$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft File: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft (raw, json) Hash identifier: 1+8D/zeiYoscE/ncd9JaclvlcGmmXztfWdqy4LYsv4M= Subject key identifier: CF:BB:A9:3A:90:5F:14:05:39:AB:D6:A2:1F:4A:35:B5:BA:C9:08:9A Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 303CDA6E5476C9DA897F1A4CE8E8DE6AB2748E50 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft Manifest number: 6F Signing time: Thu 09 Apr 2026 13:53:02 +0000 Manifest this update: Thu 09 Apr 2026 13:48:02 +0000 Manifest next update: Fri 10 Apr 2026 15:25:02 +0000 Files and hashes: 1: 326131343a373538303a666130303a3a2f34342d3438203d3e20323134333434.roa (hash: UqCNzDGtU5aD3Sfhq0hDlqQDB4EqJwXqpH7M/ZgJ89U=) 2: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: kUZeICjpWfmdYTRcttJdWcKKKLNcsbHL+pwflJZJ2VU=) 3: 326131343a373538303a666132303a3a2f34342d3438203d3e20323134333434.roa (hash: q8V2y9WUGOeaflB9on/TGNr/ZKQwKQK7OMK/V1fxCUE=) 4: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (hash: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo=) 5: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl (hash: xDjPMsuYvGtFNmgjfToPF1OgnHyLyp1ED6LtrrhON/k=) 6: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (hash: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I=) 7: 326131343a373538303a666133303a3a2f34342d3438203d3e20323134333434.roa (hash: lZi2rz69yJ2BC+doYbaqrHrJGm4sWCLa8BxeQ92G0Hs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 14:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3c:da:6e:54:76:c9:da:89:7f:1a:4c:e8:e8:de:6a:b2:74:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Apr 9 13:48:02 2026 GMT Not After : Apr 10 15:25:02 2026 GMT Subject: CN=CFBBA93A905F140539ABD6A21F4A35B5BAC9089A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:b6:dd:02:7c:4d:5f:d0:2a:ed:31:ca:8a: 5e:0e:40:e7:21:e9:96:c9:15:dc:1b:c7:7a:0c:6c: ad:d4:47:10:09:6c:75:fe:7e:34:81:a3:34:6d:03: 64:75:30:7d:b8:26:2e:bb:15:c9:7b:5b:9c:5c:e3: 57:e9:80:f1:ac:4c:94:99:ed:6c:88:ff:9d:d3:5c: a5:50:37:cb:5c:8d:ae:6f:ec:a9:0c:30:70:fe:74: 27:5a:24:31:e9:14:44:7c:10:d1:fc:58:2f:96:6a: ac:d8:c5:f2:ef:1c:37:6a:a5:ae:46:a2:f9:ff:61: 2c:06:09:27:79:77:1b:87:41:e4:63:91:ba:b7:0b: 8c:16:ad:89:ca:43:30:76:0a:7a:23:0e:55:fc:02: 61:fc:85:ba:5b:75:a1:93:3d:d5:cd:84:11:1f:7c: 0a:78:6b:30:01:80:ca:6b:58:fa:e0:9b:51:42:fc: 03:9a:b4:98:32:27:01:b2:3d:c3:50:71:50:e7:00: fa:53:91:f7:87:03:ba:5f:89:4a:48:69:60:5e:c8: ee:81:e8:c7:b2:f9:7e:fd:5b:76:d2:4f:c0:dd:12: af:39:75:1e:cf:a0:09:86:66:5a:5f:bb:f8:58:bd: 80:75:c6:0e:49:7c:89:d0:85:2d:bf:3b:53:09:b3: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BB:A9:3A:90:5F:14:05:39:AB:D6:A2:1F:4A:35:B5:BA:C9:08:9A X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:16:74:34:16:9e:61:10:64:11:ba:92:94:2b:d9:ad:41:fd: 55:66:a0:39:6b:e0:a9:bf:64:72:5a:e0:3c:bf:88:99:17:32: e0:9a:44:de:23:2c:2e:3a:46:fb:13:b3:37:b0:cb:a9:97:b1: 9d:35:c2:42:f9:15:8a:d4:96:a4:b3:a8:df:ad:12:d4:fb:58: 19:33:81:a1:ef:72:b0:e2:d3:43:92:e7:95:7b:eb:dc:81:79: 0b:97:50:a2:d6:5a:9d:5a:ce:1c:53:02:b5:d7:eb:4a:0a:f6: fe:99:2b:aa:ec:3e:af:8b:b3:09:36:60:93:97:38:d1:c0:c1: 6a:05:80:c0:c3:0e:5c:ad:83:01:21:28:8c:5c:cc:43:27:79: 84:db:a0:e3:88:a6:c1:98:d4:4d:e3:99:70:e0:48:3d:2e:89: ca:11:36:89:6b:29:13:40:d7:ba:b4:ef:02:e1:99:a3:74:ce: a6:21:e5:98:98:fd:e6:78:3b:99:4e:e7:6e:79:0a:81:2b:f5: 13:20:c1:8d:e8:09:c6:ca:8c:ed:0f:08:ce:eb:8d:30:56:1e: cd:80:0d:11:d0:80:75:b1:0c:3b:45:3c:8a:78:08:14:22:30: 5f:4c:a1:01:65:a8:6c:0d:8b:11:c1:12:cd:83:0d:84:58:93: 1e:1d:76:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMDzablR2ydqJfxpM6OjearJ0jlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjA0MDkxMzQ4MDJaFw0yNjA0MTAxNTI1MDJaMDMxMTAvBgNV BAMTKENGQkJBOTNBOTA1RjE0MDUzOUFCRDZBMjFGNEEzNUI1QkFDOTA4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPrbdAnxNX9Aq7THKil4OQOch 6ZbJFdwbx3oMbK3URxAJbHX+fjSBozRtA2R1MH24Ji67Fcl7W5xc41fpgPGsTJSZ 7WyI/53TXKVQN8tcja5v7KkMMHD+dCdaJDHpFER8ENH8WC+WaqzYxfLvHDdqpa5G ovn/YSwGCSd5dxuHQeRjkbq3C4wWrYnKQzB2CnojDlX8AmH8hbpbdaGTPdXNhBEf fAp4azABgMprWPrgm1FC/AOatJgyJwGyPcNQcVDnAPpTkfeHA7pfiUpIaWBeyO6B 6Mey+X79W3bST8DdEq85dR7PoAmGZlpfu/hYvYB1xg5JfInQhS2/O1MJs5W7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUz7upOpBfFAU5q9aiH0o1tbrJCJowHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS80L0ZFRjM0RkIw MTg3NTA5NUVEQTU2RTE1NTQ3NDZEMkE1RUMxRUNFNTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWFnQ0 Fp5hEGQRupKUK9mtQf1VZqA5a+Cpv2RyWuA8v4iZFzLgmkTeIywuOkb7E7M3sMup l7GdNcJC+RWK1Jaks6jfrRLU+1gZM4Gh73Kw4tNDkueVe+vcgXkLl1Ci1lqdWs4c UwK11+tKCvb+mSuq7D6vi7MJNmCTlzjRwMFqBYDAww5crYMBISiMXMxDJ3mE26Dj iKbBmNRN45lw4Eg9LonKETaJaykTQNe6tO8C4ZmjdM6mIeWYmP3meDuZTudueQqB K/UTIMGN6AnGyoztDwjO640wVh7NgA0R0IB1sQw7RTyKeAgUIjBfTKEBZahsDYsR wRLNgw2EWJMeHXYh -----END CERTIFICATE-----Generated at Thu Apr 9 23:59:22 2026 by rpki-client