$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: TKrpR2S5BzvtFvQ9N+oJJ+5f/h+KC8wL1xHRnJ8tYbc= Subject key identifier: 9C:58:08:8C:17:1D:95:E5:9D:DF:5B:42:D5:2E:09:3A:DC:B6:B3:5C Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 712BC948279CFA52226A67180DA63D072AE8AD8A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 01B5 Signing time: Thu 28 May 2026 10:58:38 +0000 Manifest this update: Thu 28 May 2026 10:53:38 +0000 Manifest next update: Fri 29 May 2026 13:44:38 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: X6ZwtKoBz6ola9yl7qAenU0xvtjFGaayVSr9Az3vqRY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 May 2026 10:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2b:c9:48:27:9c:fa:52:22:6a:67:18:0d:a6:3d:07:2a:e8:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: May 28 10:53:38 2026 GMT Not After : May 29 13:44:38 2026 GMT Subject: CN=9C58088C171D95E59DDF5B42D52E093ADCB6B35C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:c6:d2:3e:89:e9:a1:ba:32:ae:f5:f5:a4: f7:e6:21:6e:cb:3e:c3:12:84:9d:87:a0:98:92:d2: f4:20:98:b2:02:21:06:d6:db:1d:97:e4:4c:a6:a2: 32:eb:61:44:67:6c:06:85:e3:f5:6b:a2:96:9e:d7: 91:9e:8a:ea:08:07:e3:d3:8a:c2:18:10:82:a8:17: 3b:0c:21:47:0a:26:cc:9a:9a:02:16:64:fe:50:e9: 73:1a:a8:96:32:56:a1:e6:fd:5c:c7:6f:a9:b2:99: 07:c2:2b:1e:ec:0b:df:cb:d2:0d:0f:62:4f:8d:be: 02:70:6f:15:2b:41:22:db:b0:92:df:6e:7d:20:84: 13:bf:02:58:b0:f3:e7:87:02:d6:76:a6:b7:e6:cf: 29:53:39:af:bf:57:9c:1d:b5:9e:74:31:54:3c:b8: 6f:2a:aa:ed:45:c3:7c:61:11:6b:67:d2:c4:5c:68: b3:d0:2d:ae:2e:2b:2b:3e:1e:07:9d:49:59:69:5b: 37:a2:9d:9e:c5:ed:53:d2:f8:2b:33:b9:22:24:00: e7:0c:fa:16:a5:59:e4:f2:23:79:a8:e2:7e:ad:84: 0b:ea:f2:48:a4:0c:e8:81:be:42:81:a4:c1:91:81: 73:12:e0:e6:fd:be:c5:1f:f6:62:f4:42:e5:89:ed: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:58:08:8C:17:1D:95:E5:9D:DF:5B:42:D5:2E:09:3A:DC:B6:B3:5C X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:ae:b8:f9:86:3d:ca:63:bf:79:13:62:81:aa:c1:17:5d: a3:49:0d:41:72:41:0b:5f:6a:20:0d:4b:e6:10:56:43:b4:09: cf:0e:f3:dc:bb:62:4e:e7:19:dc:0b:49:05:14:81:9e:e7:b3: 27:f2:05:d0:58:31:c2:d2:4e:41:c2:3c:5c:30:9b:43:33:eb: c0:3c:a5:d3:f5:d1:de:fd:00:0c:20:7c:1d:23:86:7b:0b:d8: 19:fc:2f:d5:2b:2d:3c:75:2b:6b:53:88:34:92:c2:c2:f0:36: f0:20:a9:50:b2:89:9a:81:58:6e:9b:7c:c7:1b:a2:b1:aa:66: 21:5f:7e:e7:91:36:95:6a:35:97:68:10:fb:77:5f:69:4e:1c: 5e:c8:fe:86:7e:c7:9d:05:ab:4f:d3:3c:76:43:3d:3e:7b:4f: f9:fe:5c:9a:c8:3c:93:49:00:5d:10:d9:eb:a2:7e:cb:6a:ab: 7a:a7:70:65:a4:4a:1b:8b:92:87:01:3f:60:a3:a9:4e:71:37: 76:b0:0c:44:20:cd:8c:8e:c9:08:29:35:b8:33:92:20:0c:88: 9b:73:57:86:44:d4:fc:16:f6:06:17:98:54:b2:99:e5:68:04: ab:7a:77:96:1f:ec:e6:9f:1b:c6:c9:0e:19:b0:67:75:57:8a: e8:2a:1f:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcSvJSCec+lIiamcYDaY9ByrorYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA1MjgxMDUzMzhaFw0yNjA1MjkxMzQ0MzhaMDMxMTAvBgNV BAMTKDlDNTgwODhDMTcxRDk1RTU5RERGNUI0MkQ1MkUwOTNBRENCNkIzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZ8bSPonpoboyrvX1pPfmIW7L PsMShJ2HoJiS0vQgmLICIQbW2x2X5EymojLrYURnbAaF4/Vropae15GeiuoIB+PT isIYEIKoFzsMIUcKJsyamgIWZP5Q6XMaqJYyVqHm/VzHb6mymQfCKx7sC9/L0g0P Yk+NvgJwbxUrQSLbsJLfbn0ghBO/Aliw8+eHAtZ2prfmzylTOa+/V5wdtZ50MVQ8 uG8qqu1Fw3xhEWtn0sRcaLPQLa4uKys+HgedSVlpWzeinZ7F7VPS+CszuSIkAOcM +halWeTyI3mo4n6thAvq8kikDOiBvkKBpMGRgXMS4Ob9vsUf9mL0QuWJ7TmhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnFgIjBcdleWd31tC1S4JOty2s1wwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkNK64 +YY9ymO/eRNigarBF12jSQ1BckELX2ogDUvmEFZDtAnPDvPcu2JO5xncC0kFFIGe 57Mn8gXQWDHC0k5BwjxcMJtDM+vAPKXT9dHe/QAMIHwdI4Z7C9gZ/C/VKy08dStr U4g0ksLC8DbwIKlQsomagVhum3zHG6KxqmYhX37nkTaVajWXaBD7d19pThxeyP6G fsedBatP0zx2Qz0+e0/5/lyayDyTSQBdENnron7Laqt6p3BlpEobi5KHAT9go6lO cTd2sAxEIM2MjskIKTW4M5IgDIibc1eGRNT8FvYGF5hUspnlaASreneWH+zmnxvG yQ4ZsGd1V4roKh8R -----END CERTIFICATE-----Generated at Thu May 28 17:44:02 2026 by rpki-client