$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft File: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft (raw, json) Hash identifier: MkzJtmk4opAFyVmjoCJMDspvWVp8uq6Wl7T0t+DmV4g= Subject key identifier: BF:1A:92:4B:6F:CF:94:EB:A2:A3:45:90:AF:5B:43:13:6F:1D:4F:42 Authority key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 Certificate issuer: /CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Certificate serial: C0AA42FC434232B4D63DCD2321AEF97C610A29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft Manifest number: 12 Signing time: Sun 24 May 2026 21:00:35 +0000 Manifest this update: Sun 24 May 2026 20:55:35 +0000 Manifest next update: Mon 25 May 2026 23:48:35 +0000 Files and hashes: 1: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl (hash: lmlSsQgj7iaIHcS06SkhN8IWoTOVmqfcOD6yNzGvsxU=) 2: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: QUdcaAWn6C0rRifC05Eb+UyicOWd/5qy/suPtH7clcc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 23:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c0:aa:42:fc:43:42:32:b4:d6:3d:cd:23:21:ae:f9:7c:61:0a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Validity Not Before: May 24 20:55:35 2026 GMT Not After : May 25 23:48:35 2026 GMT Subject: CN=BF1A924B6FCF94EBA2A34590AF5B43136F1D4F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:1f:15:5f:53:a1:fc:8a:6c:d4:bb:3b:24: d6:b9:fa:e9:ae:97:0f:09:1f:e3:c6:f7:0e:bf:f2: 0d:f5:f9:3d:2a:86:64:71:55:35:b3:96:2b:26:7d: 45:ea:17:2b:c8:45:dc:ab:ab:60:71:f8:f1:c0:4f: a5:c6:1c:54:fb:74:de:21:2b:a3:6b:c3:34:85:99: 46:40:85:8a:1e:c4:1a:39:bf:4b:ad:f6:40:9d:d9: ce:97:96:5c:43:b7:68:e2:97:31:00:73:c7:81:fc: 31:ab:80:73:6a:92:83:47:a7:2a:0f:dd:d6:1c:2d: 39:18:5f:a0:8d:51:80:8a:12:05:f9:0a:bc:58:2a: 25:c4:65:d2:a0:43:57:2c:92:2c:f8:5e:0c:4d:81: a9:56:b3:ab:f1:a6:32:be:69:18:3e:76:a6:c1:bf: 75:41:58:10:77:05:df:bf:2b:30:b8:dd:67:9d:3e: b5:9b:48:c9:20:06:98:38:71:88:54:3b:4e:74:e9: 04:09:56:7d:ba:cf:cd:6d:ab:ac:57:34:02:62:6d: 65:d1:82:4b:7b:92:85:4c:35:14:93:a6:78:47:70: 66:35:71:e5:cf:d8:c9:7b:80:90:04:88:04:5e:4f: a4:a7:1a:6b:7b:ac:cc:cd:fc:06:d2:ea:32:0a:a3: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:92:4B:6F:CF:94:EB:A2:A3:45:90:AF:5B:43:13:6F:1D:4F:42 X509v3 Authority Key Identifier: keyid:9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:0e:09:26:9b:71:e5:5d:bd:c8:27:30:99:b2:d3:44:67: 0d:17:58:15:5e:3a:f4:d2:4d:57:33:9b:38:a9:16:2b:8b:10: 1e:ec:50:50:1c:0b:fb:ce:b6:82:96:4e:69:f9:a1:c3:45:eb: 9f:3c:48:1d:f7:bc:59:c4:55:b5:30:8d:66:83:f1:74:0c:03: 0b:dc:29:7e:49:80:04:bd:d5:82:09:2b:52:8f:ad:6a:d1:07: 16:bf:d7:16:51:34:3e:d6:e0:ec:3c:a7:2f:d5:34:61:4b:72: d0:72:a3:cf:fe:05:f3:4e:4f:5f:f9:55:0b:74:45:dd:82:5d: 0a:59:79:a1:1f:40:78:de:ac:9e:95:f0:b1:b5:43:9d:bb:a2: 45:e1:ea:5f:be:77:94:7f:16:8d:23:74:74:d2:9a:4f:a7:c0: 82:c1:43:8c:e7:89:c7:54:f8:8d:af:26:c6:ac:69:09:a2:ac: c9:40:5a:88:45:5f:8e:78:f2:8e:40:5d:c5:cb:ab:03:85:ac: 97:23:cc:b8:e1:f0:d1:8b:75:4f:51:83:48:b2:f3:3f:4e:a0: 45:be:26:88:40:24:94:68:53:eb:f6:fb:7e:d2:93:dc:ad:e4: 1c:1b:77:aa:1d:92:95:31:f6:3f:28:0d:f1:7a:f9:49:68:e5: 44:c7:2e:87 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUAMCqQvxDQjK01j3NIyGu+XxhCikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENF N0IxQjY3MjAeFw0yNjA1MjQyMDU1MzVaFw0yNjA1MjUyMzQ4MzVaMDMxMTAvBgNV BAMTKEJGMUE5MjRCNkZDRjk0RUJBMkEzNDU5MEFGNUI0MzEzNkYxRDRGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXtR8VX1Oh/Ips1Ls7JNa5+umu lw8JH+PG9w6/8g31+T0qhmRxVTWzlismfUXqFyvIRdyrq2Bx+PHAT6XGHFT7dN4h K6NrwzSFmUZAhYoexBo5v0ut9kCd2c6XllxDt2jilzEAc8eB/DGrgHNqkoNHpyoP 3dYcLTkYX6CNUYCKEgX5CrxYKiXEZdKgQ1cskiz4XgxNgalWs6vxpjK+aRg+dqbB v3VBWBB3Bd+/KzC43WedPrWbSMkgBpg4cYhUO0506QQJVn26z81tq6xXNAJibWXR gkt7koVMNRSTpnhHcGY1ceXP2Ml7gJAEiAReT6SnGmt7rMzN/AbS6jIKo4E9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUvxqSS2/PlOuio0WQr1tDE28dT0IwHwYDVR0j BBgwFoAUnMo63LnIPlGgyVkQSxZy3OextnIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzIvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0IxQjY3Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0Ix QjY3Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjdiNWVmNy1k MTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5YjgvMi85Q0NBM0FEQ0I5QzgzRTUxQTBD OTU5MTA0QjE2NzJEQ0U3QjFCNjcyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYwOCSabceVdvcgnMJmy 00RnDRdYFV469NJNVzObOKkWK4sQHuxQUBwL+862gpZOafmhw0XrnzxIHfe8WcRV tTCNZoPxdAwDC9wpfkmABL3VggkrUo+tatEHFr/XFlE0Ptbg7DynL9U0YUty0HKj z/4F805PX/lVC3RF3YJdCll5oR9AeN6snpXwsbVDnbuiReHqX753lH8WjSN0dNKa T6fAgsFDjOeJx1T4ja8mxqxpCaKsyUBaiEVfjnjyjkBdxcurA4WslyPMuOHw0Yt1 T1GDSLLzP06gRb4miEAklGhT6/b7ftKT3K3kHBt3qh2SlTH2PygN8Xr5SWjlRMcu hw== -----END CERTIFICATE-----Generated at Mon May 25 15:42:42 2026 by rpki-client