$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: A6ZXlt4DW4vtjCH0WtVq2iP0BoFNwq7ocPKvm0//jso= Subject key identifier: D4:A1:C9:E5:9B:31:10:80:23:4A:43:95:C4:06:94:68:43:B8:93:B1 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 1F63EE82CE7B4E71DA0F984FDB8EF7E36158FC94 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 014B Signing time: Mon 20 Apr 2026 08:40:42 +0000 Manifest this update: Mon 20 Apr 2026 08:35:42 +0000 Manifest next update: Tue 21 Apr 2026 10:47:42 +0000 Files and hashes: 1: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 2: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: UI6wxSzxGEqQJJtpf19bHLu0dfHQuYA34Zu2Lcr71kE=) 3: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 4: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 5: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 6: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 10:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:63:ee:82:ce:7b:4e:71:da:0f:98:4f:db:8e:f7:e3:61:58:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Apr 20 08:35:42 2026 GMT Not After : Apr 21 10:47:42 2026 GMT Subject: CN=D4A1C9E59B311080234A4395C406946843B893B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:23:f6:62:7c:0c:99:45:eb:39:3e:56:4f: cc:f9:7f:83:9e:4e:eb:f6:c4:75:51:72:5b:4b:6a: 7a:89:a6:a1:f8:82:86:e9:e5:2d:ab:0c:7c:f2:ca: 77:93:4b:f5:82:2d:53:b3:69:fa:3a:43:04:99:3a: 65:39:16:ea:31:6b:d9:6f:fa:53:2b:42:b8:f2:8e: 72:06:cf:d6:58:b0:6f:1b:64:94:a3:bf:b7:be:eb: 34:3f:44:b1:d7:67:57:a3:7f:d9:8b:52:1d:59:c5: 3e:b8:9a:33:e5:52:24:08:c4:0b:48:d1:66:e2:87: 16:38:03:b3:fe:41:99:bc:57:b3:b8:30:92:19:35: 76:7f:2b:fc:e2:8a:05:91:59:47:4c:32:2b:da:cb: 50:07:6d:13:b4:04:80:80:51:c1:4e:71:2a:bd:f5: 53:46:df:a5:5b:46:71:83:11:81:25:cb:12:37:e6: 00:55:90:2e:43:7a:fe:62:ad:61:51:bd:c3:85:f7: 77:3e:c4:3f:7f:da:e6:64:2a:f8:ab:88:83:90:5b: 01:34:74:48:a8:14:f2:59:af:07:56:cb:94:76:06: 32:ee:23:e3:75:11:92:83:2c:13:ca:a1:0e:0d:77: 3a:b3:f0:ab:92:05:c3:02:14:f0:90:dc:a9:48:fd: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:C9:E5:9B:31:10:80:23:4A:43:95:C4:06:94:68:43:B8:93:B1 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2f:6b:55:9f:ca:19:8e:83:d9:0c:a0:35:10:30:42:f5:98: 83:38:35:b7:84:ba:03:1c:48:d7:4e:4f:c1:1a:05:b3:b9:42: 8e:5a:e2:99:52:31:08:81:67:bd:7e:cd:e1:db:1b:98:ff:35: a9:4c:6f:d2:e3:03:26:ec:6d:7a:1d:15:07:9f:0f:fd:4b:32: 25:7c:b4:9e:9f:45:30:84:55:79:d6:e0:36:e2:72:a5:a3:ef: 68:cb:1c:0f:49:52:bc:3e:71:1d:08:76:ba:c3:51:1d:57:2a: 3f:d8:ba:ff:07:ac:a4:d6:ce:7c:62:aa:49:9a:8b:81:ba:e9: 88:ab:ab:b3:45:57:f1:7a:c2:f4:4a:94:b9:6b:b5:fa:c6:94: 59:d5:00:a0:b6:4d:91:eb:ac:c9:b5:65:b8:8c:fd:48:db:d3: f9:3a:f0:5c:4b:72:ac:16:4f:71:c3:22:db:f3:d1:95:c3:22: 2e:27:be:f4:88:95:87:19:f3:df:44:47:66:f0:28:a7:14:67: 45:bc:d8:92:9f:fb:3b:95:cc:81:a0:5e:6a:48:34:5a:51:fa: bb:e8:45:70:01:47:13:80:cb:be:0a:ec:03:93:74:ab:45:ed: d7:54:ee:93:36:01:4a:4e:d5:88:95:54:c7:2d:57:03:94:49: 44:44:00:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH2Pugs57TnHaD5hP247342FY/JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjA0MjAwODM1NDJaFw0yNjA0MjExMDQ3NDJaMDMxMTAvBgNV BAMTKEQ0QTFDOUU1OUIzMTEwODAyMzRBNDM5NUM0MDY5NDY4NDNCODkzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoiP2YnwMmUXrOT5WT8z5f4Oe Tuv2xHVRcltLanqJpqH4gobp5S2rDHzyyneTS/WCLVOzafo6QwSZOmU5Fuoxa9lv +lMrQrjyjnIGz9ZYsG8bZJSjv7e+6zQ/RLHXZ1ejf9mLUh1ZxT64mjPlUiQIxAtI 0WbihxY4A7P+QZm8V7O4MJIZNXZ/K/ziigWRWUdMMivay1AHbRO0BICAUcFOcSq9 9VNG36VbRnGDEYElyxI35gBVkC5Dev5irWFRvcOF93c+xD9/2uZkKviriIOQWwE0 dEioFPJZrwdWy5R2BjLuI+N1EZKDLBPKoQ4Ndzqz8KuSBcMCFPCQ3KlI/biTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1KHJ5ZsxEIAjSkOVxAaUaEO4k7EwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6L2tV n8oZjoPZDKA1EDBC9ZiDODW3hLoDHEjXTk/BGgWzuUKOWuKZUjEIgWe9fs3h2xuY /zWpTG/S4wMm7G16HRUHnw/9SzIlfLSen0UwhFV51uA24nKlo+9oyxwPSVK8PnEd CHa6w1EdVyo/2Lr/B6yk1s58YqpJmouBuumIq6uzRVfxesL0SpS5a7X6xpRZ1QCg tk2R66zJtWW4jP1I29P5OvBcS3KsFk9xwyLb89GVwyIuJ770iJWHGfPfREdm8Cin FGdFvNiSn/s7lcyBoF5qSDRaUfq76EVwAUcTgMu+CuwDk3SrRe3XVO6TNgFKTtWI lVTHLVcDlElERAB3 -----END CERTIFICATE-----Generated at Mon Apr 20 22:24:06 2026 by rpki-client