$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: 6cSMJDGjsdDFgpv0FqOWDPiPXFC9BGtd0TSaLOnr7Cg= Subject key identifier: E3:AD:D3:56:B9:50:83:16:24:72:8D:84:D3:00:67:F1:8E:4D:D5:0D Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 39D0A2705311B2267D0859B22D320A969810815C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 058C Signing time: Wed 03 Jun 2026 13:25:39 +0000 Manifest this update: Wed 03 Jun 2026 13:20:39 +0000 Manifest next update: Thu 04 Jun 2026 14:36:39 +0000 Files and hashes: 1: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 2: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 3: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 4: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 5: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 6: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 7: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 8: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 9: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 10: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 11: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 12: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 13: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 14: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 15: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 16: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 17: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 18: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 19: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 20: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 21: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 22: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 23: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 24: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: HZhzr9ZRceSmnoPJXn0PvlE+tYVX+B70UdwUtOnstcE=) 25: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 26: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 27: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 28: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 14:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d0:a2:70:53:11:b2:26:7d:08:59:b2:2d:32:0a:96:98:10:81:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jun 3 13:20:39 2026 GMT Not After : Jun 4 14:36:39 2026 GMT Subject: CN=E3ADD356B950831624728D84D30067F18E4DD50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:ac:e0:79:3b:bd:1c:9d:c1:07:c1:4b:c5: 86:ff:ce:fb:28:6d:6d:4a:45:4d:dc:85:d2:ce:09: 64:40:d0:e4:f0:b8:93:99:e9:04:19:40:08:d5:4a: ac:10:89:27:72:29:2d:cf:9f:7e:af:a6:78:e0:6e: e7:36:0c:69:c4:49:3c:85:ee:82:2c:62:2c:a1:55: bd:a8:14:61:b3:05:ec:4f:e2:f5:26:1d:da:8d:02: 78:45:ae:bc:52:ec:d1:46:64:4a:00:88:4b:78:e3: 76:e8:60:cf:25:f3:73:a2:fc:64:2f:15:f3:d2:70: 9a:3f:e4:3b:b5:ed:be:5c:b6:bd:cb:11:07:71:9d: ff:2a:c0:ad:cc:8a:82:49:7e:cd:7e:38:d6:b1:e2: 55:76:80:1d:bf:4e:e1:50:23:03:c5:6a:54:63:91: 7b:7c:56:f1:38:e5:13:a9:08:c0:e8:77:7a:81:ff: e0:be:ef:32:de:98:b5:fa:8b:d3:ad:55:84:e2:76: 98:ef:3d:85:75:53:94:47:7d:74:3a:c6:97:96:b7: 35:b3:50:1d:83:a0:61:91:94:64:cb:a7:a0:9f:7f: 06:d0:67:89:f7:5f:fe:a4:30:6d:8d:d1:cb:f8:41: 4f:c1:4b:ba:12:a7:8e:14:eb:d3:06:c1:6f:83:6a: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AD:D3:56:B9:50:83:16:24:72:8D:84:D3:00:67:F1:8E:4D:D5:0D X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:57:6d:e7:04:04:7d:00:97:d8:6b:9e:99:e2:cb:2f:1e: d6:8c:93:34:96:64:d8:ca:d4:00:21:55:b2:c2:a8:13:ef:34: 29:40:fb:9a:cc:64:4f:2d:f8:d3:99:14:21:73:17:5b:1e:f9: bc:33:b6:85:4c:70:7c:ae:68:d7:0a:55:3b:aa:b6:13:2d:8d: a6:d7:9a:cc:5d:9c:f2:5f:38:e3:2f:e8:52:b1:55:da:34:41: b6:3d:8b:14:88:30:d2:bc:d5:cf:e1:47:6d:7c:6d:23:20:08: eb:6b:d2:f6:6d:69:1f:b3:e7:15:f4:d5:d8:55:df:8a:e5:f5: 6c:b1:a5:f9:46:ac:da:ef:2c:71:e5:3e:48:ba:a3:db:ce:8d: 02:09:9b:b5:a4:78:7f:6f:31:56:6c:d1:a4:4e:e3:79:20:e9: 00:14:a7:27:d7:8e:fe:39:55:2c:1f:c1:03:ed:07:29:bf:15: 7a:43:4f:ec:4b:35:0e:e5:95:42:bb:ba:65:87:7c:b3:72:05: 96:e0:27:d9:d8:34:a0:f2:6f:da:7b:8e:a5:a6:85:c8:14:32: 24:79:b9:bd:ad:1a:16:6c:4e:b2:2d:fc:83:75:fd:4e:09:d4: e2:62:56:fa:25:d8:40:c1:8d:61:c6:e6:2b:25:d5:1b:c8:85: eb:8b:77:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOdCicFMRsiZ9CFmyLTIKlpgQgVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA2MDMxMzIwMzlaFw0yNjA2MDQxNDM2MzlaMDMxMTAvBgNV BAMTKEUzQUREMzU2Qjk1MDgzMTYyNDcyOEQ4NEQzMDA2N0YxOEU0REQ1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5U6zgeTu9HJ3BB8FLxYb/zvso bW1KRU3chdLOCWRA0OTwuJOZ6QQZQAjVSqwQiSdyKS3Pn36vpnjgbuc2DGnESTyF 7oIsYiyhVb2oFGGzBexP4vUmHdqNAnhFrrxS7NFGZEoAiEt443boYM8l83Oi/GQv FfPScJo/5Du17b5ctr3LEQdxnf8qwK3MioJJfs1+ONax4lV2gB2/TuFQIwPFalRj kXt8VvE45ROpCMDod3qB/+C+7zLemLX6i9OtVYTidpjvPYV1U5RHfXQ6xpeWtzWz UB2DoGGRlGTLp6CffwbQZ4n3X/6kMG2N0cv4QU/BS7oSp44U69MGwW+DavkbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU463TVrlQgxYkco2E0wBn8Y5N1Q0wHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+xXbecEBH0Al9hrnpni yy8e1oyTNJZk2MrUACFVssKoE+80KUD7msxkTy3405kUIXMXWx75vDO2hUxwfK5o 1wpVO6q2Ey2NpteazF2c8l844y/oUrFV2jRBtj2LFIgw0rzVz+FHbXxtIyAI62vS 9m1pH7PnFfTV2FXfiuX1bLGl+Uas2u8sceU+SLqj286NAgmbtaR4f28xVmzRpE7j eSDpABSnJ9eO/jlVLB/BA+0HKb8VekNP7Es1DuWVQru6ZYd8s3IFluAn2dg0oPJv 2nuOpaaFyBQyJHm5va0aFmxOsi38g3X9TgnU4mJW+iXYQMGNYcbmKyXVG8iF64t3 DQ== -----END CERTIFICATE-----Generated at Thu Jun 4 05:17:42 2026 by rpki-client