$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft File: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft (raw, json) Hash identifier: WN4pMCEq5SQWUtUetUNFiwMZOo65g9h6w5H0d5UhvcQ= Subject key identifier: 37:95:65:E0:4E:D3:7C:55:8E:15:5A:AB:8A:AE:7E:18:A8:86:BA:FC Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Certificate serial: 5A96889501B75218C79D69EB95E3862BEE32A927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft Manifest number: 34 Signing time: Tue 22 Sep 2026 22:52:50 +0000 Manifest this update: Tue 22 Sep 2026 22:47:50 +0000 Manifest next update: Thu 24 Sep 2026 02:29:50 +0000 Files and hashes: 1: 39322e3234302e3232382e302f32342d3234203d3e203239343035.roa (hash: LxIsT0Z72nxO3Y284vPXgs9ScSm6Vj2A4oz7LMKnhVo=) 2: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl (hash: LoPaafkwPCir+mZt89/XW4NRFkeUVidsuK2R+9ZrUO4=) 3: 39332e3138342e36342e302f32302d3234203d3e203239343035.roa (hash: qJyJZHLgF+VN+ii9OlFgksvK1ICSHqOEqlSg1DkmbiU=) 4: 39322e3234302e3234352e302f32342d3234203d3e203239343035.roa (hash: zjSSSsKGGZnm7k5LvFSb2guDmXTBkSv+ePAfP6MlUDg=) 5: 3138352e3137362e37322e302f32322d3234203d3e203239343035.roa (hash: o4JrISAeOko/D99D7KNeLjlvTZIPY3wcIRzxxDIeJsA=) 6: 38362e3131302e3232342e302f31392d3234203d3e203239343035.roa (hash: b0zChgdz1vIMVhWdR5HGNfcD59h2BRuUdpFR8SjQgf4=) 7: 38362e3131302e3234382e302f32342d3234203d3e203239343035.roa (hash: jkNhjwzhqphtd387aGK5KWwfcNq8xmY5Fe084eh7yWY=) 8: 39332e3138342e37372e302f32342d3234203d3e203239343035.roa (hash: KNROAqPfXENphQBzyfVk59v5Hvqlnlhj1Iqa4/Wrvfw=) 9: 39322e3234302e3233342e302f32342d3234203d3e203239343035.roa (hash: ZbrO3s1/sE3VB3YBwEq8N4l7+Zh6Aj9FReUoQ3Dbpi0=) 10: 326130313a3339303a3a2f33322d3634203d3e203239343035.roa (hash: EkahyzLSm2/v6AdCA2RLCahqupgwq6ocXbGbYPrCVpQ=) 11: 39322e3234302e3232382e302f32342d3234203d3e203432303035.roa (hash: Nr549lUMnLpN1HEp8LJdbOoN53ZSlUaUINP6G5zL7j8=) 12: 39322e3234302e3233372e302f32342d3234203d3e203239343035.roa (hash: 8TUKR6ccLxStHiY46OibIeVHKIYrsgaU4259nUYDI0Q=) 13: 39322e3234302e3234312e302f32342d3234203d3e203239343035.roa (hash: Opg5YCuZVpoZQMqVkdc7dq3/iqNbHLYh5wpFHjBXqwM=) 14: 39322e3234302e3233302e302f32342d3234203d3e203239343035.roa (hash: fDWL1gciinjC0IXRqT2Q3PtDEb5nlNuoXJzFK/hcNV4=) 15: 3231372e37332e31362e302f32342d3234203d3e203239343035.roa (hash: LL3P7lvswxfOA25czv9v+WkF3C0D0KnWO5P9MOkColw=) 16: 39322e3234302e3234322e302f32342d3234203d3e203239343035.roa (hash: kM+gDjZiEvVCID7wvcbCRUgVsT4ajdEwlZgKFdVmvR8=) 17: 39322e3234302e3233362e302f32342d3234203d3e203239343035.roa (hash: 5oyqw+KhylpUHglogsy7/I4LpBle8Q3qWBoa/BrHLEw=) 18: 39322e3234302e3233312e302f32342d3234203d3e203239343035.roa (hash: 8jlFwwnDnJiuu6OA5YfbHOJwmtTLw6Nop9J7C0sLtPc=) 19: 3130392e37342e3134342e302f32302d3234203d3e203239343035.roa (hash: xohX/Ehc0bh3gDMEqDdvV2NRcW4FHqeBZZSuJrMdXQI=) 20: 39322e3234302e3234392e302f32342d3234203d3e203239343035.roa (hash: OWddMU2lVARc4e0qTNNk2twrubMUNkpdn9k9PUQykHc=) 21: 39322e3234302e3235332e302f32342d3234203d3e203239343035.roa (hash: 3TcyJn0Vba3SdYkAgBupE2RJSi7wt6IrY6almrGdDwA=) 22: 3231372e37332e31372e302f32342d3234203d3e203239343035.roa (hash: DDST7kks9q2ds1FaT+50IBJBBJX55AtusDnbq0N98fU=) 23: 34362e3232392e3232342e302f32302d3234203d3e203239343035.roa (hash: 4IIdVeDc8Q4j/hlnrmDiN32JvOe5YxgT+shULM0apQE=) 24: 3231372e37332e31362e302f32302d3234203d3e203239343035.roa (hash: iWR6okAvKqyu5oJU5+aD9MzJfwy1JD9sl+Akz3xHcFU=) 25: 39322e3234302e3232392e302f32342d3234203d3e203239343035.roa (hash: DiT3qyppfKnihj39C/OG8uNu1BGSOnEXplU91nLYAfM=) 26: 39322e3234302e3234342e302f32342d3234203d3e203239343035.roa (hash: IqjGqo5bykodH/rQX0Yyj0vB/XG7K+vBGQ1VS0dufJA=) 27: 326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa (hash: OaS/OQQXkjX3sJOmUl5zc9tQy3jz0o+bUQUBhd2ZQH0=) 28: 38362e3131302e3234332e302f32342d3234203d3e203239343035.roa (hash: +f51ZZBf9NkOVMQhrwv8QxlQbFeYhMSfw/1KOCVjv/M=) 29: 39322e3234302e3235342e302f32342d3234203d3e203239343035.roa (hash: 7VdxSCKZcsd3qAeViATvYYCpFD+a1fGjlJWlaJPO0iQ=) 30: 39322e3234302e3233352e302f32342d3234203d3e203239343035.roa (hash: EGBbBNCVgZA7RRgb1ikg8DLO4hYxR8hBfm0EuF5QV+s=) 31: 38312e38392e34382e302f32302d3234203d3e203239343035.roa (hash: oOFdsTbMdYmh54V2UagrZUE6rX1OAnUs3P4bv6a/jzs=) 32: 326130303a313064383a3a2f33322d3634203d3e203239343035.roa (hash: SjPp4clvAHy+KAtZ7R25YFosiP+RM2Ku5fULo9nmZMA=) 33: 38362e3131302e3234312e302f32342d3234203d3e203239343035.roa (hash: psnZte3+Q299US8D2WamKfH/o+Xxqk26yh9SNQ4KUJw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:96:88:95:01:b7:52:18:c7:9d:69:eb:95:e3:86:2b:ee:32:a9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Validity Not Before: Sep 22 22:47:50 2026 GMT Not After : Sep 24 02:29:50 2026 GMT Subject: CN=379565E04ED37C558E155AAB8AAE7E18A886BAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:48:5a:82:18:90:f8:de:43:67:83:f1:85: 1c:79:c9:5f:e4:5f:33:84:21:63:9a:78:7d:89:4a: 6c:65:72:6a:a4:55:bd:25:34:fd:48:71:16:d8:7c: b2:c9:1b:c4:91:5a:f0:6c:03:e5:9e:34:25:6f:42: 3e:80:2c:6e:f9:7e:bb:08:3b:9c:30:cb:9a:62:a2: 42:9d:64:19:0e:cb:ab:8c:7c:21:17:9f:b3:f5:9b: 6e:8f:e3:7f:20:be:87:3f:f2:a2:44:e1:ef:da:95: bf:6b:88:68:df:3e:e9:7a:a4:06:3d:5a:80:44:f5: 29:9f:8e:30:fd:b9:97:54:e4:0d:3f:ee:85:2c:ae: b1:9d:55:95:5b:13:db:13:cb:d7:32:bd:7c:77:5e: d7:da:d5:be:41:d6:52:2d:53:d6:94:18:4b:4c:c2: b5:33:d6:b8:8e:c4:d8:a9:a0:dd:6f:c2:34:a1:05: d5:dd:34:f4:d3:23:73:c8:cc:27:8a:c0:33:3c:66: cb:24:fa:ca:7f:e8:4d:aa:af:a3:bd:43:1d:9f:bb: 6b:78:1c:90:c9:1c:14:e8:e7:63:c4:b2:a3:e0:b4: 58:f8:c2:aa:b1:6e:0c:0e:51:88:2c:51:bb:ea:bb: 55:f0:dc:b7:68:3f:4b:82:73:53:65:ee:3c:51:95: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:65:E0:4E:D3:7C:55:8E:15:5A:AB:8A:AE:7E:18:A8:86:BA:FC X509v3 Authority Key Identifier: keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3d:a4:fe:49:67:fd:2d:8e:1a:a6:8d:34:50:de:80:ee:68: 6d:d5:34:73:3c:21:93:42:37:c2:fd:86:25:4a:6f:d5:c2:87: 8d:22:29:19:31:84:57:52:f3:44:ce:0c:30:30:f9:0b:c6:73: 85:af:8f:12:c5:2a:5c:8a:c4:a6:81:e7:49:65:b5:93:5b:e8: dc:62:cd:b5:e5:13:0c:2a:16:a4:79:b2:54:06:3e:99:a4:c8: 7a:e3:5a:c1:a1:76:21:0e:4a:55:2a:ed:32:2f:32:52:c3:65: 59:f5:87:61:57:e2:d2:f6:e2:ff:dc:1e:52:3d:46:98:e0:9d: 9d:d9:17:a0:53:30:4d:f1:c6:86:72:d7:ac:80:63:80:64:7e: 9b:98:50:bb:58:4b:44:15:40:dd:f8:c2:cd:1c:fd:0f:c0:84: 3a:48:23:f9:43:27:4f:aa:d5:9c:bb:59:82:e6:1f:c3:5e:4c: 1f:cd:5d:c0:f1:69:45:af:83:10:a0:07:8a:d2:79:4b:ee:f3: f3:07:e9:ba:4f:40:c5:3c:11:8b:97:84:96:6c:d7:31:f3:d4: cb:d3:ae:45:79:9f:dd:da:65:11:1c:fe:f0:e1:54:c8:2c:c7: 2f:ae:81:62:97:2a:61:5d:85:e6:e2:a9:d7:76:86:45:20:7d: a7:c5:b6:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWpaIlQG3UhjHnWnrleOGK+4yqScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj YjA1Yjg2NjAeFw0yNjA5MjIyMjQ3NTBaFw0yNjA5MjQwMjI5NTBaMDMxMTAvBgNV BAMTKDM3OTU2NUUwNEVEMzdDNTU4RTE1NUFBQjhBQUU3RTE4QTg4NkJBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBH0haghiQ+N5DZ4PxhRx5yV/k XzOEIWOaeH2JSmxlcmqkVb0lNP1IcRbYfLLJG8SRWvBsA+WeNCVvQj6ALG75frsI O5wwy5piokKdZBkOy6uMfCEXn7P1m26P438gvoc/8qJE4e/alb9riGjfPul6pAY9 WoBE9SmfjjD9uZdU5A0/7oUsrrGdVZVbE9sTy9cyvXx3Xtfa1b5B1lItU9aUGEtM wrUz1riOxNipoN1vwjShBdXdNPTTI3PIzCeKwDM8Zssk+sp/6E2qr6O9Qx2fu2t4 HJDJHBTo52PEsqPgtFj4wqqxbgwOUYgsUbvqu1Xw3LdoP0uCc1Nl7jxRlUNFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUN5Vl4E7TfFWOFVqriq5+GKiGuvwwHwYDVR0j BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2 M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz RnVHWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNWEwZWZmMi1i NDVjLTQyOWYtOTAwMS0yMzQxZDQ2YjYzZTAvMC9BQzBDRTNFNkE5REJDRkEyNTFF NTZFNTAwMkVDNEJCQkNCMDVCODY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz2k/kln/S2OGqaNNFDe gO5obdU0czwhk0I3wv2GJUpv1cKHjSIpGTGEV1LzRM4MMDD5C8Zzha+PEsUqXIrE poHnSWW1k1vo3GLNteUTDCoWpHmyVAY+maTIeuNawaF2IQ5KVSrtMi8yUsNlWfWH YVfi0vbi/9weUj1GmOCdndkXoFMwTfHGhnLXrIBjgGR+m5hQu1hLRBVA3fjCzRz9 D8CEOkgj+UMnT6rVnLtZguYfw15MH81dwPFpRa+DEKAHitJ5S+7z8wfpuk9AxTwR i5eElmzXMfPUy9OuRXmf3dplERz+8OFUyCzHL66BYpcqYV2F5uKp13aGRSB9p8W2 cw== -----END CERTIFICATE-----Generated at Wed Sep 23 02:16:23 2026 by rpki-client