$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: AE9bhaOxgnkSdHAiPhC028AlUyy0rUEubdIuYX8GG3c= Subject key identifier: B8:EB:78:82:02:2F:4B:9E:AD:6A:48:B0:AF:DF:C2:18:C6:29:FB:FC Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 6075DFA27035D41BE1EF797E91D47D55C821073C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 0188 Signing time: Fri 05 Jun 2026 17:42:24 +0000 Manifest this update: Fri 05 Jun 2026 17:37:24 +0000 Manifest next update: Sat 06 Jun 2026 18:10:24 +0000 Files and hashes: 1: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 2: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 3: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: uVfkhEp0S8Tb1jc5n88MlwPjTRxUnOlR9TKel9YmYB8=) 4: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 5: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 6: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 18:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:75:df:a2:70:35:d4:1b:e1:ef:79:7e:91:d4:7d:55:c8:21:07:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Jun 5 17:37:24 2026 GMT Not After : Jun 6 18:10:24 2026 GMT Subject: CN=B8EB7882022F4B9EAD6A48B0AFDFC218C629FBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:ef:bf:bb:e5:f9:30:88:d5:62:74:f1:52: e0:dc:fa:6a:2f:9d:e9:7d:46:ee:78:05:ef:73:cf: dc:47:96:f8:ec:83:14:2f:c4:6a:29:4a:da:b1:c6: e5:a6:6a:35:7d:13:01:9e:e2:27:d8:f7:89:6f:44: 66:95:d1:07:1f:53:b5:60:53:54:d9:a5:94:ac:e1: ca:10:aa:42:dd:41:b1:b2:f6:51:59:a2:fe:60:a1: 17:d1:7a:4d:c6:86:60:1e:3c:8a:16:77:2e:92:97: ae:61:c4:26:35:ef:e5:42:1e:78:31:34:f4:5f:c2: e8:30:60:16:35:0e:91:97:b6:9d:f7:29:a0:de:d7: 26:d2:b6:dd:d5:31:ac:4f:c6:da:0e:73:4e:75:b3: 18:bd:2a:30:70:9a:e7:cd:e4:66:94:40:dc:cc:46: d0:e6:7c:6e:03:9f:ca:a2:21:9f:4c:fb:8f:11:1c: db:07:e7:40:f9:f1:61:2c:36:fd:96:0d:b4:bd:b8: 23:fe:6d:18:4a:d7:a6:aa:a0:25:0b:bc:db:fd:2e: dc:7f:ce:85:c9:5d:79:c0:ee:60:8f:36:29:e6:99: d4:70:94:de:f5:0b:d7:a8:e8:11:dd:2f:c1:a8:22: 83:8b:5b:c2:17:a6:2f:de:04:45:dd:e8:93:c6:26: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:78:82:02:2F:4B:9E:AD:6A:48:B0:AF:DF:C2:18:C6:29:FB:FC X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:48:72:24:9e:ad:25:31:4b:a4:39:ec:9e:b0:a4:e5:cb:d9: ab:96:f3:5b:0b:a9:0d:34:66:a3:31:a4:3f:ae:f7:a5:cc:c7: 07:19:2b:9a:33:72:58:73:dd:7c:ae:3d:0e:a3:7a:f8:91:83: 47:e4:62:b3:87:d9:32:9a:d6:2f:e6:ee:af:14:99:a4:d2:a9: a2:88:3d:df:4e:a0:58:d7:cb:1a:83:d9:d5:af:20:18:87:6d: 42:37:1d:b8:db:ed:7f:73:fb:da:de:02:92:94:c8:a2:02:2f: fe:9b:86:23:2e:43:48:73:85:ea:d4:84:8a:4e:51:b9:e2:20: 46:8d:db:e6:c8:35:c2:b8:81:0e:0a:04:c5:0c:cd:21:30:5b: 5e:ed:ca:e6:e5:89:bc:2f:f3:de:13:eb:6f:d5:cd:25:e2:99: 86:a7:28:36:10:82:81:8c:47:4c:61:7e:d0:da:2a:76:5a:78: af:78:73:49:1d:fc:3b:c2:44:45:ed:99:ad:f8:09:35:53:fa: f0:c0:bf:2d:4f:99:34:12:5d:e4:2a:a1:2d:d0:fb:1d:10:ac: 87:c1:fb:8f:c7:57:dc:a7:88:b6:5f:39:2b:8b:74:c3:43:84: 1c:aa:1e:79:7d:19:a5:53:b0:b7:2e:a8:20:0f:51:20:d8:33: ce:44:66:95 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYHXfonA11Bvh73l+kdR9VcghBzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjA2MDUxNzM3MjRaFw0yNjA2MDYxODEwMjRaMDMxMTAvBgNV BAMTKEI4RUI3ODgyMDIyRjRCOUVBRDZBNDhCMEFGREZDMjE4QzYyOUZCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXN++/u+X5MIjVYnTxUuDc+mov nel9Ru54Be9zz9xHlvjsgxQvxGopStqxxuWmajV9EwGe4ifY94lvRGaV0QcfU7Vg U1TZpZSs4coQqkLdQbGy9lFZov5goRfRek3GhmAePIoWdy6Sl65hxCY17+VCHngx NPRfwugwYBY1DpGXtp33KaDe1ybStt3VMaxPxtoOc051sxi9KjBwmufN5GaUQNzM RtDmfG4Dn8qiIZ9M+48RHNsH50D58WEsNv2WDbS9uCP+bRhK16aqoCULvNv9Ltx/ zoXJXXnA7mCPNinmmdRwlN71C9eo6BHdL8GoIoOLW8IXpi/eBEXd6JPGJmlJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuOt4ggIvS56takiwr9/CGMYp+/wwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKSHIk nq0lMUukOeyesKTly9mrlvNbC6kNNGajMaQ/rvelzMcHGSuaM3JYc918rj0Oo3r4 kYNH5GKzh9kymtYv5u6vFJmk0qmiiD3fTqBY18sag9nVryAYh21CNx242+1/c/va 3gKSlMiiAi/+m4YjLkNIc4Xq1ISKTlG54iBGjdvmyDXCuIEOCgTFDM0hMFte7crm 5Ym8L/PeE+tv1c0l4pmGpyg2EIKBjEdMYX7Q2ip2WniveHNJHfw7wkRF7Zmt+Ak1 U/rwwL8tT5k0El3kKqEt0PsdEKyHwfuPx1fcp4i2Xzkri3TDQ4Qcqh55fRmlU7C3 LqggD1Eg2DPORGaV -----END CERTIFICATE-----Generated at Sat Jun 6 04:23:38 2026 by rpki-client