$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: tgbCpz6INUX3y8zwraul3uILeu/ZXpaffS7CqQHLGu4= Subject key identifier: DB:40:7B:97:31:A2:38:5B:B9:E8:01:B3:7F:0F:83:0E:01:FB:43:AA Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 40200A24E8B871C04AC1CEB97D7A54D2E4B946EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 04D8 Signing time: Thu 11 Jun 2026 10:30:06 +0000 Manifest this update: Thu 11 Jun 2026 10:25:06 +0000 Manifest next update: Fri 12 Jun 2026 14:27:06 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 4: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 5: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 6: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 7: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 8: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 9: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 10: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: 5YXhAyOW44GXTdyhRIRSyty1FFkF8paLHC2Chl4Y2Fg=) 11: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 14:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:20:0a:24:e8:b8:71:c0:4a:c1:ce:b9:7d:7a:54:d2:e4:b9:46:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jun 11 10:25:06 2026 GMT Not After : Jun 12 14:27:06 2026 GMT Subject: CN=DB407B9731A2385BB9E801B37F0F830E01FB43AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:8d:b8:12:d8:37:ad:10:45:02:6c:24:c3: 0e:51:be:9e:d6:24:6d:9b:b8:a7:4d:b2:55:bf:89: 69:4c:58:fe:75:bf:e7:bd:b1:26:a0:91:f7:b9:93: 98:9f:a6:18:71:91:b8:0a:80:01:6a:6c:f1:de:9d: 3e:21:d2:c1:bd:0e:e2:0d:34:7d:07:c2:9d:44:70: 3f:11:42:e3:e9:ae:73:56:a1:91:5a:08:1c:fb:13: c8:b6:17:cb:fa:f4:10:ac:e7:43:5b:cd:87:ad:8c: c6:81:4b:c1:81:42:9a:05:67:3f:e1:ac:85:8b:25: 9c:a9:c1:14:39:57:8b:23:c8:8f:b4:e4:1f:97:27: 87:ca:68:fb:53:ed:b6:89:82:cc:4a:b9:fd:8e:af: 50:9d:bf:4f:65:be:f4:46:b4:47:74:23:70:bf:52: f5:db:6b:44:c0:28:48:82:56:ea:96:d6:ab:c4:6c: eb:bf:ca:14:dd:99:84:a3:4b:45:7a:b0:87:87:7c: 07:18:2d:c8:dd:6a:c2:8f:de:2c:6e:64:fe:23:35: 03:99:ba:22:11:b4:e3:63:76:55:05:c2:11:f2:be: a1:7d:3b:57:5c:b4:80:1f:41:5d:0d:a7:4e:10:98: d1:7f:7b:a1:22:d7:dd:76:62:74:bd:55:ac:29:64: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:7B:97:31:A2:38:5B:B9:E8:01:B3:7F:0F:83:0E:01:FB:43:AA X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:76:c1:f1:99:f9:f5:50:d0:b7:2c:23:13:1a:d3:35:28:8f: 03:de:8b:a2:84:06:e1:de:9c:1e:51:09:61:61:d7:d0:a4:a2: 23:bc:27:00:b5:c1:56:dd:61:0e:0f:75:44:05:9f:b8:d0:ba: 5c:22:26:4b:8d:a4:8b:88:7c:f2:29:03:52:ab:56:51:5b:d8: 0d:ba:b4:c7:f5:54:bf:cb:c1:d3:49:33:16:fe:13:18:aa:75: 6a:be:54:bb:24:ff:80:9e:be:2f:fd:6c:c3:38:a7:29:0f:06: f4:ee:39:63:bf:6a:d3:60:9d:dc:56:6c:ef:a9:47:9e:11:2e: d7:69:9b:31:de:16:09:a0:e7:23:0d:7b:d8:d9:11:a0:cf:34: 17:74:2e:09:c1:12:19:e9:8b:49:c5:36:96:b7:04:11:37:df: 9a:3a:ac:a1:8e:13:76:3a:71:a5:e2:9f:53:8c:f7:a2:d7:ce: 72:9e:9e:bd:7f:ec:60:89:b4:5a:0d:e2:eb:0e:29:b5:a4:10: a7:c8:e8:b2:21:37:00:ab:d0:d9:05:ff:6d:4e:e6:b6:e9:6e: 94:5c:58:bc:af:da:88:7e:6d:4b:8a:af:22:08:bb:08:ec:a8: b9:81:6e:4d:6f:5d:b6:8e:26:28:1d:e9:f2:7a:ee:31:fa:10: ba:96:1b:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQCAKJOi4ccBKwc65fXpU0uS5Ru4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA2MTExMDI1MDZaFw0yNjA2MTIxNDI3MDZaMDMxMTAvBgNV BAMTKERCNDA3Qjk3MzFBMjM4NUJCOUU4MDFCMzdGMEY4MzBFMDFGQjQzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQo24Etg3rRBFAmwkww5Rvp7W JG2buKdNslW/iWlMWP51v+e9sSagkfe5k5ifphhxkbgKgAFqbPHenT4h0sG9DuIN NH0Hwp1EcD8RQuPprnNWoZFaCBz7E8i2F8v69BCs50NbzYetjMaBS8GBQpoFZz/h rIWLJZypwRQ5V4sjyI+05B+XJ4fKaPtT7baJgsxKuf2Or1Cdv09lvvRGtEd0I3C/ UvXba0TAKEiCVuqW1qvEbOu/yhTdmYSjS0V6sIeHfAcYLcjdasKP3ixuZP4jNQOZ uiIRtONjdlUFwhHyvqF9O1dctIAfQV0Np04QmNF/e6Ei1912YnS9VawpZOH1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU20B7lzGiOFu56AGzfw+DDgH7Q6owHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3bB8Zn59VDQtywjExrT NSiPA96LooQG4d6cHlEJYWHX0KSiI7wnALXBVt1hDg91RAWfuNC6XCImS42ki4h8 8ikDUqtWUVvYDbq0x/VUv8vB00kzFv4TGKp1ar5UuyT/gJ6+L/1swzinKQ8G9O45 Y79q02Cd3FZs76lHnhEu12mbMd4WCaDnIw172NkRoM80F3QuCcESGemLScU2lrcE ETffmjqsoY4TdjpxpeKfU4z3otfOcp6evX/sYIm0Wg3i6w4ptaQQp8josiE3AKvQ 2QX/bU7mtululFxYvK/aiH5tS4qvIgi7COyouYFuTW9dto4mKB3p8nruMfoQupYb Ow== -----END CERTIFICATE-----Generated at Fri Jun 12 07:45:06 2026 by rpki-client