$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: jHiR6gjnuuQftFMzWNbLldHOlco3ILCeSyvHG9Y5vgI= Subject key identifier: FB:E1:FE:E4:BD:70:C1:9C:21:70:0B:A5:C8:99:16:2D:8E:B6:31:70 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 0E284146D5403FD45A2BDE2A5B535DBAE1543C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 48 Signing time: Mon 25 May 2026 07:44:59 +0000 Manifest this update: Mon 25 May 2026 07:39:59 +0000 Manifest next update: Tue 26 May 2026 11:42:59 +0000 Files and hashes: 1: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 2: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: ESfKv92db9doCbsMzitocavG+4a+UfQyJyCaqBH10Qo=) 3: AS213900.asa (hash: vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=) 4: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 5: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:28:41:46:d5:40:3f:d4:5a:2b:de:2a:5b:53:5d:ba:e1:54:3c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: May 25 07:39:59 2026 GMT Not After : May 26 11:42:59 2026 GMT Subject: CN=FBE1FEE4BD70C19C21700BA5C899162D8EB63170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:d0:72:a3:2f:c8:be:0f:99:f8:41:ec:5c: 98:fa:71:dd:32:d3:58:db:64:c2:f2:68:32:f3:7d: 36:30:79:44:81:d6:4e:d6:39:80:1c:06:a2:7a:f7: 06:f4:ff:71:60:d0:09:e4:d6:53:e1:12:3e:1b:4b: b3:e5:76:32:7a:34:17:ae:c4:42:17:bd:3a:b4:3c: ed:c3:74:84:22:7a:61:29:d2:d5:b6:e8:74:03:2f: 96:6b:8b:fa:f8:cc:35:4e:0e:b9:ab:df:06:50:27: c0:35:c4:f1:23:ff:d5:9c:64:eb:dd:6c:d6:f6:07: 39:62:6b:b5:bc:ab:51:c9:68:7b:55:14:4e:63:c5: 15:21:61:12:7b:23:7a:9d:b7:75:f2:7d:f0:96:1f: 16:fc:43:2f:95:66:3a:95:7b:fd:58:90:84:ca:6a: f1:cc:6b:2c:e7:6c:2f:23:56:4d:f3:87:ff:ad:10: 60:3d:2c:03:d6:e6:1a:83:52:53:84:df:f3:f2:2e: ee:9c:4d:f8:f5:5f:42:c9:e8:08:18:cc:75:97:cd: 5a:8f:db:91:ff:5a:66:91:9a:42:e3:e1:cb:2b:aa: 51:b0:d0:33:16:70:b5:11:cd:9a:96:b5:e2:62:88: 52:98:df:e7:fa:af:35:eb:dc:95:89:6b:d2:b0:9c: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:FE:E4:BD:70:C1:9C:21:70:0B:A5:C8:99:16:2D:8E:B6:31:70 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:41:b7:15:35:ff:6d:92:08:6e:44:51:db:ca:fa:08:74:9f: c5:7f:9b:62:56:6a:a8:fb:5d:41:65:70:3e:70:dd:20:e7:c2: 46:e8:e2:90:c1:10:0c:65:34:11:2d:7e:48:e2:bf:a6:df:ae: 41:29:b9:3f:0b:84:c3:8d:8b:94:43:25:ef:a5:2b:48:24:2f: bf:82:9c:d2:96:a5:b2:0b:2a:ac:b1:0d:96:ee:0d:e2:17:bb: 9e:32:e4:e1:34:f8:20:47:d0:6e:4d:8e:83:80:05:4e:3d:04: 07:de:2b:c9:1e:67:29:a5:7d:17:6e:95:ba:47:99:2f:a1:8c: 95:01:b7:77:22:54:a3:b3:51:68:48:c8:9b:b7:1b:09:28:41: e1:5f:f8:bb:97:95:29:07:c9:9e:95:97:d5:6c:fb:fd:df:03: 97:77:10:0a:11:e7:81:40:aa:ad:00:72:29:f6:71:cb:ef:f3: 99:54:71:c1:c4:3d:65:c1:26:ec:78:86:85:e9:27:0f:7a:2c: 27:b4:6f:df:dc:80:63:76:e3:61:98:1b:50:6a:81:32:29:a7: e5:aa:7c:a5:58:68:34:0d:87:7b:e2:0d:78:60:15:bf:3a:1a: 38:c2:df:96:89:fa:e7:a1:a8:2d:c8:2d:11:49:d3:70:09:c4: 20:d7:68:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDihBRtVAP9RaK94qW1NduuFUPGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA1MjUwNzM5NTlaFw0yNjA1MjYxMTQyNTlaMDMxMTAvBgNV BAMTKEZCRTFGRUU0QkQ3MEMxOUMyMTcwMEJBNUM4OTkxNjJEOEVCNjMxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgNByoy/Ivg+Z+EHsXJj6cd0y 01jbZMLyaDLzfTYweUSB1k7WOYAcBqJ69wb0/3Fg0Ank1lPhEj4bS7PldjJ6NBeu xEIXvTq0PO3DdIQiemEp0tW26HQDL5Zri/r4zDVODrmr3wZQJ8A1xPEj/9WcZOvd bNb2Bzlia7W8q1HJaHtVFE5jxRUhYRJ7I3qdt3XyffCWHxb8Qy+VZjqVe/1YkITK avHMayznbC8jVk3zh/+tEGA9LAPW5hqDUlOE3/PyLu6cTfj1X0LJ6AgYzHWXzVqP 25H/WmaRmkLj4csrqlGw0DMWcLURzZqWteJiiFKY3+f6rzXr3JWJa9KwnEshAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU++H+5L1wwZwhcAulyJkWLY62MXAwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEG3FTX/bZIIbkRR28r6 CHSfxX+bYlZqqPtdQWVwPnDdIOfCRujikMEQDGU0ES1+SOK/pt+uQSm5PwuEw42L lEMl76UrSCQvv4Kc0palsgsqrLENlu4N4he7njLk4TT4IEfQbk2Og4AFTj0EB94r yR5nKaV9F26VukeZL6GMlQG3dyJUo7NRaEjIm7cbCShB4V/4u5eVKQfJnpWX1Wz7 /d8Dl3cQChHngUCqrQByKfZxy+/zmVRxwcQ9ZcEm7HiGheknD3osJ7Rv39yAY3bj YZgbUGqBMimn5ap8pVhoNA2He+INeGAVvzoaOMLflon656GoLcgtEUnTcAnEINdo QQ== -----END CERTIFICATE-----Generated at Mon May 25 17:16:42 2026 by rpki-client