$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: yfv/K3ZyCwGvdLmhbr0YPdhAoHCvxuM4oTDqH2/Tp5s= Subject key identifier: 70:C3:D8:03:29:16:B8:75:77:20:C1:B9:C4:71:ED:C9:A8:66:45:78 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 35A49DEC1A2CA9171CFB33C99B050037650D303C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 029B Signing time: Thu 04 Jun 2026 09:03:08 +0000 Manifest this update: Thu 04 Jun 2026 08:58:08 +0000 Manifest next update: Fri 05 Jun 2026 11:22:08 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: FQqg54mJIZsTBU932mUsvb4wFGhb5HOnUdjExQSIo8w=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a4:9d:ec:1a:2c:a9:17:1c:fb:33:c9:9b:05:00:37:65:0d:30:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jun 4 08:58:08 2026 GMT Not After : Jun 5 11:22:08 2026 GMT Subject: CN=70C3D8032916B8757720C1B9C471EDC9A8664578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:47:22:d0:bc:c2:40:ba:b2:88:d9:ea:5a:88: 4a:be:5f:4c:ef:68:d8:d3:b3:bf:1d:e3:5b:db:3c: 94:a6:54:0a:0e:69:61:f5:6f:9c:f7:99:b5:29:b3: ec:35:ee:db:9a:06:fb:d2:29:35:35:91:23:e9:00: 4e:95:0b:65:54:45:66:ab:58:d1:b8:f2:a9:04:0e: d5:ff:a1:c7:c8:60:e2:66:d1:e7:91:7d:c5:dc:97: 39:52:ec:7d:80:cf:9e:96:25:98:04:9e:7e:a5:ad: 47:8f:d7:2b:bb:7d:ae:75:e7:53:24:1e:61:10:be: 26:c9:92:4e:ea:85:70:40:5c:16:b7:8e:91:bd:8e: dc:a9:6a:aa:3a:57:11:d9:6c:7e:98:4e:0a:da:b9: 84:16:0c:13:66:fb:47:72:80:5f:16:4b:17:a2:cf: e4:4d:0c:85:94:18:5f:77:27:73:e0:4b:d3:91:e3: 61:7f:fd:b8:f8:c0:f7:68:1b:6c:b2:5c:7f:88:30: 26:3d:47:1e:08:04:40:87:e0:e2:78:3c:8f:77:c5: df:f1:b8:96:37:91:97:c8:b8:a5:63:77:1c:cf:74: dd:f0:39:0b:97:fb:93:24:af:a9:f8:fb:c9:6a:fb: 82:b0:ca:54:af:06:5e:60:b1:e0:8a:c6:20:94:c2: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:D8:03:29:16:B8:75:77:20:C1:B9:C4:71:ED:C9:A8:66:45:78 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:04:f1:54:b5:81:db:6d:eb:72:d9:13:4e:16:70:a9:cf:3c: dc:5f:00:1c:2a:3e:e7:d1:df:50:95:41:97:ec:07:48:4b:a6: a2:c4:0d:33:12:73:6d:9b:3a:8f:92:9a:22:74:f9:c7:9b:a2: 28:79:d4:ac:d5:05:81:eb:2c:39:a1:42:37:4c:96:e9:db:21: 96:de:63:e5:1b:02:0c:3e:76:d3:1e:d2:55:4e:bf:09:88:0f: 29:c2:dd:fd:6d:ef:4d:1b:8c:30:37:bb:0e:92:eb:94:66:34: 0d:ab:59:37:53:08:6d:cc:21:49:db:c2:ca:08:fc:eb:d3:c1: ff:f6:7c:52:4a:80:be:18:44:fd:32:73:b3:cf:42:7d:df:58: cb:64:1b:22:c2:77:c8:2f:4b:16:40:21:56:86:a8:40:b6:fc: 22:00:d6:a0:d1:95:0f:3c:70:46:51:e2:0c:65:5a:36:4d:79: 16:b3:cb:58:4a:89:99:ab:b5:b4:78:28:bb:84:41:04:1c:41: dc:06:28:da:fd:59:23:17:53:f4:83:19:7a:10:be:02:a8:e9: 03:e9:d2:9d:c8:69:4f:23:0a:18:79:42:87:4d:ae:8b:91:7d: a5:3a:00:c4:4d:33:0c:07:c6:5e:34:91:7a:08:07:5d:f8:89: b7:3e:90:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNaSd7BosqRcc+zPJmwUAN2UNMDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA2MDQwODU4MDhaFw0yNjA2MDUxMTIyMDhaMDMxMTAvBgNV BAMTKDcwQzNEODAzMjkxNkI4NzU3NzIwQzFCOUM0NzFFREM5QTg2NjQ1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRyLQvMJAurKI2epaiEq+X0zv aNjTs78d41vbPJSmVAoOaWH1b5z3mbUps+w17tuaBvvSKTU1kSPpAE6VC2VURWar WNG48qkEDtX/ocfIYOJm0eeRfcXclzlS7H2Az56WJZgEnn6lrUeP1yu7fa5151Mk HmEQvibJkk7qhXBAXBa3jpG9jtypaqo6VxHZbH6YTgrauYQWDBNm+0dygF8WSxei z+RNDIWUGF93J3PgS9OR42F//bj4wPdoG2yyXH+IMCY9Rx4IBECH4OJ4PI93xd/x uJY3kZfIuKVjdxzPdN3wOQuX+5Mkr6n4+8lq+4KwylSvBl5gseCKxiCUwkqbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcMPYAykWuHV3IMG5xHHtyahmRXgwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPBPFU tYHbbety2RNOFnCpzzzcXwAcKj7n0d9QlUGX7AdIS6aixA0zEnNtmzqPkpoidPnH m6IoedSs1QWB6yw5oUI3TJbp2yGW3mPlGwIMPnbTHtJVTr8JiA8pwt39be9NG4ww N7sOkuuUZjQNq1k3UwhtzCFJ28LKCPzr08H/9nxSSoC+GET9MnOzz0J931jLZBsi wnfIL0sWQCFWhqhAtvwiANag0ZUPPHBGUeIMZVo2TXkWs8tYSomZq7W0eCi7hEEE HEHcBija/VkjF1P0gxl6EL4CqOkD6dKdyGlPIwoYeUKHTa6LkX2lOgDETTMMB8Ze NJF6CAdd+Im3PpAa -----END CERTIFICATE-----Generated at Thu Jun 4 14:11:05 2026 by rpki-client