$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: Z+KVC9ppdLSfkfqw0znqSJFx3JKxivH6vmhdJjrNAVU= Subject key identifier: 8E:DF:4D:1A:AD:EC:EC:2A:5A:43:48:6E:C5:33:BA:8D:84:7E:17:9B Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 3E390A75FAC0ADED34B122AA164B843304CA25D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 5A Signing time: Fri 22 May 2026 22:31:33 +0000 Manifest this update: Fri 22 May 2026 22:26:33 +0000 Manifest next update: Sun 24 May 2026 00:32:33 +0000 Files and hashes: 1: 3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa (hash: 6UdWfUX7KBZtt8PfrfenFEunK14genwVi/Drc7lSeRQ=) 2: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: 2x7R/RLFUtq4suf1Pgu5rLuLA1p4ghJZ5y7M09bQIoY=) 3: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 4: 3137362e3130322e3137302e302f32342d3234203d3e20323130353435.roa (hash: iLAOFktgeNi6FXUckFRcsh0irPGm/7n9N5v2nHd4bNg=) 5: 3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa (hash: nWTO0lpwynwPzlypXWMi8OJsZ+pn3ksbbbieOy6HhBk=) 6: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=) 7: 3137362e3130322e3136392e302f32342d3234203d3e20323130353435.roa (hash: qdweDv/ArUKKn+iSNPlMNOmHnjG+yu3hh6MZ3RuN5Ks=) 8: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 9: 3137362e3130322e3137322e302f32322d3232203d3e2032393134.roa (hash: NeWINT0yzxeGbQAkYPSSTlBaATh7hwEdqMyxHoWCi2c=) 10: 39312e3233332e382e302f32342d3234203d3e20323135313532.roa (hash: QjQW+ZHXaZZs5QWfyh6YzF1NV5fXTeQF/UMJGjS1emY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:39:0a:75:fa:c0:ad:ed:34:b1:22:aa:16:4b:84:33:04:ca:25:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: May 22 22:26:33 2026 GMT Not After : May 24 00:32:33 2026 GMT Subject: CN=8EDF4D1AADECEC2A5A43486EC533BA8D847E179B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:37:e2:99:75:c1:4c:cb:0e:5a:e8:dd:ab: 4b:a0:b3:5c:fd:30:ae:55:b9:87:81:a4:11:b3:0f: 46:b9:6b:b1:91:a2:66:b1:7b:12:b5:ea:ae:93:51: c7:e9:83:47:64:35:17:36:16:45:44:8f:00:9e:23: 80:63:e1:c8:f5:ec:27:4c:41:4f:4d:89:2e:ac:26: 3c:4f:30:ca:84:5b:4a:c6:a5:30:37:01:60:00:99: 81:1b:99:31:4e:ba:35:63:d9:d2:f4:81:4d:99:5d: 2e:90:71:1c:e1:51:b0:a6:01:f1:8f:3a:b3:f2:ce: b6:9f:f1:3f:46:43:b4:3d:7f:3f:4c:3e:63:cb:13: 11:53:1f:6b:ec:33:f2:71:12:cb:ba:72:7b:37:85: b3:22:da:ad:be:5e:da:d7:90:35:06:24:7f:fb:ce: 9e:fc:32:cc:4f:18:18:5e:6f:c5:81:8f:df:12:d9: 59:0a:80:4c:a2:29:35:41:9b:46:b1:65:cb:76:04: 65:28:74:f8:ed:fb:40:43:31:d4:e0:8a:3b:ff:f4: 8e:bd:49:cb:d8:37:6f:ec:47:9e:cf:c3:ad:01:99: 09:71:78:96:8a:1c:06:f6:3f:47:19:8c:fd:84:77: e5:fd:f3:6c:5f:4b:cf:7b:0c:b9:b8:0a:d2:9c:c5: d0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DF:4D:1A:AD:EC:EC:2A:5A:43:48:6E:C5:33:BA:8D:84:7E:17:9B X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d9:02:99:18:ba:12:18:de:5d:7b:07:e6:da:a0:3b:e0:ac: f6:2a:b6:a7:83:81:35:0a:be:71:32:63:e4:15:f7:b8:9e:65: ad:ef:7d:42:d6:fb:6e:cb:f1:e0:3d:6e:8f:a3:37:36:83:41: 0e:f2:f6:47:f6:d5:f6:3f:8f:e9:49:f7:c4:0f:a0:20:25:91: c8:8a:60:98:2c:91:81:ca:d4:f1:80:c3:c5:f2:87:d2:06:fa: 76:93:0b:0d:0f:7a:64:64:2d:fd:94:df:6a:b1:8d:a9:a9:2d: 74:a3:be:e7:c2:db:ff:61:99:4d:aa:62:6e:77:eb:a9:43:7e: cc:ab:c5:68:e0:9e:d1:67:eb:7f:83:37:cc:f2:6a:9c:26:f7: bd:2a:55:67:80:e3:ae:64:5c:fe:ef:7d:ee:27:3f:92:72:e4: 9a:99:d3:40:fb:06:e9:8f:e9:82:e1:77:ed:dc:2a:57:a7:d4: 5c:18:f5:97:81:88:6f:2b:69:bb:6b:da:c7:43:1c:65:ff:41: 13:9f:47:da:f9:50:fd:e9:ec:d5:f1:9a:9e:31:ba:a1:ad:39: a0:63:df:1d:0c:d0:42:0f:c9:7a:b3:cc:de:10:d0:11:6f:f8: 2e:b1:09:aa:c2:70:d4:a7:85:01:f2:ca:a1:27:0e:ec:29:68: 1b:58:f0:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPjkKdfrAre00sSKqFkuEMwTKJdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA1MjIyMjI2MzNaFw0yNjA1MjQwMDMyMzNaMDMxMTAvBgNV BAMTKDhFREY0RDFBQURFQ0VDMkE1QTQzNDg2RUM1MzNCQThEODQ3RTE3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBjfimXXBTMsOWujdq0ugs1z9 MK5VuYeBpBGzD0a5a7GRomaxexK16q6TUcfpg0dkNRc2FkVEjwCeI4Bj4cj17CdM QU9NiS6sJjxPMMqEW0rGpTA3AWAAmYEbmTFOujVj2dL0gU2ZXS6QcRzhUbCmAfGP OrPyzraf8T9GQ7Q9fz9MPmPLExFTH2vsM/JxEsu6cns3hbMi2q2+XtrXkDUGJH/7 zp78MsxPGBheb8WBj98S2VkKgEyiKTVBm0axZct2BGUodPjt+0BDMdTgijv/9I69 ScvYN2/sR57Pw60BmQlxeJaKHAb2P0cZjP2Ed+X982xfS897DLm4CtKcxdCRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjt9NGq3s7CpaQ0huxTO6jYR+F5swHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9kCmRi6EhjeXXsH5tqg O+Cs9iq2p4OBNQq+cTJj5BX3uJ5lre99Qtb7bsvx4D1uj6M3NoNBDvL2R/bV9j+P 6Un3xA+gICWRyIpgmCyRgcrU8YDDxfKH0gb6dpMLDQ96ZGQt/ZTfarGNqaktdKO+ 58Lb/2GZTapibnfrqUN+zKvFaOCe0Wfrf4M3zPJqnCb3vSpVZ4DjrmRc/u997ic/ knLkmpnTQPsG6Y/pguF37dwqV6fUXBj1l4GIbytpu2vax0McZf9BE59H2vlQ/ens 1fGanjG6oa05oGPfHQzQQg/JerPM3hDQEW/4LrEJqsJw1KeFAfLKoScO7CloG1jw hQ== -----END CERTIFICATE-----Generated at Sat May 23 03:47:34 2026 by rpki-client