$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: 2tLCWkzplFBG0tcObLkFsi+RU3o5pQnPjqGWtEKjYTQ= Subject key identifier: 51:70:9D:C2:00:C3:71:B5:7E:E6:28:67:4B:9C:BD:90:1D:90:82:A4 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 5E947AEE4F29AB8AC8E12B6CABD5A34B72873572 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 94 Signing time: Thu 11 Jun 2026 06:01:09 +0000 Manifest this update: Thu 11 Jun 2026 05:56:09 +0000 Manifest next update: Fri 12 Jun 2026 07:21:09 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 3: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 4: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 5: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) 6: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 7: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 8: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 9: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: BS/WXL1PjvdZ2J65H667DJZ193IAEbv16RGDCd6xcC0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:94:7a:ee:4f:29:ab:8a:c8:e1:2b:6c:ab:d5:a3:4b:72:87:35:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Jun 11 05:56:09 2026 GMT Not After : Jun 12 07:21:09 2026 GMT Subject: CN=51709DC200C371B57EE628674B9CBD901D9082A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:0f:56:24:21:06:07:04:9e:e4:3e:17:64: 67:e2:24:eb:ea:51:e5:1c:c7:21:ca:b1:b1:25:5d: ed:35:96:a1:03:03:e8:f8:f6:a4:85:e0:da:28:ce: 91:c5:74:b3:9d:05:e3:72:0a:5d:87:42:ca:af:21: 5b:ba:04:18:90:d3:57:36:c3:28:89:18:73:9d:f7: d7:42:4b:81:03:af:ce:70:54:e8:f8:8c:38:45:3a: 1b:40:7c:f4:9e:4c:c4:33:7e:f2:cb:a1:16:3e:38: 60:21:7f:5a:cb:ea:24:e9:93:93:29:cc:4a:4e:bb: b9:21:a5:00:e1:9d:f8:1c:b4:fd:a7:be:82:80:67: b6:d7:0c:15:86:b0:3d:fc:78:da:ce:60:cd:c5:02: 92:dd:7c:1f:03:1a:12:37:f7:7b:c3:27:29:76:f5: 8f:2c:f8:a5:93:fe:da:25:88:6d:30:04:93:e1:b8: 17:94:a7:41:1f:b3:36:71:42:95:b7:46:8b:70:60: a2:eb:ed:3a:0a:7d:aa:df:ff:1d:fd:4d:c4:91:4a: 73:90:86:90:97:81:07:78:65:9b:ea:d7:72:f5:6a: f9:3f:a7:05:b5:f2:7e:14:0d:d2:da:a3:4d:e1:0f: 5c:8c:ff:b0:f5:41:e3:cc:74:3c:b4:44:7a:cf:84: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:9D:C2:00:C3:71:B5:7E:E6:28:67:4B:9C:BD:90:1D:90:82:A4 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:b3:6c:4b:0e:ad:e1:db:43:23:f1:e4:96:06:a3:10:08: 0d:d8:40:18:e8:24:0c:b3:76:de:90:15:20:d2:2c:87:7c:36: 91:4e:a9:6b:68:d2:1e:7f:ea:5b:c5:78:63:f8:bc:92:c7:2c: 19:ec:a7:5e:45:8c:85:87:15:b2:dc:3b:82:4b:ce:a1:5f:95: 0f:7d:f3:f6:37:74:15:25:ed:58:0d:fc:33:be:f1:d0:9d:20: 58:ab:6b:65:fb:83:41:7a:aa:b9:50:3c:0b:ae:1b:d0:f8:8c: 28:09:95:2c:95:01:7b:1b:a9:d6:a9:7a:2f:3d:b6:d5:64:7c: c5:14:4e:d0:10:b9:ea:1c:99:5e:62:cc:19:db:28:fb:e7:ff: 4b:8b:43:f9:26:33:50:28:4a:15:13:03:13:d8:0e:37:2a:e0: e1:f7:b8:a8:b8:31:86:2a:fd:ae:5c:5d:67:71:92:27:9d:6d: 1c:5c:6b:0f:d6:b6:e7:c2:bd:12:9d:6f:04:a2:d0:ff:c2:6c: 6b:ae:53:d6:55:4b:8c:45:10:15:08:79:02:e8:40:c9:1f:f5: bf:f6:64:30:db:11:14:c7:99:58:35:a1:3a:f1:3a:76:16:1e: 9f:a1:91:f7:dd:70:7f:59:4a:94:77:10:69:36:df:35:b6:27: ff:9d:f8:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXpR67k8pq4rI4Stsq9WjS3KHNXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA2MTEwNTU2MDlaFw0yNjA2MTIwNzIxMDlaMDMxMTAvBgNV BAMTKDUxNzA5REMyMDBDMzcxQjU3RUU2Mjg2NzRCOUNCRDkwMUQ5MDgyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEw9WJCEGBwSe5D4XZGfiJOvq UeUcxyHKsbElXe01lqEDA+j49qSF4NoozpHFdLOdBeNyCl2HQsqvIVu6BBiQ01c2 wyiJGHOd99dCS4EDr85wVOj4jDhFOhtAfPSeTMQzfvLLoRY+OGAhf1rL6iTpk5Mp zEpOu7khpQDhnfgctP2nvoKAZ7bXDBWGsD38eNrOYM3FApLdfB8DGhI393vDJyl2 9Y8s+KWT/toliG0wBJPhuBeUp0EfszZxQpW3RotwYKLr7ToKfarf/x39TcSRSnOQ hpCXgQd4ZZvq13L1avk/pwW18n4UDdLao03hD1yM/7D1QePMdDy0RHrPhCdjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUXCdwgDDcbV+5ihnS5y9kB2QgqQwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCJ7Ns Sw6t4dtDI/HklgajEAgN2EAY6CQMs3bekBUg0iyHfDaRTqlraNIef+pbxXhj+LyS xywZ7KdeRYyFhxWy3DuCS86hX5UPffP2N3QVJe1YDfwzvvHQnSBYq2tl+4NBeqq5 UDwLrhvQ+IwoCZUslQF7G6nWqXovPbbVZHzFFE7QELnqHJleYswZ2yj75/9Li0P5 JjNQKEoVEwMT2A43KuDh97iouDGGKv2uXF1ncZInnW0cXGsP1rbnwr0SnW8EotD/ wmxrrlPWVUuMRRAVCHkC6EDJH/W/9mQw2xEUx5lYNaE68Tp2Fh6foZH33XB/WUqU dxBpNt81tif/nfgm -----END CERTIFICATE-----Generated at Thu Jun 11 20:30:57 2026 by rpki-client