$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft File: E9AE8529E9A69A4FA376F17695E6EB8731823068.mft (raw, json) Hash identifier: z++mGu8QyMfQ4RvO1t8VJEBi3ddewxrJ0kc03/H9Y6Y= Subject key identifier: 28:34:C8:42:2B:8B:03:BF:90:7A:92:C6:28:96:40:69:64:7A:1F:1B Authority key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 Certificate issuer: /CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Certificate serial: 13178850CF9AC5794E61CFF21BC3DFF78C37D23D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft Manifest number: 013D Signing time: Mon 21 Sep 2026 18:57:49 +0000 Manifest this update: Mon 21 Sep 2026 18:52:49 +0000 Manifest next update: Tue 22 Sep 2026 21:23:49 +0000 Files and hashes: 1: E9AE8529E9A69A4FA376F17695E6EB8731823068.crl (hash: 2cd0u3AwU6NsRI/ukkL+hw4J63jItMJChxhVCzE/VKA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 21:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:17:88:50:cf:9a:c5:79:4e:61:cf:f2:1b:c3:df:f7:8c:37:d2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Validity Not Before: Sep 21 18:52:49 2026 GMT Not After : Sep 22 21:23:49 2026 GMT Subject: CN=2834C8422B8B03BF907A92C628964069647A1F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:b7:29:82:e6:37:b4:47:f9:92:9e:87:d5: 4e:1b:00:7f:37:97:1b:a5:92:b4:92:de:41:94:79: bb:35:f2:38:84:3d:cf:ff:5a:b7:01:21:ea:27:d4: f8:b4:6f:f8:26:9a:59:d3:f7:81:4d:ee:68:d1:8e: c3:ff:a5:84:28:a7:e3:12:89:6f:13:fb:e4:a8:a1: b5:f4:f0:0d:0c:8a:00:bb:e2:83:9d:3a:fe:5b:5a: 1b:06:e1:f7:93:08:ca:9d:82:1c:11:28:8a:b2:64: 87:0f:58:b0:fe:62:0e:8c:06:41:96:95:53:d2:49: 26:ac:a2:00:38:5f:ff:40:f1:3f:6c:8d:4d:1b:34: e6:8c:44:2a:35:a1:ed:93:49:f6:19:78:1c:37:54: 8f:db:75:c5:47:bc:fb:20:46:00:ad:4d:53:a1:da: 6f:76:c9:6c:3e:76:86:47:23:4d:2f:89:47:cd:c9: cd:48:c4:e9:58:0b:65:0f:8d:94:aa:1a:49:6d:13: 3e:a6:5b:1a:33:bf:f3:59:62:c8:c4:d7:3a:d3:75: 04:59:bd:8a:da:c2:bd:49:02:43:ec:ab:8c:b5:41: e5:cb:c6:a6:8f:df:21:67:9a:eb:80:89:eb:4d:a7: f8:6a:04:0a:15:d2:f1:98:a8:22:98:5e:27:c9:39: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:C8:42:2B:8B:03:BF:90:7A:92:C6:28:96:40:69:64:7A:1F:1B X509v3 Authority Key Identifier: keyid:E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ab:25:1e:d0:b5:15:07:d3:a5:b1:5c:4f:6a:8d:d4:03:d1: d5:f9:c2:26:68:55:34:32:43:1f:87:4f:af:07:ad:dd:23:23: 8e:8f:96:81:fe:7c:c1:f2:1d:75:73:1c:82:f7:22:9e:dc:6a: c0:9e:72:82:38:29:62:9b:0e:29:a9:86:44:6c:a3:b0:e0:cf: ff:a8:4a:9c:44:7c:5a:f6:cf:84:b0:bf:3a:38:3b:e8:ca:f0: 58:41:9f:36:63:b9:3a:fb:f3:e6:e4:cc:65:ca:d9:5a:58:bc: 0c:12:11:e4:4b:9a:a6:e8:c1:92:f2:94:08:35:80:08:99:5e: 69:ef:70:62:c8:a9:50:75:23:ea:94:5d:7a:ff:54:6f:54:f5: d5:35:fd:6c:b7:af:24:e9:07:20:ba:48:87:d6:77:43:30:fe: 61:7e:95:69:08:81:69:0b:3c:9f:61:2c:f5:dc:69:2f:ec:56: f7:f0:9a:1a:d4:b2:29:a5:ca:c6:9d:b6:c0:7e:21:5d:8f:22: 4f:ba:f8:4b:8c:96:47:8c:01:3f:33:d8:9e:9a:a6:fc:2b:66: c3:a5:cf:6d:b2:f4:a5:cd:20:87:1c:8e:2d:77:2b:77:c4:7c: b7:07:1d:25:6f:71:25:34:3f:51:29:01:d2:b5:af:78:40:e1: 73:a8:20:1e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUExeIUM+axXlOYc/yG8Pf94w30j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODcz MTgyMzA2ODAeFw0yNjA5MjExODUyNDlaFw0yNjA5MjIyMTIzNDlaMDMxMTAvBgNV BAMTKDI4MzRDODQyMkI4QjAzQkY5MDdBOTJDNjI4OTY0MDY5NjQ3QTFGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7bcpguY3tEf5kp6H1U4bAH83 lxulkrSS3kGUebs18jiEPc//WrcBIeon1Pi0b/gmmlnT94FN7mjRjsP/pYQop+MS iW8T++SoobX08A0MigC74oOdOv5bWhsG4feTCMqdghwRKIqyZIcPWLD+Yg6MBkGW lVPSSSasogA4X/9A8T9sjU0bNOaMRCo1oe2TSfYZeBw3VI/bdcVHvPsgRgCtTVOh 2m92yWw+doZHI00viUfNyc1IxOlYC2UPjZSqGkltEz6mWxozv/NZYsjE1zrTdQRZ vYrawr1JAkPsq4y1QeXLxqaP3yFnmuuAietNp/hqBAoV0vGYqCKYXifJObC7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKDTIQiuLA7+QepLGKJZAaWR6HxswHwYDVR0j BBgwFoAU6a6FKemmmk+jdvF2lebrhzGCMGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgyMzA2OC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgy MzA2OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9FOUFFODUyOUU5QTY5QTRGQTM3 NkYxNzY5NUU2RUI4NzMxODIzMDY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaslHtC1FQfTpbFcT2qN 1APR1fnCJmhVNDJDH4dPrwet3SMjjo+Wgf58wfIddXMcgvcintxqwJ5ygjgpYpsO KamGRGyjsODP/6hKnER8WvbPhLC/Ojg76MrwWEGfNmO5Ovvz5uTMZcrZWli8DBIR 5EuapujBkvKUCDWACJleae9wYsipUHUj6pRdev9Ub1T11TX9bLevJOkHILpIh9Z3 QzD+YX6VaQiBaQs8n2Es9dxpL+xW9/CaGtSyKaXKxp22wH4hXY8iT7r4S4yWR4wB PzPYnpqm/Ctmw6XPbbL0pc0ghxyOLXcrd8R8twcdJW9xJTQ/USkB0rWveEDhc6gg Hg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:27:30 2026 by rpki-client