$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: z5IBA5aNOG2fLG1vnqIiMFd/OHOCFmPzt8VILcZ7jHU= Subject key identifier: 68:48:57:49:E1:A6:5D:7B:AE:42:A0:CC:EE:B8:51:60:AB:7A:E3:3F Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 5AAFF8037A38231781C0C0320BD02634D1D113BB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: F6 Signing time: Sat 13 Jun 2026 11:15:36 +0000 Manifest this update: Sat 13 Jun 2026 11:10:36 +0000 Manifest next update: Sun 14 Jun 2026 13:20:36 +0000 Files and hashes: 1: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 2: 326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa (hash: 89YEfdCNb6RXT7z5CsfijNvWZCI5tf3pkWh8RSXOhww=) 3: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: ffCwGK7vs+sXmjFAE4n48S9SECFM4fY2GeHU3KBv/3k=) 4: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 06:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:af:f8:03:7a:38:23:17:81:c0:c0:32:0b:d0:26:34:d1:d1:13:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jun 13 11:10:36 2026 GMT Not After : Jun 14 13:20:36 2026 GMT Subject: CN=68485749E1A65D7BAE42A0CCEEB85160AB7AE33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:ea:9a:26:53:b5:e2:e0:7a:3a:a4:78:bd: 37:36:0f:23:97:b7:18:84:80:6d:67:e2:91:ec:cf: 99:cd:96:3f:40:87:b2:4d:3b:70:92:a2:ec:ba:8a: e2:bd:0a:69:8b:ef:fd:0c:08:67:83:fb:f4:d3:bb: d4:6b:24:49:b2:6b:b6:7b:ef:56:d2:b3:48:87:dc: 30:3a:9a:43:5a:c5:1b:49:d4:38:7f:2f:be:24:ce: 29:a3:d0:02:d2:04:84:a6:b0:92:42:1b:0d:12:b6: e7:26:d6:a4:37:7c:a8:9c:e7:b2:49:38:c6:55:a0: 9f:30:14:e8:ab:89:89:65:bf:e7:5c:a2:01:fe:31: ed:4d:43:31:b8:41:bc:b9:db:d4:2a:89:87:41:24: 10:38:30:58:32:d1:31:81:78:71:81:fb:ae:e4:59: a1:e9:23:c3:e3:17:16:3b:97:1a:c4:be:73:76:07: 70:b8:5a:b1:d8:73:b8:0c:74:bb:bf:68:9d:bf:c5: df:fd:38:69:f1:f8:11:b3:83:6d:f1:47:77:a7:2c: 58:0a:9c:2a:59:1d:65:d6:1f:33:9b:be:6a:f3:36: cf:03:74:e8:eb:f1:4b:25:53:ec:7e:34:01:97:b1: fe:91:40:9f:8a:1e:d3:af:be:c1:00:8a:48:27:a4: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:57:49:E1:A6:5D:7B:AE:42:A0:CC:EE:B8:51:60:AB:7A:E3:3F X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cd:60:57:56:9d:9a:76:3f:c9:1c:5d:39:5f:ab:f3:62:e0: dc:41:10:f3:1d:60:29:65:73:c9:59:4d:53:67:02:47:e6:14: 4b:40:29:47:56:be:2f:8d:cb:fc:24:a8:5f:e4:94:93:98:4c: ff:a1:3d:56:81:5f:5f:cc:0c:78:53:1b:ba:cf:b5:c3:6e:e6: 2f:82:8f:ee:ef:11:89:cd:f5:ec:ad:ef:f3:58:ac:bb:25:7f: d3:e2:08:39:bc:c3:75:5a:e6:1c:6a:85:0e:8e:b7:65:9a:ea: bd:dd:17:1b:60:6d:63:1c:11:06:da:50:32:a9:f4:cd:25:8a: 7e:dc:d8:c2:64:cb:ce:f8:dd:8a:46:96:2e:88:61:a4:94:5e: b6:eb:c3:15:61:86:24:e4:1a:3b:f2:4c:c5:99:3d:ae:4c:4c: 1d:85:7c:90:cf:bd:30:ef:aa:84:7b:7b:33:7e:ba:09:ca:0c: 91:c3:d6:d7:4e:b7:59:98:db:6b:f1:ef:16:b0:d2:db:12:72: 3c:c6:5f:ea:22:e0:ac:67:58:9b:c3:43:29:0d:60:6b:e6:73: 84:b9:ec:3d:1e:11:4b:74:6e:4f:98:6e:fe:83:ff:31:b7:5a: 8b:0d:62:f3:ee:c0:26:6f:0b:50:3c:b5:23:a4:2f:d3:c2:5c: c4:69:bd:41 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWq/4A3o4IxeBwMAyC9AmNNHRE7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA2MTMxMTEwMzZaFw0yNjA2MTQxMzIwMzZaMDMxMTAvBgNV BAMTKDY4NDg1NzQ5RTFBNjVEN0JBRTQyQTBDQ0VFQjg1MTYwQUI3QUUzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimuqaJlO14uB6OqR4vTc2DyOX txiEgG1n4pHsz5nNlj9Ah7JNO3CSouy6iuK9CmmL7/0MCGeD+/TTu9RrJEmya7Z7 71bSs0iH3DA6mkNaxRtJ1Dh/L74kzimj0ALSBISmsJJCGw0Stucm1qQ3fKic57JJ OMZVoJ8wFOiriYllv+dcogH+Me1NQzG4Qby529QqiYdBJBA4MFgy0TGBeHGB+67k WaHpI8PjFxY7lxrEvnN2B3C4WrHYc7gMdLu/aJ2/xd/9OGnx+BGzg23xR3enLFgK nCpZHWXWHzObvmrzNs8DdOjr8UslU+x+NAGXsf6RQJ+KHtOvvsEAikgnpEUHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUaEhXSeGmXXuuQqDM7rhRYKt64z8wHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc1gV1admnY/yRxdOV+r 82Lg3EEQ8x1gKWVzyVlNU2cCR+YUS0ApR1a+L43L/CSoX+SUk5hM/6E9VoFfX8wM eFMbus+1w27mL4KP7u8Ric317K3v81isuyV/0+IIObzDdVrmHGqFDo63ZZrqvd0X G2BtYxwRBtpQMqn0zSWKftzYwmTLzvjdikaWLohhpJRetuvDFWGGJOQaO/JMxZk9 rkxMHYV8kM+9MO+qhHt7M366CcoMkcPW1063WZjba/HvFrDS2xJyPMZf6iLgrGdY m8NDKQ1ga+ZzhLnsPR4RS3RuT5hu/oP/Mbdaiw1i8+7AJm8LUDy1I6Qv08JcxGm9 QQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:17:07 2026 by rpki-client