$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: 76vodDGxOb3p6niqFkMw8dCSREeSL23w2909j58P5o4= Subject key identifier: E6:35:FC:63:9E:6C:A8:A8:AA:16:FB:58:D9:39:B6:44:7E:61:64:FF Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 4545BAC19D34A3CA5267947C0A39F21C92A54E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 05A1 Signing time: Fri 12 Jun 2026 15:39:38 +0000 Manifest this update: Fri 12 Jun 2026 15:34:38 +0000 Manifest next update: Sat 13 Jun 2026 16:33:38 +0000 Files and hashes: 1: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 2: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 3: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 4: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 5: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 6: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 7: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 8: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 9: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 10: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 11: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 12: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 13: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 14: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: PNXj6TuaRF0zzM5XdEvoF4HuLmIy4pDqu2mMI5NMH4s=) 15: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 16:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:45:ba:c1:9d:34:a3:ca:52:67:94:7c:0a:39:f2:1c:92:a5:4e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jun 12 15:34:38 2026 GMT Not After : Jun 13 16:33:38 2026 GMT Subject: CN=E635FC639E6CA8A8AA16FB58D939B6447E6164FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:8f:15:02:8d:60:c4:0e:58:bb:87:fa:25: a5:55:26:55:79:b5:dd:ff:5e:32:a8:ae:44:b3:04: 05:db:eb:69:a1:e5:76:94:ec:89:c2:56:54:e6:33: bc:92:62:49:d2:d7:ba:f0:74:71:16:3c:2b:7a:6b: 16:1b:76:a7:b0:4b:14:77:8d:92:08:20:e1:66:ac: 03:63:e4:ef:f7:a3:d5:56:1f:2f:84:2c:8c:1f:01: 4a:22:08:36:cf:1e:38:f3:01:6a:13:4a:04:73:84: 37:60:ee:54:7a:e0:d2:47:a4:fa:aa:17:11:1d:5d: 25:83:fc:9c:f7:3c:8c:3b:71:7e:03:18:fe:38:ee: c5:f5:4e:ea:02:c3:02:af:2b:d8:2f:6c:fc:79:5b: 6c:84:7a:4c:df:a9:ef:ea:17:72:fd:15:7c:f3:4c: e8:fb:0f:6d:d0:80:4d:6f:9f:2b:2d:cf:7e:06:ad: 43:da:3e:94:2f:09:f5:a5:07:26:73:3c:ea:47:73: 93:d7:a2:8a:ff:a6:ac:08:95:68:61:87:54:de:72: 15:7b:76:5f:92:78:2e:4b:60:85:ac:19:8d:dd:9f: 75:ee:b2:7f:83:c8:fa:7c:9a:aa:df:70:b9:cb:c6: ab:3d:12:9b:6c:41:e8:83:b0:04:b6:61:c8:de:0e: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:35:FC:63:9E:6C:A8:A8:AA:16:FB:58:D9:39:B6:44:7E:61:64:FF X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0b:2b:7a:8e:90:81:6a:5e:85:b9:55:26:41:0b:5a:10:ab: eb:e8:18:93:da:b6:e8:1d:db:0a:d5:e7:10:8d:10:00:ec:c9: 80:62:20:d7:ed:62:64:78:0b:73:c1:1a:50:69:4a:d2:94:e7: 5b:db:d3:af:d3:20:45:0f:c0:d8:d6:fe:8a:d4:ec:a9:3c:73: 51:97:f7:1b:c2:8c:ff:eb:dc:55:b7:d4:80:74:e7:4e:14:5a: e5:47:70:36:3a:f8:76:f0:8e:e5:2a:2c:82:da:33:6c:65:bd: 91:eb:9f:f5:80:07:0a:d1:07:bf:69:1b:e6:a6:c0:73:59:27: fb:24:7f:c2:43:53:2e:fb:05:7e:5a:e7:de:37:d7:7c:fe:b2: e5:80:7e:a3:12:f8:d3:44:6a:7b:e8:e0:3e:b8:16:11:74:51: a7:a7:27:e2:96:4b:a0:ee:58:a2:bb:21:af:79:68:69:7e:29: da:da:37:f1:12:8c:e8:95:5a:6b:41:ee:65:96:9b:74:7f:7a: 09:0d:37:a6:ac:89:95:7b:75:77:39:4a:2c:13:6c:a6:13:3d: 74:d3:8b:85:4c:04:2f:97:d0:c5:02:d1:54:6a:da:a1:ab:cb: 3c:8b:b2:06:e6:4e:c1:d6:d8:db:9f:77:89:2b:00:4a:9c:55: bc:f0:b7:6b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURUW6wZ00o8pSZ5R8CjnyHJKlTpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA2MTIxNTM0MzhaFw0yNjA2MTMxNjMzMzhaMDMxMTAvBgNV BAMTKEU2MzVGQzYzOUU2Q0E4QThBQTE2RkI1OEQ5MzlCNjQ0N0U2MTY0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bI8VAo1gxA5Yu4f6JaVVJlV5 td3/XjKorkSzBAXb62mh5XaU7InCVlTmM7ySYknS17rwdHEWPCt6axYbdqewSxR3 jZIIIOFmrANj5O/3o9VWHy+ELIwfAUoiCDbPHjjzAWoTSgRzhDdg7lR64NJHpPqq FxEdXSWD/Jz3PIw7cX4DGP447sX1TuoCwwKvK9gvbPx5W2yEekzfqe/qF3L9FXzz TOj7D23QgE1vnystz34GrUPaPpQvCfWlByZzPOpHc5PXoor/pqwIlWhhh1TechV7 dl+SeC5LYIWsGY3dn3Xusn+DyPp8mqrfcLnLxqs9EptsQeiDsAS2YcjeDg6VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5jX8Y55sqKiqFvtY2Tm2RH5hZP8wHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAsreo6QgWpehblVJkEL WhCr6+gYk9q26B3bCtXnEI0QAOzJgGIg1+1iZHgLc8EaUGlK0pTnW9vTr9MgRQ/A 2Nb+itTsqTxzUZf3G8KM/+vcVbfUgHTnThRa5UdwNjr4dvCO5SosgtozbGW9keuf 9YAHCtEHv2kb5qbAc1kn+yR/wkNTLvsFflrn3jfXfP6y5YB+oxL400Rqe+jgPrgW EXRRp6cn4pZLoO5Yorshr3loaX4p2to38RKM6JVaa0HuZZabdH96CQ03pqyJlXt1 dzlKLBNsphM9dNOLhUwEL5fQxQLRVGraoavLPIuyBuZOwdbY2593iSsASpxVvPC3 aw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:34:57 2026 by rpki-client