$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: O7MlVU+ufbv3xLdiaLebdG2oBM6pyB1W5ukckcpdmow= Subject key identifier: 06:81:BB:FD:7C:35:65:2E:C6:3E:05:C2:9E:F8:26:E2:E0:F8:7E:4D Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 44687C76211489DE40C10AF0CB93DAE521A2429C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 05BC Signing time: Thu 14 May 2026 19:24:42 +0000 Manifest this update: Thu 14 May 2026 19:19:42 +0000 Manifest next update: Fri 15 May 2026 22:11:42 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: ZwAru/EHnw8BqS++2ElhhpecNyupWWh+17k2T/DbILY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 22:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:68:7c:76:21:14:89:de:40:c1:0a:f0:cb:93:da:e5:21:a2:42:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: May 14 19:19:42 2026 GMT Not After : May 15 22:11:42 2026 GMT Subject: CN=0681BBFD7C35652EC63E05C29EF826E2E0F87E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:78:2f:da:f1:bf:a1:7b:f0:87:c9:31:88: 38:bb:70:83:de:0c:83:45:3e:4f:5c:26:87:d4:be: c3:e9:39:6b:b4:a8:58:32:34:c2:c6:29:4e:d5:31: 0a:d0:21:40:a0:ce:8a:8c:e7:e9:ad:2d:69:e6:f7: 24:7b:2c:09:05:ba:87:31:47:37:24:36:a5:b9:07: d2:a2:20:13:18:15:92:e6:b1:6f:f2:5c:f1:fe:e4: 7f:f1:3f:1c:10:02:79:44:71:21:c5:ab:f5:dd:16: 9b:55:62:4d:f8:d8:d2:1f:27:31:c7:fd:be:05:62: a7:e1:90:45:08:cf:c7:5b:04:e3:66:b4:fc:39:e4: 89:24:50:32:d3:43:df:2d:b2:b7:44:03:f8:b6:0c: ec:11:b9:69:3f:7e:9b:13:69:25:a1:ef:20:72:20: 9b:c2:2d:f7:c7:0e:32:4b:fe:38:21:c6:08:82:0c: 32:38:6d:f7:63:03:8b:03:90:77:de:cb:0f:5d:ad: 0e:86:e0:de:e4:45:5b:19:5a:87:58:b5:59:cf:52: d9:0e:d1:7a:60:5d:da:61:77:13:ac:4e:19:64:90: 1b:f2:4e:2e:01:9a:ed:05:cf:5f:6c:aa:c9:99:1e: 98:76:dd:5c:37:27:75:47:d1:a6:7b:59:b1:80:cf: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:81:BB:FD:7C:35:65:2E:C6:3E:05:C2:9E:F8:26:E2:E0:F8:7E:4D X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ac:70:eb:aa:d4:18:69:cf:a8:d8:9c:4a:29:d0:85:71:2a: 6a:bb:2c:a5:2c:30:54:e9:c2:15:ba:c6:75:e5:91:29:26:87: 00:c4:c0:49:66:b2:41:07:f8:d0:4a:fc:09:1c:9a:b8:f2:22: 19:fd:45:45:92:6a:ec:a5:12:a2:58:5b:96:40:2e:46:e3:4d: 4a:b7:67:b3:a1:c4:6d:8b:80:17:12:24:97:54:e4:a8:7d:d4: 67:07:39:18:8b:32:ed:af:3c:43:02:7b:36:6c:7c:23:01:f9: da:0d:d3:ce:02:8e:ab:0b:b6:06:8e:c2:cd:a8:1c:d6:ef:12: a2:39:ca:e5:af:a8:18:84:ef:3e:06:35:e5:a3:ee:c9:7f:e0: 8f:86:43:68:b1:ac:00:f3:71:2d:db:03:50:7b:b9:cd:36:30: 7d:01:0c:af:ff:fa:20:d3:8e:a2:9c:da:b3:48:4b:d6:90:7c: 0b:84:27:1d:17:eb:89:0b:e9:41:87:2a:de:90:4d:d7:0f:72: 1b:7a:2e:20:11:f1:50:30:49:51:d8:97:32:f3:4a:1a:cc:03: f6:24:66:25:7d:f6:01:e2:a7:2f:e3:ed:ec:58:3b:b2:a9:3d: d6:c7:a7:06:47:03:eb:58:2b:95:37:da:d5:1c:38:cf:42:1e: c6:ff:2e:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURGh8diEUid5AwQrwy5Pa5SGiQpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA1MTQxOTE5NDJaFw0yNjA1MTUyMjExNDJaMDMxMTAvBgNV BAMTKDA2ODFCQkZEN0MzNTY1MkVDNjNFMDVDMjlFRjgyNkUyRTBGODdFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A3gv2vG/oXvwh8kxiDi7cIPe DINFPk9cJofUvsPpOWu0qFgyNMLGKU7VMQrQIUCgzoqM5+mtLWnm9yR7LAkFuocx RzckNqW5B9KiIBMYFZLmsW/yXPH+5H/xPxwQAnlEcSHFq/XdFptVYk342NIfJzHH /b4FYqfhkEUIz8dbBONmtPw55IkkUDLTQ98tsrdEA/i2DOwRuWk/fpsTaSWh7yBy IJvCLffHDjJL/jghxgiCDDI4bfdjA4sDkHfeyw9drQ6G4N7kRVsZWodYtVnPUtkO 0XpgXdphdxOsThlkkBvyTi4Bmu0Fz19sqsmZHph23Vw3J3VH0aZ7WbGAz+4xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBoG7/Xw1ZS7GPgXCnvgm4uD4fk0wHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6xw66rUGGnPqNicSinQ hXEqarsspSwwVOnCFbrGdeWRKSaHAMTASWayQQf40Er8CRyauPIiGf1FRZJq7KUS olhblkAuRuNNSrdns6HEbYuAFxIkl1TkqH3UZwc5GIsy7a88QwJ7Nmx8IwH52g3T zgKOqwu2Bo7Czagc1u8SojnK5a+oGITvPgY15aPuyX/gj4ZDaLGsAPNxLdsDUHu5 zTYwfQEMr//6INOOopzas0hL1pB8C4QnHRfriQvpQYcq3pBN1w9yG3ouIBHxUDBJ UdiXMvNKGswD9iRmJX32AeKnL+Pt7Fg7sqk91senBkcD61grlTfa1Rw4z0Iexv8u Zg== -----END CERTIFICATE-----Generated at Fri May 15 06:19:29 2026 by rpki-client