$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: 76BIPMgYdK4OEOzw+iW1p/N3csxAErfzBzkhNW7t6Fo= Subject key identifier: AC:49:A6:AB:6A:E6:53:03:4B:23:FA:43:9B:66:A8:E0:F5:2C:7F:DF Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 252E967105D3E7530FFB60D6F74C0DD781103191 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: B2 Signing time: Tue 02 Jun 2026 04:25:55 +0000 Manifest this update: Tue 02 Jun 2026 04:20:55 +0000 Manifest next update: Wed 03 Jun 2026 07:21:55 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: 096niTx/p2SVjo5ximluvGc211nonHl1BSPQpSrSmSI=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 07:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2e:96:71:05:d3:e7:53:0f:fb:60:d6:f7:4c:0d:d7:81:10:31:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jun 2 04:20:55 2026 GMT Not After : Jun 3 07:21:55 2026 GMT Subject: CN=AC49A6AB6AE653034B23FA439B66A8E0F52C7FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:d5:24:a7:83:02:1a:8d:2b:db:af:01:7d: 8c:16:cb:62:ba:da:ba:c3:b0:44:39:3b:c4:3d:a0: 6f:37:58:4e:04:cb:27:1b:8e:96:36:37:98:c5:f5: 53:82:65:9c:63:14:73:c1:08:bc:66:8a:82:1a:c9: 4f:41:ca:60:b3:61:47:61:d8:f9:5d:0d:94:94:13: 8b:2b:57:18:f2:a5:15:64:9a:ee:9f:57:c5:a6:9f: a3:06:94:fe:9a:92:fb:cd:84:3d:b1:05:43:e2:79: 25:51:b5:d9:c4:73:e1:97:5d:e9:57:1b:0e:6f:d0: 48:78:1b:5a:f0:7f:6d:2f:c9:45:3b:90:34:f2:3e: 9d:71:a2:eb:d3:a4:da:34:c1:b9:ec:47:10:ff:0d: 78:e5:d6:0e:54:b7:64:47:57:f8:d6:be:2b:ee:94: a1:e0:3c:6c:1c:80:17:69:2c:11:d4:85:d3:0e:8a: 0d:5c:33:76:cf:00:95:09:88:f7:42:b6:18:d0:06: fc:d4:7b:f9:2a:4c:45:e5:ba:9d:6f:d7:ec:60:fe: a9:73:5e:e4:58:cb:2a:f9:e8:a2:3b:f4:bc:4f:2d: a1:1e:24:9c:e6:f1:4c:9b:49:17:ef:5d:18:73:34: 88:6c:91:60:a7:42:cc:6d:6d:70:af:a2:3e:60:f9: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:A6:AB:6A:E6:53:03:4B:23:FA:43:9B:66:A8:E0:F5:2C:7F:DF X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c0:7d:c6:59:43:66:62:16:7d:73:be:1c:4c:52:94:c0:a8: d7:88:b1:ad:8e:65:7b:fa:5e:0a:18:10:90:ba:5b:af:25:e8: ef:14:64:53:79:00:c0:61:8b:35:c0:ba:02:b4:1e:ad:ff:9c: 31:60:7a:d3:91:20:30:eb:43:5e:e7:f2:5b:df:dc:53:7d:a7: 38:39:7a:e3:8a:79:70:37:1d:fb:f9:dd:68:d6:d5:42:32:05: 04:cb:45:3a:2c:29:e0:37:c6:71:da:dd:7e:36:fd:20:ac:91: ac:a4:72:43:39:33:7a:d5:ca:45:3e:79:b5:14:c7:ae:3c:74: 06:7b:10:1c:b9:a6:be:74:49:a4:a8:c6:86:90:34:e1:2a:84: d7:1c:36:63:6f:4b:b5:82:8d:36:9c:1b:61:ed:78:31:1f:2f: 4e:cf:75:d4:eb:05:68:c6:26:e3:b2:c2:59:6f:43:c7:45:10: dc:d1:6b:e5:11:03:00:d9:ee:5a:ae:67:14:8a:11:c8:2b:0f: b7:d4:5d:24:6a:fc:b6:5e:f3:b9:67:d8:8f:d1:93:4e:1b:77: ca:1f:b0:5e:10:4a:7f:29:0f:50:07:58:3a:46:23:1b:b4:f0: cb:af:53:14:32:c5:90:36:89:9d:b5:f7:3e:16:11:90:fb:b8: 6e:ad:43:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJS6WcQXT51MP+2DW90wN14EQMZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA2MDIwNDIwNTVaFw0yNjA2MDMwNzIxNTVaMDMxMTAvBgNV BAMTKEFDNDlBNkFCNkFFNjUzMDM0QjIzRkE0MzlCNjZBOEUwRjUyQzdGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+tUkp4MCGo0r268BfYwWy2K6 2rrDsEQ5O8Q9oG83WE4EyycbjpY2N5jF9VOCZZxjFHPBCLxmioIayU9BymCzYUdh 2PldDZSUE4srVxjypRVkmu6fV8Wmn6MGlP6akvvNhD2xBUPieSVRtdnEc+GXXelX Gw5v0Eh4G1rwf20vyUU7kDTyPp1xouvTpNo0wbnsRxD/DXjl1g5Ut2RHV/jWvivu lKHgPGwcgBdpLBHUhdMOig1cM3bPAJUJiPdCthjQBvzUe/kqTEXlup1v1+xg/qlz XuRYyyr56KI79LxPLaEeJJzm8UybSRfvXRhzNIhskWCnQsxtbXCvoj5g+VD9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrEmmq2rmUwNLI/pDm2ao4PUsf98wHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwwH3G WUNmYhZ9c74cTFKUwKjXiLGtjmV7+l4KGBCQuluvJejvFGRTeQDAYYs1wLoCtB6t /5wxYHrTkSAw60Ne5/Jb39xTfac4OXrjinlwNx37+d1o1tVCMgUEy0U6LCngN8Zx 2t1+Nv0grJGspHJDOTN61cpFPnm1FMeuPHQGexAcuaa+dEmkqMaGkDThKoTXHDZj b0u1go02nBth7XgxHy9Oz3XU6wVoxibjssJZb0PHRRDc0WvlEQMA2e5armcUihHI Kw+31F0kavy2XvO5Z9iP0ZNOG3fKH7BeEEp/KQ9QB1g6RiMbtPDLr1MUMsWQNomd tfc+FhGQ+7hurUNp -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:21 2026 by rpki-client