$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: Bg3lz7uZpIbPSrz99nE9DQGA3TV5FnZHavnS2H7x/I4= Subject key identifier: A2:8F:59:EB:C7:FF:B4:18:83:9C:85:69:7A:86:49:F3:A3:7F:6D:4C Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 71BDF2A93C748039C2721AB1213EFA223FBDBCBD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: DC Signing time: Sat 06 Jun 2026 02:21:14 +0000 Manifest this update: Sat 06 Jun 2026 02:16:14 +0000 Manifest next update: Sun 07 Jun 2026 02:48:14 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 34/C7RawCT7D96suhoCiP7pnqI+khIaI+ezKzMq1VzI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bd:f2:a9:3c:74:80:39:c2:72:1a:b1:21:3e:fa:22:3f:bd:bc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jun 6 02:16:14 2026 GMT Not After : Jun 7 02:48:14 2026 GMT Subject: CN=A28F59EBC7FFB418839C85697A8649F3A37F6D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:6f:5c:23:ef:5d:08:d8:fe:42:cc:ce:6a: 67:4a:71:97:c3:2a:d5:2c:4a:dd:6c:69:39:02:41: 15:09:64:26:43:18:b2:bf:dd:d6:73:3d:98:b7:f9: 2c:b7:cb:8d:84:1b:4e:91:22:a4:b1:f3:4b:53:75: 33:22:66:97:f9:26:7b:1e:ee:7b:fe:c1:11:35:74: de:80:ec:a0:1a:f4:10:b4:fe:73:c6:33:23:d7:04: ca:64:2c:3b:bf:c5:0e:56:bc:33:19:6e:50:e0:85: 17:21:6c:19:04:c9:11:33:bb:53:6d:83:78:03:8b: 5a:66:49:1a:46:e6:81:00:6d:2b:41:41:34:03:9c: fd:9c:6d:1f:de:9b:bc:6a:4a:be:02:bd:14:58:0b: 59:56:9f:6c:0b:4f:fb:95:ed:ed:98:64:c3:99:20: 23:09:12:12:48:1d:cf:6c:84:ce:76:40:d0:de:0d: 08:7b:b5:2a:b7:d3:1e:72:ec:8a:8c:03:fd:2a:cd: 31:5f:29:43:a3:d5:06:f8:c6:0b:58:7c:69:5d:56: 58:90:32:27:34:ff:aa:01:99:49:24:d6:80:14:98: 3d:ba:10:35:73:47:a2:b6:00:96:97:82:c3:03:23: ed:c1:e5:46:b4:0f:74:9b:a3:cb:0e:d2:be:e9:dd: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8F:59:EB:C7:FF:B4:18:83:9C:85:69:7A:86:49:F3:A3:7F:6D:4C X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:46:9d:21:ce:e2:cb:0f:0c:59:42:4c:77:13:6f:e7:47:1b: 14:ef:e9:a1:1f:96:c4:32:87:a5:a2:25:1e:18:9f:dc:45:77: 5f:b0:9c:28:78:fe:93:44:75:3d:96:96:34:7d:e4:92:be:93: 53:92:76:15:a5:e1:c9:25:04:34:68:ef:6b:3c:2d:9a:8e:a7: b6:18:5a:c8:9a:6b:ae:fa:43:d1:7c:22:07:07:d3:ef:f2:0b: 87:e1:6f:7e:95:1d:69:27:88:61:65:a6:29:47:c7:63:e2:38: 84:ea:00:86:e5:5f:91:04:c9:ee:4b:f4:a6:7d:11:dd:c2:a8: 9d:98:21:36:ac:e2:b2:45:0d:90:01:f9:a0:d3:98:1b:76:46: 95:89:31:de:0f:20:a1:f4:06:ba:ce:45:fe:0f:b7:87:92:cb: 74:15:ac:0d:81:fe:85:56:c3:13:11:13:e4:ba:fe:66:46:4f: dd:97:d6:c5:29:f8:32:e4:0e:9e:39:13:99:49:7c:cb:82:f8: 8e:5c:db:53:66:37:8f:95:c2:63:e2:c8:6d:99:28:a7:2b:40: d9:b7:08:eb:31:53:b0:ad:34:5c:60:ec:ed:7b:df:6d:b8:b7: 4e:86:5f:16:bd:52:0f:b5:c6:5b:ee:42:16:28:ec:d1:39:a2: ad:99:12:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcb3yqTx0gDnCchqxIT76Ij+9vL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA2MDYwMjE2MTRaFw0yNjA2MDcwMjQ4MTRaMDMxMTAvBgNV BAMTKEEyOEY1OUVCQzdGRkI0MTg4MzlDODU2OTdBODY0OUYzQTM3RjZENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwW9cI+9dCNj+QszOamdKcZfD KtUsSt1saTkCQRUJZCZDGLK/3dZzPZi3+Sy3y42EG06RIqSx80tTdTMiZpf5Jnse 7nv+wRE1dN6A7KAa9BC0/nPGMyPXBMpkLDu/xQ5WvDMZblDghRchbBkEyREzu1Nt g3gDi1pmSRpG5oEAbStBQTQDnP2cbR/em7xqSr4CvRRYC1lWn2wLT/uV7e2YZMOZ ICMJEhJIHc9shM52QNDeDQh7tSq30x5y7IqMA/0qzTFfKUOj1Qb4xgtYfGldVliQ Mic0/6oBmUkk1oAUmD26EDVzR6K2AJaXgsMDI+3B5Ua0D3Sbo8sO0r7p3TwBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoo9Z68f/tBiDnIVpeoZJ86N/bUwwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQRp0h zuLLDwxZQkx3E2/nRxsU7+mhH5bEMoeloiUeGJ/cRXdfsJwoeP6TRHU9lpY0feSS vpNTknYVpeHJJQQ0aO9rPC2ajqe2GFrImmuu+kPRfCIHB9Pv8guH4W9+lR1pJ4hh ZaYpR8dj4jiE6gCG5V+RBMnuS/SmfRHdwqidmCE2rOKyRQ2QAfmg05gbdkaViTHe DyCh9Aa6zkX+D7eHkst0FawNgf6FVsMTERPkuv5mRk/dl9bFKfgy5A6eOROZSXzL gviOXNtTZjePlcJj4shtmSinK0DZtwjrMVOwrTRcYOzte99tuLdOhl8WvVIPtcZb 7kIWKOzROaKtmRJa -----END CERTIFICATE-----Generated at Sat Jun 6 07:17:31 2026 by rpki-client