$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: a6tJnkDv+JaA6rWSh3EjrGtlIXDqFMbwVe1Zx/N9too= Subject key identifier: 1E:3D:CE:85:1E:A3:71:FA:5D:FB:E2:8D:F4:60:A2:18:0E:C2:19:76 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 4E4F95323B68B929ED1C279C1F0AB898580F0FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 04D9 Signing time: Fri 12 Jun 2026 06:29:05 +0000 Manifest this update: Fri 12 Jun 2026 06:24:05 +0000 Manifest next update: Sat 13 Jun 2026 08:11:05 +0000 Files and hashes: 1: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 2: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 3: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 4: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 6: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 7: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 8: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 9: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 10: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 11: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: 5uD+gzNkPfTsUN+4bAroXoSRXNA6lQtlWJq7WIEBHVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 07:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4f:95:32:3b:68:b9:29:ed:1c:27:9c:1f:0a:b8:98:58:0f:0f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jun 12 06:24:05 2026 GMT Not After : Jun 13 08:11:05 2026 GMT Subject: CN=1E3DCE851EA371FA5DFBE28DF460A2180EC21976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:23:35:93:ae:62:71:f9:ad:c0:d8:e7:c5: 33:f5:87:5b:1c:e6:32:64:80:ad:ba:50:ce:8f:b3: 9d:5d:05:39:2f:51:91:c7:0f:2d:88:7b:e3:d9:8f: 11:76:00:05:e9:d1:47:73:15:c5:24:24:39:f9:bc: 97:93:d2:7e:e7:74:d5:e7:7b:69:ab:de:82:72:f1: 88:a9:80:37:34:7a:be:c3:f6:9c:d0:9b:c1:b5:2d: 36:91:0e:84:05:e3:74:81:70:f1:3f:40:ed:ea:c1: cd:1d:ae:e0:db:31:b3:0b:6a:51:bd:c5:54:14:af: 13:48:46:a2:ad:3f:72:4f:aa:e8:fb:6b:80:65:82: 04:e3:56:e5:26:e8:de:68:e9:d9:1b:8d:0a:17:cd: 42:f3:7a:ac:4c:52:32:0d:7c:bf:43:6f:4c:40:46: 16:af:e5:3f:54:be:a4:e2:f1:08:fb:43:a2:79:1d: 26:f1:1b:c3:6d:f5:5d:7f:25:d8:81:aa:83:85:46: 83:f1:22:ed:d9:75:9e:7e:06:31:b9:eb:03:52:ea: fc:75:1d:b1:81:bb:f6:4b:d9:b5:bc:20:8a:d8:9c: 6f:0a:7f:9a:3a:b1:bd:95:d2:08:99:09:29:b1:f9: d3:64:46:49:6f:3d:32:3a:34:cc:50:27:3a:f4:6e: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:CE:85:1E:A3:71:FA:5D:FB:E2:8D:F4:60:A2:18:0E:C2:19:76 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:96:36:72:b8:fe:cd:63:85:a1:c1:ba:6a:84:b7:14:40:ee: f3:b3:c7:7d:a7:bc:62:25:a0:5a:9e:6d:ad:94:5a:33:d8:89: 3d:7d:48:14:87:a3:b1:dd:8a:b8:24:c5:86:7e:a8:75:1d:38: ff:62:77:c0:b8:08:ea:63:48:8c:c2:a1:c7:2b:bc:25:a6:53: 53:15:95:15:59:18:a6:5e:e3:80:28:68:f5:1f:53:24:a7:1a: 46:5c:5d:87:9d:b7:27:7f:b3:9e:bc:da:b9:d1:39:ef:45:19: 8d:45:17:bd:bb:ff:68:80:77:d5:b8:58:e1:4c:76:f7:15:ec: a9:57:33:19:68:6b:e1:42:96:75:68:15:a3:b6:b9:d4:16:3b: 03:c3:00:de:59:3f:e8:a9:da:02:64:10:92:c4:e8:0d:cb:9d: 28:de:fc:55:91:4b:51:0d:f7:34:5a:72:bc:ec:64:1d:ef:d7: af:00:96:5f:16:e4:4e:4e:96:ef:99:80:19:7b:2e:2a:bb:b8: 42:83:5c:ee:7b:c8:74:07:ad:ac:63:fa:da:73:0c:d4:12:2e: c2:54:c2:4d:5a:a0:ad:b1:d2:c4:06:d9:1d:09:25:af:5b:ad: ab:a8:19:92:39:c9:4a:72:9f:ed:41:21:b9:b9:b8:86:fe:28: 3b:09:2b:78 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTk+VMjtouSntHCecHwq4mFgPD64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA2MTIwNjI0MDVaFw0yNjA2MTMwODExMDVaMDMxMTAvBgNV BAMTKDFFM0RDRTg1MUVBMzcxRkE1REZCRTI4REY0NjBBMjE4MEVDMjE5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGyM1k65icfmtwNjnxTP1h1sc 5jJkgK26UM6Ps51dBTkvUZHHDy2Ie+PZjxF2AAXp0UdzFcUkJDn5vJeT0n7ndNXn e2mr3oJy8YipgDc0er7D9pzQm8G1LTaRDoQF43SBcPE/QO3qwc0druDbMbMLalG9 xVQUrxNIRqKtP3JPquj7a4BlggTjVuUm6N5o6dkbjQoXzULzeqxMUjINfL9Db0xA Rhav5T9UvqTi8Qj7Q6J5HSbxG8Nt9V1/JdiBqoOFRoPxIu3ZdZ5+BjG56wNS6vx1 HbGBu/ZL2bW8IIrYnG8Kf5o6sb2V0giZCSmx+dNkRklvPTI6NMxQJzr0bh99AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHj3OhR6jcfpd++KN9GCiGA7CGXYwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJY2crj+zWOFocG6aoS3 FEDu87PHfae8YiWgWp5trZRaM9iJPX1IFIejsd2KuCTFhn6odR04/2J3wLgI6mNI jMKhxyu8JaZTUxWVFVkYpl7jgCho9R9TJKcaRlxdh523J3+znrzaudE570UZjUUX vbv/aIB31bhY4Ux29xXsqVczGWhr4UKWdWgVo7a51BY7A8MA3lk/6KnaAmQQksTo DcudKN78VZFLUQ33NFpyvOxkHe/XrwCWXxbkTk6W75mAGXsuKru4QoNc7nvIdAet rGP62nMM1BIuwlTCTVqgrbHSxAbZHQklr1utq6gZkjnJSnKf7UEhubm4hv4oOwkr eA== -----END CERTIFICATE-----Generated at Fri Jun 12 08:50:22 2026 by rpki-client