$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: 5oUmErdCcROefpOsqXr6tMcIaEKNT3HP7snmE8MJsrA= Subject key identifier: 67:F8:27:E7:7E:06:6F:55:7E:05:EC:37:07:8D:B3:E1:A9:9C:68:C8 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 7DACF659C6615EAE82B5ED059B9504F5ECC66C99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 57 Signing time: Fri 05 Jun 2026 18:28:18 +0000 Manifest this update: Fri 05 Jun 2026 18:23:18 +0000 Manifest next update: Sat 06 Jun 2026 21:19:18 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: 3HJaUEKJjhIENMoEjugtvvfT7Nhn55z8IWJgDOZ1xY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 21:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ac:f6:59:c6:61:5e:ae:82:b5:ed:05:9b:95:04:f5:ec:c6:6c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Jun 5 18:23:18 2026 GMT Not After : Jun 6 21:19:18 2026 GMT Subject: CN=67F827E77E066F557E05EC37078DB3E1A99C68C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:86:d5:ae:5d:55:7f:47:93:63:83:a9:3b: 45:67:3f:bd:bf:79:bc:54:57:12:ea:8c:ce:98:8f: 8d:ad:e3:9a:cf:2c:ad:bd:f6:24:d5:a5:98:a9:b1: 56:52:a4:b1:20:63:aa:a9:f5:e4:62:84:0d:80:d6: 47:26:da:3c:24:c9:9e:47:5a:cb:a8:ed:1c:25:fd: 68:64:f0:fc:fe:47:8d:ff:a7:87:e7:78:c9:d8:23: ff:a9:bc:9e:54:70:b9:8b:39:79:dd:4e:77:37:a7: 43:93:24:73:f8:dc:c5:af:3d:60:d4:81:51:e3:52: 2f:59:3c:aa:99:9b:fa:18:64:09:e4:7f:15:35:6a: ef:a0:ac:4a:df:df:c3:e3:20:ba:55:cc:c2:b5:e7: 09:a9:0c:ee:3f:24:fb:39:2f:a0:80:e3:39:ff:66: b1:85:93:b2:0a:a9:7a:51:93:9a:57:33:d9:ca:57: 3d:52:e4:28:48:f7:29:51:6d:fb:b8:45:dc:71:ad: 21:04:68:8e:73:da:60:c1:c2:db:14:9f:6d:54:82: c6:5d:6e:30:55:ac:24:b0:9e:17:d3:0d:69:95:0d: 9e:8b:db:a6:e4:a8:36:51:f2:ca:63:8d:ec:00:d0: 31:87:98:ff:52:bd:c3:42:60:8d:a0:78:f6:1d:48: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F8:27:E7:7E:06:6F:55:7E:05:EC:37:07:8D:B3:E1:A9:9C:68:C8 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:b1:d7:5c:11:4f:84:d3:a0:47:1d:3b:3e:58:c4:55:17: 68:0c:f1:60:03:af:b2:90:28:73:f3:b7:32:e3:cc:ac:53:fc: 2c:69:9e:69:e2:da:f9:f8:c0:c5:08:28:43:f2:48:b2:34:a1: a2:20:36:4c:c6:55:88:60:0f:6a:38:ed:8e:3e:d8:15:f5:a9: 82:c0:d0:f8:08:c2:6f:a7:a9:2a:19:15:32:26:94:4a:94:cd: 06:d6:b9:72:02:91:82:4f:1d:63:c1:6f:c1:a3:c9:1c:b6:bd: 50:92:dd:a9:ee:2c:d5:e1:04:94:4c:c2:cd:03:19:31:c4:f6: 3f:d9:85:e3:14:66:a1:32:1d:ca:cd:33:24:fe:9d:4d:31:81: 97:a9:23:2b:24:98:33:8f:12:e8:68:0b:77:4f:fd:9c:fc:21: 26:1a:07:4f:bf:23:03:e5:cf:39:f9:04:b7:99:f2:ed:e4:5b: 80:68:e1:08:ec:f8:78:02:f6:86:3d:e3:ea:f7:bd:cd:33:3b: 53:b8:b6:26:6d:c9:22:9c:ec:41:36:2a:26:e3:fb:df:cd:51: 51:d8:33:ca:2f:78:e7:a1:04:b7:f2:bb:a5:17:e5:67:b3:3f: 8c:b1:1f:a4:9a:43:19:b7:ad:1c:19:0a:ab:e9:e5:78:26:8c: 29:12:8b:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfaz2WcZhXq6Cte0Fm5UE9ezGbJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA2MDUxODIzMThaFw0yNjA2MDYyMTE5MThaMDMxMTAvBgNV BAMTKDY3RjgyN0U3N0UwNjZGNTU3RTA1RUMzNzA3OERCM0UxQTk5QzY4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8YbVrl1Vf0eTY4OpO0VnP72/ ebxUVxLqjM6Yj42t45rPLK299iTVpZipsVZSpLEgY6qp9eRihA2A1kcm2jwkyZ5H Wsuo7Rwl/Whk8Pz+R43/p4fneMnYI/+pvJ5UcLmLOXndTnc3p0OTJHP43MWvPWDU gVHjUi9ZPKqZm/oYZAnkfxU1au+grErf38PjILpVzMK15wmpDO4/JPs5L6CA4zn/ ZrGFk7IKqXpRk5pXM9nKVz1S5ChI9ylRbfu4RdxxrSEEaI5z2mDBwtsUn21UgsZd bjBVrCSwnhfTDWmVDZ6L26bkqDZR8spjjewA0DGHmP9SvcNCYI2gePYdSFSJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZ/gn534Gb1V+Bew3B42z4amcaMgwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvKbHX XBFPhNOgRx07PljEVRdoDPFgA6+ykChz87cy48ysU/wsaZ5p4tr5+MDFCChD8kiy NKGiIDZMxlWIYA9qOO2OPtgV9amCwND4CMJvp6kqGRUyJpRKlM0G1rlyApGCTx1j wW/Bo8kctr1Qkt2p7izV4QSUTMLNAxkxxPY/2YXjFGahMh3KzTMk/p1NMYGXqSMr JJgzjxLoaAt3T/2c/CEmGgdPvyMD5c85+QS3mfLt5FuAaOEI7Ph4AvaGPePq973N MztTuLYmbckinOxBNiom4/vfzVFR2DPKL3jnoQS38rulF+Vnsz+MsR+kmkMZt60c GQqr6eV4JowpEot2 -----END CERTIFICATE-----Generated at Sat Jun 6 06:59:06 2026 by rpki-client