$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft File: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft (raw, json) Hash identifier: gBXB+yJbJyKgPjJfjaJyn7xzyl1t/eFKaDDnkyKT01Y= Subject key identifier: 36:94:2E:A2:58:CF:FA:D6:D2:2C:4F:97:AE:90:79:7C:96:15:5D:2A Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 Certificate issuer: /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Certificate serial: 6ECA51AC9117DFCFCABA02998388F6EA067A05BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft Manifest number: 4A Signing time: Mon 25 May 2026 14:37:15 +0000 Manifest this update: Mon 25 May 2026 14:32:15 +0000 Manifest next update: Wed 27 May 2026 03:22:15 +0000 Files and hashes: 1: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl (hash: 5DwcCkp/GuGRKv9gtQ0fO4aJVMME0drSBpmE1TtSHb4=) 2: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: O1DOX7fA9jfnoSeWMa11Wp/d995uhroRM2jfe2mLRug=) 3: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: +HkEXWJnMNkqLcMHQ1DXhuOI1jBvZDFvEhgNll+1Gx0=) 4: 326131343a373538313a393966663a3a2f34382d3438203d3e20323134333434.roa (hash: t4EI/Mk5YhylQpYGn3RlsMvjC7W6xYVw8s3ZATd/tDM=) 5: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: RqUe0gZydPYyKZQfKR8vKq452OBo5sS0uzmQSo0RksM=) 6: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: nZjZ1BnZI0dBzNhskqIxoEygMMm+y+RvaVl8qJu9fX4=) 7: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: pdi0gEMaG5/D7JK9Zh5vusH8qIO/fIfz8EKZlEVkW00=) 8: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: U3VxlYVJDi8xV7CxMMI72zfRcW4i6iOC2MTfg2xraIY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ca:51:ac:91:17:df:cf:ca:ba:02:99:83:88:f6:ea:06:7a:05:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Validity Not Before: May 25 14:32:15 2026 GMT Not After : May 27 03:22:15 2026 GMT Subject: CN=36942EA258CFFAD6D22C4F97AE90797C96155D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:3c:81:7f:d4:d2:b5:c3:55:e5:98:0d:2a: 9f:cf:3e:57:07:c1:ca:f5:7f:c9:f0:3a:b0:26:7b: 13:99:59:35:ce:28:3f:24:54:fb:1e:8a:cb:23:dc: ae:a2:fd:95:f3:1e:ae:70:96:6d:97:40:ff:62:1f: d0:02:63:1e:00:32:ca:f6:5f:ad:03:4f:43:7d:c3: e1:7d:17:44:1e:a6:65:82:d4:b7:e7:db:47:4d:40: 4a:ba:55:e0:39:5a:14:6e:4a:40:71:c4:05:e6:24: 2d:2b:92:8a:8e:68:af:15:28:60:d2:40:e5:be:51: 8f:cd:81:34:b2:9f:b3:16:1a:b4:81:af:5c:91:67: cd:1e:33:d0:52:20:d0:3c:6a:4f:8f:ef:d7:0a:c9: 38:6e:11:ba:f6:28:0a:f5:11:f9:03:0c:da:3b:f0: de:03:ab:d2:4d:3a:e9:ad:5d:29:74:d0:ef:9e:b9: 9f:4a:d3:6a:19:9a:59:ef:00:e8:df:be:90:44:1f: 90:7b:b6:36:3f:22:f3:fb:3a:db:74:26:7a:0c:20: 86:d2:42:67:2c:ae:3c:8b:c6:e0:e1:be:8f:c0:9e: 1f:68:28:fc:68:ce:dd:77:9a:83:02:06:5f:a4:bb: f2:8b:7d:7b:ca:b0:4d:84:7b:9e:c0:92:f3:87:be: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:2E:A2:58:CF:FA:D6:D2:2C:4F:97:AE:90:79:7C:96:15:5D:2A X509v3 Authority Key Identifier: keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:5c:f3:d6:cf:1c:43:1c:f6:c4:b2:eb:70:77:1e:52:3c:da: dd:cb:54:a8:19:38:15:48:9c:9f:d9:71:45:f0:2a:40:38:96: f8:8a:fc:a1:15:1a:f9:8d:32:ca:3e:39:45:f5:4d:c0:80:96: 2b:ee:bd:a4:05:b6:36:34:70:ef:f1:e8:ff:3c:f7:a0:eb:ff: 0b:c5:9b:84:70:ca:83:c4:bf:38:94:c5:ba:5c:65:65:98:6d: 03:4e:97:46:5c:22:02:d5:10:ae:a0:8d:fa:e1:a3:58:35:87: 49:ff:70:c1:9a:60:47:81:94:b0:49:9b:df:ea:dc:d8:92:f6: e7:3e:dd:ea:af:76:fa:09:97:89:ae:df:ca:ca:11:4d:e4:10: ab:a9:1c:f2:21:76:f0:a3:19:5e:9e:75:92:79:f4:cc:ac:b8: bb:d2:eb:d0:a0:8d:b4:b6:58:27:5f:02:5c:90:89:74:27:3a: 1d:b4:8c:01:cf:b0:23:1a:b2:a6:1d:d5:c3:df:e7:c4:54:ff: 8c:10:38:68:60:e6:fb:38:da:81:66:c2:5a:30:29:f6:74:4e: f7:d9:a7:28:f1:57:4d:6a:9a:5c:cd:34:52:48:c2:23:55:40: a0:42:64:da:ee:99:f8:26:f5:5e:d1:13:e6:78:0b:96:85:f1: 4d:09:c1:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbspRrJEX38/KugKZg4j26gZ6Bb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5 MkIyMjUzNjAeFw0yNjA1MjUxNDMyMTVaFw0yNjA1MjcwMzIyMTVaMDMxMTAvBgNV BAMTKDM2OTQyRUEyNThDRkZBRDZEMjJDNEY5N0FFOTA3OTdDOTYxNTVEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRjyBf9TStcNV5ZgNKp/PPlcH wcr1f8nwOrAmexOZWTXOKD8kVPseissj3K6i/ZXzHq5wlm2XQP9iH9ACYx4AMsr2 X60DT0N9w+F9F0QepmWC1Lfn20dNQEq6VeA5WhRuSkBxxAXmJC0rkoqOaK8VKGDS QOW+UY/NgTSyn7MWGrSBr1yRZ80eM9BSINA8ak+P79cKyThuEbr2KAr1EfkDDNo7 8N4Dq9JNOumtXSl00O+euZ9K02oZmlnvAOjfvpBEH5B7tjY/IvP7Ott0JnoMIIbS QmcsrjyLxuDhvo/Anh9oKPxozt13moMCBl+ku/KLfXvKsE2Ee57AkvOHvusZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNpQuoljP+tbSLE+XrpB5fJYVXSowHwYDVR0j BBgwFoAUYtKaBkjubYnZ6aaprBW0ppKyJTYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzIvNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5MkIyMjUzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82MkQyOUEwNjQ4RUU2RDg5RDlFOUE2QTlB QzE1QjRBNjkyQjIyNTM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8yLzYyRDI5QTA2 NDhFRTZEODlEOUU5QTZBOUFDMTVCNEE2OTJCMjI1MzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDPXPPW zxxDHPbEsutwdx5SPNrdy1SoGTgVSJyf2XFF8CpAOJb4ivyhFRr5jTLKPjlF9U3A gJYr7r2kBbY2NHDv8ej/PPeg6/8LxZuEcMqDxL84lMW6XGVlmG0DTpdGXCIC1RCu oI364aNYNYdJ/3DBmmBHgZSwSZvf6tzYkvbnPt3qr3b6CZeJrt/KyhFN5BCrqRzy IXbwoxlennWSefTMrLi70uvQoI20tlgnXwJckIl0JzodtIwBz7AjGrKmHdXD3+fE VP+MEDhoYOb7ONqBZsJaMCn2dE732aco8VdNappczTRSSMIjVUCgQmTa7pn4JvVe 0RPmeAuWhfFNCcG3 -----END CERTIFICATE-----Generated at Mon May 25 17:12:05 2026 by rpki-client