$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: pci94hGS3pPRx0xMzrBo/oOgtyMnfMN8Vh353c9eZLo= Subject key identifier: 1C:E9:B0:9E:0C:24:72:60:62:C6:AB:85:91:D5:30:6E:BF:56:52:77 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 235CDB8D65D459991C12EFA0897A52C339D65BAA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: 3E Signing time: Thu 04 Jun 2026 05:28:34 +0000 Manifest this update: Thu 04 Jun 2026 05:23:34 +0000 Manifest next update: Fri 05 Jun 2026 05:48:34 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: /hw7ajHIVtxwofiUmjwKKoGcNsCrG4DR5qZTmp1ldRc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 01:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5c:db:8d:65:d4:59:99:1c:12:ef:a0:89:7a:52:c3:39:d6:5b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Jun 4 05:23:34 2026 GMT Not After : Jun 5 05:48:34 2026 GMT Subject: CN=1CE9B09E0C24726062C6AB8591D5306EBF565277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:d8:b0:73:99:73:37:ab:48:5a:72:f0:b8: 66:32:b1:6a:6c:3c:96:5f:59:74:eb:cf:70:56:b4: f9:31:78:81:02:1a:23:9f:13:0d:c6:db:a0:80:e0: e5:8e:ac:ee:8c:40:b9:14:1b:75:e5:98:5d:e5:5e: e9:7c:c3:90:03:60:9c:f3:3f:49:03:d5:7c:dc:99: 53:36:cd:d0:47:b1:4d:c7:44:bb:3a:e2:0e:33:f6: d9:c9:0b:92:b8:35:fe:c5:1b:bb:8f:35:78:da:70: 8f:79:67:ca:cc:29:49:89:8d:a3:45:85:2d:bd:c7: 45:78:d2:c7:e6:64:29:ff:5c:81:44:a8:cf:00:50: 92:84:73:aa:08:b9:1f:03:fc:60:e2:f4:a4:d9:6c: 97:ce:95:81:b7:15:51:10:b2:73:6a:c7:38:1c:f5: ef:b5:68:68:fb:8a:09:7f:99:79:75:93:5c:09:af: b0:9e:4e:3b:b2:c6:a6:da:31:50:ad:39:f4:d6:ee: fb:21:e0:94:c6:83:d6:ba:9b:68:cb:35:61:26:c0: e8:83:d2:b5:64:ad:09:bc:3d:c7:b6:cb:b9:da:2b: fc:f3:75:fb:9f:03:ce:04:40:5d:c5:25:72:c4:d0: dc:0b:c9:36:ff:ca:ca:6b:ab:53:d1:24:0b:6f:bd: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E9:B0:9E:0C:24:72:60:62:C6:AB:85:91:D5:30:6E:BF:56:52:77 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:ad:df:a2:01:a7:ca:70:6f:96:ac:fb:ee:db:a7:f0:13: 9c:4d:86:0e:58:67:5a:23:38:57:bf:c2:e6:04:86:b7:c0:d3: 6a:2a:7e:7d:9f:20:6f:a1:d9:a7:ae:e6:16:4a:bc:1d:7c:17: 61:db:12:08:ec:da:e5:ca:fe:e3:8b:c2:d1:19:cf:c3:ee:ba: d8:63:65:de:28:86:81:e1:d3:d1:59:d0:6f:6e:44:db:0d:2c: 06:ec:8e:66:e3:13:a9:09:fc:db:93:d2:ec:03:74:61:54:ee: 0f:6c:71:a5:5e:9a:18:b5:0c:84:ad:54:48:06:61:d0:e7:f6: 7b:96:ed:86:11:d6:0d:e6:4c:f7:7e:2b:44:05:91:07:63:db: 5e:6e:78:49:30:1a:ff:e5:bd:5b:ab:12:72:5d:ca:8d:2d:c5: 87:56:fc:98:60:71:ad:32:81:7f:ac:a4:af:1b:49:88:5d:75: 20:e0:b9:79:77:3c:7c:a5:31:f0:56:57:1f:6f:e6:80:a7:a6: bd:ac:94:54:52:1c:35:1d:d5:81:78:47:64:1d:86:1f:5a:97: 9f:3c:b0:4f:6a:18:60:91:03:de:63:cf:0c:3a:de:94:39:9f: 27:f6:68:98:0e:fc:23:ec:55:51:5c:e7:5c:1c:1e:47:44:89: 43:80:9d:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUI1zbjWXUWZkcEu+giXpSwznWW6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA2MDQwNTIzMzRaFw0yNjA2MDUwNTQ4MzRaMDMxMTAvBgNV BAMTKDFDRTlCMDlFMEMyNDcyNjA2MkM2QUI4NTkxRDUzMDZFQkY1NjUyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU99iwc5lzN6tIWnLwuGYysWps PJZfWXTrz3BWtPkxeIECGiOfEw3G26CA4OWOrO6MQLkUG3XlmF3lXul8w5ADYJzz P0kD1XzcmVM2zdBHsU3HRLs64g4z9tnJC5K4Nf7FG7uPNXjacI95Z8rMKUmJjaNF hS29x0V40sfmZCn/XIFEqM8AUJKEc6oIuR8D/GDi9KTZbJfOlYG3FVEQsnNqxzgc 9e+1aGj7igl/mXl1k1wJr7CeTjuyxqbaMVCtOfTW7vsh4JTGg9a6m2jLNWEmwOiD 0rVkrQm8Pce2y7naK/zzdfufA84EQF3FJXLE0NwLyTb/ysprq1PRJAtvvRtFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHOmwngwkcmBixquFkdUwbr9WUncwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYHq3f ogGnynBvlqz77tun8BOcTYYOWGdaIzhXv8LmBIa3wNNqKn59nyBvodmnruYWSrwd fBdh2xII7Nrlyv7ji8LRGc/D7rrYY2XeKIaB4dPRWdBvbkTbDSwG7I5m4xOpCfzb k9LsA3RhVO4PbHGlXpoYtQyErVRIBmHQ5/Z7lu2GEdYN5kz3fitEBZEHY9tebnhJ MBr/5b1bqxJyXcqNLcWHVvyYYHGtMoF/rKSvG0mIXXUg4Ll5dzx8pTHwVlcfb+aA p6a9rJRUUhw1HdWBeEdkHYYfWpefPLBPahhgkQPeY88MOt6UOZ8n9miYDvwj7FVR XOdcHB5HRIlDgJ3E -----END CERTIFICATE-----Generated at Thu Jun 4 14:05:56 2026 by rpki-client