$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: zcZrxtFEiCqOujLMgTrn0vzvz4hF24QrEi+Rm/q9vTk= Subject key identifier: 28:BE:89:40:22:31:AC:12:A2:D6:93:CF:CA:D5:34:F0:2C:20:87:51 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 3CFD1102BE0C21E72C8289DA4A7732B128F0D4EE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 5A Signing time: Mon 29 Jun 2026 01:10:00 +0000 Manifest this update: Mon 29 Jun 2026 01:05:00 +0000 Manifest next update: Tue 30 Jun 2026 02:01:00 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: 8Edts/uY/KYs+/zadFlA6SB11LBPcikg4psn9c7cJuQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:11:02:be:0c:21:e7:2c:82:89:da:4a:77:32:b1:28:f0:d4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Jun 29 01:05:00 2026 GMT Not After : Jun 30 02:01:00 2026 GMT Subject: CN=28BE89402231AC12A2D693CFCAD534F02C208751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:88:ee:4f:60:ec:b0:e4:68:2a:e3:55:d2:d8: 78:6a:79:6d:3e:67:c3:85:7c:79:8c:c1:22:83:62: e5:a0:63:0a:44:51:b1:62:0c:d9:73:b0:6b:a3:34: 99:de:61:9f:0b:77:51:bd:fb:1f:1a:11:bd:42:a9: 2a:89:eb:f9:6a:45:02:19:c3:84:07:98:7c:00:3d: fe:15:cb:84:88:3d:8e:05:0b:4c:11:c5:94:b2:6d: b5:ec:96:d1:3e:1d:50:c4:ce:0d:af:25:fa:24:20: c6:13:39:12:ed:4d:df:35:68:a6:50:89:86:36:de: 4e:d4:44:7a:71:83:eb:b8:ae:89:b2:af:6c:42:9f: b9:8a:6d:62:c5:9f:e7:4f:93:48:7c:ea:68:19:f8: 45:8f:a2:11:27:97:b0:8b:fe:ce:8d:e0:3b:80:88: ae:5e:83:5b:90:cb:c7:17:97:e0:78:ef:da:d2:78: ab:87:83:4d:4d:a9:97:9f:95:f7:ac:47:59:6a:ce: e9:18:da:98:81:df:2f:25:ed:96:44:3f:7f:d9:78: e4:c2:e5:0c:70:95:19:24:ca:45:a0:de:26:7a:fb: f0:45:b1:c3:aa:f0:31:8f:9d:6f:81:67:bb:f4:56: e8:81:b8:d3:a7:20:6e:1d:b9:4e:67:b4:4e:6b:0f: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BE:89:40:22:31:AC:12:A2:D6:93:CF:CA:D5:34:F0:2C:20:87:51 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:3a:1e:dc:0d:6d:06:ca:1e:d3:07:ef:55:3d:77:45:d5:a8: 70:06:be:a0:fc:dd:47:59:f1:c5:86:24:2d:61:4d:c0:af:16: 1d:73:ea:a2:6c:8e:d8:0e:f8:01:0a:10:d4:a8:97:10:55:6c: cc:fb:e4:b5:b2:f5:37:f5:db:74:b4:52:2e:f9:53:77:75:94: 76:01:d3:09:7e:07:5f:94:23:21:24:66:f5:2a:47:c6:e1:41: bd:fd:dd:a0:9a:75:03:dc:56:4f:fe:00:65:9c:53:7c:f2:33: 07:07:4a:73:50:ea:b9:29:eb:71:72:45:0f:ce:a8:e5:77:75: 62:c3:0f:de:fa:52:e2:91:d5:94:08:b5:fa:8a:92:9f:34:9d: 97:73:7d:6a:dd:e1:49:83:89:c6:d9:73:43:e0:ad:b5:d8:1f: 60:85:c4:b5:c5:e9:ac:02:b5:a5:56:15:c1:33:23:16:33:0a: 0d:f8:59:66:9f:a5:eb:fe:21:dc:52:0a:06:a1:58:1f:4c:8f: 62:78:ef:21:bd:f3:6d:1c:0e:b6:b7:30:fe:0a:ef:99:8a:a8: ab:26:72:41:bc:03:0f:b8:5a:74:34:e1:1d:62:bb:5a:f0:2e: e5:36:a7:28:be:0f:ab:21:92:c7:49:5a:8e:22:aa:a7:60:a1: e5:2d:b2:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPP0RAr4MIecsgonaSncysSjw1O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA2MjkwMTA1MDBaFw0yNjA2MzAwMjAxMDBaMDMxMTAvBgNV BAMTKDI4QkU4OTQwMjIzMUFDMTJBMkQ2OTNDRkNBRDUzNEYwMkMyMDg3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoiO5PYOyw5Ggq41XS2HhqeW0+ Z8OFfHmMwSKDYuWgYwpEUbFiDNlzsGujNJneYZ8Ld1G9+x8aEb1CqSqJ6/lqRQIZ w4QHmHwAPf4Vy4SIPY4FC0wRxZSybbXsltE+HVDEzg2vJfokIMYTORLtTd81aKZQ iYY23k7URHpxg+u4romyr2xCn7mKbWLFn+dPk0h86mgZ+EWPohEnl7CL/s6N4DuA iK5eg1uQy8cXl+B479rSeKuHg01NqZeflfesR1lqzukY2piB3y8l7ZZEP3/ZeOTC 5QxwlRkkykWg3iZ6+/BFscOq8DGPnW+BZ7v0VuiBuNOnIG4duU5ntE5rD9BJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKL6JQCIxrBKi1pPPytU08Cwgh1EwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLOh7c DW0Gyh7TB+9VPXdF1ahwBr6g/N1HWfHFhiQtYU3ArxYdc+qibI7YDvgBChDUqJcQ VWzM++S1svU39dt0tFIu+VN3dZR2AdMJfgdflCMhJGb1KkfG4UG9/d2gmnUD3FZP /gBlnFN88jMHB0pzUOq5KetxckUPzqjld3Viww/e+lLikdWUCLX6ipKfNJ2Xc31q 3eFJg4nG2XND4K212B9ghcS1xemsArWlVhXBMyMWMwoN+Flmn6Xr/iHcUgoGoVgf TI9ieO8hvfNtHA62tzD+Cu+ZiqirJnJBvAMPuFp0NOEdYrta8C7lNqcovg+rIZLH SVqOIqqnYKHlLbJL -----END CERTIFICATE-----Generated at Mon Jun 29 13:44:55 2026 by rpki-client