$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: CutzXv51yCiDjwl31vNnbmbD7cAPyBwXzgiN7jp+geE= Subject key identifier: 22:88:F7:DF:FA:AE:F9:49:3A:36:9E:20:56:38:7E:49:7D:55:C6:65 Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 292E35630E722FD22E8F1EB2A014E1F2BCD12504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 0A Signing time: Fri 05 Jun 2026 16:03:44 +0000 Manifest this update: Fri 05 Jun 2026 15:58:44 +0000 Manifest next update: Sat 06 Jun 2026 19:11:44 +0000 Files and hashes: 1: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: BVHEXf7+QhossDIzIiAf1sRk0GZbtnfiIn5E7LhXV9E=) 2: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 3: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 4: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (hash: TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=) 5: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 6: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 7: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2e:35:63:0e:72:2f:d2:2e:8f:1e:b2:a0:14:e1:f2:bc:d1:25:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Jun 5 15:58:44 2026 GMT Not After : Jun 6 19:11:44 2026 GMT Subject: CN=2288F7DFFAAEF9493A369E2056387E497D55C665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:0c:1f:a4:78:75:01:4f:e3:5e:5b:d7:ea: 3b:4a:89:1b:ea:d8:ac:db:90:61:54:8e:cc:68:48: b5:56:b5:49:6b:5a:ad:81:ed:63:fe:78:60:58:a6: 87:89:8e:ad:5c:49:f7:39:7b:d5:5b:10:d7:29:43: 16:f6:b0:ac:e0:73:18:90:cb:e4:7f:6f:d2:9b:2d: 72:38:cd:f1:b5:24:09:f2:2b:d5:e2:c9:92:64:82: 04:a3:39:2c:a9:4a:1d:5f:fe:36:7e:62:c2:33:6f: 6f:01:08:c5:09:8a:ca:3d:89:51:e3:32:54:93:05: 2d:dd:f5:43:0b:5a:a3:27:0b:8d:7b:f4:63:8d:3b: 79:4f:51:71:d7:b5:1f:bb:81:91:03:e1:e6:66:ed: e2:ce:56:2c:d7:ae:66:33:a3:c3:31:3f:e7:4d:1c: 42:4b:13:a1:d3:5c:7a:da:7c:8d:2e:f1:4b:14:e0: f8:c0:af:3c:25:92:a4:bc:76:44:a5:1c:9d:75:4a: e9:9f:f6:1d:ed:07:3c:cf:ce:4a:73:2e:41:33:21: 6a:b5:2e:cb:33:26:9c:62:64:2c:3b:fc:9b:2b:73: 74:d5:0e:97:5f:8d:dc:94:c3:5c:56:4e:dc:77:3a: a9:7d:db:77:4b:d4:4f:34:de:c4:e6:13:3d:4f:47: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:88:F7:DF:FA:AE:F9:49:3A:36:9E:20:56:38:7E:49:7D:55:C6:65 X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:9a:f4:69:f1:e9:96:77:c7:94:ef:5c:84:24:17:57:47: db:c0:1d:d5:fa:bc:a3:4d:9c:74:ad:28:cd:5f:83:2b:04:fd: da:20:33:38:8c:fd:00:5b:70:db:9f:71:8f:36:a0:bf:d6:4b: 6a:97:fb:a4:57:03:bc:4d:2b:d1:c1:9a:1e:03:21:bf:af:2f: f9:08:8b:67:55:71:25:e7:b6:87:b5:71:f9:ee:7c:a2:8b:77: 3f:38:3f:30:8e:e1:93:53:54:d3:15:87:8b:b4:01:86:fd:5e: 45:7e:04:dc:82:8a:b4:d3:dc:be:17:a6:bb:d5:c8:6d:68:e5: db:c5:c8:46:0b:1d:63:19:88:80:f2:92:b1:a7:03:9c:8b:d0: 51:7d:61:a8:8b:d0:6e:cb:a8:7f:c9:8d:58:c4:e5:0a:85:82: 19:16:37:4b:e1:53:d7:1a:b6:6d:db:9f:3d:e4:5a:63:29:f9: 97:dd:92:04:c3:9f:b2:ab:69:90:b2:83:57:09:b6:7f:ca:20: 31:d4:e6:d7:c3:be:8f:df:1c:40:80:c5:3f:73:da:5e:70:03: cc:7a:36:63:9d:31:7d:de:1e:21:88:08:43:23:e5:12:4f:f5: 3b:41:e0:f8:a7:fc:60:05:2a:7c:7f:f7:9a:31:50:62:74:a3: 54:f5:53:a7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKS41Yw5yL9Iujx6yoBTh8rzRJQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjA2MDUxNTU4NDRaFw0yNjA2MDYxOTExNDRaMDMxMTAvBgNV BAMTKDIyODhGN0RGRkFBRUY5NDkzQTM2OUUyMDU2Mzg3RTQ5N0Q1NUM2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SQwfpHh1AU/jXlvX6jtKiRvq 2KzbkGFUjsxoSLVWtUlrWq2B7WP+eGBYpoeJjq1cSfc5e9VbENcpQxb2sKzgcxiQ y+R/b9KbLXI4zfG1JAnyK9XiyZJkggSjOSypSh1f/jZ+YsIzb28BCMUJiso9iVHj MlSTBS3d9UMLWqMnC4179GONO3lPUXHXtR+7gZED4eZm7eLOVizXrmYzo8MxP+dN HEJLE6HTXHrafI0u8UsU4PjArzwlkqS8dkSlHJ11Sumf9h3tBzzPzkpzLkEzIWq1 LsszJpxiZCw7/Jsrc3TVDpdfjdyUw1xWTtx3Oql923dL1E803sTmEz1PR1sXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIoj33/qu+Uk6Np4gVjh+SX1VxmUwHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTKa9Gnx6ZZ3x5TvXIQk F1dH28Ad1fq8o02cdK0ozV+DKwT92iAzOIz9AFtw259xjzagv9ZLapf7pFcDvE0r 0cGaHgMhv68v+QiLZ1VxJee2h7Vx+e58oot3Pzg/MI7hk1NU0xWHi7QBhv1eRX4E 3IKKtNPcvhemu9XIbWjl28XIRgsdYxmIgPKSsacDnIvQUX1hqIvQbsuof8mNWMTl CoWCGRY3S+FT1xq2bdufPeRaYyn5l92SBMOfsqtpkLKDVwm2f8ogMdTm18O+j98c QIDFP3PaXnADzHo2Y50xfd4eIYgIQyPlEk/1O0Hg+Kf8YAUqfH/3mjFQYnSjVPVT pw== -----END CERTIFICATE-----Generated at Sat Jun 6 06:55:57 2026 by rpki-client