$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: oip5L0odXXLLRzB9/SdwHRZhBRDPjK3tlS+1nQWfu2c= Subject key identifier: BA:95:1A:BB:9F:61:F3:B3:BE:F4:93:96:4C:67:97:B6:7D:78:BF:32 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 69E6A7C086420C4D9B12292507DFA18BC7B0FDEC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 042F Signing time: Fri 05 Jun 2026 08:46:59 +0000 Manifest this update: Fri 05 Jun 2026 08:41:59 +0000 Manifest next update: Sat 06 Jun 2026 12:13:59 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: OmTs17y2dKeBmi3UQJ74TFxLzPH58D6VDk7QbtxcH88=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e6:a7:c0:86:42:0c:4d:9b:12:29:25:07:df:a1:8b:c7:b0:fd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jun 5 08:41:59 2026 GMT Not After : Jun 6 12:13:59 2026 GMT Subject: CN=BA951ABB9F61F3B3BEF493964C6797B67D78BF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:2b:18:60:94:e1:26:0d:df:4d:a6:9a:ef: 01:78:66:50:8d:bf:cc:c2:a2:8d:98:ce:4d:26:3a: 2b:b4:9d:e1:dd:92:37:ec:c7:26:6b:37:5d:df:76: eb:9b:3e:37:1b:1e:6d:46:3d:c1:f6:c7:69:fe:c6: 17:6a:b3:d9:e0:1b:d7:db:8c:75:ae:6f:c9:56:31: 9f:61:24:03:b1:26:fe:08:07:99:6c:fa:35:be:4d: 6c:04:9c:a3:89:02:25:b0:0b:62:01:ae:61:df:a5: ba:c3:30:51:2f:71:fa:ae:f6:d5:c1:91:2a:5b:32: f8:69:12:ff:b8:b3:82:3c:5e:4d:d0:ad:8a:73:53: ce:66:aa:7c:66:0f:69:e3:77:fb:70:b9:db:f4:f0: e0:61:c6:6e:19:46:ca:f4:8f:68:d7:75:b7:49:b3: b2:f2:b0:e3:1e:d9:6d:d5:30:3b:11:6d:86:43:2a: a2:2b:5e:cb:23:d0:65:be:f5:a9:1b:7b:b2:16:a8: 99:ea:81:4c:65:ba:b7:96:0e:6c:8b:8f:b5:cb:40: cb:2e:31:df:27:4d:e5:6a:91:eb:6d:04:7d:8e:5f: 2b:fb:21:9f:2f:20:fd:45:f0:1e:49:79:8a:4e:eb: 03:3a:1b:59:b8:65:2b:91:fb:2e:94:23:d9:ca:d4: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:95:1A:BB:9F:61:F3:B3:BE:F4:93:96:4C:67:97:B6:7D:78:BF:32 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7a:32:1a:b5:0a:f3:fa:88:02:29:c1:c2:af:1a:48:c0:55: 09:91:15:cf:64:8f:2e:37:49:83:aa:21:e2:6d:ff:5e:34:71: 78:ea:2d:2b:38:e4:68:0d:12:46:1f:9d:c0:5e:23:e1:66:69: 20:3f:8f:7d:ef:82:6b:19:ad:cc:2f:ee:3a:d6:df:35:47:bb: bb:a2:08:17:5f:ff:a8:9f:c5:e7:17:1e:fe:8e:5a:58:f6:cd: 65:02:4e:77:0d:7a:fb:be:1a:78:93:31:cc:8f:5d:2c:9c:cb: 6c:36:14:64:1c:c8:ae:05:c6:ea:6a:0f:f8:88:ff:2c:d3:c8: 05:d6:74:17:34:44:12:79:07:17:b8:2a:e3:0c:47:07:1f:b6: 0a:10:72:d0:58:95:73:75:6f:c2:10:b6:6b:cc:d8:50:74:52: a4:40:27:5f:01:55:68:81:49:17:5d:5f:2e:f9:27:72:99:80: 28:bf:15:15:f6:7e:f7:cf:3b:c0:7f:95:29:ea:cd:ae:b3:36: ec:5e:7c:67:3b:87:28:cd:09:80:68:9c:f2:89:dc:af:4f:28: c9:7c:69:e9:bd:b1:36:7c:29:25:e3:3c:a6:68:27:5f:b0:0a: 8c:88:98:79:5c:de:ee:ce:a8:26:e6:29:29:26:47:e9:1b:ae: 37:35:7f:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaeanwIZCDE2bEiklB9+hi8ew/ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA2MDUwODQxNTlaFw0yNjA2MDYxMjEzNTlaMDMxMTAvBgNV BAMTKEJBOTUxQUJCOUY2MUYzQjNCRUY0OTM5NjRDNjc5N0I2N0Q3OEJGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ESsYYJThJg3fTaaa7wF4ZlCN v8zCoo2Yzk0mOiu0neHdkjfsxyZrN13fduubPjcbHm1GPcH2x2n+xhdqs9ngG9fb jHWub8lWMZ9hJAOxJv4IB5ls+jW+TWwEnKOJAiWwC2IBrmHfpbrDMFEvcfqu9tXB kSpbMvhpEv+4s4I8Xk3QrYpzU85mqnxmD2njd/twudv08OBhxm4ZRsr0j2jXdbdJ s7LysOMe2W3VMDsRbYZDKqIrXssj0GW+9akbe7IWqJnqgUxlureWDmyLj7XLQMsu Md8nTeVqkettBH2OXyv7IZ8vIP1F8B5JeYpO6wM6G1m4ZSuR+y6UI9nK1McjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUupUau59h87O+9JOWTGeXtn14vzIwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSejIa tQrz+ogCKcHCrxpIwFUJkRXPZI8uN0mDqiHibf9eNHF46i0rOORoDRJGH53AXiPh ZmkgP49974JrGa3ML+461t81R7u7oggXX/+on8XnFx7+jlpY9s1lAk53DXr7vhp4 kzHMj10snMtsNhRkHMiuBcbqag/4iP8s08gF1nQXNEQSeQcXuCrjDEcHH7YKEHLQ WJVzdW/CELZrzNhQdFKkQCdfAVVogUkXXV8u+SdymYAovxUV9n73zzvAf5Up6s2u szbsXnxnO4cozQmAaJzyidyvTyjJfGnpvbE2fCkl4zymaCdfsAqMiJh5XN7uzqgm 5ikpJkfpG643NX/L -----END CERTIFICATE-----Generated at Sat Jun 6 04:02:51 2026 by rpki-client