$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: /DESl19PmLZVEcRo1+6R/9Thh8zMZ57bJkMXhT61QP8= Subject key identifier: 54:82:A3:CE:AB:2F:DE:A2:71:73:07:E2:0B:C3:A6:17:64:2D:3F:DA Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 5B5E784B8A786F3EB284C9A6C293CFA1478A7915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 059F Signing time: Sun 26 Apr 2026 23:20:57 +0000 Manifest this update: Sun 26 Apr 2026 23:15:57 +0000 Manifest next update: Tue 28 Apr 2026 00:44:57 +0000 Files and hashes: 1: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 2: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 3: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 4: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 5: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 6: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 7: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 9: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 10: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: jAxWbrItU1rBtF95xrzEE9YrytcoAeIAVHzas3cATLw=) 11: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 12: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 13: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 14: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 20:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5e:78:4b:8a:78:6f:3e:b2:84:c9:a6:c2:93:cf:a1:47:8a:79:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Apr 26 23:15:57 2026 GMT Not After : Apr 28 00:44:57 2026 GMT Subject: CN=5482A3CEAB2FDEA2717307E20BC3A617642D3FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:a8:62:78:14:33:4b:9b:84:84:a3:84:2a: a9:c6:f4:88:92:d6:f3:09:eb:52:9e:76:db:71:f0: e8:e0:2e:00:b0:1c:65:29:78:20:fc:4e:31:fa:1c: b1:b0:e7:d2:c6:45:1e:00:de:e5:c9:ee:23:c6:06: 22:45:90:0c:c5:f5:4d:02:3f:2b:87:fd:bd:56:f7: d0:22:11:1f:a3:d2:13:be:4d:c5:74:63:15:96:f1: e4:81:7d:9a:ec:92:6a:22:11:33:b3:0f:20:9b:6d: 45:1d:c8:30:1e:0b:47:36:ae:1c:33:4a:c4:43:e5: 1a:5f:15:e9:83:66:0c:cd:5a:b2:92:27:18:b9:39: 57:8f:bb:6c:86:be:eb:3d:bb:f9:0e:e5:2e:bc:10: aa:09:27:9c:42:78:b6:fb:e4:be:2e:c8:43:0e:4b: c5:ff:b6:92:5b:5e:6a:e6:86:a2:b8:20:69:da:fc: 30:3c:3b:eb:14:5b:59:83:d1:aa:41:14:d3:6d:52: b7:83:42:fc:1e:bc:75:da:99:e4:1f:a5:e1:a9:95: 46:4e:41:09:b0:8d:c4:a1:12:9e:27:5b:12:1e:b5: f3:9c:8b:95:0d:93:66:0d:43:56:7f:ec:f1:90:24: c9:6d:b9:39:bd:84:4c:7b:d9:14:7d:fa:8b:1a:ef: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:82:A3:CE:AB:2F:DE:A2:71:73:07:E2:0B:C3:A6:17:64:2D:3F:DA X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9e:15:27:89:e1:5e:13:99:1c:8a:e6:60:52:82:5b:f2:a7: 81:2f:97:2b:c3:1f:9f:ec:3c:9b:4e:ba:89:e8:a6:65:7d:55: 6a:fb:24:0c:af:16:a0:3a:cb:6f:32:e2:dd:07:5c:06:84:23: 73:e0:8c:17:05:0d:19:55:cf:72:bb:8c:10:e7:fa:f4:3a:4f: 50:44:e2:e3:c2:ae:fa:5c:a8:8b:de:af:02:52:16:73:e6:7d: c9:7f:8a:8d:95:a1:09:63:5c:4e:17:bb:5a:5b:6f:40:7d:b1: 23:81:27:cb:2c:20:ca:60:6e:f8:9b:5c:0e:cd:6e:9a:9e:8f: cd:45:ae:1a:d6:e6:c7:65:53:40:2f:d9:1e:8a:2b:2d:f2:1c: ad:38:98:ed:f8:20:8a:0a:d7:d8:d9:21:f4:65:f4:dd:5f:db: de:f0:ac:58:cb:bc:1c:69:25:86:00:d1:e2:12:57:14:6a:aa: a3:f4:56:4c:de:a4:ac:b0:3c:ba:59:29:7d:d2:ca:f7:39:49: 5e:46:73:7d:da:bc:0e:cc:39:47:b5:c8:48:f9:1b:bb:2d:3c: 53:20:ef:55:77:5a:75:bb:d6:57:c5:69:aa:bd:90:e6:8b:3c: a5:0a:0e:44:d8:f9:a4:b0:6c:f8:60:52:f2:0a:74:c0:1b:ce: b3:c2:85:43 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW154S4p4bz6yhMmmwpPPoUeKeRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA0MjYyMzE1NTdaFw0yNjA0MjgwMDQ0NTdaMDMxMTAvBgNV BAMTKDU0ODJBM0NFQUIyRkRFQTI3MTczMDdFMjBCQzNBNjE3NjQyRDNGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFahieBQzS5uEhKOEKqnG9IiS 1vMJ61Kedttx8OjgLgCwHGUpeCD8TjH6HLGw59LGRR4A3uXJ7iPGBiJFkAzF9U0C PyuH/b1W99AiER+j0hO+TcV0YxWW8eSBfZrskmoiETOzDyCbbUUdyDAeC0c2rhwz SsRD5RpfFemDZgzNWrKSJxi5OVePu2yGvus9u/kO5S68EKoJJ5xCeLb75L4uyEMO S8X/tpJbXmrmhqK4IGna/DA8O+sUW1mD0apBFNNtUreDQvwevHXameQfpeGplUZO QQmwjcShEp4nWxIetfOci5UNk2YNQ1Z/7PGQJMltuTm9hEx72RR9+osa76vXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVIKjzqsv3qJxcwfiC8OmF2QtP9owHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj54VJ4nhXhOZHIrmYFKC W/KngS+XK8Mfn+w8m066ieimZX1VavskDK8WoDrLbzLi3QdcBoQjc+CMFwUNGVXP cruMEOf69DpPUETi48Ku+lyoi96vAlIWc+Z9yX+KjZWhCWNcThe7WltvQH2xI4En yywgymBu+JtcDs1ump6PzUWuGtbmx2VTQC/ZHoorLfIcrTiY7fggigrX2Nkh9GX0 3V/b3vCsWMu8HGklhgDR4hJXFGqqo/RWTN6krLA8ulkpfdLK9zlJXkZzfdq8Dsw5 R7XISPkbuy08UyDvVXdadbvWV8Vpqr2Q5os8pQoORNj5pLBs+GBS8gp0wBvOs8KF Qw== -----END CERTIFICATE-----Generated at Mon Apr 27 02:04:28 2026 by rpki-client