$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: eGRumlUrUj0vFObUaHCwvJFF2ZLeH198n0aaMByqNmw= Subject key identifier: D4:19:9F:59:A8:48:6A:DC:2C:D3:5F:DF:A0:04:EB:61:DC:81:3E:2E Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 7FD7536FA071DB4A6E117D6CA5FC1D0C00D33AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 02A8 Signing time: Mon 21 Sep 2026 08:09:17 +0000 Manifest this update: Mon 21 Sep 2026 08:04:17 +0000 Manifest next update: Tue 22 Sep 2026 09:37:17 +0000 Files and hashes: 1: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) 2: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: Ihxn3msC/Fo6it/e7haLS9mRRSpNFbZaAhU8RwXVB/g=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: aQqyppfq1G0dtgfce5qUTiEgqU4ipo9uY/suA4axV58=) 4: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=) 5: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: kBwEK18YCfMx0ouzbMGql3wfMadnMbnDgpYbNfw03+g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d7:53:6f:a0:71:db:4a:6e:11:7d:6c:a5:fc:1d:0c:00:d3:3a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Sep 21 08:04:17 2026 GMT Not After : Sep 22 09:37:17 2026 GMT Subject: CN=D4199F59A8486ADC2CD35FDFA004EB61DC813E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:8a:6b:64:2a:0c:59:95:1f:12:16:ab:53: 88:85:b4:29:10:75:ba:1b:3d:d2:39:bd:75:70:46: ef:7e:f4:3a:cb:b6:88:71:52:58:ba:60:29:39:43: 7d:e4:8d:5d:4d:a8:4d:a6:b8:b0:d7:6c:3d:c6:ab: 64:65:60:e0:25:13:19:9d:12:dc:6a:51:3c:a8:fe: 48:a0:6d:9a:6e:ba:b2:63:54:cd:2d:38:2b:a3:15: a8:df:b0:05:63:d1:af:b2:8b:ca:37:11:83:6e:44: cd:4e:f6:70:18:de:7b:c1:95:14:d2:be:98:ee:33: ec:15:0b:53:91:a4:a0:c5:46:c3:45:9d:35:5f:47: 65:c2:ea:77:5c:20:87:a7:95:b8:f5:19:a6:fe:30: d9:74:75:fc:1f:9c:d7:fb:ff:c9:d0:91:a0:6e:d2: c6:24:a3:25:e6:e1:8a:df:4b:b4:19:aa:c6:44:38: 57:df:3c:3a:f2:00:65:54:fd:20:b4:ec:bf:1c:39: 17:38:25:e5:6c:7f:f3:ac:35:af:08:b1:36:87:95: 60:23:2c:73:5b:6d:ca:c9:41:5e:58:04:dc:0b:f2: 7c:20:13:f2:6a:8f:c5:75:a2:35:af:ee:12:b2:00: 2c:4f:91:69:7c:2c:5f:2a:f2:46:48:19:0f:e7:0a: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:9F:59:A8:48:6A:DC:2C:D3:5F:DF:A0:04:EB:61:DC:81:3E:2E X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:67:3e:b7:6b:7c:68:93:57:2c:ac:dc:d6:9c:94:a3:ec:e3: e8:2a:b6:45:48:b4:60:bf:89:5a:ae:df:30:0a:86:a0:05:dd: 5a:9f:87:51:c6:3c:65:e2:12:78:4c:c9:b1:c0:fe:00:e1:a3: 02:39:00:54:ec:ed:b7:f3:fc:0e:de:2d:5f:85:19:bd:66:9e: 9b:77:3c:85:01:11:5c:23:4c:d4:55:30:a4:b4:d9:13:9f:4a: 77:8c:a9:50:2b:ca:69:f6:41:d6:b9:5c:1a:7a:2c:4c:29:8a: 06:36:54:53:6b:33:57:f4:60:92:21:85:38:69:bf:88:df:83: 06:b7:89:da:d7:02:95:30:c1:d7:98:ba:2c:fc:8e:57:ce:cc: f0:eb:05:1c:b3:c6:c9:59:6c:91:3c:92:a8:f9:c8:0c:a2:c3: 3d:aa:fe:e9:6e:f4:ea:e5:82:ec:bc:ab:24:7e:02:8d:ca:3f: 50:54:b0:fb:d8:6d:ba:5d:49:95:ab:1e:77:29:f4:08:ae:de: 97:58:4c:fa:b2:b5:b4:7e:1b:fc:6c:3f:50:8f:f1:e1:90:fb: d5:e3:f6:08:ad:35:34:ec:b9:d5:82:73:92:d1:03:91:85:00: d9:29:05:8b:35:d8:87:0c:3e:a5:4f:84:ba:0c:85:0c:6e:a4: 26:9f:73:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf9dTb6Bx20puEX1spfwdDADTOsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjA5MjEwODA0MTdaFw0yNjA5MjIwOTM3MTdaMDMxMTAvBgNV BAMTKEQ0MTk5RjU5QTg0ODZBREMyQ0QzNUZERkEwMDRFQjYxREM4MTNFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTfYprZCoMWZUfEharU4iFtCkQ dbobPdI5vXVwRu9+9DrLtohxUli6YCk5Q33kjV1NqE2muLDXbD3Gq2RlYOAlExmd EtxqUTyo/kigbZpuurJjVM0tOCujFajfsAVj0a+yi8o3EYNuRM1O9nAY3nvBlRTS vpjuM+wVC1ORpKDFRsNFnTVfR2XC6ndcIIenlbj1Gab+MNl0dfwfnNf7/8nQkaBu 0sYkoyXm4YrfS7QZqsZEOFffPDryAGVU/SC07L8cORc4JeVsf/OsNa8IsTaHlWAj LHNbbcrJQV5YBNwL8nwgE/Jqj8V1ojWv7hKyACxPkWl8LF8q8kZIGQ/nCiSHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1BmfWahIatws01/foATrYdyBPi4wHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmc+t2t8aJNXLKzc1pyU o+zj6Cq2RUi0YL+JWq7fMAqGoAXdWp+HUcY8ZeISeEzJscD+AOGjAjkAVOztt/P8 Dt4tX4UZvWaem3c8hQERXCNM1FUwpLTZE59Kd4ypUCvKafZB1rlcGnosTCmKBjZU U2szV/RgkiGFOGm/iN+DBreJ2tcClTDB15i6LPyOV87M8OsFHLPGyVlskTySqPnI DKLDPar+6W706uWC7LyrJH4Cjco/UFSw+9htul1Jlasedyn0CK7el1hM+rK1tH4b /Gw/UI/x4ZD71eP2CK01NOy51YJzktEDkYUA2SkFizXYhww+pU+EugyFDG6kJp9z 5Q== -----END CERTIFICATE-----Generated at Mon Sep 21 19:52:03 2026 by rpki-client