$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: XhOqHJRzbTDWnAkyxdbMb4w038RNM1bmv7fiDxKhanI= Subject key identifier: 97:87:6C:0E:AF:50:A5:C4:2D:E4:6B:96:7B:EC:8C:BB:C0:4A:61:5F Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 0ED8F030FD4ECFA87B6B95CB8DB39741D7441D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 0331 Signing time: Sat 18 Apr 2026 17:42:17 +0000 Manifest this update: Sat 18 Apr 2026 17:37:17 +0000 Manifest next update: Sun 19 Apr 2026 20:37:17 +0000 Files and hashes: 1: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 2: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) 3: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=) 4: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 5: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 6: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 2yQtmWBxbq4UmjTIt1Z2fx9ochAzm/q4FnEi7AGHUBw=) 7: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=) 8: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 9: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=) 11: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 12: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=) 13: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 14: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 15: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 16: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=) 17: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=) 18: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 19: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 20: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=) 21: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 20:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d8:f0:30:fd:4e:cf:a8:7b:6b:95:cb:8d:b3:97:41:d7:44:1d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Apr 18 17:37:17 2026 GMT Not After : Apr 19 20:37:17 2026 GMT Subject: CN=97876C0EAF50A5C42DE46B967BEC8CBBC04A615F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:ef:2d:54:3b:20:ad:63:95:cc:9b:13:2f: 82:e9:2b:74:dc:27:a0:eb:05:5d:c7:e1:3f:f4:02: ce:29:2b:f2:db:02:ea:d1:a9:7d:cd:2a:07:ef:6b: 05:ac:f1:e6:be:55:08:f4:fd:9d:6d:1b:9a:51:1b: 60:27:af:76:89:34:7b:97:8f:0b:70:92:f7:ee:2b: 89:11:0c:38:b4:62:8e:cb:57:b8:ba:4e:79:14:12: 4f:25:68:00:81:cc:a9:60:f0:3d:1c:dd:99:a0:b5: 9e:b9:b2:08:df:b0:ef:e8:3c:ee:d2:1b:0e:42:0b: 7b:48:79:97:e7:5f:b2:06:b1:2a:09:29:bd:ab:3d: b3:01:5b:15:e1:3b:f8:0c:9a:14:c6:cd:50:ed:1c: 6c:e9:ef:4b:ff:21:1d:b6:9d:ee:e7:48:ed:ad:2c: 9d:17:06:ac:82:f0:09:7a:d5:ee:5e:51:32:cb:7f: 19:62:13:d4:8c:a4:df:2b:ad:43:cf:42:7f:05:de: 6a:48:16:34:d5:2b:4f:df:cd:18:4e:55:2d:36:c1: c6:4a:68:b9:10:1b:91:4e:7c:84:22:69:14:d1:46: f9:a7:3e:70:86:f4:ac:be:ff:f7:38:71:93:6e:be: 9e:2c:34:c6:bf:43:55:2c:bf:19:1a:88:a1:26:15: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:87:6C:0E:AF:50:A5:C4:2D:E4:6B:96:7B:EC:8C:BB:C0:4A:61:5F X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:11:8c:5a:fb:a6:2b:4c:27:7a:ba:5c:9b:e6:94:35:9c:07: 8a:b3:7c:c5:9b:22:c5:03:4c:25:8b:aa:6e:8b:fc:f3:76:cc: 85:c2:75:f2:c3:29:3d:2a:05:cb:57:cc:47:67:06:b4:75:4c: d9:22:f5:17:6c:ba:e6:40:39:dc:98:db:06:33:f9:5e:56:38: e7:29:d9:58:b5:23:49:25:c7:5f:af:cf:55:68:c0:51:cb:7d: 2e:2b:42:42:82:5a:e5:4b:d5:f0:85:ed:e7:a1:69:a1:66:91: 08:31:06:05:6c:e3:ef:97:e2:f3:15:ba:84:3a:56:1b:16:3e: 9d:79:c9:e7:a4:8a:11:76:27:3c:1f:76:53:dd:95:d0:00:44: 39:3b:9f:cc:4e:fc:92:3c:d0:c4:2b:b0:92:61:59:fb:0f:09: 0a:fb:9f:a2:21:69:e5:06:ae:e7:99:50:a6:22:7e:ae:80:f8: 89:ad:97:c0:2d:86:78:74:af:fc:af:f9:5b:72:b4:67:d9:c0: 89:05:ed:60:0e:6a:3b:40:9e:b5:77:f1:a7:d3:50:1f:3d:cc: ab:91:04:a9:51:49:1f:b8:39:37:08:f6:13:47:b6:6e:df:33: da:52:9e:f5:f8:6b:c0:d3:a7:dc:25:2b:91:f5:45:cb:b2:f8: 51:0d:29:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDtjwMP1Oz6h7a5XLjbOXQddEHUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjA0MTgxNzM3MTdaFw0yNjA0MTkyMDM3MTdaMDMxMTAvBgNV BAMTKDk3ODc2QzBFQUY1MEE1QzQyREU0NkI5NjdCRUM4Q0JCQzA0QTYxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3+8tVDsgrWOVzJsTL4LpK3Tc J6DrBV3H4T/0As4pK/LbAurRqX3NKgfvawWs8ea+VQj0/Z1tG5pRG2Anr3aJNHuX jwtwkvfuK4kRDDi0Yo7LV7i6TnkUEk8laACBzKlg8D0c3ZmgtZ65sgjfsO/oPO7S Gw5CC3tIeZfnX7IGsSoJKb2rPbMBWxXhO/gMmhTGzVDtHGzp70v/IR22ne7nSO2t LJ0XBqyC8Al61e5eUTLLfxliE9SMpN8rrUPPQn8F3mpIFjTVK0/fzRhOVS02wcZK aLkQG5FOfIQiaRTRRvmnPnCG9Ky+//c4cZNuvp4sNMa/Q1UsvxkaiKEmFSaJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl4dsDq9QpcQt5GuWe+yMu8BKYV8wHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRGMWvumK0wnerpcm+aU NZwHirN8xZsixQNMJYuqbov883bMhcJ18sMpPSoFy1fMR2cGtHVM2SL1F2y65kA5 3JjbBjP5XlY45ynZWLUjSSXHX6/PVWjAUct9LitCQoJa5UvV8IXt56FpoWaRCDEG BWzj75fi8xW6hDpWGxY+nXnJ56SKEXYnPB92U92V0ABEOTufzE78kjzQxCuwkmFZ +w8JCvufoiFp5Qau55lQpiJ+roD4ia2XwC2GeHSv/K/5W3K0Z9nAiQXtYA5qO0Ce tXfxp9NQHz3Mq5EEqVFJH7g5Nwj2E0e2bt8z2lKe9fhrwNOn3CUrkfVFy7L4UQ0p 1w== -----END CERTIFICATE-----Generated at Sun Apr 19 11:30:50 2026 by rpki-client