$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: UsZ4Hh/J5aB8sZdwEW7EVP3HFHuZC5GBahXKl9aE0go= Subject key identifier: 37:C0:0F:2B:17:9F:BC:E6:F1:9C:1D:5C:54:ED:30:3C:8A:79:1B:BF Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 6C5C4307722E32AA95398588DFB9FAB8F4EFFFFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 1E Signing time: Fri 15 May 2026 00:43:07 +0000 Manifest this update: Fri 15 May 2026 00:38:07 +0000 Manifest next update: Sat 16 May 2026 02:30:07 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: SEA9Y3JKDFSLNvbvvtWvDA7D5C9b1wuZudsAieNAZ60=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5c:43:07:72:2e:32:aa:95:39:85:88:df:b9:fa:b8:f4:ef:ff:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: May 15 00:38:07 2026 GMT Not After : May 16 02:30:07 2026 GMT Subject: CN=37C00F2B179FBCE6F19C1D5C54ED303C8A791BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:8a:ec:f0:26:ac:9e:7f:77:76:3d:0e:dc: 99:19:a1:08:0f:fa:fa:df:e1:7a:c4:5b:ef:4d:c5: d2:87:ae:db:6d:66:a6:82:0f:99:7f:33:8a:ad:93: 42:60:be:b0:27:87:55:b8:1a:93:2c:9d:5f:ef:56: 5f:bc:cf:82:49:5b:b3:db:9e:b7:ba:32:1d:2d:7a: cd:8f:62:b3:02:b0:74:96:97:4a:2e:63:a0:f4:93: 66:a2:c8:2d:0c:b3:fd:cb:3c:e4:fd:1b:2b:6c:61: d4:15:ed:7b:62:7e:14:96:1e:d5:1b:a8:20:60:fe: 6e:38:d5:aa:57:1f:19:6f:e4:89:50:ec:f7:5b:c2: 24:b8:05:ef:14:93:56:e2:95:7f:e9:e1:c6:03:31: cd:4c:d6:3f:a3:db:c9:ca:07:72:58:16:66:bd:a6: 13:57:9c:2e:34:79:b8:3d:70:12:8a:35:f2:af:b9: cd:7a:4d:26:7e:c4:23:7a:62:29:a2:fa:d5:67:69: c7:bb:0a:4a:4f:34:2c:19:4f:f9:59:2a:09:53:d3: c7:b0:bb:d8:26:c1:10:e5:aa:a5:48:39:3f:53:d0: 4b:70:bd:fd:20:f9:a2:92:63:53:61:98:65:b6:b5: 58:46:9a:76:c2:b7:e9:64:d8:30:1e:4b:c3:bf:ed: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C0:0F:2B:17:9F:BC:E6:F1:9C:1D:5C:54:ED:30:3C:8A:79:1B:BF X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:97:b0:a7:db:21:8f:b8:d0:a6:90:8a:96:e7:35:eb:2d:37: 2f:89:98:7a:e1:8d:36:e5:9d:43:b0:42:f2:15:d1:41:11:9a: 70:fa:db:89:a4:8d:78:d9:cb:02:da:23:2d:5b:c1:a5:b0:2f: c4:0a:c1:64:6c:bb:c5:76:5a:b4:6f:53:31:3a:ec:0d:6c:e1: 68:1e:c1:44:3c:8a:29:71:e4:13:8d:54:90:4b:f4:40:24:a4: 37:28:75:59:25:bd:31:29:86:2b:f8:4e:c7:de:7b:be:51:c1: 0b:e4:0a:52:48:90:29:f4:95:5f:a5:0f:ac:a9:68:10:65:5a: 0a:df:38:15:97:eb:7a:53:6e:a2:06:a3:e7:fa:8e:a2:16:8a: 89:4c:22:35:9f:89:a1:89:18:88:7b:6e:5b:13:3d:55:2d:1c: 9f:9b:9f:9f:83:91:60:dc:c6:06:87:6a:54:16:f4:47:73:cd: d8:57:a1:c3:0e:e6:37:bd:f9:7a:c8:19:43:16:fd:42:19:d6: 23:fc:db:6e:ea:b3:44:4d:6b:dc:bd:73:c0:1a:7b:06:d6:d2: a7:45:28:2f:06:4b:cb:1b:36:65:db:fc:5b:db:aa:de:c9:8a: 5f:de:d6:56:6e:be:a4:00:cd:5b:a4:12:bc:6e:e4:c4:a0:e0: fa:3a:e6:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbFxDB3IuMqqVOYWI37n6uPTv//0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA1MTUwMDM4MDdaFw0yNjA1MTYwMjMwMDdaMDMxMTAvBgNV BAMTKDM3QzAwRjJCMTc5RkJDRTZGMTlDMUQ1QzU0RUQzMDNDOEE3OTFCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCors8Casnn93dj0O3JkZoQgP +vrf4XrEW+9NxdKHrtttZqaCD5l/M4qtk0JgvrAnh1W4GpMsnV/vVl+8z4JJW7Pb nre6Mh0tes2PYrMCsHSWl0ouY6D0k2aiyC0Ms/3LPOT9GytsYdQV7XtifhSWHtUb qCBg/m441apXHxlv5IlQ7PdbwiS4Be8Uk1bilX/p4cYDMc1M1j+j28nKB3JYFma9 phNXnC40ebg9cBKKNfKvuc16TSZ+xCN6Yimi+tVnace7CkpPNCwZT/lZKglT08ew u9gmwRDlqqVIOT9T0Etwvf0g+aKSY1NhmGW2tVhGmnbCt+lk2DAeS8O/7V1pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUN8APKxefvObxnB1cVO0wPIp5G78wHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2l7Cn 2yGPuNCmkIqW5zXrLTcviZh64Y025Z1DsELyFdFBEZpw+tuJpI142csC2iMtW8Gl sC/ECsFkbLvFdlq0b1MxOuwNbOFoHsFEPIopceQTjVSQS/RAJKQ3KHVZJb0xKYYr +E7H3nu+UcEL5ApSSJAp9JVfpQ+sqWgQZVoK3zgVl+t6U26iBqPn+o6iFoqJTCI1 n4mhiRiIe25bEz1VLRyfm5+fg5Fg3MYGh2pUFvRHc83YV6HDDuY3vfl6yBlDFv1C GdYj/Ntu6rNETWvcvXPAGnsG1tKnRSgvBkvLGzZl2/xb26reyYpf3tZWbr6kAM1b pBK8buTEoOD6Ouam -----END CERTIFICATE-----Generated at Fri May 15 08:17:46 2026 by rpki-client