$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: LRy6WHZzEOkTz5OXMdVk14t9SgA6NVoW/1yyLxxkXDc= Subject key identifier: 31:FE:86:32:6B:2B:8C:F2:49:17:B1:F9:5B:F2:31:13:07:93:39:60 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 1BD171819286F70495C6E34A8908011F9CFDACDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 057A Signing time: Fri 15 May 2026 03:39:38 +0000 Manifest this update: Fri 15 May 2026 03:34:38 +0000 Manifest next update: Sat 16 May 2026 06:59:38 +0000 Files and hashes: 1: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 2: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 3: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 4: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 5: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 6: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 7: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 8: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 9: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: cWe4n3FebB7gyLRDIlwvfr7I2DvPSs7VRaG4DJnxH3g=) 10: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 11: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 12: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 13: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 14: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 15: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d1:71:81:92:86:f7:04:95:c6:e3:4a:89:08:01:1f:9c:fd:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: May 15 03:34:38 2026 GMT Not After : May 16 06:59:38 2026 GMT Subject: CN=31FE86326B2B8CF24917B1F95BF2311307933960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:be:bb:d9:14:ae:8f:89:51:c8:c7:6f:d8: c8:b4:12:77:e5:8b:8a:77:72:0c:d6:bd:24:56:71: 3c:71:4a:2f:5f:04:cd:34:ac:67:ef:ce:30:d6:db: 3d:fa:b3:f1:3d:a4:65:32:aa:dc:ca:2b:8d:c8:11: 3c:c9:1f:47:e8:58:85:f0:72:76:eb:e4:c9:89:ea: 43:92:83:ba:e8:db:28:ac:e9:0e:05:b3:dd:50:89: 07:a8:fe:c2:1d:47:4c:08:37:7c:07:f9:ae:31:99: f5:15:8c:45:4a:5c:6d:e3:94:b4:c2:0d:d1:0f:f8: 30:9a:c2:30:0a:01:da:3a:bd:df:d6:03:5b:4f:b0: fb:d1:ea:d8:50:3a:83:2b:a3:b0:d8:ec:54:9b:d5: ad:bb:d1:44:6f:d0:7d:0a:9c:62:ab:20:ed:da:78: f3:46:df:bf:59:a2:d0:14:5b:68:be:02:23:29:10: 56:4c:49:32:f7:12:ae:38:79:fe:e5:70:43:5a:07: a5:3b:db:f8:99:6d:27:73:9c:f5:87:f5:7b:e3:54: d1:32:08:78:23:73:cf:da:b5:66:1a:c7:3b:64:64: 20:b9:e9:1a:41:f6:76:15:7b:3e:cf:79:2b:14:15: 04:b6:f2:53:a5:be:d7:6d:67:5a:71:f9:26:8a:53: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FE:86:32:6B:2B:8C:F2:49:17:B1:F9:5B:F2:31:13:07:93:39:60 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0c:d8:87:02:70:80:17:a1:35:cb:74:25:24:d4:3d:bf:cc: 16:47:4b:fb:ce:bc:ce:30:07:39:78:31:e5:65:14:a3:1d:d2: 87:79:95:bb:35:d5:e5:45:fe:68:c5:ec:2e:65:87:61:70:ee: 50:8a:19:67:5d:d5:95:37:4b:41:2a:0c:58:1c:26:ae:5b:c1: 30:81:30:95:58:00:0d:a6:2d:8e:a9:c8:ca:84:8d:d5:83:a5: a2:c6:71:1d:85:f8:d5:25:70:03:ca:42:d9:eb:55:ef:64:81: e1:ac:22:76:d1:be:55:79:f3:61:20:89:78:6b:89:b8:45:e6: 8e:a9:a5:df:b1:9f:69:44:f1:6b:ca:ad:ca:20:8f:d2:1b:b8: 19:2e:1e:aa:a0:b9:e5:02:44:b2:d8:20:75:19:7f:0f:e8:44: 3e:1d:23:79:c3:ec:5c:5d:46:ae:c8:d3:71:12:b8:5b:4b:62: f0:bb:8e:42:69:59:58:da:f0:66:5a:be:88:bf:f8:ad:21:80: 38:f1:e2:f3:42:9a:ba:06:bb:01:c5:aa:21:58:45:0e:b6:1e: 10:21:14:6e:38:f8:9d:6c:20:39:48:67:9c:10:98:de:df:6f: 23:b0:24:54:3a:ae:41:f3:8d:55:e2:c9:a6:ec:7f:e6:37:8a: 23:82:cc:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG9FxgZKG9wSVxuNKiQgBH5z9rNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA1MTUwMzM0MzhaFw0yNjA1MTYwNjU5MzhaMDMxMTAvBgNV BAMTKDMxRkU4NjMyNkIyQjhDRjI0OTE3QjFGOTVCRjIzMTEzMDc5MzM5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTr672RSuj4lRyMdv2Mi0Enfl i4p3cgzWvSRWcTxxSi9fBM00rGfvzjDW2z36s/E9pGUyqtzKK43IETzJH0foWIXw cnbr5MmJ6kOSg7ro2yis6Q4Fs91QiQeo/sIdR0wIN3wH+a4xmfUVjEVKXG3jlLTC DdEP+DCawjAKAdo6vd/WA1tPsPvR6thQOoMro7DY7FSb1a270URv0H0KnGKrIO3a ePNG379ZotAUW2i+AiMpEFZMSTL3Eq44ef7lcENaB6U72/iZbSdznPWH9XvjVNEy CHgjc8/atWYaxztkZCC56RpB9nYVez7PeSsUFQS28lOlvtdtZ1px+SaKUyFvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMf6GMmsrjPJJF7H5W/IxEweTOWAwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQzYhwJwgBehNct0JSTU Pb/MFkdL+868zjAHOXgx5WUUox3Sh3mVuzXV5UX+aMXsLmWHYXDuUIoZZ13VlTdL QSoMWBwmrlvBMIEwlVgADaYtjqnIyoSN1YOlosZxHYX41SVwA8pC2etV72SB4awi dtG+VXnzYSCJeGuJuEXmjqml37GfaUTxa8qtyiCP0hu4GS4eqqC55QJEstggdRl/ D+hEPh0jecPsXF1GrsjTcRK4W0ti8LuOQmlZWNrwZlq+iL/4rSGAOPHi80Kauga7 AcWqIVhFDrYeECEUbjj4nWwgOUhnnBCY3t9vI7AkVDquQfONVeLJpux/5jeKI4LM LQ== -----END CERTIFICATE-----Generated at Fri May 15 06:20:06 2026 by rpki-client