$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: 1kTKqDWOM+Ho8FAV0qY5vy+3Y0Nn7cBVwLr8IwSCM8s= Subject key identifier: 29:FF:A6:F4:35:55:DA:F9:ED:6B:E5:43:78:74:7E:94:75:DB:D9:74 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 232CDD5F6C7C0839D312D4B876D5B9C29E4DF99D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 01D8 Signing time: Thu 16 Apr 2026 05:24:49 +0000 Manifest this update: Thu 16 Apr 2026 05:19:49 +0000 Manifest next update: Fri 17 Apr 2026 07:27:49 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: E8g9gSIlUCdrQI/j/1/suzOjRZJKbInIrAgubh17nCs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 02:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2c:dd:5f:6c:7c:08:39:d3:12:d4:b8:76:d5:b9:c2:9e:4d:f9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Apr 16 05:19:49 2026 GMT Not After : Apr 17 07:27:49 2026 GMT Subject: CN=29FFA6F43555DAF9ED6BE54378747E9475DBD974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:48:ee:89:40:ac:a1:af:d9:1f:9d:64:e5: 63:a6:de:f5:ee:67:67:8a:29:65:bd:93:83:da:36: 8c:0f:3e:cc:08:35:37:4a:19:42:5c:1a:8b:12:64: 3d:c6:b1:84:53:ac:f0:1a:3c:73:c7:1b:fa:f7:a7: 4a:f2:f4:b4:8b:ba:5c:a0:3c:cf:39:2e:51:57:34: 12:dd:dc:85:0f:58:86:0f:8b:dd:c4:60:15:72:e8: 3f:b9:c8:a5:09:08:2c:f4:86:b8:26:9e:66:89:b9: 55:6d:32:a8:74:ec:a0:41:54:04:62:84:ef:01:5c: a3:f2:13:7e:4c:07:8b:7d:d5:b9:ad:81:d5:cd:a8: 45:65:79:5c:22:27:3d:aa:57:bf:0f:84:13:f5:f1: 37:5c:27:a5:26:8a:1f:9c:ed:ba:3c:78:94:e9:6c: 6c:03:b2:d9:18:0a:2a:23:95:9a:9c:cd:05:fb:62: 0d:3b:cc:8a:ac:47:96:94:88:d7:03:ed:f1:80:c2: c5:28:78:cb:1e:a9:20:e8:5f:4b:8a:25:bf:e2:1d: 8b:cb:91:08:55:fa:59:2d:89:0d:12:4f:4c:c9:24: 69:aa:c9:d3:bf:ee:02:82:13:e2:20:22:19:61:05: 97:5a:0d:73:95:2c:a7:cb:ad:45:e2:01:4b:32:61: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FF:A6:F4:35:55:DA:F9:ED:6B:E5:43:78:74:7E:94:75:DB:D9:74 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:59:99:16:f6:92:6e:a6:52:89:77:e4:58:21:ff:69:7e:95: 2f:3f:1e:16:36:b0:07:7b:9e:0d:d1:29:53:f4:1e:a5:f3:ee: 1c:3e:c2:30:99:96:1f:13:99:02:ac:67:7f:79:ed:9d:49:f5: 87:b6:8c:94:85:57:ec:17:4d:60:3b:98:b4:0a:d3:6c:39:2a: 21:69:87:07:a6:02:fa:96:0c:46:a7:58:c5:50:7d:1c:8a:36: 93:13:6d:de:06:30:62:d4:1f:bc:87:e3:6f:7e:35:b7:20:9b: aa:26:26:9b:aa:29:46:77:fd:3e:98:92:1b:42:e2:d3:28:d0: 95:b3:b4:23:3f:1c:b9:d5:d1:dd:64:06:d2:82:1f:26:ce:aa: eb:d3:6a:bc:7c:9c:d7:c6:1c:7a:e7:b6:6c:cd:8e:a5:6a:ed: 22:13:89:95:19:61:08:ee:85:ac:a2:ea:01:55:85:42:0e:dc: 43:f3:88:5d:d4:b1:f4:25:d2:54:8b:14:70:75:31:80:61:0a: 20:91:07:24:1e:46:39:e8:eb:99:66:93:44:94:9a:26:f7:52: ee:e4:d6:72:8c:b7:fc:7c:37:71:fc:89:07:37:e1:bf:8a:d1: 7a:f1:30:df:52:10:48:7e:5c:ed:37:d4:d9:49:fd:a3:1d:ef: 28:2b:53:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIyzdX2x8CDnTEtS4dtW5wp5N+Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjA0MTYwNTE5NDlaFw0yNjA0MTcwNzI3NDlaMDMxMTAvBgNV BAMTKDI5RkZBNkY0MzU1NURBRjlFRDZCRTU0Mzc4NzQ3RTk0NzVEQkQ5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG0juiUCsoa/ZH51k5WOm3vXu Z2eKKWW9k4PaNowPPswINTdKGUJcGosSZD3GsYRTrPAaPHPHG/r3p0ry9LSLulyg PM85LlFXNBLd3IUPWIYPi93EYBVy6D+5yKUJCCz0hrgmnmaJuVVtMqh07KBBVARi hO8BXKPyE35MB4t91bmtgdXNqEVleVwiJz2qV78PhBP18TdcJ6Umih+c7bo8eJTp bGwDstkYCiojlZqczQX7Yg07zIqsR5aUiNcD7fGAwsUoeMseqSDoX0uKJb/iHYvL kQhV+lktiQ0ST0zJJGmqydO/7gKCE+IgIhlhBZdaDXOVLKfLrUXiAUsyYSMXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKf+m9DVV2vnta+VDeHR+lHXb2XQwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsWZkW 9pJuplKJd+RYIf9pfpUvPx4WNrAHe54N0SlT9B6l8+4cPsIwmZYfE5kCrGd/ee2d SfWHtoyUhVfsF01gO5i0CtNsOSohaYcHpgL6lgxGp1jFUH0cijaTE23eBjBi1B+8 h+NvfjW3IJuqJiabqilGd/0+mJIbQuLTKNCVs7QjPxy51dHdZAbSgh8mzqrr02q8 fJzXxhx657ZszY6lau0iE4mVGWEI7oWsouoBVYVCDtxD84hd1LH0JdJUixRwdTGA YQogkQckHkY56OuZZpNElJom91Lu5NZyjLf8fDdx/IkHN+G/itF68TDfUhBIflzt N9TZSf2jHe8oK1P3 -----END CERTIFICATE-----Generated at Thu Apr 16 12:38:37 2026 by rpki-client