$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: +GqvDWPwMSSp9edH7mc74Iwc31NSVgV0PBQuiy8yGvs= Subject key identifier: 5D:24:82:0A:C0:EB:2A:19:69:69:3F:CD:52:19:69:76:2E:49:FF:3F Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 44144638B8A94CA2C062CFDE82DE8410E685338A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: C8 Signing time: Thu 11 Jun 2026 15:30:09 +0000 Manifest this update: Thu 11 Jun 2026 15:25:09 +0000 Manifest next update: Fri 12 Jun 2026 17:10:09 +0000 Files and hashes: 1: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: btVEmG7CrxqwzOqXNiJtj+o65qFgkNhgcpx/8dkOazw=) 2: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 3: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=) 4: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 5: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 6: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) 7: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:14:46:38:b8:a9:4c:a2:c0:62:cf:de:82:de:84:10:e6:85:33:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jun 11 15:25:09 2026 GMT Not After : Jun 12 17:10:09 2026 GMT Subject: CN=5D24820AC0EB2A1969693FCD521969762E49FF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:b4:65:73:0c:df:8c:47:93:37:bd:77:a1: 3f:08:e1:40:6e:51:4b:67:5c:3d:a1:a9:f0:4b:3d: b4:92:52:87:77:33:72:24:cf:86:a0:e3:c8:ea:34: 47:d9:54:c7:58:91:31:d6:e3:fe:95:c2:a5:0e:41: c0:06:67:e8:12:e3:c9:57:d4:1f:41:8d:3d:0c:d5: 2c:10:6f:85:a2:0d:8b:f0:a0:7f:6d:d9:42:4a:94: 74:29:26:42:10:a6:6b:91:6d:1d:aa:0d:16:49:c2: c4:9a:68:07:c6:af:9e:41:59:8b:94:a6:44:2c:82: 23:c0:d5:be:52:12:6b:29:e9:14:50:5e:03:72:ef: ad:69:02:8d:a8:0a:5b:b4:c8:53:13:99:fe:79:81: cd:9b:e7:6d:ae:68:a2:74:50:a3:73:ac:7b:50:15: de:80:4d:bc:76:68:11:54:20:77:51:80:de:f4:1d: 3f:a0:9c:d1:9a:a5:e7:80:12:04:59:3c:0c:88:ac: f5:6c:ca:3c:f8:0a:0e:a7:20:30:f2:ba:03:1e:7e: ce:0a:cc:55:c4:7f:f3:5f:e9:e8:e3:28:4d:91:bc: 63:3b:68:1f:33:48:e4:5e:96:2e:f5:d8:75:37:00: 32:b2:4d:06:22:2d:6e:e0:d3:18:77:44:7f:e4:11: 62:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:24:82:0A:C0:EB:2A:19:69:69:3F:CD:52:19:69:76:2E:49:FF:3F X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a1:eb:78:09:93:8e:40:c5:9f:83:23:ac:3f:38:d7:50:c5: b3:85:f1:66:7b:ad:00:d9:15:30:6d:13:bb:85:08:b6:f7:53: a9:30:0e:b2:49:69:18:5e:f7:38:ba:32:21:83:cb:b7:64:de: a9:3b:fd:f1:fd:a5:f4:39:b6:69:75:44:85:14:fe:57:0f:7b: d0:42:f3:2e:0d:3d:fd:4a:a5:e8:18:ad:07:56:c9:41:a6:c8: b1:23:48:a0:c4:1d:1f:3f:b8:9d:e7:42:6e:38:64:69:d1:d2: c9:0a:e3:7d:81:64:0b:56:c5:b6:e9:89:a9:19:11:ab:f9:f0: c7:78:0d:c8:49:23:c9:f2:9a:55:9a:c5:0d:3c:b7:aa:1a:ba: 70:e7:f7:61:4a:21:97:76:06:bf:1e:ea:6a:d6:44:d9:bd:ab: 86:3e:f9:1a:8d:16:d6:58:db:3b:e0:db:e3:67:4e:a0:2b:17: 1c:2d:c9:2c:33:3d:6c:a4:2c:54:4f:76:5d:a8:47:b0:fe:2d: da:78:c0:0e:1f:d1:16:e0:06:2a:31:f6:49:20:76:30:b2:24: 46:c7:a1:f8:11:3a:46:dc:d4:b8:50:88:ee:8e:6a:17:42:a1: ab:5f:50:5b:52:00:2a:8f:04:3f:0a:fa:df:98:c7:ce:10:f1: c5:2a:45:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURBRGOLipTKLAYs/egt6EEOaFM4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA2MTExNTI1MDlaFw0yNjA2MTIxNzEwMDlaMDMxMTAvBgNV BAMTKDVEMjQ4MjBBQzBFQjJBMTk2OTY5M0ZDRDUyMTk2OTc2MkU0OUZGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Y7RlcwzfjEeTN713oT8I4UBu UUtnXD2hqfBLPbSSUod3M3Ikz4ag48jqNEfZVMdYkTHW4/6VwqUOQcAGZ+gS48lX 1B9BjT0M1SwQb4WiDYvwoH9t2UJKlHQpJkIQpmuRbR2qDRZJwsSaaAfGr55BWYuU pkQsgiPA1b5SEmsp6RRQXgNy761pAo2oClu0yFMTmf55gc2b522uaKJ0UKNzrHtQ Fd6ATbx2aBFUIHdRgN70HT+gnNGapeeAEgRZPAyIrPVsyjz4Cg6nIDDyugMefs4K zFXEf/Nf6ejjKE2RvGM7aB8zSOReli712HU3ADKyTQYiLW7g0xh3RH/kEWKJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXSSCCsDrKhlpaT/NUhlpdi5J/z8wHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARoet4 CZOOQMWfgyOsPzjXUMWzhfFme60A2RUwbRO7hQi291OpMA6ySWkYXvc4ujIhg8u3 ZN6pO/3x/aX0ObZpdUSFFP5XD3vQQvMuDT39SqXoGK0HVslBpsixI0igxB0fP7id 50JuOGRp0dLJCuN9gWQLVsW26YmpGRGr+fDHeA3ISSPJ8ppVmsUNPLeqGrpw5/dh SiGXdga/Hupq1kTZvauGPvkajRbWWNs74NvjZ06gKxccLcksMz1spCxUT3ZdqEew /i3aeMAOH9EW4AYqMfZJIHYwsiRGx6H4ETpG3NS4UIjujmoXQqGrX1BbUgAqjwQ/ CvrfmMfOEPHFKkWD -----END CERTIFICATE-----Generated at Thu Jun 11 20:41:04 2026 by rpki-client