$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft File: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft (raw, json) Hash identifier: NxqNojeWdAg9xYRLtFOVEfAx/VRPxlWkXAZ5Agsi3rs= Subject key identifier: 22:AC:83:51:E7:1F:53:D9:77:26:13:02:15:23:7E:36:75:14:B8:4B Authority key identifier: B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB Certificate issuer: /CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Certificate serial: 1BB16A0A7C843D8C243795FCA996F6577F207E2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft Manifest number: 29 Signing time: Wed 13 May 2026 14:05:47 +0000 Manifest this update: Wed 13 May 2026 14:00:47 +0000 Manifest next update: Thu 14 May 2026 15:51:47 +0000 Files and hashes: 1: 326131343a316563303a3a2f33322d3332203d3e20323034343634.roa (hash: 6kQo7bFkLtOfBMIG0r5iyUGZwYPdB0rC34zfUk2Ho74=) 2: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl (hash: CpEBQtYokL1YgU1KdFv5lWPBQZbmpaEpEJRWyWN8SsY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 03:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b1:6a:0a:7c:84:3d:8c:24:37:95:fc:a9:96:f6:57:7f:20:7e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Validity Not Before: May 13 14:00:47 2026 GMT Not After : May 14 15:51:47 2026 GMT Subject: CN=22AC8351E71F53D97726130215237E367514B84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:ae:d4:b5:30:7e:d9:e8:c3:b8:3e:0c:72: 98:2e:55:76:84:3b:33:af:d4:96:4c:6c:6c:5b:11: 25:48:35:0d:09:ef:b0:c5:15:41:ea:da:5d:45:3e: 3f:d7:e6:24:88:23:b9:26:b7:b6:b5:b3:50:ae:5f: 99:77:e7:a3:22:5d:a0:13:03:a3:09:f3:83:6a:52: 0a:3a:2d:8a:34:96:90:e3:96:c5:a2:40:5b:16:2d: 55:c2:f8:56:8a:0d:63:8d:34:72:4d:de:d0:47:bf: ed:18:d5:06:03:bb:07:8a:a3:4b:c0:4b:18:eb:15: b1:b7:1f:4a:11:76:76:0c:0a:bc:e8:ad:5d:58:07: 1a:58:14:78:bb:2e:71:47:54:9a:b0:4d:29:99:c5: 33:20:7f:2f:14:fc:12:00:6a:ea:d6:13:6a:65:cf: 9d:56:6e:e1:4d:76:c1:f8:6a:0d:a8:c4:bb:55:85: 17:e1:8a:31:e6:9c:ed:c2:c7:00:39:18:89:cf:6d: d2:5d:b3:bd:46:87:5b:b3:ab:22:07:b8:a6:90:de: 22:7a:8a:ea:69:49:bc:94:dd:9f:e5:b2:bc:f9:2f: d2:6a:e3:62:b5:cb:14:a3:cf:10:d3:3d:3d:6e:18: 1d:be:9a:46:51:ce:1e:9a:02:cd:cc:b6:2d:bc:8e: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AC:83:51:E7:1F:53:D9:77:26:13:02:15:23:7E:36:75:14:B8:4B X509v3 Authority Key Identifier: keyid:B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bc:39:ec:e9:21:f4:16:d9:d3:46:df:b4:87:85:25:0b:e5: 1e:12:4a:5e:a2:b6:cc:00:cd:1e:27:fa:f3:8e:81:a3:56:22: 58:35:9e:46:40:a0:5a:1c:80:bc:25:7f:2d:11:5b:d4:f7:8a: e9:ff:10:bb:75:c0:37:05:62:9b:c2:0c:ef:90:20:8b:a4:40: c5:81:7e:72:57:a0:89:9c:2c:cb:04:cc:38:98:0b:e6:be:d8: 9c:83:02:6d:e4:2f:9c:f8:d1:dd:f4:ce:da:58:72:90:ff:20: 37:23:90:87:aa:fc:a3:e0:b6:a2:a1:bd:42:08:d5:17:f6:60: f3:a1:44:7e:02:aa:0b:82:2a:47:af:47:4c:fa:df:d7:49:20: ac:bc:c3:7b:f8:02:ed:81:dd:69:25:e1:0b:73:c2:ea:1b:c8: eb:82:90:c5:f4:41:20:56:48:fb:6e:08:0f:87:64:5c:10:9e: 85:e8:30:af:59:46:c5:71:af:3a:a3:bb:88:18:d3:a1:b3:49: 21:d6:f8:81:61:d6:0f:76:3a:51:b7:c1:cb:c2:5b:d7:cc:62: d1:2f:aa:97:0a:8f:3e:26:91:ad:f0:91:8b:8f:9c:e3:d6:42: 83:b3:d7:5d:be:14:96:48:5f:d8:bc:51:e8:cf:29:05:02:b6: ec:f0:97:20 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUG7FqCnyEPYwkN5X8qZb2V38gfi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQy QUIyQkJCQjAeFw0yNjA1MTMxNDAwNDdaFw0yNjA1MTQxNTUxNDdaMDMxMTAvBgNV BAMTKDIyQUM4MzUxRTcxRjUzRDk3NzI2MTMwMjE1MjM3RTM2NzUxNEI4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOq7UtTB+2ejDuD4McpguVXaE OzOv1JZMbGxbESVINQ0J77DFFUHq2l1FPj/X5iSII7kmt7a1s1CuX5l356MiXaAT A6MJ84NqUgo6LYo0lpDjlsWiQFsWLVXC+FaKDWONNHJN3tBHv+0Y1QYDuweKo0vA SxjrFbG3H0oRdnYMCrzorV1YBxpYFHi7LnFHVJqwTSmZxTMgfy8U/BIAaurWE2pl z51WbuFNdsH4ag2oxLtVhRfhijHmnO3CxwA5GInPbdJds71Gh1uzqyIHuKaQ3iJ6 iuppSbyU3Z/lsrz5L9Jq42K1yxSjzxDTPT1uGB2+mkZRzh6aAs3Mti28joP3AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUIqyDUecfU9l3JhMCFSN+NnUUuEswHwYDVR0j BBgwFoAUs5Ntp5OpmVhi8HFCw9C7DSqyu7swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEz NGFiLzEvQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5j cmwwgaAGCCsGAQUFBwEBBIGTMIGQMIGNBggrBgEFBQcwAoaBgHJzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00 ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzEwL0IzOTM2REE3OTNBOTk5NTg2MkYwNzE0 MkMzRDBCQjBEMkFCMkJCQkIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYB BQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEzNGFiLzEvQjM5MzZE QTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADq8 OezpIfQW2dNG37SHhSUL5R4SSl6itswAzR4n+vOOgaNWIlg1nkZAoFocgLwlfy0R W9T3iun/ELt1wDcFYpvCDO+QIIukQMWBfnJXoImcLMsEzDiYC+a+2JyDAm3kL5z4 0d30ztpYcpD/IDcjkIeq/KPgtqKhvUII1Rf2YPOhRH4CqguCKkevR0z639dJIKy8 w3v4Au2B3Wkl4QtzwuobyOuCkMX0QSBWSPtuCA+HZFwQnoXoMK9ZRsVxrzqju4gY 06GzSSHW+IFh1g92OlG3wcvCW9fMYtEvqpcKjz4mka3wkYuPnOPWQoOz112+FJZI X9i8UejPKQUCtuzwlyA= -----END CERTIFICATE-----Generated at Wed May 13 16:52:31 2026 by rpki-client