be:02:85:b3: 39:d3:05:c2:bc:61:5d:bf:b8:a1:f4:15:d0:e0:6c:25:3a:ba: 97:c0:68:eb:a5:95:5c:59:ef:13:9d:9a:9b:37:3a:5f:71:fa: 98:27:c6:64:4b:d4:5d:72:6c:88:76:52:bb:b5:fa:ae:f9:f4: 24:3b:13:c2:39:23:08:6f:6c:20:77:ff:24:61:cf:56:19:ab: 8e:0f:ed:55:c3:bf:f9:d7:e6:e1:99:a2:72:c3:4b:dc:82:c3: 7a:7c:7b:36:d5:1a:6e:1a:13:32:c8:7a:61:fc:33:90:0a:43: 0f:46:c6:b1:d2:4a:50:5c:8a:13:f9:57:2a:0d:7a:96:c6:3a: 37:2a:e7:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ0mWG1BTv6AT6+YTVpqfXj+bgNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA2MTMxMzU0MzVaFw0yNjA2MTQxNzMwMzVaMDMxMTAvBgNV BAMTKDREM0I1RTAzREIzMDkxMURGRkM4MTkzMjFERDAyNjc0QkEwNTlERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCuUEtqUsNtL93Jkj5BjyIk7r Wi/o57whG7O7K55v/Ss0iLLM/+hEx+cFlDCyw6L4wb+6xo82LHB9VrVMLAoRXVzh pUK7JoaD6Pqd6gxjhwT3KKLj558+8YmGGvaMI/S5rusVYgxPRdZU3YG+6Z4bLpTF YSQoX1B99CUK0X3WvdxTrJzu1SjxRSmwBZyxkwHCRfkzdVLpBlociYnssfYGyTot 4mxOdJ8RFZEyc7EoSiTMrphLaUMGxo2G+NFxEP2EQCwv70PdCBIl7LMqaerQF3LA C5bN2gzrXLXracTSOx5+xIf41q5LwxSCL+y83aET3A2JQxEDzgLsQgNHnoYtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTTteA9swkR3/yBkyHdAmdLoFndcwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClzo2v CTnO/A1Z5FtnQjqdaBjMTKeC/VZbGMTw8HUbe+jiSOnXzd0ZzSRHROM54UzdKAge 04K/zoZJt8kKr0X2AhSUTRaCyAXY3F84cCeTWBBJeNyL1g0prLb5qlbYr1Mu68bq UGmfOBds3cc1H9VNM1zN5WEcs0AyS74ChbM50wXCvGFdv7ih9BXQ4GwlOrqXwGjr pZVcWe8TnZqbNzpfcfqYJ8ZkS9RdcmyIdlK7tfqu+fQkOxPCOSMIb2wgd/8kYc9W GauOD+1Vw7/51+bhmaJyw0vcgsN6fHs21RpuGhMyyHph/DOQCkMPRsax0kpQXIoT +VcqDXqWxjo3Kufx -----END CERTIFICATE-----Generated at Sat Jun 13 17:28:48 2026 by rpki-client