$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: DA/QsbVc+SVetMil4HM6H//NRs68Dv/CZP6sQYJPuZE= Subject key identifier: 70:B1:E7:EF:2F:4A:E5:52:66:1A:8A:19:8B:51:C2:4D:9F:2F:FC:D3 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 2C3AE0353794E50C2835BC0DDE4366BF447250CD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: CD Signing time: Sat 27 Jun 2026 12:19:26 +0000 Manifest this update: Sat 27 Jun 2026 12:14:26 +0000 Manifest next update: Sun 28 Jun 2026 14:25:26 +0000 Files and hashes: 1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: 0d+RgUehhbuGg2rirI5tKsdNuCBvATl3Ur76xETPInY=) 2: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 3: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 4: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 5: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 6: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 7: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 8: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 9: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3a:e0:35:37:94:e5:0c:28:35:bc:0d:de:43:66:bf:44:72:50:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Jun 27 12:14:26 2026 GMT Not After : Jun 28 14:25:26 2026 GMT Subject: CN=70B1E7EF2F4AE552661A8A198B51C24D9F2FFCD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:b5:95:a8:02:cd:b8:87:3f:84:30:77:5e: e5:82:46:2a:e4:7b:d6:2a:df:9e:83:94:23:6b:fe: 75:30:85:eb:90:a8:b2:58:ad:7e:d8:83:f5:f3:55: c3:9b:06:5e:87:08:15:7f:c6:78:53:d7:3e:03:8b: eb:13:43:62:9d:7f:3d:84:5d:54:cc:23:1c:fb:0d: 24:8b:42:b5:31:c9:cc:ea:33:13:dd:76:52:e0:7a: e1:9a:b8:a8:54:77:0f:7a:fa:56:d2:52:67:27:41: 6d:50:ba:81:6a:05:8b:3f:49:ff:16:20:2a:c0:ae: b4:9e:cd:ec:dc:46:ac:8c:55:0e:1d:f5:20:74:a7: 99:f4:a0:fa:aa:49:b7:03:87:3f:12:9f:69:b3:f5: 34:31:47:0d:a8:ff:41:77:f2:0b:27:8a:ac:d3:66: d0:78:48:e3:20:70:a4:83:04:3f:20:73:f0:c6:e0: 40:00:20:f1:de:46:32:50:7b:e7:3d:45:32:9e:64: 56:85:bc:50:05:71:34:e4:7e:ca:5d:5e:10:0e:78: b9:be:df:07:2b:26:d8:e5:6b:c3:52:04:c3:9e:e6: 21:d4:f0:c1:a5:74:1c:b6:f6:36:87:e8:35:4d:b5: 35:0d:61:83:d5:77:f7:08:d1:47:44:60:b9:70:09: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B1:E7:EF:2F:4A:E5:52:66:1A:8A:19:8B:51:C2:4D:9F:2F:FC:D3 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:49:bd:17:ef:3f:dc:b1:3c:df:95:32:0c:67:2c:21:a6:f3: 3d:44:eb:d0:3f:0e:35:ba:59:1b:ec:08:cd:d0:68:d0:1c:d5: 85:d8:b2:81:cb:f2:fd:e6:b0:2e:0a:54:60:f0:db:c0:54:30: 83:af:07:7a:60:12:0f:34:25:7a:da:1e:fb:e0:3e:10:04:fb: b1:e0:f0:cd:c1:cb:eb:83:82:1d:f1:af:38:ab:89:40:8e:7a: fc:b7:97:c6:f1:0f:e5:b2:46:83:a1:12:14:57:1f:95:80:30: 73:83:eb:18:c9:0a:df:79:e3:0f:d5:52:31:64:4c:d0:45:1c: e0:96:08:c3:49:c7:42:db:85:70:f2:e5:d6:45:b0:dc:67:f3: 9e:23:b4:b5:a9:43:25:36:61:ef:45:0e:d7:98:1b:72:b3:09: 1d:10:8e:37:5d:a2:c7:ac:5c:e1:7b:b5:cf:84:a4:5a:d7:ae: 22:ef:34:72:b3:18:e6:65:6b:ae:da:6f:6a:cc:3c:47:62:50: 09:a3:36:18:cc:b9:3c:fc:35:77:b4:ed:d1:6f:a0:18:1c:08: a9:1c:7b:da:b1:1c:c1:05:0f:c1:a5:0f:8c:06:b9:0c:d5:c1: 7d:44:89:f1:73:cc:20:79:40:2f:7b:d7:f5:07:5e:e5:30:49: 3e:40:1d:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULDrgNTeU5QwoNbwN3kNmv0RyUM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA2MjcxMjE0MjZaFw0yNjA2MjgxNDI1MjZaMDMxMTAvBgNV BAMTKDcwQjFFN0VGMkY0QUU1NTI2NjFBOEExOThCNTFDMjREOUYyRkZDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaj7WVqALNuIc/hDB3XuWCRirk e9Yq356DlCNr/nUwheuQqLJYrX7Yg/XzVcObBl6HCBV/xnhT1z4Di+sTQ2Kdfz2E XVTMIxz7DSSLQrUxyczqMxPddlLgeuGauKhUdw96+lbSUmcnQW1QuoFqBYs/Sf8W ICrArrSezezcRqyMVQ4d9SB0p5n0oPqqSbcDhz8Sn2mz9TQxRw2o/0F38gsniqzT ZtB4SOMgcKSDBD8gc/DG4EAAIPHeRjJQe+c9RTKeZFaFvFAFcTTkfspdXhAOeLm+ 3wcrJtjla8NSBMOe5iHU8MGldBy29jaH6DVNtTUNYYPVd/cI0UdEYLlwCSRjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcLHn7y9K5VJmGooZi1HCTZ8v/NMwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPSb0X 7z/csTzflTIMZywhpvM9ROvQPw41ulkb7AjN0GjQHNWF2LKBy/L95rAuClRg8NvA VDCDrwd6YBIPNCV62h774D4QBPux4PDNwcvrg4Id8a84q4lAjnr8t5fG8Q/lskaD oRIUVx+VgDBzg+sYyQrfeeMP1VIxZEzQRRzglgjDScdC24Vw8uXWRbDcZ/OeI7S1 qUMlNmHvRQ7XmBtyswkdEI43XaLHrFzhe7XPhKRa164i7zRysxjmZWuu2m9qzDxH YlAJozYYzLk8/DV3tO3Rb6AYHAipHHvasRzBBQ/BpQ+MBrkM1cF9RInxc8wgeUAv e9f1B17lMEk+QB3I -----END CERTIFICATE-----Generated at Sat Jun 27 23:28:02 2026 by rpki-client