$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft File: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft (raw, json) Hash identifier: HZ5intKtnpO7zWvqtqbsm4poMUdkg4MDOMtPEcHsfxg= Subject key identifier: 1C:DE:3B:1A:46:E3:F0:D1:AC:D6:2F:C1:E0:1C:4E:52:28:13:79:84 Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 73B826C490BD66C1415CDC58584211DE4B422962 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft Manifest number: 24 Signing time: Mon 21 Sep 2026 05:39:40 +0000 Manifest this update: Mon 21 Sep 2026 05:34:40 +0000 Manifest next update: Tue 22 Sep 2026 08:48:40 +0000 Files and hashes: 1: 38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa (hash: 1/jkEEeNOnP43ibyNPHAEJgCgm3Ka5HVhVqu++MU1P0=) 2: 38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa (hash: qfTzGyn1Nl6egVGluNuViZeCMzqs0wSyO6mE/CC+VUI=) 3: 326130353a646663363a3a2f33322d3438203d3e20323138383332.roa (hash: vkwaYaeWMNC1Ys7GO0AXyPEzVmDAxeBd8udglsBO7ZU=) 4: 38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa (hash: +acmDmMWHtQlMdklcaxLw6taQI5sUlK4TK6h9skpvvE=) 5: 326130353a646663363a3a2f33322d3438203d3e20323138393034.roa (hash: 5lbNdPAV2OZdblVdouY1xQHsnMnrbWb9RU2Hlj23tiI=) 6: 326130353a646663363a3a2f33322d3438203d3e20323034343634.roa (hash: B8nf9oQedHxo7Uvn7kFEa7TPHRWtKI8dySGByyx8kYk=) 7: 326130353a646663363a3a2f33322d3438203d3e20313939373436.roa (hash: OtbysRIpUSZzrNDU2rC91LQkafnSJ3qxzRUMD/qfhMg=) 8: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl (hash: 7fHxqEUumQd2AOy4emU70lDBSjjLdXDzG5qTWGO9uY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b8:26:c4:90:bd:66:c1:41:5c:dc:58:58:42:11:de:4b:42:29:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 21 05:34:40 2026 GMT Not After : Sep 22 08:48:40 2026 GMT Subject: CN=1CDE3B1A46E3F0D1ACD62FC1E01C4E5228137984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:67:bf:33:b9:c6:5d:de:f2:6a:90:1a:fa: 7f:35:16:a7:f1:88:37:65:d5:63:b6:89:e9:76:f8: 5b:6c:1f:5a:9d:44:2a:6a:4c:bb:05:6b:0d:7a:b4: c9:df:47:24:36:36:09:1f:c1:ae:0e:50:55:17:d2: 07:69:3b:1a:a0:59:2b:61:cc:72:a5:ab:af:79:36: 04:d9:de:62:6f:b3:9e:9f:92:97:d3:d7:f2:8c:d5: 91:ae:7d:b1:0d:09:91:8b:d9:3e:88:68:92:81:61: eb:06:69:2f:2e:bf:f4:20:97:e0:b9:ea:a8:fe:a7: 27:05:db:67:b1:3e:8e:b0:07:80:2e:05:d9:e3:50: 3b:9e:8f:ae:96:fe:d6:6f:ae:e5:1c:dd:d8:be:77: e7:81:1f:66:2c:61:a9:c6:54:48:d6:47:9b:42:d8: 89:65:84:f7:61:fa:4b:f7:20:14:a1:4c:4f:49:9b: 36:d8:6f:bd:7e:aa:17:fc:30:a7:72:5b:97:f4:d0: 99:a0:00:08:b1:e4:49:84:51:f7:6e:52:58:90:74: ba:a1:88:75:3e:92:bb:72:68:9f:af:2c:7c:c8:50: f3:82:b8:62:6b:df:38:f4:2b:ce:1a:c9:c0:9d:4d: b4:fa:91:07:59:2c:b8:74:ac:34:cd:88:e0:25:0c: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:3B:1A:46:E3:F0:D1:AC:D6:2F:C1:E0:1C:4E:52:28:13:79:84 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b5:34:f6:cc:2d:e4:8b:3a:ef:b5:73:e0:57:53:76:1a:e0: c6:31:b7:67:e6:bb:65:27:a2:53:a7:00:30:8f:35:2a:b8:d1: 81:1b:d4:82:53:45:54:e4:75:a6:46:66:c3:f4:26:34:45:5a: da:88:31:66:bf:c7:d5:cf:0f:e9:a8:48:47:4c:1d:87:fb:d3: 68:63:61:89:52:0c:0c:d6:8c:87:d0:e5:db:81:b2:eb:91:3d: c6:3c:8c:c3:dd:08:b7:f8:01:51:82:fb:16:33:46:9b:e9:85: cf:6c:75:8b:6d:94:29:16:85:0e:71:25:68:ab:66:ef:0c:00: 3c:1a:6f:33:c7:e8:a8:18:23:3b:6d:53:29:76:76:28:7c:c6: 60:99:69:67:87:1d:e7:e0:94:f4:42:45:1f:ea:b6:d2:29:55: 55:cb:12:d2:c9:2a:a2:6a:30:c2:b9:71:eb:58:92:9f:2a:38: e5:55:50:f3:4c:fb:e6:35:26:0e:3d:aa:0b:43:fd:94:93:64: cf:38:6d:98:5e:ae:e7:e3:6f:fe:af:33:20:91:99:11:3e:47: 00:41:dd:54:0c:ce:af:b1:62:47:56:3d:f8:59:4c:97:9e:86: ac:ee:9e:97:2f:9b:55:04:7e:d2:e2:be:1d:9e:c0:e4:9d:2e: 13:d7:c9:0d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUc7gmxJC9ZsFBXNxYWEIR3ktCKWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MjEwNTM0NDBaFw0yNjA5MjIwODQ4NDBaMDMxMTAvBgNV BAMTKDFDREUzQjFBNDZFM0YwRDFBQ0Q2MkZDMUUwMUM0RTUyMjgxMzc5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFme/M7nGXd7yapAa+n81Fqfx iDdl1WO2iel2+FtsH1qdRCpqTLsFaw16tMnfRyQ2Ngkfwa4OUFUX0gdpOxqgWSth zHKlq695NgTZ3mJvs56fkpfT1/KM1ZGufbENCZGL2T6IaJKBYesGaS8uv/Qgl+C5 6qj+pycF22exPo6wB4AuBdnjUDuej66W/tZvruUc3di+d+eBH2YsYanGVEjWR5tC 2IllhPdh+kv3IBShTE9JmzbYb71+qhf8MKdyW5f00JmgAAix5EmEUfduUliQdLqh iHU+krtyaJ+vLHzIUPOCuGJr3zj0K84aycCdTbT6kQdZLLh0rDTNiOAlDHHlAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUHN47Gkbj8NGs1i/B4BxOUigTeYQwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5Ni03 OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNC81MzcxNUYwNDc2RUExOUVCNjBE RDBGMzhEOTJGODRFOEQ0MEEwMjkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbU09swt5Is677Vz4FdT dhrgxjG3Z+a7ZSeiU6cAMI81KrjRgRvUglNFVOR1pkZmw/QmNEVa2ogxZr/H1c8P 6ahIR0wdh/vTaGNhiVIMDNaMh9Dl24Gy65E9xjyMw90It/gBUYL7FjNGm+mFz2x1 i22UKRaFDnElaKtm7wwAPBpvM8foqBgjO21TKXZ2KHzGYJlpZ4cd5+CU9EJFH+q2 0ilVVcsS0skqomowwrlx61iSnyo45VVQ80z75jUmDj2qC0P9lJNkzzhtmF6u5+Nv /q8zIJGZET5HAEHdVAzOr7FiR1Y9+FlMl56GrO6ely+bVQR+0uK+HZ7A5J0uE9fJ DQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:32:19 2026 by rpki-client