$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: VRcH91WG3vHDYtFo/Hd6dS3/sbijeb/peQYE1zWKnrY= Subject key identifier: 86:8E:89:5D:DE:52:4D:F0:F9:EA:9C:86:B9:38:A0:A4:3D:B9:29:F6 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 648BB02F2EBE35F3A09B68ECDF651482B28FD28A Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: EB Signing time: Fri 05 Jun 2026 08:30:36 +0000 Manifest this update: Fri 05 Jun 2026 08:25:36 +0000 Manifest next update: Sat 06 Jun 2026 11:05:36 +0000 Files and hashes: 1: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 2: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: XCiSdQ/aZZ9R0aAXIXrfKns8Z+oN/zEYcbXeQy0+LOY=) 3: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) 4: 326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa (hash: 89YEfdCNb6RXT7z5CsfijNvWZCI5tf3pkWh8RSXOhww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 11:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:b0:2f:2e:be:35:f3:a0:9b:68:ec:df:65:14:82:b2:8f:d2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jun 5 08:25:36 2026 GMT Not After : Jun 6 11:05:36 2026 GMT Subject: CN=868E895DDE524DF0F9EA9C86B938A0A43DB929F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:20:e2:c0:11:5b:7b:1e:e3:37:cf:40:3b: 5c:a4:23:e9:d4:c3:c3:b8:0d:c8:ff:a2:04:f9:af: 9f:33:3a:77:4a:ad:1a:5e:67:45:de:8b:82:db:3c: cc:bc:58:94:18:c5:85:58:74:09:de:28:c9:99:c7: 6b:0e:03:af:9d:95:fe:9f:ec:05:fd:ea:ed:81:34: 83:e0:f3:9a:b0:7c:1c:4b:ef:03:12:71:44:c9:59: 7b:19:5a:98:42:f9:d2:ba:0f:3c:db:a0:d5:24:7d: b8:db:8d:eb:93:a1:e6:54:53:ab:46:14:58:ca:e8: 36:b4:c6:13:06:df:01:a2:a1:2c:44:02:f3:bb:f1: 60:b9:28:ac:92:36:7b:94:10:d7:1f:4b:c2:57:46: b4:b5:76:51:06:0d:23:c8:01:d9:b0:a0:fa:eb:b8: e6:d0:1d:87:0c:10:22:ff:6c:a9:9a:2e:e0:c1:c6: 47:f1:52:f8:d9:66:9c:55:4b:b4:c8:de:4c:01:ca: 6e:ee:c6:3a:82:d6:73:e6:41:2b:e6:ba:f5:b6:e3: 59:94:d1:40:3f:87:c4:91:48:99:5f:61:27:70:e8: 9c:90:ad:49:d6:80:6c:3f:df:0f:28:4e:e2:45:4e: 7a:3c:99:01:6e:e7:bd:6f:2c:3f:8b:5d:25:ad:af: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:89:5D:DE:52:4D:F0:F9:EA:9C:86:B9:38:A0:A4:3D:B9:29:F6 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1e:f4:9e:25:63:5a:fb:77:f2:89:f2:e4:4f:e7:18:63:35: 96:42:ad:d5:e4:33:5d:8f:c9:8a:2b:e5:85:88:c2:55:f9:e2: 97:38:94:d5:63:cf:3f:69:d1:d3:53:5c:e0:ac:01:67:7a:32: 7f:1d:87:01:ce:9c:3e:22:8c:e8:88:4c:90:e9:25:c0:4d:03: dc:6f:7c:8a:80:49:da:8e:d8:0f:34:04:68:da:7d:19:e2:12: e4:16:63:a4:e4:43:14:e0:ca:c0:a7:35:b2:f4:b1:73:90:1c: f5:fc:96:7b:a6:c6:46:c5:ec:dc:f9:45:d8:b4:1d:2a:95:26: 08:3c:ab:83:9a:e1:47:ed:42:0f:d3:a3:c0:6a:66:6c:23:70: 99:01:c7:51:44:23:91:9f:bd:d2:c6:64:04:21:1c:6a:69:14: 01:e8:c8:ce:2c:cd:ff:4c:4b:f5:eb:f4:98:2d:c2:9e:8a:da: 5c:da:ae:33:e1:c2:59:de:a4:60:4e:f8:52:44:e6:f2:00:1e: a4:e7:f6:fc:b0:75:1e:21:18:4e:cc:a9:e9:6c:a3:00:a3:3f: c4:a3:80:c7:52:f2:b4:cf:0d:fc:02:22:ad:08:71:8a:59:67: f4:e3:e8:d9:6f:4b:39:78:1f:dd:b1:86:0e:d0:f5:8f:56:89: ab:a0:0d:23 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZIuwLy6+NfOgm2js32UUgrKP0oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA2MDUwODI1MzZaFw0yNjA2MDYxMTA1MzZaMDMxMTAvBgNV BAMTKDg2OEU4OTVEREU1MjRERjBGOUVBOUM4NkI5MzhBMEE0M0RCOTI5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIoSDiwBFbex7jN89AO1ykI+nU w8O4Dcj/ogT5r58zOndKrRpeZ0Xei4LbPMy8WJQYxYVYdAneKMmZx2sOA6+dlf6f 7AX96u2BNIPg85qwfBxL7wMScUTJWXsZWphC+dK6DzzboNUkfbjbjeuToeZUU6tG FFjK6Da0xhMG3wGioSxEAvO78WC5KKySNnuUENcfS8JXRrS1dlEGDSPIAdmwoPrr uObQHYcMECL/bKmaLuDBxkfxUvjZZpxVS7TI3kwBym7uxjqC1nPmQSvmuvW241mU 0UA/h8SRSJlfYSdw6JyQrUnWgGw/3w8oTuJFTno8mQFu571vLD+LXSWtr/rjAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUho6JXd5STfD56pyGuTigpD25KfYwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx70niVjWvt38ony5E/n GGM1lkKt1eQzXY/JiivlhYjCVfnilziU1WPPP2nR01Nc4KwBZ3oyfx2HAc6cPiKM 6IhMkOklwE0D3G98ioBJ2o7YDzQEaNp9GeIS5BZjpORDFODKwKc1svSxc5Ac9fyW e6bGRsXs3PlF2LQdKpUmCDyrg5rhR+1CD9OjwGpmbCNwmQHHUUQjkZ+90sZkBCEc amkUAejIzizN/0xL9ev0mC3CnoraXNquM+HCWd6kYE74UkTm8gAepOf2/LB1HiEY Tsyp6WyjAKM/xKOAx1LytM8N/AIirQhxilln9OPo2W9LOXgf3bGGDtD1j1aJq6AN Iw== -----END CERTIFICATE-----Generated at Sat Jun 6 04:24:09 2026 by rpki-client