$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: q6V7syio5mUje+onKfjRinmZmXY08UrJPdA1rhjzpVI= Subject key identifier: 93:96:C2:10:4A:BC:E9:FF:99:79:D8:07:FD:3F:71:E0:F3:4D:7F:6F Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 13810DB4E2EF3AC63CF75C3024E820DA54AA3576 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 0181 Signing time: Mon 13 Apr 2026 05:29:18 +0000 Manifest this update: Mon 13 Apr 2026 05:24:18 +0000 Manifest next update: Tue 14 Apr 2026 08:29:18 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: IBcBnfOFNxZnrjOdGXuGpabXHkmimvTY4AGRLUdup4I=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 03:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:81:0d:b4:e2:ef:3a:c6:3c:f7:5c:30:24:e8:20:da:54:aa:35:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Apr 13 05:24:18 2026 GMT Not After : Apr 14 08:29:18 2026 GMT Subject: CN=9396C2104ABCE9FF9979D807FD3F71E0F34D7F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:2a:70:84:73:e6:e7:9c:fb:e0:17:23:71: 8c:42:1a:15:a1:66:d8:98:5e:7a:54:b3:36:c3:de: 41:e5:8b:55:1e:57:a8:26:e4:c8:66:c5:b8:f1:63: 08:ef:43:52:83:3a:eb:23:dd:a5:df:0c:17:45:b7: 8e:84:18:28:5a:fd:6a:3f:68:82:a4:e4:32:fd:e7: 43:fe:6b:b7:4d:1c:53:f5:73:b6:10:8f:c9:1d:9d: a0:bc:14:19:97:2a:17:e7:e7:d8:c2:56:00:07:d9: fe:87:fa:5e:9f:17:68:a1:24:45:e7:be:e5:33:95: bb:71:47:91:ef:20:93:db:95:aa:6b:d0:60:f8:ff: b5:2e:5d:3c:94:e2:02:2c:1f:31:25:3e:71:e2:16: 7f:58:12:8f:15:67:d2:0f:75:29:21:21:f9:2a:70: 97:c5:03:f0:7c:02:c7:c6:a7:95:59:ea:cf:2b:18: a8:16:b3:be:64:8c:b6:34:d9:5b:a5:3e:ce:92:bf: c2:67:c2:4b:cd:a8:16:3c:63:a0:6b:1c:d4:8d:c3: cf:cd:82:a5:35:fd:2c:84:52:b7:18:21:71:fc:51: b8:46:ae:5c:a3:49:bc:b2:fa:34:5d:bf:02:79:b2: 1e:ba:5a:b8:40:1e:b0:97:b3:aa:81:3d:05:fa:e9: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:96:C2:10:4A:BC:E9:FF:99:79:D8:07:FD:3F:71:E0:F3:4D:7F:6F X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:04:0e:11:d0:14:21:a0:f9:9f:90:c8:28:13:29:9a:74:91: 83:db:ac:69:40:2b:c3:eb:f5:e7:b7:a1:66:b1:6f:74:16:fa: 5e:f9:1f:c2:a8:01:12:7d:69:47:7f:08:6c:bc:1e:91:3a:15: f0:6b:b7:74:cf:99:25:34:a8:56:60:b6:8c:39:05:25:cd:73: 3c:e0:b0:4c:14:7c:f4:ef:4d:c2:3b:36:c4:93:1c:33:c6:d2: 7e:5d:1a:4e:c6:89:98:d0:8c:e9:69:a4:e8:f4:7d:fa:be:f7: 2f:00:c5:a0:fd:89:fd:da:14:65:b9:dc:00:cb:6d:93:f8:94: 54:20:ce:71:9a:5b:bb:8d:0d:b7:48:2a:55:47:f3:47:22:e5: 3d:f3:c4:59:78:54:81:83:bb:22:c6:ea:46:b6:3c:c1:10:24: 8d:34:94:0a:07:d5:ec:3a:df:08:13:e1:34:a2:f2:9a:e5:4b: 7a:a0:c2:1d:d7:8c:fc:58:6b:57:4e:da:0e:ca:9f:09:51:0a: dc:5a:91:3e:c7:65:26:47:35:c2:8b:83:1e:cc:94:18:5a:99: 77:64:28:60:21:57:d1:74:24:a2:a1:68:56:30:62:99:0f:f8: e3:5c:09:8d:85:42:36:69:12:14:5a:a5:e8:62:6d:26:d9:54: 99:7f:4b:54 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUE4ENtOLvOsY891wwJOgg2lSqNXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjA0MTMwNTI0MThaFw0yNjA0MTQwODI5MThaMDMxMTAvBgNV BAMTKDkzOTZDMjEwNEFCQ0U5RkY5OTc5RDgwN0ZEM0Y3MUUwRjM0RDdGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyCpwhHPm55z74BcjcYxCGhWh ZtiYXnpUszbD3kHli1UeV6gm5MhmxbjxYwjvQ1KDOusj3aXfDBdFt46EGCha/Wo/ aIKk5DL950P+a7dNHFP1c7YQj8kdnaC8FBmXKhfn59jCVgAH2f6H+l6fF2ihJEXn vuUzlbtxR5HvIJPblapr0GD4/7UuXTyU4gIsHzElPnHiFn9YEo8VZ9IPdSkhIfkq cJfFA/B8AsfGp5VZ6s8rGKgWs75kjLY02VulPs6Sv8JnwkvNqBY8Y6BrHNSNw8/N gqU1/SyEUrcYIXH8UbhGrlyjSbyy+jRdvwJ5sh66WrhAHrCXs6qBPQX66QE9AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUk5bCEEq86f+ZedgH/T9x4PNNf28wHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA IgQOEdAUIaD5n5DIKBMpmnSRg9usaUArw+v157ehZrFvdBb6XvkfwqgBEn1pR38I bLwekToV8Gu3dM+ZJTSoVmC2jDkFJc1zPOCwTBR89O9Nwjs2xJMcM8bSfl0aTsaJ mNCM6Wmk6PR9+r73LwDFoP2J/doUZbncAMttk/iUVCDOcZpbu40Nt0gqVUfzRyLl PfPEWXhUgYO7IsbqRrY8wRAkjTSUCgfV7DrfCBPhNKLymuVLeqDCHdeM/FhrV07a DsqfCVEK3FqRPsdlJkc1wouDHsyUGFqZd2QoYCFX0XQkoqFoVjBimQ/441wJjYVC NmkSFFql6GJtJtlUmX9LVA== -----END CERTIFICATE-----Generated at Mon Apr 13 16:56:52 2026 by rpki-client