$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: k+x0cp9izT8tRDuwRA6lg3EnIvsFZfxXWj0XPLX4JoY= Subject key identifier: 20:EB:EA:16:BC:66:89:9C:9B:A7:7B:8D:07:47:78:16:29:39:8D:1A Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 35BA01449BB33DD03CD7D54C642089DA89850DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 05DD Signing time: Thu 11 Jun 2026 00:48:11 +0000 Manifest this update: Thu 11 Jun 2026 00:43:11 +0000 Manifest next update: Fri 12 Jun 2026 03:18:11 +0000 Files and hashes: 1: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 2: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 3: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 7: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 8: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 9: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 10: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: HJZ9X5mxRvxldw5L6RscnKUou6r1RyVllYK/GNMNN5Y=) 11: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 12: 3138352e322e3136302e302f32332d3234203d3e203430363736.roa (hash: O3J2SAXtmg62ikqS6buGe0VGwNezma9salxJz05yb48=) 13: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 03:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ba:01:44:9b:b3:3d:d0:3c:d7:d5:4c:64:20:89:da:89:85:0d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jun 11 00:43:11 2026 GMT Not After : Jun 12 03:18:11 2026 GMT Subject: CN=20EBEA16BC66899C9BA77B8D0747781629398D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:8c:24:e4:de:33:70:f7:4f:93:2e:76:b6: 44:04:f6:3a:df:ba:01:b2:91:c3:d3:14:af:95:76: ab:2f:1a:c4:57:50:fe:3c:7b:3d:a7:59:06:8a:23: cb:5b:24:4d:81:bf:37:74:29:72:b2:32:42:e1:32: 34:72:82:f6:35:ce:b7:aa:34:86:c2:d2:7a:ea:a5: 65:b2:58:a6:85:44:ac:3e:74:59:48:0f:68:c7:7c: 87:bf:00:bb:0a:15:fa:0b:24:65:63:31:2d:b4:1c: 25:47:0a:33:55:f5:93:c3:da:79:b5:0a:96:8e:99: 16:c8:fb:eb:42:70:02:a5:85:5e:9d:1c:23:55:c0: c9:2d:4a:ce:a8:66:38:38:04:60:ec:2a:2f:38:7f: fb:ce:50:a1:f0:01:ab:9c:90:51:de:40:37:7a:31: 5c:89:cc:59:16:10:1d:f2:ae:61:38:26:34:49:11: 2b:a2:23:2f:4c:0f:56:24:20:20:a5:6b:dd:bd:da: 87:6b:e5:dd:ce:e8:43:19:8e:30:86:2c:5b:6b:61: 6b:57:e9:f8:25:fb:50:14:92:5f:7e:36:ed:d0:3b: 72:71:2b:98:19:60:2d:78:6f:de:b4:ba:0c:cf:83: b2:97:f3:69:ce:6b:9b:0c:ea:02:c2:89:1b:77:8d: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EB:EA:16:BC:66:89:9C:9B:A7:7B:8D:07:47:78:16:29:39:8D:1A X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:fe:9f:3b:50:f8:ac:77:d6:ce:8c:68:d1:7b:a5:32:f9: 6a:06:bc:b4:0d:88:5c:84:6d:f5:3c:c8:85:19:0e:87:f5:3b: 4d:64:90:61:29:c3:e5:e1:76:60:97:82:d2:44:56:f9:34:35: 43:1a:12:f2:c1:8d:28:b9:48:3d:ce:c9:c4:f6:4c:02:67:8b: 41:9e:fe:5d:e8:d6:39:60:30:de:d5:ac:a3:be:75:a5:2c:d6: 2c:1f:aa:e5:bd:10:a0:fe:26:f2:92:e5:a2:d2:15:8a:b6:9c: 2f:91:7e:68:df:13:a1:4c:c4:30:7a:4e:1e:cc:28:5f:ea:62: 11:70:77:92:d2:74:f7:0f:00:66:16:37:14:a1:1c:23:a6:ac: ae:0c:a4:33:a8:dc:1b:92:29:5a:4e:84:bc:af:cb:35:38:92: bb:4f:08:e6:44:c5:93:93:5b:bb:be:f1:d1:d9:e5:c3:95:b3: 12:9b:0a:8d:37:46:71:4c:30:b8:f9:f4:85:b9:36:19:76:f1: 66:70:72:1e:21:10:2f:f2:24:d7:c3:86:98:2d:5d:b4:a2:6c: c6:e0:92:c8:f0:d1:9c:c0:8b:f9:20:54:30:e9:e3:9b:e2:2f: 38:f0:40:ee:31:4d:07:94:46:1c:70:a6:5a:62:fd:28:41:0b: fb:12:f8:07 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNboBRJuzPdA819VMZCCJ2omFDb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA2MTEwMDQzMTFaFw0yNjA2MTIwMzE4MTFaMDMxMTAvBgNV BAMTKDIwRUJFQTE2QkM2Njg5OUM5QkE3N0I4RDA3NDc3ODE2MjkzOThEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunowk5N4zcPdPky52tkQE9jrf ugGykcPTFK+VdqsvGsRXUP48ez2nWQaKI8tbJE2Bvzd0KXKyMkLhMjRygvY1zreq NIbC0nrqpWWyWKaFRKw+dFlID2jHfIe/ALsKFfoLJGVjMS20HCVHCjNV9ZPD2nm1 CpaOmRbI++tCcAKlhV6dHCNVwMktSs6oZjg4BGDsKi84f/vOUKHwAauckFHeQDd6 MVyJzFkWEB3yrmE4JjRJESuiIy9MD1YkICCla9292odr5d3O6EMZjjCGLFtrYWtX 6fgl+1AUkl9+Nu3QO3JxK5gZYC14b960ugzPg7KX82nOa5sM6gLCiRt3jeGxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIOvqFrxmiZybp3uNB0d4Fik5jRowHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEL+nztQ+Kx31s6MaNF7 pTL5aga8tA2IXIRt9TzIhRkOh/U7TWSQYSnD5eF2YJeC0kRW+TQ1QxoS8sGNKLlI Pc7JxPZMAmeLQZ7+XejWOWAw3tWso751pSzWLB+q5b0QoP4m8pLlotIViracL5F+ aN8ToUzEMHpOHswoX+piEXB3ktJ09w8AZhY3FKEcI6asrgykM6jcG5IpWk6EvK/L NTiSu08I5kTFk5Nbu77x0dnlw5WzEpsKjTdGcUwwuPn0hbk2GXbxZnByHiEQL/Ik 18OGmC1dtKJsxuCSyPDRnMCL+SBUMOnjm+IvOPBA7jFNB5RGHHCmWmL9KEEL+xL4 Bw== -----END CERTIFICATE-----Generated at Thu Jun 11 15:08:28 2026 by rpki-client