$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: fjRVhAciHHwnbXoR/siu3L54KTbEfCdIv/UqQEoUtgI= Subject key identifier: 9A:56:9F:E6:23:50:85:0F:7D:40:E5:57:E6:98:AB:B8:F8:22:4F:37 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 1BC79080A124FC7D03B1B87522059E06AF186E2F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 02C8 Signing time: Sun 31 May 2026 08:53:16 +0000 Manifest this update: Sun 31 May 2026 08:48:16 +0000 Manifest next update: Mon 01 Jun 2026 21:58:16 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: R7gmuBCMSBVDeqJgfESe4QHRk2y0F9HZ36Rc5Vx0tFE=) 2: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 3: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 4: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jun 2026 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c7:90:80:a1:24:fc:7d:03:b1:b8:75:22:05:9e:06:af:18:6e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: May 31 08:48:16 2026 GMT Not After : Jun 1 21:58:16 2026 GMT Subject: CN=9A569FE62350850F7D40E557E698ABB8F8224F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:c0:15:65:34:a3:e9:50:f3:be:21:ec:e7: dd:11:d4:42:47:77:2e:e4:97:69:72:24:cd:94:0a: 6b:6a:1f:9e:a5:b7:27:09:df:6d:7d:5b:fe:8e:ed: 40:0c:aa:90:50:b5:08:d6:28:aa:19:b6:8f:e5:f7: 88:4d:6c:3a:cc:2e:83:98:17:93:a2:7e:d8:ee:42: 3f:18:e8:ba:d9:1a:94:e4:0f:da:5b:cb:90:d4:67: ad:20:5b:61:a8:63:cc:68:a9:10:f8:f1:19:a5:a2: 50:0b:f0:84:5c:82:a3:7a:fe:81:75:bc:85:5b:68: 3a:09:a7:5f:a5:bd:12:60:71:b0:58:6c:ab:c5:ad: 59:f7:0d:a2:9d:33:9b:e8:18:d8:82:30:f5:97:b1: aa:98:bf:7f:a7:07:f2:e1:05:1d:3b:c8:c0:e1:d1: 07:81:ff:60:21:67:e1:8e:b9:19:db:db:5c:56:25: 70:08:d4:60:c9:04:38:f6:55:c3:c6:2c:19:78:8c: f0:09:5a:25:36:79:cd:a4:49:82:a4:17:12:12:ed: 47:ef:21:69:3f:97:f8:50:1f:36:eb:5e:77:1f:cd: 57:1c:35:72:66:32:83:c2:df:6b:06:4f:6a:1c:7f: 26:46:d0:0e:0d:64:1e:ef:3a:4d:3c:8d:40:cc:eb: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:56:9F:E6:23:50:85:0F:7D:40:E5:57:E6:98:AB:B8:F8:22:4F:37 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a2:4b:df:48:64:e0:41:a9:c4:0d:0a:5e:d4:d7:4c:d0:37: bb:40:4a:db:57:20:b7:b7:a7:53:b6:c4:14:2d:a6:e8:c9:0c: ae:4f:f2:dd:22:07:a1:0d:6c:4d:31:7f:9f:4a:7a:46:24:ba: d6:be:13:eb:ae:9c:3d:f7:97:b0:54:02:82:fb:75:b8:09:54: c5:bc:9c:e9:a1:96:ee:88:6e:9f:60:44:50:30:2a:ed:e8:99: 68:05:15:c9:2c:59:ab:71:44:57:58:bc:f7:ee:de:34:8a:e1: d0:ab:b5:09:b4:ab:63:bc:99:5c:28:3c:87:e9:9b:e7:01:4b: 4f:25:d6:70:d2:8c:8a:69:5b:20:aa:4d:23:5f:16:74:d9:9f: cf:b9:86:c9:75:25:e9:36:47:49:ef:f7:9a:8d:51:26:60:26: 54:d6:de:89:61:0e:63:20:10:43:13:db:2d:46:f7:18:3e:6f: 81:27:ab:21:0f:d7:da:a0:cc:37:3e:09:03:be:4a:b0:0a:21: 79:c0:c4:23:c5:02:1f:de:7b:2c:de:ac:d3:88:84:71:97:2d: 94:a1:3e:93:7c:2b:8b:b8:aa:3a:1a:b7:f8:f3:9f:15:a4:63: 8c:28:c4:7f:ff:ca:1c:8d:95:6e:1f:67:a4:76:16:f3:a5:8d: 87:94:1b:1b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUG8eQgKEk/H0Dsbh1IgWeBq8Ybi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA1MzEwODQ4MTZaFw0yNjA2MDEyMTU4MTZaMDMxMTAvBgNV BAMTKDlBNTY5RkU2MjM1MDg1MEY3RDQwRTU1N0U2OThBQkI4RjgyMjRGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoN8AVZTSj6VDzviHs590R1EJH dy7kl2lyJM2UCmtqH56ltycJ3219W/6O7UAMqpBQtQjWKKoZto/l94hNbDrMLoOY F5OiftjuQj8Y6LrZGpTkD9pby5DUZ60gW2GoY8xoqRD48RmlolAL8IRcgqN6/oF1 vIVbaDoJp1+lvRJgcbBYbKvFrVn3DaKdM5voGNiCMPWXsaqYv3+nB/LhBR07yMDh 0QeB/2AhZ+GOuRnb21xWJXAI1GDJBDj2VcPGLBl4jPAJWiU2ec2kSYKkFxIS7Ufv IWk/l/hQHzbrXncfzVccNXJmMoPC32sGT2ocfyZG0A4NZB7vOk08jUDM66gFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUmlaf5iNQhQ99QOVX5piruPgiTzcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKJL30hk4EGpxA0KXtTX TNA3u0BK21cgt7enU7bEFC2m6MkMrk/y3SIHoQ1sTTF/n0p6RiS61r4T666cPfeX sFQCgvt1uAlUxbyc6aGW7ohun2BEUDAq7eiZaAUVySxZq3FEV1i89+7eNIrh0Ku1 CbSrY7yZXCg8h+mb5wFLTyXWcNKMimlbIKpNI18WdNmfz7mGyXUl6TZHSe/3mo1R JmAmVNbeiWEOYyAQQxPbLUb3GD5vgSerIQ/X2qDMNz4JA75KsAohecDEI8UCH957 LN6s04iEcZctlKE+k3wri7iqOhq3+POfFaRjjCjEf//KHI2Vbh9npHYW86WNh5Qb Gw== -----END CERTIFICATE-----Generated at Sun May 31 10:44:43 2026 by rpki-client