$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: R6/E8qcqt25mlDQkOdWNb7Jxzzi8en+WpanCFTYHQNY= Subject key identifier: A6:39:D7:2F:C0:DB:40:19:51:76:43:46:1D:36:38:91:AA:06:2A:05 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 1DA2264FA715649DC4BA656C5B0D1CB14A8E0DF4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: B0 Signing time: Wed 03 Jun 2026 15:15:46 +0000 Manifest this update: Wed 03 Jun 2026 15:10:46 +0000 Manifest next update: Thu 04 Jun 2026 17:58:46 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: LUq+lyxtO+XnltyJCJ4G0LUKvngqkbHlLEtgjPAlONE=) 2: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (hash: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc=) 3: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 17:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a2:26:4f:a7:15:64:9d:c4:ba:65:6c:5b:0d:1c:b1:4a:8e:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jun 3 15:10:46 2026 GMT Not After : Jun 4 17:58:46 2026 GMT Subject: CN=A639D72FC0DB4019517643461D363891AA062A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c0:05:f2:fe:e5:bd:94:ad:2a:63:d1:0d:cb: 1e:03:28:a7:d3:fe:95:b6:db:88:1e:dd:f1:60:d6: 7e:ca:69:f8:be:c3:87:16:76:05:51:b2:12:99:5c: 8f:b9:d3:25:63:5e:65:b4:33:22:3d:e5:49:10:8d: 72:df:e7:d8:69:1c:cf:c3:2e:d0:68:ef:a6:be:b6: ff:43:d3:0a:f9:25:e4:39:86:58:e8:1d:75:6d:a5: e8:9f:cd:a8:8e:3a:35:d6:8d:11:02:0d:f5:a0:cb: e2:8a:75:3d:91:0e:7b:23:7f:6f:bc:99:12:36:34: 78:fe:15:d7:ab:fd:92:4c:bf:66:81:1b:04:f3:ec: 11:b7:69:88:ad:95:b0:c4:ac:b9:be:9a:54:9e:c1: ca:ae:fe:9b:23:67:dd:7f:c6:fa:28:18:10:39:60: aa:78:ac:25:bf:17:c4:30:91:21:8e:a7:9c:d3:dc: b3:db:d0:6e:5a:b5:0b:dd:2b:d5:a1:d9:f5:b7:52: f4:11:48:d9:91:02:25:15:65:56:ca:aa:c6:0d:c2: 85:6a:62:be:5e:7b:d3:b1:22:79:43:a0:72:58:fe: 54:4e:64:51:20:f3:75:55:6d:4d:33:70:51:a3:cd: ba:1e:b8:eb:b2:28:c4:b7:78:11:84:ed:1c:f7:bb: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:39:D7:2F:C0:DB:40:19:51:76:43:46:1D:36:38:91:AA:06:2A:05 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ad:ea:c5:16:b2:60:5a:d7:e0:a3:9d:eb:00:58:f3:89:14: 5d:dd:2b:60:3a:89:1f:83:8a:e6:1d:e0:cd:40:6b:02:ae:01: e2:a8:3a:c2:d3:2f:d2:b5:3d:10:79:f7:0d:c1:83:c2:14:39: 51:84:1f:87:c8:7c:98:18:ea:92:fc:a8:48:ef:cd:a5:88:4f: b3:76:2a:18:9c:b5:f8:d2:57:d3:44:41:0f:d8:9a:ba:a1:ab: d3:9e:d0:8f:fd:48:84:8d:8b:b2:3e:b4:bf:0a:5e:41:84:0a: 3d:37:8f:bc:38:87:4f:a1:bb:f4:ce:5c:86:4f:ad:93:c4:90: cf:03:8e:c4:ff:56:4f:97:06:8f:29:2c:93:f3:95:f5:9a:8b: a1:71:4b:52:4a:33:96:f7:4d:36:a0:7c:42:b9:48:9f:ec:1c: 53:7d:1e:20:6b:a9:95:65:08:87:e4:2e:61:ba:2d:8a:94:53: 36:62:3e:21:2f:8f:6c:0d:39:71:d8:2f:c9:02:bb:88:f6:fa: b6:98:a5:a2:df:3f:a1:05:f8:ba:fc:43:fa:bd:ba:c9:08:5c: 37:7a:25:05:36:fc:83:c7:ad:70:db:e3:92:38:da:36:6b:0f: b0:2e:d2:e0:e9:c0:d8:ac:7d:a2:bb:2c:b9:3c:e6:f0:c8:e7: 5b:fe:0f:48 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHaImT6cVZJ3EumVsWw0csUqODfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA2MDMxNTEwNDZaFw0yNjA2MDQxNzU4NDZaMDMxMTAvBgNV BAMTKEE2MzlENzJGQzBEQjQwMTk1MTc2NDM0NjFEMzYzODkxQUEwNjJBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wAXy/uW9lK0qY9ENyx4DKKfT /pW224ge3fFg1n7Kafi+w4cWdgVRshKZXI+50yVjXmW0MyI95UkQjXLf59hpHM/D LtBo76a+tv9D0wr5JeQ5hljoHXVtpeifzaiOOjXWjRECDfWgy+KKdT2RDnsjf2+8 mRI2NHj+Fder/ZJMv2aBGwTz7BG3aYitlbDErLm+mlSewcqu/psjZ91/xvooGBA5 YKp4rCW/F8QwkSGOp5zT3LPb0G5atQvdK9Wh2fW3UvQRSNmRAiUVZVbKqsYNwoVq Yr5ee9OxInlDoHJY/lROZFEg83VVbU0zcFGjzboeuOuyKMS3eBGE7Rz3u10nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpjnXL8DbQBlRdkNGHTY4kaoGKgUwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4rerF FrJgWtfgo53rAFjziRRd3StgOokfg4rmHeDNQGsCrgHiqDrC0y/StT0QefcNwYPC FDlRhB+HyHyYGOqS/KhI782liE+zdioYnLX40lfTREEP2Jq6oavTntCP/UiEjYuy PrS/Cl5BhAo9N4+8OIdPobv0zlyGT62TxJDPA47E/1ZPlwaPKSyT85X1mouhcUtS SjOW9002oHxCuUif7BxTfR4ga6mVZQiH5C5hui2KlFM2Yj4hL49sDTlx2C/JAruI 9vq2mKWi3z+hBfi6/EP6vbrJCFw3eiUFNvyDx61w2+OSONo2aw+wLtLg6cDYrH2i uyy5PObwyOdb/g9I -----END CERTIFICATE-----Generated at Thu Jun 4 04:21:33 2026 by rpki-client