$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: KI2UQI/FxS9CHMOZ5lzfaDyWkKvV8JxtnZFWo5JGLj0= Subject key identifier: 1A:95:E1:0D:FE:B7:07:DA:34:7E:99:A3:A7:69:0E:E4:8C:EE:E9:88 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 748760475AF84C7162468E911B93D3E6E8F12637 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 4F Signing time: Fri 17 Apr 2026 00:39:51 +0000 Manifest this update: Fri 17 Apr 2026 00:34:51 +0000 Manifest next update: Sat 18 Apr 2026 01:52:51 +0000 Files and hashes: 1: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: 3S7to0zlKYDCQRTkSF0ySoN6rLLjzkmA83PpRla8v/M=) 2: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 3: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 4: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 5: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 6: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 7: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 8: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 9: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 14:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:87:60:47:5a:f8:4c:71:62:46:8e:91:1b:93:d3:e6:e8:f1:26:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Apr 17 00:34:51 2026 GMT Not After : Apr 18 01:52:51 2026 GMT Subject: CN=1A95E10DFEB707DA347E99A3A7690EE48CEEE988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:97:e7:5f:7a:86:d1:da:40:d4:61:a6:f6: 2f:4e:52:a3:d3:03:d6:80:c3:de:e7:1b:3e:4c:59: 48:b6:cc:53:38:65:38:ce:04:81:f1:79:ab:c4:c4: 1c:53:f3:17:fc:c0:26:d3:01:01:96:5b:3f:f4:dd: 33:2c:14:b6:f1:99:a1:0c:ff:c6:0a:d3:04:00:3d: f2:06:39:e0:21:48:36:ab:22:8e:35:78:ad:d8:17: 72:34:3e:41:b4:12:68:6b:38:22:01:af:f5:5c:29: c1:f5:4d:49:0c:9a:fc:de:ff:fe:c6:c1:44:9d:97: f7:8c:77:c6:94:1b:4f:cd:79:e8:10:a2:b6:7f:c3: 95:8c:ed:c4:80:05:ee:89:51:ba:58:3b:af:9a:29: 55:58:4a:32:e6:ba:e7:35:d7:41:55:e9:77:98:f9: fb:89:62:ce:a2:25:5b:5d:69:28:15:42:96:f6:13: 2b:f8:89:49:18:3e:f9:f4:98:e6:95:24:60:4f:5e: 44:85:9e:8b:b3:1d:8c:ba:13:eb:ec:35:da:49:38: c1:ab:49:f1:83:07:79:14:bc:50:eb:b6:7f:d6:e3: 41:b8:cd:bc:e2:f7:8f:7f:85:0a:c1:37:04:90:d0: 80:8c:57:74:b3:ca:fa:27:21:d8:32:59:55:d7:cb: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:E1:0D:FE:B7:07:DA:34:7E:99:A3:A7:69:0E:E4:8C:EE:E9:88 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:98:b7:a7:c4:18:ce:1b:1d:87:3f:ad:c8:69:18:53:d5:44: 65:69:d3:c9:ce:13:01:b7:1e:e2:87:13:87:5c:1d:ad:3d:40: f5:bc:f6:83:d2:8c:4e:25:22:32:62:45:cc:6a:40:df:00:00: f0:79:d0:e4:6a:84:33:e4:00:f8:20:5d:07:61:21:3b:42:50: 15:e5:79:ba:0a:48:58:39:27:f3:74:c0:18:02:1b:ed:cb:f3: b7:b4:bd:63:8a:e0:93:24:01:b3:5d:f0:2a:71:19:84:f7:32: 91:f5:0d:cc:5b:c0:22:54:1e:04:18:59:2c:a5:e1:7e:4d:22: c8:65:4b:e0:af:97:f7:52:d2:cf:27:4d:d0:30:60:c2:48:68: f2:ad:79:0a:84:52:90:96:cc:55:90:8e:b5:c8:aa:32:03:cf: e1:f9:58:fc:fe:6d:2e:e8:84:1a:45:5d:24:b5:a3:7e:b1:47: 28:0e:b2:ce:1b:be:8c:05:99:58:c2:a5:ff:66:37:6b:98:4f: 16:5d:5b:2f:72:a1:6b:54:4a:47:f0:93:ec:e3:a1:7f:d6:fe: fe:a5:46:7d:92:23:ad:4b:49:93:b6:e8:bc:50:ff:06:58:13: b8:61:bc:e4:76:68:72:f4:99:cc:13:59:c1:e8:73:c0:8d:b7: 07:62:e5:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdIdgR1r4THFiRo6RG5PT5ujxJjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA0MTcwMDM0NTFaFw0yNjA0MTgwMTUyNTFaMDMxMTAvBgNV BAMTKDFBOTVFMTBERkVCNzA3REEzNDdFOTlBM0E3NjkwRUU0OENFRUU5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNhJfnX3qG0dpA1GGm9i9OUqPT A9aAw97nGz5MWUi2zFM4ZTjOBIHxeavExBxT8xf8wCbTAQGWWz/03TMsFLbxmaEM /8YK0wQAPfIGOeAhSDarIo41eK3YF3I0PkG0EmhrOCIBr/VcKcH1TUkMmvze//7G wUSdl/eMd8aUG0/NeegQorZ/w5WM7cSABe6JUbpYO6+aKVVYSjLmuuc110FV6XeY +fuJYs6iJVtdaSgVQpb2Eyv4iUkYPvn0mOaVJGBPXkSFnouzHYy6E+vsNdpJOMGr SfGDB3kUvFDrtn/W40G4zbzi949/hQrBNwSQ0ICMV3SzyvonIdgyWVXXy6bBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGpXhDf63B9o0fpmjp2kO5Izu6YgwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKmLen xBjOGx2HP63IaRhT1URladPJzhMBtx7ihxOHXB2tPUD1vPaD0oxOJSIyYkXMakDf AADwedDkaoQz5AD4IF0HYSE7QlAV5Xm6CkhYOSfzdMAYAhvty/O3tL1jiuCTJAGz XfAqcRmE9zKR9Q3MW8AiVB4EGFkspeF+TSLIZUvgr5f3UtLPJ03QMGDCSGjyrXkK hFKQlsxVkI61yKoyA8/h+Vj8/m0u6IQaRV0ktaN+sUcoDrLOG76MBZlYwqX/Zjdr mE8WXVsvcqFrVEpH8JPs46F/1v7+pUZ9kiOtS0mTtui8UP8GWBO4Ybzkdmhy9JnM E1nB6HPAjbcHYuWO -----END CERTIFICATE-----Generated at Fri Apr 17 06:28:27 2026 by rpki-client