$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: JSlBieRNSlO56T+SmQGLcQXoz3i1sAAkNUg/atP40HQ= Subject key identifier: D6:71:CD:B1:73:50:FE:10:56:CB:2A:C3:68:1A:0C:4B:2A:CB:0F:32 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 16BEED6AD5F1DBA446BD33475AA436590503F765 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 0179 Signing time: Tue 29 Sep 2026 02:27:12 +0000 Manifest this update: Tue 29 Sep 2026 02:22:12 +0000 Manifest next update: Wed 30 Sep 2026 03:53:12 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 7AAKoSGbK9YHMAHhw+m3FTOkwwlh59JP+ucHqJkte1k=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 00:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:be:ed:6a:d5:f1:db:a4:46:bd:33:47:5a:a4:36:59:05:03:f7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Sep 29 02:22:12 2026 GMT Not After : Sep 30 03:53:12 2026 GMT Subject: CN=D671CDB17350FE1056CB2AC3681A0C4B2ACB0F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:8b:18:bd:be:e8:63:5d:c3:33:fa:b7:43: a1:10:ea:fe:bf:84:23:78:3d:ef:ff:ec:8a:e7:40: 91:61:44:2a:d8:0b:06:3e:12:81:c8:7d:dd:bf:3a: 81:6d:b6:2e:b5:4e:fb:c0:82:3a:55:e5:3a:b6:b6: e0:20:cc:af:58:2e:61:6a:27:c0:3b:04:34:ad:f0: 35:ca:80:5a:85:7e:da:f8:2f:02:64:60:77:25:06: d9:87:ae:b0:f7:c7:9f:90:75:9a:83:dd:03:80:bf: b7:7e:e7:11:a4:22:f3:a2:c7:9a:e9:2f:6a:7d:fa: 3e:37:d7:cf:a4:47:20:c1:db:de:19:74:91:a0:fd: b0:df:71:b0:82:a8:81:73:76:df:8a:5c:49:5b:fa: a8:1b:34:30:a0:4f:a6:bf:a9:f8:ad:7c:7b:d8:2d: d2:70:79:10:42:23:ab:98:a7:b8:6a:45:ba:ed:22: bb:61:33:5e:80:cd:d7:41:ca:ae:91:5f:14:e5:42: 1c:89:3e:2c:69:1b:d5:78:45:05:81:d4:49:16:91: 10:0a:fb:8e:a2:f3:4b:6a:01:0b:4d:d2:a1:2d:e2: 84:c5:73:ac:45:6c:a4:ba:f7:6b:d3:ce:6c:42:50: 14:eb:df:e0:c1:16:56:57:ce:17:c0:b9:2f:7b:95: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:CD:B1:73:50:FE:10:56:CB:2A:C3:68:1A:0C:4B:2A:CB:0F:32 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3f:56:48:c0:ae:67:6b:4b:d1:3f:25:4d:17:00:d7:e9:a8: 4a:f9:88:a8:0c:0a:8c:b9:02:10:69:dc:b2:23:c3:81:10:26: cc:74:24:3d:40:fe:f0:0e:e0:88:fd:ce:bd:bf:d0:46:27:80: f8:81:f0:e2:26:48:35:92:06:d6:86:98:46:fb:9c:df:f3:9e: b6:94:6f:ae:c7:fa:0e:d3:ef:d1:4c:f6:66:d8:e1:2f:7a:b2: 7d:d6:22:c7:fe:b0:79:4b:02:2c:0c:23:76:4f:77:25:13:eb: 43:f9:3e:2c:fe:54:57:e7:19:63:3b:bd:f9:e7:7f:12:97:1c: f5:85:d5:37:cc:53:aa:b8:db:63:1a:6f:4d:60:af:b7:11:7b: 4d:18:31:92:b3:3b:6a:ab:b5:52:3b:a9:24:91:3b:24:be:ac: 3a:be:c8:94:1c:c3:86:3a:a5:32:12:01:75:09:1c:ac:86:ac: b7:af:8d:01:e2:f4:8f:da:50:1a:9d:92:f7:f6:c5:4f:e0:04: ce:32:9e:1f:1e:44:c5:60:ab:76:74:43:58:f0:9f:a7:2d:63: 62:d6:ec:f4:7b:a2:8b:ff:0c:fb:48:af:dd:aa:15:0e:74:ba: dd:62:2a:66:da:92:fd:a6:46:c2:a6:64:d6:3e:ce:4b:33:c6: 97:22:91:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFr7tatXx26RGvTNHWqQ2WQUD92UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA5MjkwMjIyMTJaFw0yNjA5MzAwMzUzMTJaMDMxMTAvBgNV BAMTKEQ2NzFDREIxNzM1MEZFMTA1NkNCMkFDMzY4MUEwQzRCMkFDQjBGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7B4sYvb7oY13DM/q3Q6EQ6v6/ hCN4Pe//7IrnQJFhRCrYCwY+EoHIfd2/OoFtti61TvvAgjpV5Tq2tuAgzK9YLmFq J8A7BDSt8DXKgFqFftr4LwJkYHclBtmHrrD3x5+QdZqD3QOAv7d+5xGkIvOix5rp L2p9+j4318+kRyDB294ZdJGg/bDfcbCCqIFzdt+KXElb+qgbNDCgT6a/qfitfHvY LdJweRBCI6uYp7hqRbrtIrthM16AzddByq6RXxTlQhyJPixpG9V4RQWB1EkWkRAK +46i80tqAQtN0qEt4oTFc6xFbKS692vTzmxCUBTr3+DBFlZXzhfAuS97lWuZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1nHNsXNQ/hBWyyrDaBoMSyrLDzIwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVP1ZI wK5na0vRPyVNFwDX6ahK+YioDAqMuQIQadyyI8OBECbMdCQ9QP7wDuCI/c69v9BG J4D4gfDiJkg1kgbWhphG+5zf8562lG+ux/oO0+/RTPZm2OEverJ91iLH/rB5SwIs DCN2T3clE+tD+T4s/lRX5xljO735538Slxz1hdU3zFOquNtjGm9NYK+3EXtNGDGS sztqq7VSO6kkkTskvqw6vsiUHMOGOqUyEgF1CRyshqy3r40B4vSP2lAanZL39sVP 4ATOMp4fHkTFYKt2dENY8J+nLWNi1uz0e6KL/wz7SK/dqhUOdLrdYipm2pL9pkbC pmTWPs5LM8aXIpGg -----END CERTIFICATE-----Generated at Tue Sep 29 12:23:30 2026 by rpki-client