$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft File: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft (raw, json) Hash identifier: 1cGCIX7XlJedJgU3aM+MKWFjWkKmny22FfdjbLKXX4o= Subject key identifier: 54:DD:44:41:75:D8:C8:DC:F5:51:2B:03:29:0E:2E:0B:01:88:21:0D Authority key identifier: B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB Certificate issuer: /CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Certificate serial: 13F28B0C743B314228CD712A9098EA0BB4258821 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft Manifest number: 67 Signing time: Sat 27 Jun 2026 10:08:51 +0000 Manifest this update: Sat 27 Jun 2026 10:03:51 +0000 Manifest next update: Sun 28 Jun 2026 13:38:51 +0000 Files and hashes: 1: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl (hash: G7UzOK+2M1ULYZf9uWeI4jNkUS5vM5wbPnPmpfWJ2CE=) 2: 326131343a316563303a3a2f33322d3332203d3e20323034343634.roa (hash: 6kQo7bFkLtOfBMIG0r5iyUGZwYPdB0rC34zfUk2Ho74=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 09:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f2:8b:0c:74:3b:31:42:28:cd:71:2a:90:98:ea:0b:b4:25:88:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3936DA793A9995862F07142C3D0BB0D2AB2BBBB Validity Not Before: Jun 27 10:03:51 2026 GMT Not After : Jun 28 13:38:51 2026 GMT Subject: CN=54DD444175D8C8DCF5512B03290E2E0B0188210D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:2d:e0:39:18:e4:f4:47:f2:b7:0c:b6:f9: 7c:2f:1d:75:bf:d8:95:cb:3a:9a:69:4c:a9:02:de: 15:a1:4c:93:8e:1a:3d:ff:06:ae:d9:64:d3:7b:d7: a7:3d:a2:73:31:33:ec:1b:c7:b3:98:d9:d6:6d:88: ae:7b:b3:d8:6f:77:ed:d4:af:09:b0:97:07:65:ae: 9d:a2:4f:f5:3e:18:fd:93:36:2a:42:3d:2f:5e:c6: a5:26:f7:9b:5e:e8:d0:1c:34:49:6c:9f:7d:57:d6: 46:1b:5a:66:08:e6:aa:39:2e:20:2b:1b:c8:3c:d1: f4:de:81:65:5f:4c:6e:08:e3:6d:ba:01:8b:57:17: 42:66:ef:d9:15:b4:d3:7c:1f:78:93:f1:47:a9:de: 2f:c7:8d:51:37:b3:91:ff:33:4c:08:7e:02:c3:21: 38:2e:00:ed:89:6a:8b:06:73:ef:ee:4f:75:d6:9a: b8:36:25:06:c1:f7:d8:ff:22:a8:26:5e:da:19:89: 0d:9d:33:68:7f:03:14:46:83:50:08:6f:bd:a8:24: c5:ff:0c:16:71:49:cb:39:f2:87:cf:54:6c:34:3b: b5:7a:91:75:7c:32:b2:93:27:1e:ce:d5:48:c7:d4: f1:e5:ba:ea:47:5a:0a:30:c4:7f:05:ab:c2:76:cc: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DD:44:41:75:D8:C8:DC:F5:51:2B:03:29:0E:2E:0B:01:88:21:0D X509v3 Authority Key Identifier: keyid:B3:93:6D:A7:93:A9:99:58:62:F0:71:42:C3:D0:BB:0D:2A:B2:BB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/1/B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:87:09:46:55:18:d1:01:39:cb:22:2b:d4:9f:bd:69:d2:82: d2:c8:6d:12:f2:06:f3:cf:05:27:d5:3e:fe:ce:0d:b1:0c:05: 6c:53:c8:d2:3a:e9:b5:5e:66:7f:fb:18:23:66:2f:13:45:09: 50:04:f3:a1:e4:e4:31:1b:97:62:a0:59:d5:ae:e1:fc:4f:0a: cc:56:2f:46:73:ef:8c:83:31:5d:70:d9:10:39:bf:b2:49:60: 03:38:fc:c6:fc:c1:b5:7b:ef:b3:d8:51:d1:ec:2b:ef:5f:7f: d6:1d:e8:dc:bd:8d:52:5f:72:b5:d5:40:8a:0c:d9:dd:17:b9: 39:95:42:0f:3d:1a:46:40:1d:3e:18:f4:e3:c6:b0:1e:56:a8: e3:a3:1c:b5:17:f4:f7:c1:24:6f:89:33:e8:02:ae:38:fd:44: ec:f7:88:90:cc:33:99:9c:ff:e9:0c:bb:05:4a:62:cb:c2:b9: 14:4e:68:9a:9e:81:d2:ca:69:fe:81:5c:a5:7a:15:b1:35:16: ae:c1:2f:c0:29:80:32:e8:63:f8:e9:be:c1:db:61:98:1e:04: f8:18:d1:cd:b0:98:46:66:4e:10:06:06:b1:ea:f3:0a:e7:ed: 7e:5a:fa:51:e2:15:2b:fa:3e:0c:8b:17:23:a6:73:87:bb:7c: 7d:bd:56:f3 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUE/KLDHQ7MUIozXEqkJjqC7QliCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQy QUIyQkJCQjAeFw0yNjA2MjcxMDAzNTFaFw0yNjA2MjgxMzM4NTFaMDMxMTAvBgNV BAMTKDU0REQ0NDQxNzVEOEM4RENGNTUxMkIwMzI5MEUyRTBCMDE4ODIxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzC3gORjk9Efytwy2+XwvHXW/ 2JXLOpppTKkC3hWhTJOOGj3/Bq7ZZNN716c9onMxM+wbx7OY2dZtiK57s9hvd+3U rwmwlwdlrp2iT/U+GP2TNipCPS9exqUm95te6NAcNElsn31X1kYbWmYI5qo5LiAr G8g80fTegWVfTG4I4226AYtXF0Jm79kVtNN8H3iT8Uep3i/HjVE3s5H/M0wIfgLD ITguAO2JaosGc+/uT3XWmrg2JQbB99j/IqgmXtoZiQ2dM2h/AxRGg1AIb72oJMX/ DBZxScs58ofPVGw0O7V6kXV8MrKTJx7O1UjH1PHluupHWgowxH8Fq8J2zGG5AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUVN1EQXXYyNz1USsDKQ4uCwGIIQ0wHwYDVR0j BBgwFoAUs5Ntp5OpmVhi8HFCw9C7DSqyu7swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEz NGFiLzEvQjM5MzZEQTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5j cmwwgaAGCCsGAQUFBwEBBIGTMIGQMIGNBggrBgEFBQcwAoaBgHJzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00 ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzEwL0IzOTM2REE3OTNBOTk5NTg2MkYwNzE0 MkMzRDBCQjBEMkFCMkJCQkIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYB BQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEzNGFiLzEvQjM5MzZE QTc5M0E5OTk1ODYyRjA3MTQyQzNEMEJCMEQyQUIyQkJCQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABmH CUZVGNEBOcsiK9SfvWnSgtLIbRLyBvPPBSfVPv7ODbEMBWxTyNI66bVeZn/7GCNm LxNFCVAE86Hk5DEbl2KgWdWu4fxPCsxWL0Zz74yDMV1w2RA5v7JJYAM4/Mb8wbV7 77PYUdHsK+9ff9Yd6Ny9jVJfcrXVQIoM2d0XuTmVQg89GkZAHT4Y9OPGsB5WqOOj HLUX9PfBJG+JM+gCrjj9ROz3iJDMM5mc/+kMuwVKYsvCuRROaJqegdLKaf6BXKV6 FbE1Fq7BL8ApgDLoY/jpvsHbYZgeBPgY0c2wmEZmThAGBrHq8wrn7X5a+lHiFSv6 PgyLFyOmc4e7fH29VvM= -----END CERTIFICATE-----Generated at Sun Jun 28 00:57:46 2026 by rpki-client