$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: //t+luEp71O+l5ZkZ82fXEuOssGc4r7iZCWAjX8pz1s= Subject key identifier: 4A:C7:39:DD:FB:61:1D:1C:56:EB:FF:AA:70:B2:BB:77:05:A8:FB:89 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 7D4647730156BBABB032C3CF62EF908CF4280645 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 90 Signing time: Tue 12 May 2026 15:54:50 +0000 Manifest this update: Tue 12 May 2026 15:49:50 +0000 Manifest next update: Wed 13 May 2026 19:13:50 +0000 Files and hashes: 1: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 2: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 3: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 4: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 5: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: f9wcGtTDSxey2tZuFW1K7XiOrrYwDBuPHFlAt53Cv6s=) 7: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 8: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 9: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:46:47:73:01:56:bb:ab:b0:32:c3:cf:62:ef:90:8c:f4:28:06:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: May 12 15:49:50 2026 GMT Not After : May 13 19:13:50 2026 GMT Subject: CN=4AC739DDFB611D1C56EBFFAA70B2BB7705A8FB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:13:59:c1:24:bf:df:42:cf:9c:0e:2d:ad: 4b:a3:6d:5a:ea:ad:00:fd:71:cc:84:8f:d9:59:a7: 44:0e:67:3a:7b:f0:18:e7:bc:01:8b:c5:5a:11:86: 02:da:02:1b:03:f0:a1:4a:66:24:47:a8:e4:13:9c: f8:e2:b8:89:7b:46:4a:09:6c:8a:8f:a0:1a:0d:9f: 06:8a:5f:29:df:ce:a3:24:c6:e2:b5:af:d0:8c:9a: 5b:dc:87:5b:ae:56:be:41:65:f5:4a:98:3b:3f:d8: c8:2c:e8:83:57:23:96:18:d9:1a:3b:40:fc:d5:96: 52:0c:4c:47:68:b9:f3:db:01:df:41:6e:6f:2f:89: f0:55:81:df:d7:4f:f6:a6:d3:ac:5d:13:5c:5e:98: 6c:c9:f4:63:43:12:d4:54:18:b9:7c:fd:b2:1c:d9: 4e:e3:91:47:33:dd:93:97:94:8d:1e:60:35:2e:55: c9:0c:32:f9:f0:47:7d:6c:56:54:1e:04:ef:43:4a: 07:ac:4c:0d:40:99:bd:28:d8:86:02:e2:4d:51:e5: 37:05:55:30:46:23:9d:bc:7c:d2:9e:db:d0:c7:0a: 9f:ae:28:e3:fc:39:66:20:15:63:85:f1:31:6a:71: 7f:e7:e7:6e:4e:c8:63:bc:25:bc:3c:47:ad:cb:12: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:39:DD:FB:61:1D:1C:56:EB:FF:AA:70:B2:BB:77:05:A8:FB:89 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:38:0a:de:7f:f5:4c:89:28:0c:1d:e5:2f:f8:df:86:15:8c: 9a:6e:22:03:2c:4f:fe:de:4c:65:4c:71:2e:88:37:9f:9f:67: cd:83:9a:f3:2d:20:f9:ec:c6:74:2e:44:5e:fc:0c:d2:4b:a7: 1a:e5:f1:68:5a:b3:67:2c:8d:7c:1d:77:c1:5f:f1:aa:5c:5d: 0b:de:1a:62:f7:07:b2:f5:f6:4a:1f:b2:da:a2:82:3b:0b:d2: 8f:7f:c2:9a:19:b6:a9:31:37:29:6d:20:d7:d8:0c:86:4a:7e: e5:1b:f7:c7:16:6e:14:98:ca:91:d4:6d:c4:79:0f:6f:ba:e9: 3c:10:12:2c:81:35:27:7e:c6:5d:7b:c7:52:f0:a0:34:55:25: 88:d0:f7:94:47:27:48:ab:d4:b7:25:34:b7:3e:26:92:e6:e3: dc:63:b1:3d:2a:94:d1:98:8a:b9:93:a7:27:56:02:06:3b:5f: df:81:ca:82:4e:49:31:c2:a6:d3:c7:82:b5:65:e9:fd:a9:c1: 17:ab:63:0f:1b:04:d2:77:ea:1b:55:8e:6f:97:3a:f5:b1:5b: 67:20:b5:e1:d9:57:a6:c0:76:37:b7:cf:bb:7f:77:3d:85:b6: 61:09:e4:c3:c4:cc:8a:76:0f:ba:33:c8:b7:33:da:9f:08:2c: 36:fb:04:5c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfUZHcwFWu6uwMsPPYu+QjPQoBkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA1MTIxNTQ5NTBaFw0yNjA1MTMxOTEzNTBaMDMxMTAvBgNV BAMTKDRBQzczOURERkI2MTFEMUM1NkVCRkZBQTcwQjJCQjc3MDVBOEZCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGRNZwSS/30LPnA4trUujbVrq rQD9ccyEj9lZp0QOZzp78BjnvAGLxVoRhgLaAhsD8KFKZiRHqOQTnPjiuIl7RkoJ bIqPoBoNnwaKXynfzqMkxuK1r9CMmlvch1uuVr5BZfVKmDs/2Mgs6INXI5YY2Ro7 QPzVllIMTEdoufPbAd9Bbm8vifBVgd/XT/am06xdE1xemGzJ9GNDEtRUGLl8/bIc 2U7jkUcz3ZOXlI0eYDUuVckMMvnwR31sVlQeBO9DSgesTA1Amb0o2IYC4k1R5TcF VTBGI528fNKe29DHCp+uKOP8OWYgFWOF8TFqcX/n525OyGO8Jbw8R63LErypAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSsc53fthHRxW6/+qcLK7dwWo+4kwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0OAre f/VMiSgMHeUv+N+GFYyabiIDLE/+3kxlTHEuiDefn2fNg5rzLSD57MZ0LkRe/AzS S6ca5fFoWrNnLI18HXfBX/GqXF0L3hpi9wey9fZKH7LaooI7C9KPf8KaGbapMTcp bSDX2AyGSn7lG/fHFm4UmMqR1G3EeQ9vuuk8EBIsgTUnfsZde8dS8KA0VSWI0PeU RydIq9S3JTS3PiaS5uPcY7E9KpTRmIq5k6cnVgIGO1/fgcqCTkkxwqbTx4K1Zen9 qcEXq2MPGwTSd+obVY5vlzr1sVtnILXh2VemwHY3t8+7f3c9hbZhCeTDxMyKdg+6 M8i3M9qfCCw2+wRc -----END CERTIFICATE-----Generated at Wed May 13 11:49:35 2026 by rpki-client