$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: oJ1AiQUP7Mb+cmbhgCU3vfVY+ob/Qb5cXdQ/DH9WXJQ= Subject key identifier: A7:CF:14:E4:67:49:83:12:6A:28:EB:8C:37:3C:7A:32:15:FA:6D:52 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 3A57E6A8E155397C9DE521059DE7E5950DA8B0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 048E Signing time: Tue 30 Jun 2026 14:23:32 +0000 Manifest this update: Tue 30 Jun 2026 14:18:32 +0000 Manifest next update: Wed 01 Jul 2026 17:42:32 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=) 3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: 2S/y9rkIwtyDgI6xcMuxfrJ3u09oulYWaXUDLKSKdC4=) 4: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:57:e6:a8:e1:55:39:7c:9d:e5:21:05:9d:e7:e5:95:0d:a8:b0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Jun 30 14:18:32 2026 GMT Not After : Jul 1 17:42:32 2026 GMT Subject: CN=A7CF14E4674983126A28EB8C373C7A3215FA6D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:c9:3c:99:ae:d2:55:53:0d:7c:4b:7a:ed: df:4a:1d:b1:df:22:fd:91:f9:4c:76:0f:02:ff:90: c6:92:a4:60:7e:73:fd:3d:23:1a:c6:b5:81:f3:93: c1:98:0d:45:14:7d:cb:4d:89:da:07:fc:f0:39:d0: 05:bc:80:f1:c1:c1:a0:2b:81:16:21:d2:83:3a:31: 69:53:c8:c1:af:d1:f2:7c:98:b2:10:54:c5:0f:1c: 7a:6d:d7:8f:90:74:24:7a:3d:67:41:e5:85:16:e3: 0f:9a:a9:f8:33:61:89:3b:30:6b:0e:e1:4e:fa:7a: a4:12:b5:5a:c4:eb:ea:4f:d4:e9:d4:29:67:89:ba: fc:b1:93:0a:7b:60:f1:c0:3f:90:4d:f3:80:0a:d3: 5a:3b:ea:fd:72:38:07:a9:ad:f5:1e:9a:d1:88:b6: 4f:55:62:e6:99:b6:35:74:2a:9c:55:49:1a:41:99: fb:a0:82:a9:a2:90:34:ca:de:d2:d7:00:f8:bc:c1: d3:29:10:1d:df:a1:92:98:78:22:8e:92:92:db:86: 95:59:ea:87:1f:ce:c4:39:8e:c9:24:9b:fd:82:54: 27:4b:7f:5a:d5:c7:c2:31:2f:90:bd:7b:e8:a1:f0: f2:51:8b:c0:2a:67:dc:0c:e9:7b:2a:19:36:09:3b: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CF:14:E4:67:49:83:12:6A:28:EB:8C:37:3C:7A:32:15:FA:6D:52 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d8:2a:69:be:21:6d:d7:cf:dd:fd:09:56:d8:5b:73:65:1d: 59:98:3a:59:3d:34:61:7c:dc:ab:46:91:be:ec:75:da:f6:59: 62:33:0d:dc:dd:e4:79:60:13:b6:ca:54:55:ab:34:03:80:db: 7e:8b:0a:fa:39:59:a9:d2:e2:b0:93:c9:35:5b:c4:86:4e:ca: b2:ee:e0:53:69:64:0b:f0:e6:d1:a5:27:03:aa:73:09:89:d4: 9a:12:68:ca:24:cf:84:9f:cd:7c:2c:45:c4:12:22:8f:e8:84: 80:21:41:33:6c:57:23:c9:1e:3d:f7:e0:29:52:ea:9c:6a:19: c2:6b:ab:b1:c0:76:c3:6f:19:b9:6f:17:14:57:6d:67:31:f8: 5d:14:31:bf:45:41:2a:46:b1:1b:18:41:30:17:49:24:93:d4: 75:1e:e8:ec:49:ed:4e:7d:fa:f6:fa:35:f6:43:78:ea:16:d5: bb:aa:9f:ed:dc:49:cc:da:a2:65:a0:77:2a:5a:b6:18:75:73: 30:0e:dc:3d:d2:4d:2b:b6:1a:a7:f1:b9:13:96:a8:1d:08:f9: 0a:87:d5:c5:10:41:d6:f9:48:4e:a7:5f:7f:24:e6:ff:d9:37: c5:90:29:bd:28:34:75:91:60:a1:a9:78:3d:72:7a:8b:94:40: fd:19:19:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOlfmqOFVOXyd5SEFnefllQ2osMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNjA2MzAxNDE4MzJaFw0yNjA3MDExNzQyMzJaMDMxMTAvBgNV BAMTKEE3Q0YxNEU0Njc0OTgzMTI2QTI4RUI4QzM3M0M3QTMyMTVGQTZENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRsk8ma7SVVMNfEt67d9KHbHf Iv2R+Ux2DwL/kMaSpGB+c/09IxrGtYHzk8GYDUUUfctNidoH/PA50AW8gPHBwaAr gRYh0oM6MWlTyMGv0fJ8mLIQVMUPHHpt14+QdCR6PWdB5YUW4w+aqfgzYYk7MGsO 4U76eqQStVrE6+pP1OnUKWeJuvyxkwp7YPHAP5BN84AK01o76v1yOAeprfUemtGI tk9VYuaZtjV0KpxVSRpBmfuggqmikDTK3tLXAPi8wdMpEB3foZKYeCKOkpLbhpVZ 6ocfzsQ5jskkm/2CVCdLf1rVx8IxL5C9e+ih8PJRi8AqZ9wM6XsqGTYJO1vDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUp88U5GdJgxJqKOuMNzx6MhX6bVIwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNgqab4hbdfP3f0JVthb c2UdWZg6WT00YXzcq0aRvux12vZZYjMN3N3keWATtspUVas0A4DbfosK+jlZqdLi sJPJNVvEhk7Ksu7gU2lkC/Dm0aUnA6pzCYnUmhJoyiTPhJ/NfCxFxBIij+iEgCFB M2xXI8kePffgKVLqnGoZwmurscB2w28ZuW8XFFdtZzH4XRQxv0VBKkaxGxhBMBdJ JJPUdR7o7EntTn369vo19kN46hbVu6qf7dxJzNqiZaB3Klq2GHVzMA7cPdJNK7Ya p/G5E5aoHQj5CofVxRBB1vlITqdffyTm/9k3xZApvSg0dZFgoal4PXJ6i5RA/RkZ AQ== -----END CERTIFICATE-----Generated at Tue Jun 30 19:33:56 2026 by rpki-client