$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft File: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft (raw, json) Hash identifier: CC57TzaGPks4eaaqNNdU5ZFCh/ETD+9NPFy49QbZo6w= Subject key identifier: 25:3C:D5:41:FD:11:02:25:E7:57:14:44:D7:C6:B1:2F:B1:9F:51:BE Authority key identifier: 0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E Certificate issuer: /CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Certificate serial: 45E6CED9B96545E8B3B15ECE07AFC9DBB74B3413 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft Manifest number: 3D Signing time: Wed 24 Jun 2026 15:33:33 +0000 Manifest this update: Wed 24 Jun 2026 15:28:33 +0000 Manifest next update: Thu 25 Jun 2026 15:39:33 +0000 Files and hashes: 1: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl (hash: tf2GYOrgskgXgbKxmuwvKcTm1uYpGxfB7rOwdig57gY=) 2: 326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa (hash: rzHDd6pYyAUkDzdpOl9T5hbLCMrrfqWTOBS2icxWnVc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 15:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e6:ce:d9:b9:65:45:e8:b3:b1:5e:ce:07:af:c9:db:b7:4b:34:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Validity Not Before: Jun 24 15:28:33 2026 GMT Not After : Jun 25 15:39:33 2026 GMT Subject: CN=253CD541FD110225E7571444D7C6B12FB19F51BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:38:ca:15:61:41:03:67:98:c4:75:43:10: 68:6d:ed:4d:20:ed:59:6c:5f:76:96:67:ef:04:1c: d3:cf:d6:b3:a6:d9:38:fa:5b:db:8f:9a:98:df:a1: 85:66:8b:27:bb:40:64:af:8a:59:18:c8:7f:60:e7: 1c:dd:ac:f0:39:28:1b:5d:b9:fa:16:c6:4c:26:0d: 1b:19:a1:04:03:4f:60:f8:0e:72:3a:4f:df:d6:bc: d0:56:dc:1c:2b:47:e2:04:27:3b:df:d5:a8:ce:88: 27:02:16:c2:95:9a:a1:41:4f:06:d1:35:5a:7b:84: 1e:f5:62:c2:7a:71:0d:eb:6c:31:37:7b:89:89:2f: 2a:ee:ad:19:52:5d:d3:57:cc:e6:e5:f9:6d:a1:93: c6:3d:4b:ad:a8:a2:1b:7d:f3:f8:67:fe:1c:a1:58: 1d:00:d1:59:89:ec:1b:0d:01:c2:b9:76:1c:51:d8: 2e:af:63:60:fe:4e:0c:63:2c:0c:6d:b0:05:e0:3a: 36:1f:5c:5b:c1:45:ef:41:5a:34:9b:e3:99:6f:d2: 94:2f:93:c0:8d:e3:a1:01:e7:22:87:18:04:8f:9b: aa:ac:63:a1:03:5b:54:7d:0f:5b:2d:23:56:d3:f2: fe:a5:90:76:69:28:e3:8a:90:ba:62:a8:44:72:91: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:D5:41:FD:11:02:25:E7:57:14:44:D7:C6:B1:2F:B1:9F:51:BE X509v3 Authority Key Identifier: keyid:0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2f:07:e7:f0:b0:b3:f5:26:cb:93:82:2c:b4:6e:02:b4:e0: 9d:87:5b:b6:42:85:4e:3d:43:4b:5b:45:e1:59:1d:1e:cf:6f: f7:3e:23:f8:c2:62:f1:ec:4d:b7:35:5a:a6:9d:81:23:92:d9: 5b:54:db:e1:f1:d1:4e:66:dc:54:81:b6:95:8f:f2:81:45:33: 5f:79:0d:f4:ca:67:33:33:82:0d:ba:64:87:e5:b1:e2:3e:a0: 3d:52:2b:3b:06:5a:40:56:7b:8b:28:cb:0a:40:28:54:15:29: c8:c7:91:b5:d2:97:f8:4f:84:70:f6:53:28:ec:fa:e0:82:28: c4:c9:b8:80:30:e5:80:15:6f:32:d7:a0:35:38:82:6e:08:2a: 3f:3e:bd:06:6e:e7:ee:07:00:94:14:0b:fe:bb:ff:7a:b6:e1: 8c:88:b2:79:d1:b5:08:41:0e:3d:56:10:54:ed:09:9a:cf:e3: 52:42:bf:54:28:da:69:b7:06:1e:aa:cc:6e:1b:08:d4:00:e8: cb:e0:68:e9:95:3a:91:95:50:56:f5:59:f0:6c:94:f7:4e:4e: d3:48:e8:d1:2d:39:8b:90:8b:4c:ce:e4:19:ff:a7:5f:46:92: 7b:a4:e3:20:27:aa:60:2a:56:a6:f5:16:df:7d:5d:e4:81:96: 14:b5:13:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURebO2bllReizsV7OB6/J27dLNBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUw N0EyNUQ2RTAeFw0yNjA2MjQxNTI4MzNaFw0yNjA2MjUxNTM5MzNaMDMxMTAvBgNV BAMTKDI1M0NENTQxRkQxMTAyMjVFNzU3MTQ0NEQ3QzZCMTJGQjE5RjUxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22zjKFWFBA2eYxHVDEGht7U0g 7VlsX3aWZ+8EHNPP1rOm2Tj6W9uPmpjfoYVmiye7QGSvilkYyH9g5xzdrPA5KBtd ufoWxkwmDRsZoQQDT2D4DnI6T9/WvNBW3BwrR+IEJzvf1ajOiCcCFsKVmqFBTwbR NVp7hB71YsJ6cQ3rbDE3e4mJLyrurRlSXdNXzObl+W2hk8Y9S62ooht98/hn/hyh WB0A0VmJ7BsNAcK5dhxR2C6vY2D+TgxjLAxtsAXgOjYfXFvBRe9BWjSb45lv0pQv k8CN46EB5yKHGASPm6qsY6EDW1R9D1stI1bT8v6lkHZpKOOKkLpiqERykZyhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJTzVQf0RAiXnVxRE18axL7GfUb4wHwYDVR0j BBgwFoAUCu8MI+6iWEt39+dPPG+hlQeiXW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWIyMzVhNjAtYzc1Ni00M2Y5LTlmNGEtYjJlM2UwZGIx OWZjLzEvMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUwN0EyNUQ2RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8wQUVGMEMyM0VFQTI1ODRCNzdGN0U3NEYz QzZGQTE5NTA3QTI1RDZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzViMjM1YTYwLWM3NTYtNDNmOS05ZjRhLWIyZTNlMGRiMTlmYy8xLzBBRUYwQzIz RUVBMjU4NEI3N0Y3RTc0RjNDNkZBMTk1MDdBMjVENkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwLwfn 8LCz9SbLk4IstG4CtOCdh1u2QoVOPUNLW0XhWR0ez2/3PiP4wmLx7E23NVqmnYEj ktlbVNvh8dFOZtxUgbaVj/KBRTNfeQ30ymczM4INumSH5bHiPqA9Uis7BlpAVnuL KMsKQChUFSnIx5G10pf4T4Rw9lMo7PrggijEybiAMOWAFW8y16A1OIJuCCo/Pr0G bufuBwCUFAv+u/96tuGMiLJ50bUIQQ49VhBU7Qmaz+NSQr9UKNpptwYeqsxuGwjU AOjL4GjplTqRlVBW9VnwbJT3Tk7TSOjRLTmLkItMzuQZ/6dfRpJ7pOMgJ6pgKlam 9RbffV3kgZYUtRM+ -----END CERTIFICATE-----Generated at Thu Jun 25 09:26:32 2026 by rpki-client