$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: VpGoUEQtOFYgYHXgq3UFzk7TPJKZRVNfyNffLJ+D8JY= Subject key identifier: 7F:77:54:88:D7:37:FF:CE:5B:F9:FF:DD:7B:AC:FB:6C:89:3C:EF:96 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 113D480B964D04FEE3E3EBEB55DA91D69787FBAD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 0329 Signing time: Sun 20 Sep 2026 07:13:35 +0000 Manifest this update: Sun 20 Sep 2026 07:08:35 +0000 Manifest next update: Mon 21 Sep 2026 10:49:35 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: fEs17Y6AXJeY990c13GUt9UTtKtp3icyK95IReydsvI=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3d:48:0b:96:4d:04:fe:e3:e3:eb:eb:55:da:91:d6:97:87:fb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Sep 20 07:08:35 2026 GMT Not After : Sep 21 10:49:35 2026 GMT Subject: CN=7F775488D737FFCE5BF9FFDD7BACFB6C893CEF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:69:df:7a:44:e0:8a:5d:41:67:c1:fa:f4: 50:90:14:7a:b3:3a:e5:22:6e:b7:1e:73:2d:2c:d1: 49:03:71:e1:3e:3b:e4:20:10:52:05:c0:51:8d:06: 66:cb:3f:4f:4f:ce:93:db:ed:6d:f7:90:c9:eb:26: e2:b3:2c:e6:7a:44:66:63:a7:7d:95:55:66:c6:1a: 83:ee:f2:a7:8a:17:bf:73:e5:6a:8f:d8:d6:e6:29: 70:66:56:e4:dc:16:04:55:87:bf:1f:19:a8:d2:b4: 4a:50:ee:ee:16:be:af:33:73:5a:6a:90:20:af:6f: d6:f5:cc:7b:ec:7a:0f:64:56:d6:a3:65:e4:4a:36: e8:cb:c4:5c:59:6a:08:49:ad:42:6b:6c:af:98:35: f2:dd:19:34:53:9d:c1:7b:ca:8e:4a:63:6a:57:22: 5b:1f:bf:8b:12:02:62:a4:2c:15:f8:79:ad:9f:6e: 12:75:35:f7:b9:e1:79:30:80:37:2b:f5:90:63:5a: 40:73:b2:f2:bb:06:d1:c1:39:74:df:6e:7a:a8:41: 0f:ce:d8:a2:44:73:01:d5:e3:10:9e:b2:40:ce:29: bb:7d:17:6f:b2:b6:5b:b7:1c:55:66:70:c5:19:10: da:06:80:23:a5:1d:59:26:9a:9c:e8:62:5f:f3:6c: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:54:88:D7:37:FF:CE:5B:F9:FF:DD:7B:AC:FB:6C:89:3C:EF:96 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:42:da:e8:9e:5b:43:4d:d8:4d:4e:0d:d8:ec:ff:63:48:68: ce:4b:62:df:a8:58:03:e8:43:55:4c:83:6a:46:98:e6:4c:e7: 8d:7a:fd:de:9b:ca:80:36:51:57:78:0a:b4:d1:2c:17:0b:36: f0:aa:1d:49:ef:cc:0c:50:4f:46:76:38:61:8f:f3:88:b5:90: ac:12:7d:e6:49:68:7c:f1:20:5d:0c:1f:8c:f0:c2:76:49:ba: ba:6a:75:c6:4a:4e:84:2c:de:7f:02:24:5f:3d:51:32:42:29: ca:b5:f1:ba:6e:2d:78:7c:7b:7b:96:46:b2:2c:9f:6f:7c:65: e0:3e:3d:af:72:22:d9:f2:e2:6d:b2:f0:21:3f:d4:03:52:d5: 92:af:12:42:51:3d:14:9b:38:22:9b:77:ec:46:24:50:55:26: 14:30:98:ac:3d:7b:1b:56:24:f8:8a:d1:d2:02:fb:09:ca:b4: 1e:c8:bb:4a:d4:43:9f:ab:50:c9:dc:13:8d:30:3a:99:b6:2c: 25:3e:39:e4:06:9f:45:c5:64:f3:5b:ab:8e:d5:aa:68:e2:2a: 5a:72:73:cd:28:12:9c:c7:75:b5:1f:27:f3:6c:7c:5d:4d:74: 9a:db:90:2d:8f:09:e0:89:c0:0d:10:84:61:47:ba:9c:7a:2a: 2e:1b:22:22 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUET1IC5ZNBP7j4+vrVdqR1peH+60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA5MjAwNzA4MzVaFw0yNjA5MjExMDQ5MzVaMDMxMTAvBgNV BAMTKDdGNzc1NDg4RDczN0ZGQ0U1QkY5RkZERDdCQUNGQjZDODkzQ0VGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO82nfekTgil1BZ8H69FCQFHqz OuUibrcecy0s0UkDceE+O+QgEFIFwFGNBmbLP09PzpPb7W33kMnrJuKzLOZ6RGZj p32VVWbGGoPu8qeKF79z5WqP2NbmKXBmVuTcFgRVh78fGajStEpQ7u4Wvq8zc1pq kCCvb9b1zHvseg9kVtajZeRKNujLxFxZaghJrUJrbK+YNfLdGTRTncF7yo5KY2pX Ilsfv4sSAmKkLBX4ea2fbhJ1Nfe54XkwgDcr9ZBjWkBzsvK7BtHBOXTfbnqoQQ/O 2KJEcwHV4xCeskDOKbt9F2+ytlu3HFVmcMUZENoGgCOlHVkmmpzoYl/zbKyPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf3dUiNc3/85b+f/de6z7bIk875YwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuQtro nltDTdhNTg3Y7P9jSGjOS2LfqFgD6ENVTINqRpjmTOeNev3em8qANlFXeAq00SwX Czbwqh1J78wMUE9Gdjhhj/OItZCsEn3mSWh88SBdDB+M8MJ2Sbq6anXGSk6ELN5/ AiRfPVEyQinKtfG6bi14fHt7lkayLJ9vfGXgPj2vciLZ8uJtsvAhP9QDUtWSrxJC UT0Umzgim3fsRiRQVSYUMJisPXsbViT4itHSAvsJyrQeyLtK1EOfq1DJ3BONMDqZ tiwlPjnkBp9FxWTzW6uO1apo4ipacnPNKBKcx3W1HyfzbHxdTXSa25AtjwngicAN EIRhR7qceiouGyIi -----END CERTIFICATE-----Generated at Sun Sep 20 16:28:13 2026 by rpki-client