$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft File: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft (raw, json) Hash identifier: JNMQE77CJK8EzB8laFgfmNoOmA705AZvc6CMmFMukqU= Subject key identifier: 75:52:1C:ED:E2:36:07:AA:D5:D5:E5:0A:09:40:34:72:87:3F:6A:5F Authority key identifier: 69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 Certificate issuer: /CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Certificate serial: 26DE37356879DF6B8DC10A999FEABDBE4B9F3E4A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft Manifest number: 29 Signing time: Wed 13 May 2026 09:58:10 +0000 Manifest this update: Wed 13 May 2026 09:53:10 +0000 Manifest next update: Thu 14 May 2026 13:32:10 +0000 Files and hashes: 1: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl (hash: 70xEJkgW984G1ODh+A/nmBWRD7fm2gTIEMPOGzJvcsg=) 2: B3936DA793A9995862F07142C3D0BB0D2AB2BBBB.cer (hash: 4JnzDzekO7l+zkV3kW2wnM3JY7qA7frb/XwiW9pw2Ok=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 03:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:de:37:35:68:79:df:6b:8d:c1:0a:99:9f:ea:bd:be:4b:9f:3e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Validity Not Before: May 13 09:53:10 2026 GMT Not After : May 14 13:32:10 2026 GMT Subject: CN=75521CEDE23607AAD5D5E50A09403472873F6A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:80:1a:f3:43:d7:0b:e1:ec:a3:3f:e8:b9: a3:9e:c8:f2:c9:e0:a9:b6:07:55:7c:91:9a:c3:5c: 5b:17:02:8c:90:74:5f:a3:51:a9:af:5f:33:80:73: 5e:8e:3b:0d:54:9b:e0:7a:89:ec:e2:08:2a:fe:44: d3:7b:76:f8:45:33:68:f0:a4:86:e5:78:48:b3:f0: a0:97:a8:20:18:61:36:d0:a3:71:b1:7c:56:71:4c: 23:fd:75:9d:7c:98:93:9e:d4:26:d6:51:82:57:5c: 2c:9e:12:ff:0a:ab:09:98:42:6b:06:2d:41:5c:ec: fd:a7:ed:39:27:ab:20:c5:1e:29:81:7e:77:d2:22: 26:8b:33:7e:67:aa:b6:45:64:28:5b:68:80:b6:c7: 70:b3:51:ea:3a:e0:e3:98:d1:04:da:48:18:c5:f3: 5d:a3:09:e2:6c:bf:de:6e:b1:44:3f:47:56:09:35: ab:de:64:a0:35:dd:e8:e9:d3:09:6d:68:e2:e8:b3: d5:6b:75:a6:ae:3d:0e:68:8a:29:89:89:4f:da:99: b0:fd:43:f5:8a:97:69:3f:ad:d9:60:d9:58:47:eb: 5e:3f:dc:95:d5:2c:7e:47:84:96:88:28:8f:76:f9: fd:8d:a1:ad:e0:a8:f8:1e:14:0b:3e:19:3a:90:7b: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:52:1C:ED:E2:36:07:AA:D5:D5:E5:0A:09:40:34:72:87:3F:6A:5F X509v3 Authority Key Identifier: keyid:69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5e:b2:e0:69:3e:04:3d:d7:b2:1f:21:df:ee:26:4f:e3:93: eb:05:84:20:5c:a6:11:f1:ef:15:68:d2:74:38:03:43:31:e8: 1f:70:9d:ff:a0:c8:98:c5:13:29:0e:f2:4c:5d:0c:3b:b6:52: 3e:f4:96:d5:d8:13:30:6f:68:f6:15:6e:21:0f:e2:9e:7a:67: 87:c6:5e:c5:d7:6c:d9:d2:52:90:68:8a:10:0c:ca:ba:2c:a8: 1d:71:6e:eb:84:e8:d6:15:25:a8:2d:09:04:c9:d2:e0:d6:47: ac:37:8d:86:d3:d6:63:e7:b9:13:ec:f5:64:cf:f0:f8:6f:98: 3a:65:39:65:e7:ff:c4:9a:95:c9:6a:32:10:ad:85:4d:86:ba: 18:4e:ab:c9:35:57:1d:9a:31:7e:43:4e:72:b1:a6:05:be:c5: 7b:83:d7:71:9e:6d:fe:60:6f:80:3e:4b:4a:4a:f1:cc:db:48: 78:16:ec:bc:f7:dd:d2:97:c5:43:a2:c3:70:62:7a:fa:e1:1e: bd:2f:32:1a:68:a5:3e:fe:55:45:d7:79:5f:ce:73:46:2e:71: f1:0f:46:57:eb:91:e6:dd:5e:80:4f:77:d5:f9:63:1c:ce:d2: ee:81:c4:20:de:ec:0c:f3:1f:d2:42:d7:c6:0e:40:91:af:15: e7:b8:9b:2d -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUJt43NWh532uNwQqZn+q9vkufPkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3MjdCOTQ2RDg3OUY1QTUyRkI1OEYyNEI0RDREMTJE NTlCMkNDMjAeFw0yNjA1MTMwOTUzMTBaFw0yNjA1MTQxMzMyMTBaMDMxMTAvBgNV BAMTKDc1NTIxQ0VERTIzNjA3QUFENUQ1RTUwQTA5NDAzNDcyODczRjZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFoAa80PXC+Hsoz/ouaOeyPLJ 4Km2B1V8kZrDXFsXAoyQdF+jUamvXzOAc16OOw1Um+B6ieziCCr+RNN7dvhFM2jw pIbleEiz8KCXqCAYYTbQo3GxfFZxTCP9dZ18mJOe1CbWUYJXXCyeEv8KqwmYQmsG LUFc7P2n7TknqyDFHimBfnfSIiaLM35nqrZFZChbaIC2x3CzUeo64OOY0QTaSBjF 812jCeJsv95usUQ/R1YJNaveZKA13ejp0wltaOLos9VrdaauPQ5oiimJiU/ambD9 Q/WKl2k/rdlg2VhH614/3JXVLH5HhJaIKI92+f2Noa3gqPgeFAs+GTqQe0GtAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUdVIc7eI2B6rV1eUKCUA0coc/al8wHwYDVR0j BBgwFoAUaXJ7lG2Hn1pS+1jyS01NEtWbLMIwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcx ODA4Yi8xMC82OTcyN0I5NDZEODc5RjVBNTJGQjU4RjI0QjRENEQxMkQ1OUIyQ0My LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhZjczYTljLTIwNTgt NDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzY5NzI3Qjk0NkQ4NzlGNUE1MkZCNThG MjRCNEQ0RDEyRDU5QjJDQzIuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8xMC82OTcy N0I5NDZEODc5RjVBNTJGQjU4RjI0QjRENEQxMkQ1OUIyQ0MyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA eF6y4Gk+BD3Xsh8h3+4mT+OT6wWEIFymEfHvFWjSdDgDQzHoH3Cd/6DImMUTKQ7y TF0MO7ZSPvSW1dgTMG9o9hVuIQ/innpnh8Zexdds2dJSkGiKEAzKuiyoHXFu64To 1hUlqC0JBMnS4NZHrDeNhtPWY+e5E+z1ZM/w+G+YOmU5Zef/xJqVyWoyEK2FTYa6 GE6ryTVXHZoxfkNOcrGmBb7Fe4PXcZ5t/mBvgD5LSkrxzNtIeBbsvPfd0pfFQ6LD cGJ6+uEevS8yGmilPv5VRdd5X85zRi5x8Q9GV+uR5t1egE931fljHM7S7oHEIN7s DPMf0kLXxg5Aka8V57ibLQ== -----END CERTIFICATE-----Generated at Wed May 13 16:52:31 2026 by rpki-client