$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: yd1b/ZiqGdAXgJg86OhN7NoUbVDhp5oijmdZQmGNn3A= Subject key identifier: 4E:54:78:47:F9:67:7C:9D:AC:C5:1D:20:04:70:14:3F:3B:28:78:DD Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 4DCFC6A070EF012427BC80E8EF4D07E97903A604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 06A2 Signing time: Sun 11 Oct 2026 09:23:28 +0000 Manifest this update: Sun 11 Oct 2026 09:18:28 +0000 Manifest next update: Mon 12 Oct 2026 12:03:28 +0000 Files and hashes: 1: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 2: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: HNWQUTEUMDAc1DCeNC90EdsXts113z1oXqkNhPbEkeI=) 3: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 4: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 5: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 6: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 7: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 8: 34362e3138332e33312e302f32342d3234203d3e20313436383133.roa (hash: WcL2kBtsjppfaarjCt1hS7Jn9tg3JVTXPM4brEV0FA4=) 9: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: AcqwW6yTpxI3OmkBZD3ZuGJOrkDWhhktOLo+79kUNdA=) 10: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 11: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 12: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cf:c6:a0:70:ef:01:24:27:bc:80:e8:ef:4d:07:e9:79:03:a6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Oct 11 09:18:28 2026 GMT Not After : Oct 12 12:03:28 2026 GMT Subject: CN=4E547847F9677C9DACC51D200470143F3B2878DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:58:ec:c1:4d:85:87:13:95:69:86:0c:0e: 36:b2:36:10:0d:db:8e:67:08:b0:97:48:62:b7:67: d7:25:78:76:94:f2:f7:ac:9a:78:54:75:02:1e:cf: aa:41:2b:45:d0:2e:cc:90:ae:63:8a:40:e2:a8:01: 5f:de:1f:ba:02:8c:fa:b5:c1:b0:15:8a:96:53:b4: 0f:ed:d9:f9:d6:25:a5:91:ee:9f:5f:7b:4c:94:65: 1f:8d:e4:e8:a6:e5:7b:f2:99:07:53:dd:a5:5d:28: d6:bc:80:2c:36:73:2b:62:88:f9:bf:b3:41:e7:17: db:d6:e2:06:bb:b5:51:9d:4b:b0:ce:ef:fc:66:1e: af:74:d8:92:1a:94:93:47:9c:e5:aa:d9:1e:f9:9c: aa:1f:5b:b6:46:38:15:64:c4:ca:a9:74:ac:65:68: e9:95:eb:96:f0:20:04:93:61:b2:cd:73:d9:16:b3: 4e:2a:07:5f:58:27:5b:ca:7a:e4:12:d5:39:fc:59: 78:97:21:b8:11:59:55:c8:65:bb:12:ed:a2:fa:26: 29:f1:54:3e:12:10:0d:fd:c7:7f:d5:0f:d5:01:79: 57:fb:af:6f:67:14:08:4f:46:74:c7:6e:8d:1d:5c: 61:1f:fe:88:37:c8:1c:4b:a4:7c:19:7c:81:ac:81: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:78:47:F9:67:7C:9D:AC:C5:1D:20:04:70:14:3F:3B:28:78:DD X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:4f:67:48:78:bc:c6:54:73:ca:51:71:82:06:cc:d9:1f: b9:65:c3:04:76:ae:0b:fd:8e:ff:56:bd:e1:6a:43:4d:80:4d: 6b:39:dc:34:82:79:2c:10:ca:34:e1:4e:97:a2:14:08:b5:39: 8d:3c:a4:34:33:8d:a2:ef:79:ba:a6:1a:79:90:87:ca:ec:86: 91:a2:d2:66:7c:6c:6f:6e:8a:21:d5:b3:b1:4f:0e:26:e4:37: 1f:6c:1e:b6:e4:85:2e:58:7a:19:50:17:1f:0e:8a:92:72:bc: 4d:50:d3:92:fb:93:95:ed:5b:9a:34:f4:1f:49:f6:8e:a1:30: 3a:fe:82:a9:0a:99:67:9d:cd:b2:8b:02:ea:4b:df:9a:b2:ca: d4:ce:0d:7f:86:2c:7a:2f:ef:e3:7f:38:33:37:32:f8:4b:e8: de:47:95:09:6a:5a:c6:b7:4f:38:78:fc:a6:da:62:4e:4c:fe: c1:72:b5:5e:06:86:49:48:2c:c1:56:3b:84:2d:0a:10:16:24: 6a:58:9e:8c:e8:f4:45:9b:03:47:c7:f6:e4:04:60:e1:ee:5e: ea:9f:16:7d:0a:51:3e:9d:11:e0:5a:cd:12:90:50:80:34:b2: f1:47:6c:82:50:dd:ae:36:5e:ba:34:a0:2c:e7:9b:7a:de:f7: 0d:7b:27:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTc/GoHDvASQnvIDo700H6XkDpgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjEwMTEwOTE4MjhaFw0yNjEwMTIxMjAzMjhaMDMxMTAvBgNV BAMTKDRFNTQ3ODQ3Rjk2NzdDOURBQ0M1MUQyMDA0NzAxNDNGM0IyODc4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZljswU2FhxOVaYYMDjayNhAN 245nCLCXSGK3Z9cleHaU8vesmnhUdQIez6pBK0XQLsyQrmOKQOKoAV/eH7oCjPq1 wbAVipZTtA/t2fnWJaWR7p9fe0yUZR+N5Oim5XvymQdT3aVdKNa8gCw2cytiiPm/ s0HnF9vW4ga7tVGdS7DO7/xmHq902JIalJNHnOWq2R75nKofW7ZGOBVkxMqpdKxl aOmV65bwIASTYbLNc9kWs04qB19YJ1vKeuQS1Tn8WXiXIbgRWVXIZbsS7aL6Jinx VD4SEA39x3/VD9UBeVf7r29nFAhPRnTHbo0dXGEf/og3yBxLpHwZfIGsgRYVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTlR4R/lnfJ2sxR0gBHAUPzsoeN0wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEJPZ0h4vMZUc8pRcYIG zNkfuWXDBHauC/2O/1a94WpDTYBNazncNIJ5LBDKNOFOl6IUCLU5jTykNDONou95 uqYaeZCHyuyGkaLSZnxsb26KIdWzsU8OJuQ3H2wetuSFLlh6GVAXHw6KknK8TVDT kvuTle1bmjT0H0n2jqEwOv6CqQqZZ53NsosC6kvfmrLK1M4Nf4Ysei/v4384Mzcy +Evo3keVCWpaxrdPOHj8ptpiTkz+wXK1XgaGSUgswVY7hC0KEBYkaliejOj0RZsD R8f25ARg4e5e6p8WfQpRPp0R4FrNEpBQgDSy8UdsglDdrjZeujSgLOebet73DXsn ZA== -----END CERTIFICATE-----Generated at Sun Oct 11 14:49:02 2026 by rpki-client