$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: SgRzzxnRcu2ivjluq2X20dwRNBYPstmdWBUfMmugGBk= Subject key identifier: 6A:BE:92:71:BD:37:A8:56:DC:3B:AA:6B:AA:9E:37:43:A0:12:9B:9F Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 11981E03960D1653D95456447C2E3CD2E4006DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 52 Signing time: Thu 11 Jun 2026 11:20:16 +0000 Manifest this update: Thu 11 Jun 2026 11:15:16 +0000 Manifest next update: Fri 12 Jun 2026 13:13:16 +0000 Files and hashes: 1: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (hash: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=) 2: 34362e31382e39302e302f32342d3234203d3e20323037313538.roa (hash: c3XGP2QOaAegFM0BJ/uAWNxnHJgzHzZj7rsmxO7Bggk=) 3: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 4: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: OQ35FkVg73v4skBNCSPLu7PEqEZKOvWQppPuOoRmvDk=) 5: 34362e31382e39312e302f32342d3234203d3e20323032373932.roa (hash: ntblaebzWfMZkapnZj/wCZOlMJjioVqZTa39aOgNWdQ=) 6: 3138352e3131362e39302e302f32342d3234203d3e20343032323839.roa (hash: +Ui26OpR2rnRNb3YOnuRkkVtjIfm7ZTC4lRerOfEZ6k=) 7: 34362e31382e38392e302f32342d3234203d3e20393834.roa (hash: dTPGPFu6IshEEsy/RmP50yZu0SBzIoPmfBrrv6G1Bt0=) 8: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (hash: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=) 9: 34362e31382e38392e302f32342d3234203d3e203134323933.roa (hash: eaFzGlJw258kJsKfSKUPYmqK68JrgHotUuQnQX7sY90=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:98:1e:03:96:0d:16:53:d9:54:56:44:7c:2e:3c:d2:e4:00:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Jun 11 11:15:16 2026 GMT Not After : Jun 12 13:13:16 2026 GMT Subject: CN=6ABE9271BD37A856DC3BAA6BAA9E3743A0129B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:a5:ce:b9:eb:c1:53:c4:d2:dc:87:e2:e9: 64:6e:53:f8:c4:85:6d:b9:a4:57:58:4d:bf:22:eb: 42:ba:b9:83:0a:d6:ab:e1:9f:31:68:66:11:9d:ec: f8:f4:bb:44:ab:47:c8:c3:9a:ca:f0:38:01:91:f0: 6f:01:31:eb:98:a4:65:86:0a:a6:f4:ee:44:70:bc: 41:95:4f:f0:17:01:d2:d0:ae:24:e8:4c:ab:4c:05: 1a:1c:1a:e6:de:e1:c1:35:46:83:ad:88:c1:1e:7d: b4:4a:d7:f4:91:83:c9:a1:6b:a6:4f:80:bd:8d:5a: 58:0b:ea:b1:d4:87:14:99:7d:ad:55:69:5f:29:6e: 73:66:08:87:3b:23:a0:28:e5:e5:e7:cc:d9:45:ba: 3a:1c:ca:ff:ff:dd:ae:87:5c:dd:18:8b:1c:06:0b: ac:17:20:04:12:76:af:d5:bc:0c:0f:6c:73:1a:a5: 5e:1b:e0:67:e1:68:95:8b:a3:ab:2a:35:3a:3b:75: ae:e3:47:39:49:9b:e6:a4:74:58:db:c9:a6:4c:32: 5a:6d:48:8b:43:8b:17:da:cf:c4:41:2d:2a:3d:37: e3:a4:f9:56:ec:22:7a:ea:22:3a:6f:8a:ca:6e:84: d8:14:d8:a5:bb:45:f2:58:58:2e:a1:58:02:f0:fe: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BE:92:71:BD:37:A8:56:DC:3B:AA:6B:AA:9E:37:43:A0:12:9B:9F X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:70:86:54:61:05:29:65:b7:64:15:b6:6d:0f:85:7a:ef:14: 0a:13:e4:12:b6:04:ea:ec:29:e0:d9:64:9a:2b:c7:70:c5:e4: f9:88:f4:dc:90:97:69:8a:29:95:8e:f2:e0:01:ad:5a:1a:33: ef:c5:93:24:84:18:94:7d:b4:0a:de:ef:90:a4:24:d6:72:e1: b2:e9:ca:8f:4e:85:92:e7:a2:c8:9d:ff:3e:af:6b:db:3b:c1: d4:e4:9e:12:48:cd:c1:d0:90:7c:21:71:a5:43:ec:7d:f6:1d: 33:d0:f4:93:16:4c:e4:1e:26:05:a5:b6:ee:59:b0:45:ca:6e: 73:0d:2e:6f:5b:f5:80:84:73:f6:8a:3c:06:02:d7:66:98:6b: 96:85:ee:f6:4c:0a:92:d4:92:0b:b3:a6:d4:80:5d:c0:a9:3e: 82:1f:bf:35:d5:63:bb:b4:ac:8f:81:ee:49:5d:f0:05:36:23: 74:13:8d:7b:6b:55:b2:ac:82:21:1f:76:ce:8e:b7:6f:16:66: ed:d1:64:b3:05:c0:47:e6:7e:6c:3d:4c:c2:98:a1:41:13:cf: 3b:ad:87:f2:26:f2:91:3d:b9:99:d3:cb:5e:9c:7a:bb:a9:90: 71:d1:17:d3:9a:09:7c:2c:41:ca:71:eb:5d:78:b0:9c:c0:8f: 71:4f:4f:13 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEZgeA5YNFlPZVFZEfC480uQAbewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA2MTExMTE1MTZaFw0yNjA2MTIxMzEzMTZaMDMxMTAvBgNV BAMTKDZBQkU5MjcxQkQzN0E4NTZEQzNCQUE2QkFBOUUzNzQzQTAxMjlCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrKXOuevBU8TS3Ifi6WRuU/jE hW25pFdYTb8i60K6uYMK1qvhnzFoZhGd7Pj0u0SrR8jDmsrwOAGR8G8BMeuYpGWG Cqb07kRwvEGVT/AXAdLQriToTKtMBRocGube4cE1RoOtiMEefbRK1/SRg8mha6ZP gL2NWlgL6rHUhxSZfa1VaV8pbnNmCIc7I6Ao5eXnzNlFujocyv//3a6HXN0YixwG C6wXIAQSdq/VvAwPbHMapV4b4GfhaJWLo6sqNTo7da7jRzlJm+akdFjbyaZMMlpt SItDixfaz8RBLSo9N+Ok+VbsInrqIjpvispuhNgU2KW7RfJYWC6hWALw/jVrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUar6Scb03qFbcO6prqp43Q6ASm58wHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHCGVGEFKWW3ZBW2bQ+F eu8UChPkErYE6uwp4NlkmivHcMXk+Yj03JCXaYoplY7y4AGtWhoz78WTJIQYlH20 Ct7vkKQk1nLhsunKj06FkueiyJ3/Pq9r2zvB1OSeEkjNwdCQfCFxpUPsffYdM9D0 kxZM5B4mBaW27lmwRcpucw0ub1v1gIRz9oo8BgLXZphrloXu9kwKktSSC7Om1IBd wKk+gh+/NdVju7Ssj4HuSV3wBTYjdBONe2tVsqyCIR92zo63bxZm7dFkswXAR+Z+ bD1MwpihQRPPO62H8ibykT25mdPLXpx6u6mQcdEX05oJfCxBynHrXXiwnMCPcU9P Ew== -----END CERTIFICATE-----Generated at Fri Jun 12 06:09:56 2026 by rpki-client