$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: bQYS7MIYTcsunSRYUHXgDBWRVdCGG6mqCjlXQJlFRqM= Subject key identifier: 5A:85:D0:7B:E8:81:F9:4A:4E:5A:1E:09:94:A5:7C:1E:18:58:27:30 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 0169FF4AEAD4CDADA9DC481882BC9E8F26A3EAED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 042E Signing time: Fri 05 Jun 2026 05:53:38 +0000 Manifest this update: Fri 05 Jun 2026 05:48:38 +0000 Manifest next update: Sat 06 Jun 2026 07:41:38 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: mTPXQtsy05HpaZyPbcZpmcoN1uDmBAze3ljLCvq3f3I=) 2: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 3: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:69:ff:4a:ea:d4:cd:ad:a9:dc:48:18:82:bc:9e:8f:26:a3:ea:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jun 5 05:48:38 2026 GMT Not After : Jun 6 07:41:38 2026 GMT Subject: CN=5A85D07BE881F94A4E5A1E0994A57C1E18582730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:46:dc:fe:2a:96:66:59:4d:f5:8c:fe:d2: 02:58:0e:de:d2:a8:95:d5:64:e5:e4:5e:a9:27:e1: 66:e7:7c:89:45:e0:b7:2b:c1:4c:20:c4:26:b0:2e: 72:f7:61:cf:6d:63:1b:46:f1:94:f2:0d:c8:c1:eb: 31:74:1a:f1:e8:1c:45:2d:e6:64:b7:ef:57:3c:af: 2d:76:70:55:fd:37:d8:ef:ba:b7:e1:f2:aa:5d:25: da:55:fe:30:3a:f2:5c:ca:e9:f2:c4:67:6b:a8:cd: 50:a9:4e:e6:fa:32:4f:79:8b:9e:97:86:aa:6b:e6: aa:bb:d0:26:a3:d0:4f:5c:0e:50:14:99:75:ca:09: 2a:ed:92:42:e1:c7:32:7b:98:40:c8:54:4c:68:4c: 58:31:47:21:d1:66:85:a6:10:6e:d6:cf:d3:85:86: 0a:a1:05:6f:d3:c4:b4:17:74:77:56:da:74:c1:ec: 7e:cd:db:64:08:b9:2b:32:25:e3:87:17:f9:bc:f5: 0d:3d:b1:72:09:d8:ba:9f:d4:33:be:0d:33:56:24: 60:77:ac:54:b3:58:3a:89:84:51:2a:d1:a2:a4:e6: 57:d8:9a:34:2e:f8:3a:d7:c9:c8:67:1c:6a:94:d5: c0:91:d4:1c:99:ae:69:24:2b:93:e8:97:c3:45:a6: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:D0:7B:E8:81:F9:4A:4E:5A:1E:09:94:A5:7C:1E:18:58:27:30 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cc:a2:e1:13:5f:65:00:39:7e:6b:34:64:d7:38:ab:17:00: 1f:6a:09:37:1b:00:9d:fd:88:48:6e:a7:b5:b8:12:3b:12:ea: 2d:20:9b:86:75:6e:eb:0e:4e:91:2f:0a:0f:ff:62:99:88:bf: e4:e4:d5:28:29:f5:de:f1:da:d5:82:22:d5:48:96:58:c0:d3: ef:79:b1:a3:2f:28:a1:c9:0b:c7:94:6e:50:a2:06:36:ac:6d: e7:b9:44:02:11:ee:b7:0c:53:5c:90:fa:c0:f0:a3:2a:e1:4d: 9c:b4:8a:2c:89:b9:dc:0f:d9:03:93:c8:1f:91:7b:68:c1:1f: c3:f3:ff:aa:ad:7d:27:74:bb:40:50:b1:69:ab:99:c1:22:94: 2d:bc:ad:9a:40:d1:5c:e5:f2:3e:4e:42:27:d2:21:d3:7f:ab: de:16:af:5a:39:1c:ad:8c:af:2d:91:2f:d2:a6:59:56:99:f5: 51:e6:6a:88:29:79:35:77:9b:7e:8a:a7:f0:a1:a1:79:86:d5: f1:18:46:43:f0:33:03:80:09:c5:97:f0:4b:f6:60:40:b1:e6: 0a:d2:c7:8c:36:26:bc:0f:b6:84:12:21:3c:ef:75:1c:11:31: 68:49:80:cc:90:c7:01:f9:2b:4f:3d:99:c4:96:5c:6b:3e:73: 0b:d0:eb:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAWn/SurUza2p3EgYgryejyaj6u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA2MDUwNTQ4MzhaFw0yNjA2MDYwNzQxMzhaMDMxMTAvBgNV BAMTKDVBODVEMDdCRTg4MUY5NEE0RTVBMUUwOTk0QTU3QzFFMTg1ODI3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+Ebc/iqWZllN9Yz+0gJYDt7S qJXVZOXkXqkn4WbnfIlF4LcrwUwgxCawLnL3Yc9tYxtG8ZTyDcjB6zF0GvHoHEUt 5mS371c8ry12cFX9N9jvurfh8qpdJdpV/jA68lzK6fLEZ2uozVCpTub6Mk95i56X hqpr5qq70Caj0E9cDlAUmXXKCSrtkkLhxzJ7mEDIVExoTFgxRyHRZoWmEG7Wz9OF hgqhBW/TxLQXdHdW2nTB7H7N22QIuSsyJeOHF/m89Q09sXIJ2Lqf1DO+DTNWJGB3 rFSzWDqJhFEq0aKk5lfYmjQu+DrXychnHGqU1cCR1ByZrmkkK5Pol8NFpn63AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWoXQe+iB+UpOWh4JlKV8HhhYJzAwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVzKLh E19lADl+azRk1zirFwAfagk3GwCd/YhIbqe1uBI7EuotIJuGdW7rDk6RLwoP/2KZ iL/k5NUoKfXe8drVgiLVSJZYwNPvebGjLyihyQvHlG5QogY2rG3nuUQCEe63DFNc kPrA8KMq4U2ctIosibncD9kDk8gfkXtowR/D8/+qrX0ndLtAULFpq5nBIpQtvK2a QNFc5fI+TkIn0iHTf6veFq9aORytjK8tkS/SpllWmfVR5mqIKXk1d5t+iqfwoaF5 htXxGEZD8DMDgAnFl/BL9mBAseYK0seMNia8D7aEEiE873UcETFoSYDMkMcB+StP PZnEllxrPnML0OvI -----END CERTIFICATE-----Generated at Sat Jun 6 04:04:44 2026 by rpki-client