$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: fGfo10iuzSyJ8kIRNdaiCy5rwMASJDWoAFuWWyVQ8YU= Subject key identifier: D9:FB:04:BF:78:2E:AA:53:75:FE:A7:15:50:59:C0:E4:9F:0F:C8:CF Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 0E630A791797F2D873C3FE805D811FBFCFB43018 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 9F Signing time: Tue 21 Apr 2026 13:14:55 +0000 Manifest this update: Tue 21 Apr 2026 13:09:55 +0000 Manifest next update: Wed 22 Apr 2026 16:12:55 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: nFT5JbaRug+bro3e8dxIZCJVIjX430WdvaDc9b7gPr0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 03:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:63:0a:79:17:97:f2:d8:73:c3:fe:80:5d:81:1f:bf:cf:b4:30:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Apr 21 13:09:55 2026 GMT Not After : Apr 22 16:12:55 2026 GMT Subject: CN=D9FB04BF782EAA5375FEA7155059C0E49F0FC8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:44:bc:da:cd:13:ad:dc:cc:69:4d:76:f1: b2:67:6d:b6:ba:bd:27:2c:bd:53:4d:5d:4f:d5:a7: 9a:50:3c:9a:4b:55:4d:24:67:42:a0:ca:2b:29:d4: 80:8f:f0:82:a3:dd:a7:0e:26:9b:4a:30:13:09:1f: d3:ed:31:a0:0b:a9:cc:82:a0:88:3b:b5:70:57:2c: b9:33:54:71:c1:69:cf:0f:e8:fd:08:0b:22:7c:1e: 5f:08:c9:68:0c:28:e2:2e:c2:6b:e5:f3:b4:8b:87: 53:7b:13:58:59:24:14:e2:a5:c2:9f:b7:a2:28:cf: a8:78:2d:56:f5:2e:f2:4b:52:c4:c9:fe:a4:95:73: ad:6d:26:4a:5b:c6:83:16:c9:04:d4:2e:ef:46:ab: 72:a5:86:d6:68:6f:c5:b4:61:b4:19:0f:a0:32:ad: 1f:34:1b:99:73:2a:3b:cf:d6:18:52:51:40:87:05: 68:9a:60:e9:86:2a:9a:6b:a2:48:9f:90:9b:4c:a3: a1:e9:32:5c:1d:5b:63:53:b2:d4:a1:eb:09:b6:4b: d7:cc:96:09:77:f3:19:50:40:80:52:80:4e:55:09: 7c:77:88:86:a0:37:5c:6e:5c:99:c7:4b:79:5c:65: 7b:fb:0a:f6:b3:35:63:15:5d:5c:63:52:77:6e:03: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FB:04:BF:78:2E:AA:53:75:FE:A7:15:50:59:C0:E4:9F:0F:C8:CF X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:23:0c:99:20:88:5a:f0:4e:84:ef:a4:d5:07:fb:5b:c2:7e: 9e:bf:1a:92:92:69:67:e6:65:03:57:4c:6c:0b:aa:e2:e0:97: 89:cf:7b:02:3d:37:e1:d9:ba:a3:04:20:0e:3d:ec:9f:4e:94: 59:b2:40:f5:37:d0:cc:f5:88:45:23:d3:49:07:15:0d:33:3e: b8:90:3e:d6:bb:66:83:3e:c6:8e:cf:b9:d7:a4:0a:0b:09:12: 55:d7:a2:38:f7:a7:5c:51:bc:e3:69:31:e0:f3:a4:e5:98:39: 25:85:84:11:eb:cf:14:32:ad:ac:c3:d1:f7:46:27:93:c5:e4: 72:6d:00:fe:96:e6:5f:46:5e:aa:72:ba:c6:e8:c2:95:3d:c4: 29:f3:f6:e1:39:cc:16:14:a3:ee:c6:6e:a1:5f:ca:27:54:71: ce:db:88:8a:ff:d4:40:32:b1:a1:c2:22:54:20:77:91:e7:ec: 79:9d:6a:e3:3c:09:39:e4:20:5d:af:a8:b4:89:60:e7:10:d0: f0:32:1f:c0:ea:3b:8d:39:10:9d:c6:42:1f:fd:f3:ab:8d:13: 84:3a:16:13:cc:f0:f5:6f:c1:e2:be:ad:47:c6:43:48:73:68: 3d:41:37:4f:9e:60:f9:ff:a5:52:56:56:d7:7f:e6:fd:2b:0d: d6:1b:f5:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDmMKeReX8thzw/6AXYEfv8+0MBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA0MjExMzA5NTVaFw0yNjA0MjIxNjEyNTVaMDMxMTAvBgNV BAMTKEQ5RkIwNEJGNzgyRUFBNTM3NUZFQTcxNTUwNTlDMEU0OUYwRkM4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU1kS82s0TrdzMaU128bJnbba6 vScsvVNNXU/Vp5pQPJpLVU0kZ0Kgyisp1ICP8IKj3acOJptKMBMJH9PtMaALqcyC oIg7tXBXLLkzVHHBac8P6P0ICyJ8Hl8IyWgMKOIuwmvl87SLh1N7E1hZJBTipcKf t6Ioz6h4LVb1LvJLUsTJ/qSVc61tJkpbxoMWyQTULu9Gq3KlhtZob8W0YbQZD6Ay rR80G5lzKjvP1hhSUUCHBWiaYOmGKpprokifkJtMo6HpMlwdW2NTstSh6wm2S9fM lgl38xlQQIBSgE5VCXx3iIagN1xuXJnHS3lcZXv7CvazNWMVXVxjUnduA6DFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2fsEv3guqlN1/qcVUFnA5J8PyM8wHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhIwyZ IIha8E6E76TVB/tbwn6evxqSkmln5mUDV0xsC6ri4JeJz3sCPTfh2bqjBCAOPeyf TpRZskD1N9DM9YhFI9NJBxUNMz64kD7Wu2aDPsaOz7nXpAoLCRJV16I496dcUbzj aTHg86TlmDklhYQR688UMq2sw9H3RieTxeRybQD+luZfRl6qcrrG6MKVPcQp8/bh OcwWFKPuxm6hX8onVHHO24iK/9RAMrGhwiJUIHeR5+x5nWrjPAk55CBdr6i0iWDn ENDwMh/A6juNORCdxkIf/fOrjROEOhYTzPD1b8Hivq1HxkNIc2g9QTdPnmD5/6VS VlbXf+b9Kw3WG/XM -----END CERTIFICATE-----Generated at Tue Apr 21 19:04:53 2026 by rpki-client