$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft File: A65FEBC1C46ADFA57072286562C5B598165C67EE.mft (raw, json) Hash identifier: VJ/+FkATv3tuQndpzjdhsV6g7g++N89j5A5f3+gpimQ= Subject key identifier: 84:98:AD:20:52:79:4B:8D:BB:3A:8F:15:18:C1:63:87:43:61:0F:BD Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee Certificate serial: 323A9D9EF712846ADBC423A87E84B9B9F6992096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft Manifest number: 31 Signing time: Sun 15 Nov 2026 17:30:22 +0000 Manifest this update: Sun 15 Nov 2026 17:25:22 +0000 Manifest next update: Mon 16 Nov 2026 21:11:22 +0000 Files and hashes: 1: A65FEBC1C46ADFA57072286562C5B598165C67EE.crl (hash: jG2jjjcg2X1VO78+XVcp8fVePASiUJDlaUm1A87NjN0=) 2: 3136372e39342e3137322e302f32342d3234203d3e20383132.roa (hash: G8x+fUzXcLwiY+ROUXSWk+wDyXKPyyI0mWKRwK9o2m0=) 3: 3136372e39342e3137332e302f32342d3234203d3e20383132.roa (hash: 35AwVzdgEGp5zlnr0/lNtdMD3Uj6xpoz0EG4D5pXkKY=) 4: 3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa (hash: EujYDAEvWheVUX+5zyMLxg56IY6SlTmfDh+zV3yAF08=) 5: 3136372e39342e3137312e302f32342d3234203d3e20383132.roa (hash: NlQDMZYh+ngjbmQHGyVQcsSwU1CBlfu7kANaaWPP2jc=) 6: 3139302e3130322e3130302e302f32322d3232203d3e20333937343233.roa (hash: SyImA9I94NpPLhfvq0A9BsLA+kdB16CHA3jDOJ+cmI4=) 7: 3136372e39342e3137302e302f32342d3234203d3e20383132.roa (hash: oHzSeP2PpUoa6IQgvHLBBzBCQLqhOSBXbzdll+dG7jQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3a:9d:9e:f7:12:84:6a:db:c4:23:a8:7e:84:b9:b9:f6:99:20:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee Validity Not Before: Nov 15 17:25:22 2026 GMT Not After : Nov 16 21:11:22 2026 GMT Subject: CN=8498AD2052794B8DBB3A8F1518C1638743610FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:f6:99:ea:57:d1:91:1e:48:5a:97:67:9a: a2:c7:52:9e:d7:42:4d:b4:e5:3a:9e:e3:07:48:2e: d4:1e:1a:4d:b5:b2:22:38:e7:2f:e6:7c:68:0b:a2: 4c:f8:5b:87:d1:75:64:c7:43:7c:fa:52:1b:41:27: c8:64:32:b2:63:11:be:f4:a6:b0:a7:2c:b0:a3:d1: f1:c8:88:fb:66:bf:0e:3a:2a:bb:58:f6:c2:20:67: ad:36:14:65:8f:64:9c:fa:df:7a:47:8d:88:9f:2e: b1:bb:93:19:85:be:99:9b:2c:d2:ad:df:bc:fb:0e: bf:c9:83:fe:fb:bc:c8:f6:09:35:9e:b4:4b:c6:c6: 77:c4:06:4c:40:ee:f1:98:ef:53:0f:42:b4:9c:4a: 0c:81:01:a7:f3:cb:b8:41:02:be:c3:4e:ef:4d:b1: 48:30:cd:9a:63:b2:fc:e1:d3:e8:7d:6f:45:6b:e6: 14:2a:2a:d3:b8:6e:2a:1b:15:94:91:ff:a7:ee:d4: 6b:56:11:87:d0:5e:8b:b4:5d:b4:12:85:2b:e4:9c: 0b:13:85:9f:b3:58:e8:b6:a1:96:5a:96:95:ac:c6: 0a:e1:df:66:15:0d:47:60:74:de:ba:78:00:76:d0: c8:84:04:8e:cc:1b:83:81:87:2e:af:d3:65:92:c7: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:AD:20:52:79:4B:8D:BB:3A:8F:15:18:C1:63:87:43:61:0F:BD X509v3 Authority Key Identifier: keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6e:d3:6a:56:09:82:5d:d6:7f:c4:c9:77:14:80:c3:35:cc: 37:86:94:90:6e:aa:b4:17:f7:bd:6a:0e:62:02:0d:e3:5a:75: 47:2f:cf:25:ce:e1:fc:c6:c8:70:59:a8:eb:c4:68:37:b4:c0: 1b:ef:48:a9:2e:36:de:00:be:97:26:45:bf:81:61:13:66:f5: 71:43:09:ea:78:b0:01:08:f7:4e:9d:d1:05:8a:3e:2d:63:f1: 9c:fd:2a:03:13:51:3f:ae:6b:90:48:af:5d:8b:42:0f:01:7c: 06:e5:15:66:a3:f7:c7:1a:6e:72:69:a8:5c:39:ca:eb:c9:20: 4f:eb:ab:10:65:85:54:95:9e:25:b1:6a:3c:10:0f:2d:92:92: 96:f2:17:98:e8:90:a1:43:42:ce:e5:94:64:05:c9:c3:56:e2: 4e:0b:9d:10:b5:d7:1c:1a:b3:5a:93:9c:0c:2f:4d:cf:a6:62: 9b:26:06:28:0f:62:d3:25:f3:e8:9b:c3:d7:ba:44:37:0b:4a: 5d:23:f9:d0:50:f1:0f:6a:3b:6b:25:5d:4d:13:94:50:08:a5: 16:f0:19:87:6b:6f:df:ae:f2:35:03:f1:8f:aa:7f:21:36:b2: 3a:14:2f:c0:b3:ba:29:78:d3:01:ec:45:75:74:91:10:19:c6: 64:21:7f:b9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMjqdnvcShGrbxCOofoS5ufaZIJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTY1ZmViYzFjNDZhZGZhNTcwNzIyODY1NjJjNWI1OTgx NjVjNjdlZTAeFw0yNjExMTUxNzI1MjJaFw0yNjExMTYyMTExMjJaMDMxMTAvBgNV BAMTKDg0OThBRDIwNTI3OTRCOERCQjNBOEYxNTE4QzE2Mzg3NDM2MTBGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHdvaZ6lfRkR5IWpdnmqLHUp7X Qk205Tqe4wdILtQeGk21siI45y/mfGgLokz4W4fRdWTHQ3z6UhtBJ8hkMrJjEb70 prCnLLCj0fHIiPtmvw46KrtY9sIgZ602FGWPZJz633pHjYifLrG7kxmFvpmbLNKt 37z7Dr/Jg/77vMj2CTWetEvGxnfEBkxA7vGY71MPQrScSgyBAafzy7hBAr7DTu9N sUgwzZpjsvzh0+h9b0Vr5hQqKtO4biobFZSR/6fu1GtWEYfQXou0XbQShSvknAsT hZ+zWOi2oZZalpWsxgrh32YVDUdgdN66eAB20MiEBI7MG4OBhy6v02WSx9IhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhJitIFJ5S427Oo8VGMFjh0NhD70wHwYDVR0j BBgwFoAUpl/rwcRq36VwcihlYsW1mBZcZ+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjVjODFlYjAtMTUyMS00MDA1LTg2YzgtMzMyZWYyYzg2 OWNiLzAvQTY1RkVCQzFDNDZBREZBNTcwNzIyODY1NjJDNUI1OTgxNjVDNjdFRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BsX3J3Y1JxMzZWd2NpaGxZc1cxbUJa Y1otNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yNWM4MWViMC0x NTIxLTQwMDUtODZjOC0zMzJlZjJjODY5Y2IvMC9BNjVGRUJDMUM0NkFERkE1NzA3 MjI4NjU2MkM1QjU5ODE2NUM2N0VFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmG7TalYJgl3Wf8TJdxSA wzXMN4aUkG6qtBf3vWoOYgIN41p1Ry/PJc7h/MbIcFmo68RoN7TAG+9IqS423gC+ lyZFv4FhE2b1cUMJ6niwAQj3Tp3RBYo+LWPxnP0qAxNRP65rkEivXYtCDwF8BuUV ZqP3xxpucmmoXDnK68kgT+urEGWFVJWeJbFqPBAPLZKSlvIXmOiQoUNCzuWUZAXJ w1biTgudELXXHBqzWpOcDC9Nz6ZimyYGKA9i0yXz6JvD17pENwtKXSP50FDxD2o7 ayVdTROUUAilFvAZh2tv367yNQPxj6p/ITayOhQvwLO6KXjTAexFdXSREBnGZCF/ uQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:56:18 2026 by rpki-client