$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: fQZZI4/zDqP23ojl0h1t0fRR9TnYES5/Rlbymj2lCv4= Subject key identifier: 67:6B:DD:5D:E0:DB:E1:6C:AA:42:78:23:49:1B:86:42:1F:CC:15:36 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 1E51ACA88BA50F3B11F6064C2030F822CEBF7082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 049A Signing time: Mon 27 Apr 2026 18:36:09 +0000 Manifest this update: Mon 27 Apr 2026 18:31:09 +0000 Manifest next update: Tue 28 Apr 2026 18:53:09 +0000 Files and hashes: 1: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 2: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 3: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 4: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 5: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 6: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 7: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 8: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 9: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: p/2k5+fsMtc7DvdB3DO3dQVCo3t4uQpN/tNx/fBjPRA=) 10: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 11: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:51:ac:a8:8b:a5:0f:3b:11:f6:06:4c:20:30:f8:22:ce:bf:70:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Apr 27 18:31:09 2026 GMT Not After : Apr 28 18:53:09 2026 GMT Subject: CN=676BDD5DE0DBE16CAA427823491B86421FCC1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:5d:ba:7f:ae:09:50:5e:9e:6c:1b:30:51: 4b:87:81:d9:c9:33:a6:ae:b6:46:3f:83:bf:40:90: ed:29:28:65:89:c0:e2:f1:52:b8:5f:35:70:6e:69: 7f:04:12:5c:98:03:8a:6c:28:76:a8:99:48:41:ae: 41:54:a1:c1:55:0b:6d:42:3c:90:a1:08:1f:4d:2a: 62:ad:11:d0:19:c1:a5:ab:dd:01:ca:e3:8c:b3:66: ba:b7:93:14:56:af:d7:fb:20:6c:73:30:20:3f:40: d6:ff:e7:52:54:1f:5c:9f:fb:9f:e0:22:de:c1:2e: b2:24:90:ca:d5:26:08:9c:ee:9f:5f:c2:55:aa:1f: 93:dd:bb:64:df:04:18:cd:0c:fe:a4:46:40:31:53: 93:18:08:f9:f3:ee:57:5f:ea:6f:6b:73:6a:e1:6e: 9e:1e:0a:46:d4:55:ee:04:c3:70:fd:de:bd:ce:f8: 99:27:1a:42:ac:1e:7b:07:70:22:35:d2:50:aa:41: 76:d8:a9:8b:07:cf:09:07:9f:9e:24:74:9f:b7:36: 2d:93:d6:5c:65:8c:2e:bc:03:db:bf:db:4d:6a:a8: d1:59:47:ff:87:08:c6:da:00:59:0b:32:92:bc:60: e2:58:b2:7e:37:c8:e2:c2:64:a9:bf:99:59:03:aa: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:DD:5D:E0:DB:E1:6C:AA:42:78:23:49:1B:86:42:1F:CC:15:36 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:54:f9:13:0f:6c:a0:a7:c4:d0:05:20:33:be:51:23:78:d6: 38:dd:bc:fd:eb:5a:be:e9:da:66:d6:e2:94:96:f3:29:83:01: ca:a8:84:f5:9d:22:d0:76:51:4c:c2:16:a5:5f:58:b8:1c:f2: 14:bf:6a:3a:17:43:74:b2:ee:1c:4e:e5:d9:92:d4:79:3e:de: ad:db:9b:f9:78:a7:41:da:c4:2b:1c:d6:cd:03:4c:c5:9f:d0: 81:1c:94:e6:d7:29:e8:11:6b:d3:45:06:f0:b1:99:8a:f2:82: df:71:0a:67:91:39:06:16:bc:80:3c:d7:88:70:80:42:1a:8f: 08:fe:da:1f:48:d5:2a:e8:f2:cd:b5:37:88:d2:74:7d:de:9e: 12:3e:94:a5:5b:69:6f:c5:3a:b5:2b:03:6c:f5:26:49:f3:86: 2e:56:a8:34:e9:2a:4b:c5:b1:9a:c4:40:71:9e:40:14:09:82: 74:2c:b4:68:6e:11:05:d2:b6:56:be:79:d0:39:14:35:94:b1: 76:c8:5e:14:0c:9d:c6:c9:55:fd:55:32:fc:56:1c:4f:35:06: 7d:53:80:87:ac:16:6b:f2:cc:5a:59:99:10:84:0a:98:a0:a4: 79:ea:fb:03:54:7e:05:e8:f9:fb:77:83:d8:68:2e:37:5b:de: 42:cd:8e:4a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHlGsqIulDzsR9gZMIDD4Is6/cIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA0MjcxODMxMDlaFw0yNjA0MjgxODUzMDlaMDMxMTAvBgNV BAMTKDY3NkJERDVERTBEQkUxNkNBQTQyNzgyMzQ5MUI4NjQyMUZDQzE1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaF26f64JUF6ebBswUUuHgdnJ M6autkY/g79AkO0pKGWJwOLxUrhfNXBuaX8EElyYA4psKHaomUhBrkFUocFVC21C PJChCB9NKmKtEdAZwaWr3QHK44yzZrq3kxRWr9f7IGxzMCA/QNb/51JUH1yf+5/g It7BLrIkkMrVJgic7p9fwlWqH5Pdu2TfBBjNDP6kRkAxU5MYCPnz7ldf6m9rc2rh bp4eCkbUVe4Ew3D93r3O+JknGkKsHnsHcCI10lCqQXbYqYsHzwkHn54kdJ+3Ni2T 1lxljC68A9u/201qqNFZR/+HCMbaAFkLMpK8YOJYsn43yOLCZKm/mVkDqpWTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZ2vdXeDb4WyqQngjSRuGQh/MFTYwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVT5Ew9soKfE0AUgM75R I3jWON28/etavunaZtbilJbzKYMByqiE9Z0i0HZRTMIWpV9YuBzyFL9qOhdDdLLu HE7l2ZLUeT7erdub+XinQdrEKxzWzQNMxZ/QgRyU5tcp6BFr00UG8LGZivKC33EK Z5E5Bha8gDzXiHCAQhqPCP7aH0jVKujyzbU3iNJ0fd6eEj6UpVtpb8U6tSsDbPUm SfOGLlaoNOkqS8WxmsRAcZ5AFAmCdCy0aG4RBdK2Vr550DkUNZSxdsheFAydxslV /VUy/FYcTzUGfVOAh6wWa/LMWlmZEIQKmKCkeer7A1R+Bej5+3eD2GguN1veQs2O Sg== -----END CERTIFICATE-----Generated at Tue Apr 28 03:23:31 2026 by rpki-client