$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json) Hash identifier: xwQNbI/qd14qaArdbJPOfyxraoB4FIRN/GmQUkVN0zE= Subject key identifier: 72:A7:91:00:1C:B6:BF:61:D6:24:71:5E:7E:AE:25:C9:E8:32:85:E7 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 3668CBDCB0C2481E80DD397A009E91244304FAFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft Manifest number: 05CF Signing time: Mon 21 Sep 2026 15:24:21 +0000 Manifest this update: Mon 21 Sep 2026 15:19:21 +0000 Manifest next update: Tue 22 Sep 2026 17:50:21 +0000 Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: FPN7SqdmsvkHBsJAsiQecDbh10zhLIIUlbfxbMCYGzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:68:cb:dc:b0:c2:48:1e:80:dd:39:7a:00:9e:91:24:43:04:fa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Sep 21 15:19:21 2026 GMT Not After : Sep 22 17:50:21 2026 GMT Subject: CN=72A791001CB6BF61D624715E7EAE25C9E83285E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:3c:a1:c4:ac:2a:f0:b2:73:12:e5:c0:94: 5d:26:b3:22:2d:e0:5c:64:ff:4f:ad:f5:d6:1e:b6: 5a:2d:f9:83:5d:8f:fb:cb:25:12:f4:bf:75:74:34: f1:60:80:3b:18:ed:4e:7a:8e:b1:99:6e:2b:48:51: ff:a0:c8:d6:c6:35:ec:7d:f8:01:4d:42:97:4e:bd: c0:e6:f7:24:dc:cb:8e:99:fa:26:08:d9:d1:e3:1e: a5:8a:c7:c1:55:f7:b6:32:38:4b:60:58:51:18:84: 6f:be:cf:d0:e7:9b:0f:a2:b2:f3:78:e4:7c:64:06: 4f:a7:ee:0a:9d:93:16:6c:f2:10:5a:80:0d:de:a6: 10:cc:be:80:69:37:a2:f9:8a:67:cf:7c:88:7e:de: 27:0e:13:e3:d4:87:e6:72:95:5e:d4:b6:a8:64:e4: d8:f7:f8:72:e7:d1:79:17:ef:0b:d8:87:ec:6b:8f: be:88:6a:ea:1f:6d:c2:70:49:25:41:dd:12:37:e8: 97:1e:ae:1f:89:d2:1e:cf:19:8e:5b:9e:81:e0:cd: 9e:f0:06:be:9c:05:4a:42:11:68:9e:82:e1:78:e7: 13:d5:44:40:86:bb:8b:d4:a9:93:31:19:04:0e:6f: af:24:2a:a7:74:cc:10:6a:c6:27:8a:1a:46:b9:49: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:91:00:1C:B6:BF:61:D6:24:71:5E:7E:AE:25:C9:E8:32:85:E7 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:3b:a0:3a:32:a7:ea:5e:69:9d:de:8d:8d:ab:a6:e7:ea: 08:3f:c5:73:ff:52:71:c5:94:c9:55:e6:36:03:88:3f:33:5d: 9e:d9:89:b1:dd:7a:03:33:74:56:a0:b7:8e:f3:17:3c:04:dc: fe:9b:e1:b8:db:38:f4:88:f4:f4:c9:b9:c2:02:87:db:0a:60: 13:49:12:6c:e1:8c:8c:2d:84:df:97:12:e9:fc:39:96:b2:66: 1c:e4:25:44:70:a0:f9:5d:35:b6:e2:37:6e:6b:a2:55:e0:24: 6a:b6:72:d3:c8:51:3c:f5:f7:57:52:19:ef:48:fd:25:62:c8: 01:a3:76:83:ae:c7:ff:af:e0:23:c1:2e:87:d3:a6:ba:a8:71: 76:91:c5:aa:2e:96:36:4c:d8:4e:fc:80:cd:5f:d8:84:98:67: 1f:7d:ad:d5:c0:0c:20:d6:c2:f1:2b:f8:bd:ac:ee:0f:0e:e9: 0d:d2:78:16:cf:ec:a8:99:14:41:97:9b:8d:95:70:dc:61:b7: a1:32:43:93:db:ae:d5:37:0f:9c:f2:82:f3:1d:34:c2:a5:73: 5f:c2:3e:b8:44:f2:a9:83:50:a5:b2:a5:aa:8f:f6:5d:69:8b: 9e:1e:b7:d7:6d:1e:cd:bf:89:43:51:91:58:2e:23:32:fd:01: 36:d5:60:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNmjL3LDCSB6A3Tl6AJ6RJEME+v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjA5MjExNTE5MjFaFw0yNjA5MjIxNzUwMjFaMDMxMTAvBgNV BAMTKDcyQTc5MTAwMUNCNkJGNjFENjI0NzE1RTdFQUUyNUM5RTgzMjg1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSDyhxKwq8LJzEuXAlF0msyIt 4Fxk/0+t9dYetlot+YNdj/vLJRL0v3V0NPFggDsY7U56jrGZbitIUf+gyNbGNex9 +AFNQpdOvcDm9yTcy46Z+iYI2dHjHqWKx8FV97YyOEtgWFEYhG++z9Dnmw+isvN4 5HxkBk+n7gqdkxZs8hBagA3ephDMvoBpN6L5imfPfIh+3icOE+PUh+ZylV7Utqhk 5Nj3+HLn0XkX7wvYh+xrj76IauofbcJwSSVB3RI36Jcerh+J0h7PGY5bnoHgzZ7w Br6cBUpCEWieguF45xPVRECGu4vUqZMxGQQOb68kKqd0zBBqxieKGka5SbyjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcqeRABy2v2HWJHFefq4lyegyhecwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8xLzMwRUMzNDFD QzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkEzug OjKn6l5pnd6Njaum5+oIP8Vz/1JxxZTJVeY2A4g/M12e2Ymx3XoDM3RWoLeO8xc8 BNz+m+G42zj0iPT0ybnCAofbCmATSRJs4YyMLYTflxLp/DmWsmYc5CVEcKD5XTW2 4jdua6JV4CRqtnLTyFE89fdXUhnvSP0lYsgBo3aDrsf/r+AjwS6H06a6qHF2kcWq LpY2TNhO/IDNX9iEmGcffa3VwAwg1sLxK/i9rO4PDukN0ngWz+yomRRBl5uNlXDc YbehMkOT267VNw+c8oLzHTTCpXNfwj64RPKpg1ClsqWqj/ZdaYueHrfXbR7Nv4lD UZFYLiMy/QE21WAH -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:59 2026 by rpki-client