$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: bnzFHDtFJhbXXqwXqPj44F0CgvMmXn0EYklcaZx5B2k= Subject key identifier: 5F:4C:AA:2D:66:58:D8:68:9D:60:64:D1:62:F7:16:00:6D:8B:B0:42 Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 6562CB1E1C1A30222DA921B3817B5BBB000B38E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: 4C Signing time: Wed 24 Jun 2026 15:03:10 +0000 Manifest this update: Wed 24 Jun 2026 14:58:09 +0000 Manifest next update: Thu 25 Jun 2026 16:43:09 +0000 Files and hashes: 1: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 2: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 3: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) 4: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 5: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 6: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: 7uDVTea5+3DinHL7KQKST6NSAJN6NDFV/1WRMKqJAE0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 14:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:62:cb:1e:1c:1a:30:22:2d:a9:21:b3:81:7b:5b:bb:00:0b:38:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Jun 24 14:58:09 2026 GMT Not After : Jun 25 16:43:09 2026 GMT Subject: CN=5F4CAA2D6658D8689D6064D162F716006D8BB042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:40:da:2d:8f:10:aa:d3:c3:66:6e:f9:76: 9d:12:be:e4:e5:bd:aa:3c:12:47:d9:39:ba:7d:a3: 2b:03:03:cd:8e:d2:ce:dd:c7:08:12:a7:fb:2a:a6: 4a:f1:4e:1a:a6:0b:4d:3c:bc:ea:b7:ff:68:83:7f: 0f:f8:85:c4:ed:5e:1a:c1:5e:91:1f:59:f7:27:90: 42:d8:54:97:0c:61:04:42:de:07:af:95:6c:f4:d8: ff:d2:9a:53:8d:ce:68:63:06:a8:6d:e5:fc:6f:a7: bc:44:79:c1:93:a6:86:c6:31:af:27:5e:ed:85:c4: b5:c2:b4:cf:ae:ee:52:ce:b5:44:f2:75:18:27:c8: 62:84:b5:83:96:98:4b:c7:14:ff:98:ff:b0:b9:fa: 82:3b:59:cf:1d:15:26:de:e0:1b:ee:2a:56:06:35: 35:3f:82:80:2b:45:c5:41:78:ef:40:5a:db:ce:d3: 4b:75:68:43:62:7e:a6:9f:c2:7e:0b:26:f2:26:5f: 16:40:a4:ce:f4:29:e1:2b:00:3a:06:be:07:6f:4b: 09:a0:67:1d:4a:d7:b3:77:35:00:ae:aa:55:1e:b7: 5f:84:56:10:96:06:7d:8e:35:07:23:3e:68:cd:8b: 50:52:f4:be:0b:b9:e2:02:51:0d:f5:15:33:88:4f: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:AA:2D:66:58:D8:68:9D:60:64:D1:62:F7:16:00:6D:8B:B0:42 X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b6:ad:7d:15:68:68:bd:33:0c:b4:e7:18:c4:61:bf:e4:89: ed:67:b0:34:8d:0b:34:39:c2:ac:43:1c:8d:d8:ee:44:ab:c9: c2:ca:a4:41:24:bb:4d:65:5b:9d:48:8b:c4:a2:04:09:d5:c0: 5e:45:96:66:74:8a:40:d7:e0:e4:ec:ca:90:0d:eb:8d:c7:a5: 12:a5:c6:0f:7f:fd:df:0e:7e:94:3b:d6:89:66:f0:2f:b7:ae: 24:5c:d4:e8:cc:46:c9:fa:70:7b:cd:be:23:58:27:4b:65:9f: 1c:0f:63:8b:a9:d7:b2:67:40:01:f3:80:9e:01:1f:90:1f:49: 80:11:c5:9a:42:ff:39:d9:71:28:5e:71:7f:b3:bc:21:1b:b4: a5:4d:a0:52:6f:4a:ca:db:f7:b5:57:80:38:1a:b2:5b:06:0b: 6e:b1:de:a5:29:d1:5b:31:a4:07:79:2b:41:a9:1e:76:44:f4: 23:b7:f6:a8:3b:b5:73:64:86:c4:48:f7:eb:2e:8f:67:20:96: 8a:23:00:91:7d:62:ed:41:b9:a3:8e:3e:c0:78:2e:63:5c:b2: 49:6d:b7:68:7b:1b:9e:20:05:e9:c8:bd:02:29:1d:cf:85:79: 56:7f:ea:63:29:af:ca:55:fa:a1:82:66:48:0c:1f:3d:8c:29: 10:55:21:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZWLLHhwaMCItqSGzgXtbuwALOOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA2MjQxNDU4MDlaFw0yNjA2MjUxNjQzMDlaMDMxMTAvBgNV BAMTKDVGNENBQTJENjY1OEQ4Njg5RDYwNjREMTYyRjcxNjAwNkQ4QkIwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kUDaLY8QqtPDZm75dp0SvuTl vao8EkfZObp9oysDA82O0s7dxwgSp/sqpkrxThqmC008vOq3/2iDfw/4hcTtXhrB XpEfWfcnkELYVJcMYQRC3gevlWz02P/SmlONzmhjBqht5fxvp7xEecGTpobGMa8n Xu2FxLXCtM+u7lLOtUTydRgnyGKEtYOWmEvHFP+Y/7C5+oI7Wc8dFSbe4BvuKlYG NTU/goArRcVBeO9AWtvO00t1aENifqafwn4LJvImXxZApM70KeErADoGvgdvSwmg Zx1K17N3NQCuqlUet1+EVhCWBn2ONQcjPmjNi1BS9L4LueICUQ31FTOIT2sZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUX0yqLWZY2GidYGTRYvcWAG2LsEIwHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7atfRVoaL0zDLTnGMRh v+SJ7WewNI0LNDnCrEMcjdjuRKvJwsqkQSS7TWVbnUiLxKIECdXAXkWWZnSKQNfg 5OzKkA3rjcelEqXGD3/93w5+lDvWiWbwL7euJFzU6MxGyfpwe82+I1gnS2WfHA9j i6nXsmdAAfOAngEfkB9JgBHFmkL/OdlxKF5xf7O8IRu0pU2gUm9Kytv3tVeAOBqy WwYLbrHepSnRWzGkB3krQakedkT0I7f2qDu1c2SGxEj36y6PZyCWiiMAkX1i7UG5 o44+wHguY1yySW23aHsbniAF6ci9Aikdz4V5Vn/qYymvylX6oYJmSAwfPYwpEFUh dQ== -----END CERTIFICATE-----Generated at Wed Jun 24 17:04:48 2026 by rpki-client