$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft File: 1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json) Hash identifier: 0wGG+GLyyu3LrVDVNF8ai7Z69OEe1Pf3hWf56EN6ti4= Subject key identifier: A4:C2:09:61:CA:EE:8E:E5:62:3E:B1:60:BF:DE:DA:66:44:00:D5:CE Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 0FE5A2B9F7F53546E64C2A6B923EA164D8ACA359 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft Manifest number: 24 Signing time: Thu 14 May 2026 13:25:54 +0000 Manifest this update: Thu 14 May 2026 13:20:54 +0000 Manifest next update: Fri 15 May 2026 15:02:54 +0000 Files and hashes: 1: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: ASm//M6vW7W3kz8UeKgjw825flZ1HZQJlNjZ4IrQyIo=) 2: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=) 3: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=) 4: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=) 5: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=) 6: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e5:a2:b9:f7:f5:35:46:e6:4c:2a:6b:92:3e:a1:64:d8:ac:a3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: May 14 13:20:54 2026 GMT Not After : May 15 15:02:54 2026 GMT Subject: CN=A4C20961CAEE8EE5623EB160BFDEDA664400D5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:83:bb:84:c8:e8:5f:55:c1:64:24:0f:c0: 7f:e0:54:82:f4:40:20:a7:e2:a6:65:30:3f:11:87: 5a:7f:65:f1:f3:10:65:91:d8:45:55:4f:5d:fe:10: b9:c7:e0:c1:28:19:33:a7:0d:f7:2f:18:7f:3e:7d: d1:da:4e:33:90:f0:29:d9:1b:bf:aa:78:41:9e:d6: 74:19:a0:66:f6:31:d1:a8:b7:44:28:79:20:aa:1b: 64:a4:9e:7f:27:0c:d1:3b:91:b0:57:7d:0a:38:e5: 1b:5a:68:4c:33:70:49:4a:15:80:3a:c9:cc:1c:0a: c9:c3:4b:44:c9:54:e9:b1:6c:01:e4:29:2a:fc:59: 76:07:07:db:9f:3c:c4:e6:50:9b:a5:81:22:e5:bb: c3:a2:83:6a:ee:97:e7:e0:be:6c:33:9a:02:ad:a8: 9e:32:da:c7:2c:13:17:b3:cc:66:59:61:c7:05:73: ef:84:99:7f:25:4b:61:62:5d:a9:75:85:a2:b8:68: d0:d7:bb:fe:2e:29:a1:3b:87:2f:f9:ef:53:34:7d: d5:11:a7:b1:b3:da:b0:a3:8e:aa:7b:3f:bf:a7:eb: b8:c6:e2:cc:d5:56:89:a4:a8:82:71:69:a0:6c:2d: 38:2c:49:d6:91:89:4e:ea:92:04:95:42:12:20:e8: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:09:61:CA:EE:8E:E5:62:3E:B1:60:BF:DE:DA:66:44:00:D5:CE X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8d:81:d4:01:83:fa:f3:e5:ec:29:36:42:1a:75:07:5d:59: ec:c3:66:1b:16:9f:1f:5c:08:e9:cd:8b:4c:17:7a:82:27:ba: a9:7a:88:6d:00:34:08:7f:50:66:f0:5a:6e:66:0e:cc:03:32: 42:2a:c8:3b:c8:76:ce:15:ec:a6:60:bd:6f:b0:e6:52:f9:13: d4:54:dc:d1:61:68:0d:1c:d7:5e:b6:d8:9a:1b:cf:42:99:48: e9:94:e3:25:3e:ae:04:3c:8d:6f:7a:ce:e3:52:5c:c3:92:26: 56:fd:0f:5b:20:f4:48:b2:33:4a:a7:74:6d:ae:d1:20:20:ed: 2d:1d:33:71:86:21:15:fc:71:af:1d:e0:0a:7e:f2:48:c5:0e: c9:a5:c0:5a:b7:e0:55:8d:a5:0b:9f:00:63:45:63:17:7f:14: a8:4d:bd:b6:47:dd:05:27:32:9f:f7:60:15:69:e0:b2:1c:73: e0:01:f0:3e:35:a3:2b:c8:61:65:f1:bb:ab:5e:48:31:b8:d3: 81:f9:13:8a:7d:0c:25:84:59:98:89:16:8e:0f:e9:a1:49:ff: 1f:cb:ec:1d:e5:10:b4:64:88:87:79:ce:46:96:3f:1b:e7:82: 2a:38:72:89:08:41:5e:7d:f2:70:08:ab:e0:9a:4e:3a:ef:78: ad:3a:3e:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD+Wiuff1NUbmTCprkj6hZNiso1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA1MTQxMzIwNTRaFw0yNjA1MTUxNTAyNTRaMDMxMTAvBgNV BAMTKEE0QzIwOTYxQ0FFRThFRTU2MjNFQjE2MEJGREVEQTY2NDQwMEQ1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuU4O7hMjoX1XBZCQPwH/gVIL0 QCCn4qZlMD8Rh1p/ZfHzEGWR2EVVT13+ELnH4MEoGTOnDfcvGH8+fdHaTjOQ8CnZ G7+qeEGe1nQZoGb2MdGot0QoeSCqG2Sknn8nDNE7kbBXfQo45RtaaEwzcElKFYA6 ycwcCsnDS0TJVOmxbAHkKSr8WXYHB9ufPMTmUJulgSLlu8Oig2rul+fgvmwzmgKt qJ4y2scsExezzGZZYccFc++EmX8lS2FiXal1haK4aNDXu/4uKaE7hy/571M0fdUR p7Gz2rCjjqp7P7+n67jG4szVVomkqIJxaaBsLTgsSdaRiU7qkgSVQhIg6BxhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpMIJYcrujuViPrFgv97aZkQA1c4wHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAwMmY4ZWU2LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChjYHU AYP68+XsKTZCGnUHXVnsw2YbFp8fXAjpzYtMF3qCJ7qpeohtADQIf1Bm8FpuZg7M AzJCKsg7yHbOFeymYL1vsOZS+RPUVNzRYWgNHNdettiaG89CmUjplOMlPq4EPI1v es7jUlzDkiZW/Q9bIPRIsjNKp3RtrtEgIO0tHTNxhiEV/HGvHeAKfvJIxQ7JpcBa t+BVjaULnwBjRWMXfxSoTb22R90FJzKf92AVaeCyHHPgAfA+NaMryGFl8burXkgx uNOB+ROKfQwlhFmYiRaOD+mhSf8fy+wd5RC0ZIiHec5Glj8b54IqOHKJCEFeffJw CKvgmk4673itOj5p -----END CERTIFICATE-----Generated at Fri May 15 06:55:14 2026 by rpki-client