$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: nextHFwm9USk16bxQ12paxOXUIlxgB+4t41OwvyFhLo= Subject key identifier: 12:46:7E:48:51:1F:0B:FC:7B:1F:1E:F8:74:A6:5A:EC:41:ED:F1:2B Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 5FF5BFD63D3BC4417CFF9313301CC8E6791156E1 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 059C Signing time: Wed 13 May 2026 12:22:21 +0000 Manifest this update: Wed 13 May 2026 12:17:21 +0000 Manifest next update: Thu 14 May 2026 15:35:21 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 3aX110+VcoUiuo/X43erOlmctQ1tG6ubeXqPShTUGoI=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 03:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f5:bf:d6:3d:3b:c4:41:7c:ff:93:13:30:1c:c8:e6:79:11:56:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: May 13 12:17:21 2026 GMT Not After : May 14 15:35:21 2026 GMT Subject: CN=12467E48511F0BFC7B1F1EF874A65AEC41EDF12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:69:04:16:ac:ce:0f:41:fe:ae:54:41:bb:91: 6b:75:43:dc:50:03:e5:29:6e:55:14:4e:1b:e5:fe: fa:cb:d6:4a:43:ec:96:73:53:e9:8f:50:d5:c1:b4: dc:78:80:a7:ec:a5:11:7c:fc:94:be:1c:c5:35:fe: 85:e6:4c:27:e9:7b:d5:37:4f:8f:91:d3:05:d2:42: 20:6a:cd:3e:88:79:e2:c6:4f:af:62:2e:e3:96:66: a8:30:56:31:bc:f0:db:85:24:1a:e5:a7:6d:4d:73: 58:c1:5f:14:53:ed:f1:c8:9a:aa:1e:6a:1a:87:c9: 36:08:04:ac:2c:fb:cf:fa:da:a3:8a:f0:a3:c2:cc: 9c:8f:05:d4:c3:46:40:8f:b3:9d:7a:35:9f:47:72: 18:29:15:89:0c:11:a2:1e:eb:d1:c5:7d:cb:a3:48: 6a:39:6d:95:28:53:aa:48:5a:1c:86:58:ae:16:f9: c3:28:ac:ef:2f:d2:43:6c:9c:7d:4e:d2:6c:2e:30: 9a:11:1b:de:73:88:b8:2d:bf:07:e2:d4:84:d5:ff: de:bf:04:1e:b9:da:cf:69:0e:88:f7:fd:e6:90:61: 0c:39:ca:3a:52:1d:2d:aa:14:9c:ba:9e:4f:48:be: dd:e1:c6:f1:e7:17:91:db:1f:f5:f9:a0:66:9c:db: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:7E:48:51:1F:0B:FC:7B:1F:1E:F8:74:A6:5A:EC:41:ED:F1:2B X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:23:9f:c4:ec:5b:e7:15:dc:5d:53:98:ab:af:e3:84:70:5c: 06:26:0b:e2:ea:41:80:7d:5e:7d:77:8e:c5:0d:05:b3:b6:f8: f0:79:89:50:bc:de:e2:d7:00:92:70:a8:01:eb:ad:28:31:22: fd:e1:b2:93:ae:4b:dd:b2:67:67:68:26:13:11:68:5f:31:24: 7d:66:a4:a1:58:ff:39:d6:2e:c7:10:fc:ea:9e:c6:5f:fc:f4: 85:a6:35:b1:20:8b:1a:86:28:cc:67:ef:2b:5b:7c:24:9c:67: 92:52:f2:75:2b:61:67:c1:96:32:8e:7d:cf:98:ad:ec:78:a9: 10:68:df:1c:45:ed:27:14:5d:62:84:f4:68:69:78:fc:15:58: 16:29:63:23:61:28:e3:91:bd:95:b3:42:cc:a5:97:64:76:f9: 68:6e:05:fb:1e:96:8a:d6:d7:ff:09:4a:db:af:07:8d:54:67: a6:f6:86:cc:83:30:f6:d6:45:ee:76:87:b4:5f:3a:f4:9e:72: dc:80:d9:38:14:36:d0:6b:5b:57:e8:87:20:33:0b:81:a2:55: a6:51:35:19:13:0c:1d:a9:08:9c:d8:fb:74:e0:3d:e3:b7:92: 85:65:51:85:dd:31:3a:e2:1a:42:17:7d:f4:7f:00:da:6d:28: e6:47:bf:55 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUX/W/1j07xEF8/5MTMBzI5nkRVuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNjA1MTMxMjE3MjFaFw0yNjA1MTQxNTM1MjFaMDMxMTAvBgNV BAMTKDEyNDY3RTQ4NTExRjBCRkM3QjFGMUVGODc0QTY1QUVDNDFFREYxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFaQQWrM4PQf6uVEG7kWt1Q9xQ A+UpblUUThvl/vrL1kpD7JZzU+mPUNXBtNx4gKfspRF8/JS+HMU1/oXmTCfpe9U3 T4+R0wXSQiBqzT6IeeLGT69iLuOWZqgwVjG88NuFJBrlp21Nc1jBXxRT7fHImqoe ahqHyTYIBKws+8/62qOK8KPCzJyPBdTDRkCPs516NZ9HchgpFYkMEaIe69HFfcuj SGo5bZUoU6pIWhyGWK4W+cMorO8v0kNsnH1O0mwuMJoRG95ziLgtvwfi1ITV/96/ BB652s9pDoj3/eaQYQw5yjpSHS2qFJy6nk9Ivt3hxvHnF5HbH/X5oGac2wIzAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUEkZ+SFEfC/x7Hx74dKZa7EHt8SswHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECOfxOxb5xXcXVOYq6/jhHBcBiYL4upB gH1efXeOxQ0Fs7b48HmJULze4tcAknCoAeutKDEi/eGyk65L3bJnZ2gmExFoXzEk fWakoVj/OdYuxxD86p7GX/z0haY1sSCLGoYozGfvK1t8JJxnklLydSthZ8GWMo59 z5it7HipEGjfHEXtJxRdYoT0aGl4/BVYFiljI2Eo45G9lbNCzKWXZHb5aG4F+x6W itbX/wlK268HjVRnpvaGzIMw9tZF7naHtF869J5y3IDZOBQ20GtbV+iHIDMLgaJV plE1GRMMHakInNj7dOA947eShWVRhd0xOuIaQhd99H8A2m0o5ke/VQ== -----END CERTIFICATE-----Generated at Wed May 13 23:57:48 2026 by rpki-client