$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: a8q6pS0FlDUvTo6+tX/3EEEXcYDly5MgF4WBXb719Jo= Subject key identifier: 01:8D:58:E4:13:89:4E:A6:A9:49:57:90:9C:D5:EE:8E:CA:63:B7:70 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 0C1B00942F8191E812C5534DA5B9155900FFAA40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0556 Signing time: Sun 19 Apr 2026 04:44:38 +0000 Manifest this update: Sun 19 Apr 2026 04:39:38 +0000 Manifest next update: Mon 20 Apr 2026 04:55:38 +0000 Files and hashes: 1: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 2: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 3: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 4: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 5: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 6: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 7: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 8: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 9: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 10: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: PyDR7EWY2ilCaSfxeoSvx4/MqK2BgEWhGPeYSYIk1jw=) 11: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 12: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 13: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 14: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 15: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1b:00:94:2f:81:91:e8:12:c5:53:4d:a5:b9:15:59:00:ff:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Apr 19 04:39:38 2026 GMT Not After : Apr 20 04:55:38 2026 GMT Subject: CN=018D58E413894EA6A94957909CD5EE8ECA63B770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:ee:41:ad:69:17:28:45:de:81:79:53:ff: 61:7a:eb:72:65:a3:0b:ed:17:9f:44:96:28:1b:a5: a4:d5:21:8e:00:4e:df:44:14:04:37:51:91:c2:d5: 94:4a:c3:ed:c7:2f:fb:e9:f0:e3:13:ee:4b:97:bd: c9:2e:6b:88:c6:77:2a:0d:93:08:52:1c:d0:29:38: f6:26:aa:62:ce:1b:ac:93:96:3f:26:2a:08:db:7e: ba:c2:54:7f:39:7b:8a:5c:86:1c:2c:98:5c:7a:99: 2c:1d:22:9f:33:54:82:26:97:84:8f:fb:98:75:0b: a8:33:ab:54:e0:d0:35:90:6e:51:a6:1f:d7:91:d3: bf:f9:67:dd:95:50:8d:42:18:78:75:9d:c5:30:24: a2:81:f8:1d:05:90:18:38:7c:27:38:bc:1c:c7:84: df:ab:82:15:60:1d:f2:42:ce:71:1e:1a:a4:12:45: e2:2d:d0:3a:54:a0:6b:5f:d7:5d:74:b1:4b:28:70: 6b:08:48:07:9c:d0:4d:a1:73:03:d3:e2:59:11:7c: ba:1c:9e:db:96:ab:50:8c:2f:81:9e:84:2b:29:c5: 24:ba:9c:49:8b:e4:70:d1:c4:2e:f5:95:6e:97:77: 32:c0:23:8c:71:fe:06:ff:70:01:2b:90:b3:34:be: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:58:E4:13:89:4E:A6:A9:49:57:90:9C:D5:EE:8E:CA:63:B7:70 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e3:85:63:7d:11:96:f0:43:d7:95:ce:12:d3:ee:41:7e:c1: 91:1c:8e:24:f3:bb:51:c4:76:97:ac:ca:2a:93:08:20:26:2f: e7:cd:c5:28:42:21:a5:70:76:7e:9a:ed:91:fd:dc:5b:55:43: 2b:3e:ae:b3:11:d6:cf:22:bd:0f:51:18:ad:34:2a:c1:d5:e8: e9:3a:11:ff:a7:c2:c5:b1:ee:f5:a2:0c:d3:b2:ed:87:f2:0c: b5:84:8f:ae:85:4a:6b:2e:a1:0a:53:1c:c4:a3:ea:ea:15:5a: 97:55:22:a0:c0:e8:b0:8b:19:ae:7a:2e:14:f0:e8:d1:83:a9: 88:1f:3f:69:04:ae:ff:b3:c3:c6:37:e2:93:42:ac:4d:64:12: 9a:72:2d:a8:9b:19:03:cf:1a:01:fd:27:f0:8b:e2:11:e9:e3: bb:d5:c1:64:cd:90:34:40:b1:af:79:46:3a:93:0a:1e:9c:68: 1c:ed:0a:ce:8c:2a:6d:b5:9a:ce:28:66:b4:f6:12:f7:fc:cf: ae:21:e1:10:e7:ff:da:f3:8f:cb:b2:eb:ea:fa:8e:70:e5:c2: 81:20:1e:6e:c4:e1:a2:e5:be:47:c9:6d:10:4f:47:32:3b:a8: cc:85:ec:0a:dd:e1:d8:87:16:c6:3c:a8:b5:16:e3:ae:2b:fc: ff:5c:e0:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDBsAlC+BkegSxVNNpbkVWQD/qkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA0MTkwNDM5MzhaFw0yNjA0MjAwNDU1MzhaMDMxMTAvBgNV BAMTKDAxOEQ1OEU0MTM4OTRFQTZBOTQ5NTc5MDlDRDVFRThFQ0E2M0I3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoL+5BrWkXKEXegXlT/2F663Jl owvtF59EligbpaTVIY4ATt9EFAQ3UZHC1ZRKw+3HL/vp8OMT7kuXvckua4jGdyoN kwhSHNApOPYmqmLOG6yTlj8mKgjbfrrCVH85e4pchhwsmFx6mSwdIp8zVIIml4SP +5h1C6gzq1Tg0DWQblGmH9eR07/5Z92VUI1CGHh1ncUwJKKB+B0FkBg4fCc4vBzH hN+rghVgHfJCznEeGqQSReIt0DpUoGtf1110sUsocGsISAec0E2hcwPT4lkRfLoc ntuWq1CML4GehCspxSS6nEmL5HDRxC71lW6XdzLAI4xx/gb/cAErkLM0voKPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAY1Y5BOJTqapSVeQnNXujspjt3AwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOOFY30RlvBD15XOEtPu QX7BkRyOJPO7UcR2l6zKKpMIICYv583FKEIhpXB2fprtkf3cW1VDKz6usxHWzyK9 D1EYrTQqwdXo6ToR/6fCxbHu9aIM07Lth/IMtYSProVKay6hClMcxKPq6hVal1Ui oMDosIsZrnouFPDo0YOpiB8/aQSu/7PDxjfik0KsTWQSmnItqJsZA88aAf0n8Ivi Eenju9XBZM2QNECxr3lGOpMKHpxoHO0KzowqbbWazihmtPYS9/zPriHhEOf/2vOP y7Lr6vqOcOXCgSAebsThouW+R8ltEE9HMjuozIXsCt3h2IcWxjyotRbjriv8/1zg Xg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:26 2026 by rpki-client