$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: pmXHOsts1Gf32oMuOQqKOmGAPx5vywte9I9XGg30zQ0= Subject key identifier: D6:F3:10:4E:69:2A:C7:C1:78:9D:43:A0:DC:B1:0B:A2:A8:A0:64:4C Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 29B9A80E8CA2108B2BAE257B29BB54CC88A7156D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 0583 Signing time: Sat 21 Mar 2026 08:04:44 +0000 Manifest this update: Sat 21 Mar 2026 07:59:44 +0000 Manifest next update: Sun 22 Mar 2026 08:05:44 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 0jjp8nqKdxDr/uLJGAiqXGTj6yf0pd23QqCxTWhXZFc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 01:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:a8:0e:8c:a2:10:8b:2b:ae:25:7b:29:bb:54:cc:88:a7:15:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Mar 21 07:59:44 2026 GMT Not After : Mar 22 08:05:44 2026 GMT Subject: CN=D6F3104E692AC7C1789D43A0DCB10BA2A8A0644C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a0:db:67:ff:a6:4b:bd:1b:c3:e7:eb:32:68: 83:1a:35:6d:2e:46:ee:1c:be:de:6b:c1:6b:bf:c2: 1e:12:64:ed:6d:4c:53:f9:0b:e7:7a:1a:fd:c3:53: 1c:0a:54:2b:d2:6a:3d:00:29:c8:35:a1:65:9b:f9: 32:b1:c1:f7:3c:46:bb:e7:d1:cf:d1:40:8f:62:3f: 54:d3:3a:54:70:ca:9a:a0:ea:b5:65:61:30:f3:d8: 30:cc:7f:19:b9:6c:63:b9:60:ad:50:dd:d7:87:07: 09:43:6e:e6:4e:0b:24:38:b0:b3:48:d2:d1:57:d8: e8:b1:f2:48:ca:bc:63:86:3c:20:31:e6:c5:93:ee: be:95:7d:85:2d:1c:78:3d:b4:53:f9:12:b5:d2:34: ec:56:ec:74:5b:6d:56:4e:02:6c:1c:a6:3f:61:fc: 91:4a:2f:a7:ed:08:9c:54:cc:c5:33:99:72:22:2a: 07:23:d7:0b:7b:d7:d1:bb:bf:e0:07:8a:3e:92:15: b3:b7:e8:07:af:fb:71:01:d0:64:4f:67:83:2a:0f: 74:47:38:04:97:71:a1:3f:e8:21:2e:82:8a:bd:f5: e9:35:6d:d6:fe:ab:8c:5d:91:78:f8:28:ed:ce:b4: 10:28:81:29:cf:b6:13:42:be:02:e6:01:25:45:70: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F3:10:4E:69:2A:C7:C1:78:9D:43:A0:DC:B1:0B:A2:A8:A0:64:4C X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:e6:d0:c5:4e:e8:4c:78:67:39:ae:95:80:b8:87:11:ba:ea: b1:2a:d5:65:c4:4c:68:22:9d:2f:6c:be:f7:2a:1f:bd:e0:02: d2:17:86:28:1d:ba:58:44:ce:e1:e2:6f:a7:f2:b1:79:eb:40: 2b:df:9b:56:3b:c5:15:d6:51:06:20:16:15:8e:80:a0:33:e9: 24:c9:e9:9a:71:11:6e:1a:f5:5d:d8:53:f3:a5:97:af:85:0c: 9f:20:a5:2b:e6:6b:b7:e4:c5:3e:3d:46:33:b8:3d:70:64:5a: 00:87:eb:1e:3c:f1:17:b0:51:6d:80:1b:57:3e:ef:a0:4e:f4: e0:cb:72:7c:61:b5:00:f5:09:53:51:87:8c:76:50:57:a2:3a: 4a:1d:e8:96:fc:50:2e:43:a1:9a:97:fd:bd:b9:ef:12:6f:31: 0b:de:70:3a:a2:18:32:5d:3d:2d:f3:c1:ca:a9:ac:6e:7b:65: cf:2a:af:ab:6f:97:53:8d:c0:e2:4a:38:45:97:89:95:09:b7: 63:3f:b4:96:b4:61:8c:28:9b:a6:a6:63:d9:e2:54:45:f3:5a: 1b:20:71:93:fa:1d:5b:d8:3f:02:be:18:e1:2b:ef:b5:32:90: 8f:d0:86:bc:e4:dc:b7:09:d8:8f:14:45:4d:94:f9:5f:57:62: 93:d9:08:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKbmoDoyiEIsrriV7KbtUzIinFW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjAzMjEwNzU5NDRaFw0yNjAzMjIwODA1NDRaMDMxMTAvBgNV BAMTKEQ2RjMxMDRFNjkyQUM3QzE3ODlENDNBMERDQjEwQkEyQThBMDY0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtoNtn/6ZLvRvD5+syaIMaNW0u Ru4cvt5rwWu/wh4SZO1tTFP5C+d6Gv3DUxwKVCvSaj0AKcg1oWWb+TKxwfc8Rrvn 0c/RQI9iP1TTOlRwypqg6rVlYTDz2DDMfxm5bGO5YK1Q3deHBwlDbuZOCyQ4sLNI 0tFX2Oix8kjKvGOGPCAx5sWT7r6VfYUtHHg9tFP5ErXSNOxW7HRbbVZOAmwcpj9h /JFKL6ftCJxUzMUzmXIiKgcj1wt719G7v+AHij6SFbO36Aev+3EB0GRPZ4MqD3RH OASXcaE/6CEugoq99ek1bdb+q4xdkXj4KO3OtBAogSnPthNCvgLmASVFcAMJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1vMQTmkqx8F4nUOg3LELoqigZEwwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDA5tDF TuhMeGc5rpWAuIcRuuqxKtVlxExoIp0vbL73Kh+94ALSF4YoHbpYRM7h4m+n8rF5 60Ar35tWO8UV1lEGIBYVjoCgM+kkyemacRFuGvVd2FPzpZevhQyfIKUr5mu35MU+ PUYzuD1wZFoAh+sePPEXsFFtgBtXPu+gTvTgy3J8YbUA9QlTUYeMdlBXojpKHeiW /FAuQ6Gal/29ue8SbzEL3nA6ohgyXT0t88HKqaxue2XPKq+rb5dTjcDiSjhFl4mV CbdjP7SWtGGMKJumpmPZ4lRF81obIHGT+h1b2D8CvhjhK++1MpCP0Ia85Ny3CdiP FEVNlPlfV2KT2Qj3 -----END CERTIFICATE-----Generated at Sat Mar 21 09:30:34 2026 by rpki-client