$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: Nw2cSfOwhXQ02wnxSd17sjd1D0KIrouqVqKMAc5npKQ= Subject key identifier: 2D:CB:9D:A4:C8:60:4E:C3:C3:B1:35:1C:36:34:5C:00:8E:A1:2F:9E Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 4A109433A3C5DEF3FB500F398673D66130DE5752 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 025E Signing time: Sun 19 Apr 2026 10:42:12 +0000 Manifest this update: Sun 19 Apr 2026 10:37:12 +0000 Manifest next update: Mon 20 Apr 2026 14:01:12 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: kLXSUMdHgd4TyMLFU8bZytONlgkaxXv3IIJ5xcjqk0U=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:10:94:33:a3:c5:de:f3:fb:50:0f:39:86:73:d6:61:30:de:57:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Apr 19 10:37:12 2026 GMT Not After : Apr 20 14:01:12 2026 GMT Subject: CN=2DCB9DA4C8604EC3C3B1351C36345C008EA12F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:e1:5b:0f:c8:c0:4c:06:ba:22:b1:1b:ab: 28:d3:08:fc:12:24:13:22:b0:7f:55:78:1d:71:d5: cb:69:06:66:4d:61:4f:e9:62:f7:7a:d9:80:da:3a: c4:17:ab:a3:58:d8:c8:ae:0f:74:0b:e9:29:55:b1: fd:c8:2d:bc:7b:5b:9a:f8:ec:df:af:c4:72:7e:ba: b7:13:cc:43:4b:dc:31:5a:e5:f4:ac:98:01:42:a1: 16:14:64:fd:33:b2:9d:28:f1:8a:07:fa:20:0f:26: 29:37:f4:ca:ce:06:cd:e5:30:4e:4c:f8:03:5e:19: 82:31:30:15:cc:c4:be:ed:ec:89:14:af:ec:8d:3a: ca:86:d5:7f:62:fa:b9:c8:92:d3:1a:7b:9a:96:00: c5:ad:7d:09:c7:f7:93:59:51:be:e8:00:03:2c:2d: e3:56:54:08:18:48:7a:5b:18:f2:c2:b6:7d:d5:8b: fb:18:cd:ec:7a:a3:4a:f7:af:97:9a:9e:21:0f:35: 7e:7b:0c:8a:c4:a7:68:a9:7d:17:fc:66:fe:24:57: e6:b6:e8:9f:ae:7d:b4:1d:df:22:f6:fa:3a:3d:60: eb:55:c3:54:13:c0:b9:f1:a0:fa:7f:12:50:76:45: 19:ee:d4:db:19:0b:51:bb:16:1e:91:34:13:8e:23: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CB:9D:A4:C8:60:4E:C3:C3:B1:35:1C:36:34:5C:00:8E:A1:2F:9E X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7f:9d:5c:a2:d2:83:c7:4b:9d:e8:9e:c3:dd:f4:2a:f7:03: 86:a7:75:f3:32:d6:4c:6c:32:f9:17:03:45:12:00:f4:2f:29: 4c:dc:a2:4b:f0:f9:f1:95:0e:82:9e:9f:e7:14:d4:07:16:0e: 48:ac:aa:cd:62:b1:e0:22:25:c6:47:ae:54:3a:3a:be:62:21: d5:d2:ab:04:c1:df:62:64:6f:f7:48:53:9b:64:40:73:47:50: 3b:f8:4e:20:08:56:3c:5c:a6:fe:b4:22:88:d0:6f:dc:b4:76: ad:32:42:f0:b5:95:54:2d:33:cf:2b:04:32:26:a0:90:f7:f9: b6:1e:e5:91:4a:c8:97:a9:c9:09:24:be:b3:44:43:ec:1f:52: b3:0d:78:9e:c9:04:98:0e:c8:a9:d5:70:b7:3d:5d:7a:8c:a6: a4:d4:f9:ee:6c:29:72:03:4f:67:f4:f5:ee:ae:eb:cb:5d:bc: e9:1d:ed:84:e1:44:06:04:87:d5:cf:82:9c:f5:83:5f:a2:51: a0:a8:db:a5:97:93:56:ea:39:e5:0e:75:5c:2d:13:11:85:26: fb:6c:b3:43:4c:fd:0d:71:6d:e9:af:66:f2:f0:33:ac:5f:85: 59:5e:bb:55:8c:1e:87:4d:32:74:72:6c:4b:fd:88:3f:87:1f: 9c:39:10:9d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUShCUM6PF3vP7UA85hnPWYTDeV1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA0MTkxMDM3MTJaFw0yNjA0MjAxNDAxMTJaMDMxMTAvBgNV BAMTKDJEQ0I5REE0Qzg2MDRFQzNDM0IxMzUxQzM2MzQ1QzAwOEVBMTJGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtreFbD8jATAa6IrEbqyjTCPwS JBMisH9VeB1x1ctpBmZNYU/pYvd62YDaOsQXq6NY2MiuD3QL6SlVsf3ILbx7W5r4 7N+vxHJ+urcTzENL3DFa5fSsmAFCoRYUZP0zsp0o8YoH+iAPJik39MrOBs3lME5M +ANeGYIxMBXMxL7t7IkUr+yNOsqG1X9i+rnIktMae5qWAMWtfQnH95NZUb7oAAMs LeNWVAgYSHpbGPLCtn3Vi/sYzex6o0r3r5eaniEPNX57DIrEp2ipfRf8Zv4kV+a2 6J+ufbQd3yL2+jo9YOtVw1QTwLnxoPp/ElB2RRnu1NsZC1G7Fh6RNBOOI5qZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULcudpMhgTsPDsTUcNjRcAI6hL54wHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5f51c otKDx0ud6J7D3fQq9wOGp3XzMtZMbDL5FwNFEgD0LylM3KJL8PnxlQ6Cnp/nFNQH Fg5IrKrNYrHgIiXGR65UOjq+YiHV0qsEwd9iZG/3SFObZEBzR1A7+E4gCFY8XKb+ tCKI0G/ctHatMkLwtZVULTPPKwQyJqCQ9/m2HuWRSsiXqckJJL6zREPsH1KzDXie yQSYDsip1XC3PV16jKak1PnubClyA09n9PXuruvLXbzpHe2E4UQGBIfVz4Kc9YNf olGgqNull5NW6jnlDnVcLRMRhSb7bLNDTP0NcW3pr2by8DOsX4VZXrtVjB6HTTJ0 cmxL/Yg/hx+cORCd -----END CERTIFICATE-----Generated at Mon Apr 20 08:34:01 2026 by rpki-client