$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json) Hash identifier: vPJxZ+QzAYo+SnBhKWs5ZbUlc91wLReuCgSHdKO6i+0= Subject key identifier: 00:C0:94:2F:D6:B7:43:7E:79:3D:B7:7F:58:8A:2E:96:92:FF:F6:C4 Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Certificate serial: 54FC8196632DBA6947E6DCDF3E7B4C3C32E49448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft Manifest number: 018A Signing time: Sat 26 Sep 2026 20:44:05 +0000 Manifest this update: Sat 26 Sep 2026 20:39:05 +0000 Manifest next update: Sun 27 Sep 2026 20:52:05 +0000 Files and hashes: 1: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: e0iSiagz3asDvcyiEPZBg0qeSIeHxjCmDp/Ot12mE3w=) 2: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=) 3: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=) 4: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=) 5: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fc:81:96:63:2d:ba:69:47:e6:dc:df:3e:7b:4c:3c:32:e4:94:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Validity Not Before: Sep 26 20:39:05 2026 GMT Not After : Sep 27 20:52:05 2026 GMT Subject: CN=00C0942FD6B7437E793DB77F588A2E9692FFF6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:68:60:20:2e:af:07:fc:fb:2f:7c:32:96: 05:79:b8:f0:6d:04:64:9d:a5:21:af:a0:3f:13:34: ad:45:20:ac:4b:fe:f2:49:dd:f2:ef:4f:ca:51:57: 9a:57:be:f7:dc:b9:83:bb:93:b2:e2:34:c5:dc:e2: 78:78:90:eb:21:c4:62:af:9b:30:24:0e:ba:7b:4b: 7f:7f:31:b6:32:0d:39:d5:72:6e:7d:e8:d9:b1:15: 7e:e9:1c:8f:31:0a:7c:c3:bd:80:23:c0:9c:2d:9e: 8f:06:84:1a:83:67:46:19:45:e8:a9:c2:fb:04:6b: 91:b0:72:f8:ed:c2:a6:c6:5d:e7:45:ec:65:e1:58: b0:31:1a:ca:54:ca:9a:d7:55:60:4a:6d:e7:3d:6c: b1:33:10:99:1d:a2:86:48:6a:bf:4a:31:41:0f:8e: 36:2b:ab:32:76:62:23:0b:6c:e9:87:e2:7c:90:3d: 83:eb:a8:82:72:a0:2d:b3:21:34:20:2a:35:5f:76: 6d:f0:aa:2c:80:b8:e2:28:0d:c9:4f:8b:ac:07:3b: 53:24:f6:53:f6:a9:74:3a:21:67:69:13:c9:7e:db: 3c:64:9e:9a:ec:68:89:63:d1:1a:b6:5a:a6:29:fd: 5a:47:c0:dd:ce:3f:46:06:51:70:0b:86:8f:49:13: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:94:2F:D6:B7:43:7E:79:3D:B7:7F:58:8A:2E:96:92:FF:F6:C4 X509v3 Authority Key Identifier: keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d4:ca:05:08:70:44:e7:c0:51:94:3d:b3:44:73:f6:46:e7: f1:b1:bf:bd:26:4a:68:8b:af:58:51:8a:9f:7e:a4:90:c3:65: d1:dc:57:c5:a3:c8:6b:b2:e7:8f:b5:cc:cc:90:5f:88:fd:5d: a3:e0:28:8e:9e:60:3d:a5:e0:81:c7:24:82:b6:fd:52:13:1a: a4:62:b9:c8:ff:07:ed:a7:93:fc:2b:67:68:5c:ae:5f:76:23: cc:20:ae:bc:d2:f1:3b:d5:aa:96:be:51:16:bf:2b:fb:69:ce: 17:c6:0b:5a:be:a2:57:b6:3c:63:52:8d:a8:1c:5c:8a:83:4b: 02:22:19:a3:8f:3b:19:62:9d:57:02:52:c5:5b:82:b1:d5:2a: 47:89:d3:e2:28:e0:48:a1:30:2d:62:24:bd:ae:6e:6d:74:14: 6a:8d:53:a7:92:6f:7d:27:a6:1c:7a:97:1a:99:6f:76:cd:c9: e0:72:c6:92:30:07:71:78:ac:e8:a5:00:a4:52:74:76:79:ad: ad:ae:96:8e:7c:06:7e:90:44:8c:42:91:16:4a:3e:10:9e:a7: da:37:29:b2:f8:a9:7e:d0:9d:de:4f:aa:a0:18:36:5c:5e:59: 1a:f8:fd:56:c4:c9:e0:46:b8:a2:22:18:db:20:54:fa:9e:23: b3:56:a7:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVPyBlmMtumlH5tzfPntMPDLklEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1YjYwYmIwY2JiNGE1M2Q5NTQ1YmMyMGI3NzRmZmEw MzZiNGE0NjAeFw0yNjA5MjYyMDM5MDVaFw0yNjA5MjcyMDUyMDVaMDMxMTAvBgNV BAMTKDAwQzA5NDJGRDZCNzQzN0U3OTNEQjc3RjU4OEEyRTk2OTJGRkY2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpk2hgIC6vB/z7L3wylgV5uPBt BGSdpSGvoD8TNK1FIKxL/vJJ3fLvT8pRV5pXvvfcuYO7k7LiNMXc4nh4kOshxGKv mzAkDrp7S39/MbYyDTnVcm596NmxFX7pHI8xCnzDvYAjwJwtno8GhBqDZ0YZReip wvsEa5GwcvjtwqbGXedF7GXhWLAxGspUyprXVWBKbec9bLEzEJkdooZIar9KMUEP jjYrqzJ2YiMLbOmH4nyQPYPrqIJyoC2zITQgKjVfdm3wqiyAuOIoDclPi6wHO1Mk 9lP2qXQ6IWdpE8l+2zxknprsaIlj0Rq2WqYp/VpHwN3OP0YGUXALho9JEw5LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAMCUL9a3Q355Pbd/WIoulpL/9sQwHwYDVR0j BBgwFoAUKVtguwy7SlPZVFvCC3dP+gNrSkYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzUvMjk1QjYwQkIwQ0JCNEE1M0Q5NTQ1QkMyMEI3NzRGRkEwMzZCNEE0Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tWdGd1d3k3U2xQWlZGdkNDM2RQLWdO clNrWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvNS8yOTVCNjBCQjBDQkI0QTUzRDk1 NDVCQzIwQjc3NEZGQTAzNkI0QTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtTKBQhwROfAUZQ9s0Rz 9kbn8bG/vSZKaIuvWFGKn36kkMNl0dxXxaPIa7Lnj7XMzJBfiP1do+Aojp5gPaXg gcckgrb9UhMapGK5yP8H7aeT/CtnaFyuX3YjzCCuvNLxO9Wqlr5RFr8r+2nOF8YL Wr6iV7Y8Y1KNqBxcioNLAiIZo487GWKdVwJSxVuCsdUqR4nT4ijgSKEwLWIkva5u bXQUao1Tp5JvfSemHHqXGplvds3J4HLGkjAHcXis6KUApFJ0dnmtra6WjnwGfpBE jEKRFko+EJ6n2jcpsvipftCd3k+qoBg2XF5ZGvj9VsTJ4Ea4oiIY2yBU+p4js1an CA== -----END CERTIFICATE-----Generated at Sun Sep 27 00:14:57 2026 by rpki-client