$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: /F91EyckrIEb7LrstxijMBVVckdLKtQEFkwUG1gEMXs= Subject key identifier: A0:07:22:D2:20:F4:C3:09:BA:AF:80:62:B0:30:73:57:BF:4A:AC:FA Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 53C02482A55FFFF0AAFCF7C8B28EB413E44476D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: 02 Signing time: Thu 30 Apr 2026 09:15:18 +0000 Manifest this update: Thu 30 Apr 2026 09:10:18 +0000 Manifest next update: Fri 01 May 2026 11:28:18 +0000 Files and hashes: 1: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 2: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: BQsidqUiVkkl0H8pnO00oGR+9AuTl9WDEQJI6+bls6A=) 3: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 4: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 5: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c0:24:82:a5:5f:ff:f0:aa:fc:f7:c8:b2:8e:b4:13:e4:44:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Apr 30 09:10:18 2026 GMT Not After : May 1 11:28:18 2026 GMT Subject: CN=A00722D220F4C309BAAF8062B0307357BF4AACFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:92:81:c3:99:ce:61:60:42:1d:48:e4:be: 1e:5b:6c:c7:03:c9:a2:0c:4a:f6:88:95:5b:90:30: 29:56:5a:f6:f4:08:71:6f:8a:72:08:45:a2:ad:bf: dd:8e:37:09:ba:82:b3:74:1a:fc:f2:11:76:8e:fb: 49:c5:a4:e3:f8:93:5e:30:e6:05:33:d1:7e:05:52: d9:28:06:02:c7:e3:38:11:35:ee:5c:d3:0d:7f:0f: de:47:ad:8b:ec:09:48:46:2d:3b:bf:c4:4f:a3:32: f1:25:76:a0:c1:6e:f5:1f:fb:84:41:9b:f5:0e:cb: e1:1d:e1:9c:42:f5:d0:52:82:47:af:56:25:49:ba: 10:09:0c:e9:52:81:98:ff:c5:bc:57:83:0e:db:d2: 39:df:91:34:4e:a6:cc:4c:d1:5c:f1:02:e4:87:32: 33:39:09:3d:2a:f9:49:f7:7d:9a:8c:f1:34:88:94: b9:08:00:d3:db:4c:b0:d9:c4:5e:e2:32:47:d1:0f: cb:0d:0d:d1:d1:1a:47:f1:19:75:25:b4:63:4e:5c: 10:e4:b3:43:38:c4:92:fc:a2:e7:3c:7b:32:78:f2: bd:47:1f:29:ee:ac:85:2a:ab:f2:0d:14:4c:d4:db: 64:36:d7:c9:24:90:d3:4b:d9:73:ae:e9:6c:e6:26: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:22:D2:20:F4:C3:09:BA:AF:80:62:B0:30:73:57:BF:4A:AC:FA X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:cf:a8:3a:95:ea:be:7d:50:b3:d9:fc:3e:b1:df:d3:03: 88:89:10:29:a1:7d:48:ae:4b:3d:a5:0f:1e:db:05:e7:59:13: c3:94:36:62:59:ff:f4:ee:bd:79:50:64:84:88:ba:b6:23:53: b2:ef:7b:5d:a2:34:ec:ba:de:d4:cf:81:4b:9f:92:b2:cd:03: e6:7b:23:bf:a2:0b:bf:51:df:95:54:11:7f:05:43:3e:44:73: 06:36:29:e2:f7:9a:8d:ce:47:b1:dc:c1:a9:24:0d:fd:9a:57: d8:13:4e:42:2e:f6:12:27:8f:4f:43:e0:30:9e:18:12:1a:f5: 1b:13:d0:76:9b:00:92:c9:c4:06:f6:7b:2c:93:0b:78:54:c1: b6:e1:7c:81:c9:7a:48:05:fe:32:2e:f8:8b:0b:8b:38:90:74: 76:a7:a1:bb:72:b8:fd:68:cb:93:d6:38:c4:c4:07:33:a1:a4: d8:01:16:25:37:08:c7:55:6d:ae:30:9e:d4:71:8c:02:e7:58: b5:42:f4:87:a4:4d:22:a3:d5:ee:67:aa:d5:a2:78:04:f5:85: 76:3a:03:05:a3:4c:c0:ff:07:83:54:2b:97:81:3f:85:fe:15: c4:4a:e5:8a:a0:2c:a7:af:6e:ca:21:26:cf:0e:32:97:5b:b2: fd:34:f0:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU8AkgqVf//Cq/PfIso60E+REdtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA0MzAwOTEwMThaFw0yNjA1MDExMTI4MThaMDMxMTAvBgNV BAMTKEEwMDcyMkQyMjBGNEMzMDlCQUFGODA2MkIwMzA3MzU3QkY0QUFDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxKpKBw5nOYWBCHUjkvh5bbMcD yaIMSvaIlVuQMClWWvb0CHFvinIIRaKtv92ONwm6grN0GvzyEXaO+0nFpOP4k14w 5gUz0X4FUtkoBgLH4zgRNe5c0w1/D95HrYvsCUhGLTu/xE+jMvEldqDBbvUf+4RB m/UOy+Ed4ZxC9dBSgkevViVJuhAJDOlSgZj/xbxXgw7b0jnfkTROpsxM0VzxAuSH MjM5CT0q+Un3fZqM8TSIlLkIANPbTLDZxF7iMkfRD8sNDdHRGkfxGXUltGNOXBDk s0M4xJL8ouc8ezJ48r1HHynurIUqq/INFEzU22Q218kkkNNL2XOu6WzmJgAHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoAci0iD0wwm6r4BisDBzV79KrPowHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7PPqDqV6r59ULPZ/D6x 39MDiIkQKaF9SK5LPaUPHtsF51kTw5Q2Yln/9O69eVBkhIi6tiNTsu97XaI07Lre 1M+BS5+Sss0D5nsjv6ILv1HflVQRfwVDPkRzBjYp4veajc5HsdzBqSQN/ZpX2BNO Qi72EiePT0PgMJ4YEhr1GxPQdpsAksnEBvZ7LJMLeFTBtuF8gcl6SAX+Mi74iwuL OJB0dqehu3K4/WjLk9Y4xMQHM6Gk2AEWJTcIx1VtrjCe1HGMAudYtUL0h6RNIqPV 7meq1aJ4BPWFdjoDBaNMwP8Hg1Qrl4E/hf4VxErliqAsp69uyiEmzw4yl1uy/TTw pA== -----END CERTIFICATE-----Generated at Thu Apr 30 12:42:19 2026 by rpki-client