$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft (raw, json) Hash identifier: wmvWLD3nf1n838qzhHkbspC7ClFpHyZ7vRkTWMO80E0= Subject key identifier: 7F:6D:1D:5F:CC:78:D9:8C:8E:BC:6B:0F:60:9E:48:43:9C:C6:E2:38 Authority key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 Certificate issuer: /CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Certificate serial: 0D67B1C3552A01711A33B53BC1486026B96683B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft Manifest number: 74 Signing time: Fri 25 Sep 2026 19:34:11 +0000 Manifest this update: Fri 25 Sep 2026 19:29:11 +0000 Manifest next update: Sat 26 Sep 2026 19:40:11 +0000 Files and hashes: 1: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl (hash: sdP+0F7VmCSOPNE3hkglO70J3efhKE/Kfj2Di/cS6BQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 19:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:b1:c3:55:2a:01:71:1a:33:b5:3b:c1:48:60:26:b9:66:83:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Validity Not Before: Sep 25 19:29:11 2026 GMT Not After : Sep 26 19:40:11 2026 GMT Subject: CN=7F6D1D5FCC78D98C8EBC6B0F609E48439CC6E238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:cb:23:4a:88:53:28:00:f8:c7:a9:04:99: 07:3f:82:03:b5:6d:53:b5:78:a9:3d:ba:45:03:0a: 5e:08:5c:60:55:22:cd:62:a9:5d:12:a6:a1:eb:f1: cc:e7:f6:79:e5:d9:b4:00:72:01:29:85:5a:37:b0: 59:92:c4:fd:de:8e:59:63:58:31:a0:96:7c:6c:ed: 51:eb:15:c2:9e:bd:b4:96:a8:da:d9:e9:00:e2:5c: 6f:ad:f9:48:90:3a:a6:3d:fd:bd:b8:76:8c:63:c9: 1d:77:9e:39:1d:12:b7:3a:c9:53:0f:3a:e0:c6:02: d2:9e:bb:f9:d1:0c:af:36:01:b5:47:e7:37:f5:2c: 21:fc:ef:54:db:f0:40:2f:62:d7:be:15:24:55:1a: d1:df:bd:5d:0e:10:87:3b:88:df:40:9a:fa:57:16: 63:0f:91:ad:52:92:5b:8c:40:00:97:6d:92:bf:24: 01:52:cc:c2:ec:6d:c8:90:f9:31:f2:48:c5:52:98: ba:7d:f7:f4:8b:d5:81:04:0d:a0:c6:ac:38:33:b6: 61:bb:1d:2a:be:d5:ae:a9:cb:eb:c0:1a:b6:3a:c4: 4d:81:b9:09:53:22:8d:16:d1:5d:4a:0c:46:f6:30: d9:bb:07:e3:ea:8f:3e:2a:4b:16:72:93:64:58:cf: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:1D:5F:CC:78:D9:8C:8E:BC:6B:0F:60:9E:48:43:9C:C6:E2:38 X509v3 Authority Key Identifier: keyid:57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7e:e2:fc:46:82:c0:72:85:97:55:0b:e7:67:1f:c5:b7:b9: bc:57:14:01:c9:c6:29:4e:f4:57:53:13:16:f3:c2:be:5c:87: 91:32:d8:da:63:70:fd:91:6f:28:7b:34:72:4d:85:64:be:37: 86:30:c7:7a:c1:3d:67:5f:5b:8e:ea:e5:4c:c3:3b:c5:7a:b4: 44:5b:5a:98:89:50:0c:39:b3:49:3e:93:54:f2:f5:81:19:7d: 67:2a:6f:1d:41:e1:e4:02:08:1d:d5:26:db:b6:76:3f:62:86: ff:14:0f:02:a7:c9:71:31:49:f9:1c:5f:a7:16:36:1d:d4:71: 2c:f1:8e:b5:9b:75:a4:90:27:a4:56:1c:06:f5:9d:4c:27:51: 60:57:95:8c:87:14:27:d7:ab:04:69:a4:fe:f5:a7:86:4c:d2: ab:d0:e2:db:ec:b3:62:a7:b4:54:de:7f:39:14:9b:de:f5:0f: 29:f3:74:84:00:5a:c5:d2:3e:c4:83:24:c1:b7:14:8d:85:89: 5c:1f:9a:5e:ba:7a:24:21:c2:15:0d:a3:7c:76:e0:be:33:34: 3c:c9:ad:de:48:8f:5e:a7:51:11:9d:6a:60:f1:36:7c:3f:79: a7:77:ff:bb:5c:62:c2:eb:be:2d:96:94:90:ca:6d:b1:2b:52: 5d:bf:64:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDWexw1UqAXEaM7U7wUhgJrlmg7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0 MTYzMUVBMjAeFw0yNjA5MjUxOTI5MTFaFw0yNjA5MjYxOTQwMTFaMDMxMTAvBgNV BAMTKDdGNkQxRDVGQ0M3OEQ5OEM4RUJDNkIwRjYwOUU0ODQzOUNDNkUyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat8sjSohTKAD4x6kEmQc/ggO1 bVO1eKk9ukUDCl4IXGBVIs1iqV0SpqHr8czn9nnl2bQAcgEphVo3sFmSxP3ejllj WDGglnxs7VHrFcKevbSWqNrZ6QDiXG+t+UiQOqY9/b24doxjyR13njkdErc6yVMP OuDGAtKeu/nRDK82AbVH5zf1LCH871Tb8EAvYte+FSRVGtHfvV0OEIc7iN9AmvpX FmMPka1SkluMQACXbZK/JAFSzMLsbciQ+THySMVSmLp99/SL1YEEDaDGrDgztmG7 HSq+1a6py+vAGrY6xE2BuQlTIo0W0V1KDEb2MNm7B+Pqjz4qSxZyk2RYz7nZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf20dX8x42YyOvGsPYJ5IQ5zG4jgwHwYDVR0j BBgwFoAUVw54SKMoRYLNbw8MA199m0FjHqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQz NjIyLzEvNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0MTYzMUVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMw MzVGN0Q5QjQxNjMxRUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBiNjU0NWZjLTllYWMtNGZkYy1hMmVjLWM3MDJkNzRkMzYyMi8xLzU3MEU3ODQ4 QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6fuL8 RoLAcoWXVQvnZx/Ft7m8VxQBycYpTvRXUxMW88K+XIeRMtjaY3D9kW8oezRyTYVk vjeGMMd6wT1nX1uO6uVMwzvFerREW1qYiVAMObNJPpNU8vWBGX1nKm8dQeHkAggd 1SbbtnY/Yob/FA8Cp8lxMUn5HF+nFjYd1HEs8Y61m3WkkCekVhwG9Z1MJ1FgV5WM hxQn16sEaaT+9aeGTNKr0OLb7LNip7RU3n85FJve9Q8p83SEAFrF0j7EgyTBtxSN hYlcH5peunokIcIVDaN8duC+MzQ8ya3eSI9ep1ERnWpg8TZ8P3mnd/+7XGLC674t lpSQym2xK1Jdv2TB -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:51 2026 by rpki-client