$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: uOD8N+J/zec1yp2h2ncL2JwV4EZCRcS9p7mSoAZE3FI= Subject key identifier: A9:78:E0:A5:25:13:B5:BA:59:32:03:F4:27:92:F9:94:09:1F:CE:59 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 12032EE1584E9814071FA7426E09B22F4573CCAD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 0149 Signing time: Mon 21 Sep 2026 15:00:30 +0000 Manifest this update: Mon 21 Sep 2026 14:55:30 +0000 Manifest next update: Tue 22 Sep 2026 18:43:30 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: llZyNVwlVFe8P82MQsRYWox5TmCrtoj0KqpgN4TnEes=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 18:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:03:2e:e1:58:4e:98:14:07:1f:a7:42:6e:09:b2:2f:45:73:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Sep 21 14:55:30 2026 GMT Not After : Sep 22 18:43:30 2026 GMT Subject: CN=A978E0A52513B5BA593203F42792F994091FCE59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:66:5f:76:a4:b4:b0:1f:74:2a:d8:2e:f6: 17:7c:aa:9c:5f:5b:db:78:76:2d:66:45:3b:a5:57: 68:d7:e8:9b:22:e3:81:ef:e0:78:e9:2b:9e:cd:aa: ae:2d:1e:71:9e:23:af:c3:e0:37:e8:d9:67:31:d7: 01:91:a8:4f:72:2d:80:ac:6d:0f:62:20:a3:61:72: a9:a3:df:47:5a:cd:84:2e:b6:71:c1:0d:cd:34:09: 8b:e2:72:9b:f1:c1:d2:fa:2b:34:8f:72:e1:0c:52: 86:b8:53:c6:40:56:cc:e8:e3:d5:93:98:5d:7e:59: f3:65:3a:8f:d5:14:1d:ca:51:4d:a2:84:f0:1f:63: 3f:3b:fa:e1:74:5d:15:e4:84:e7:c8:48:8c:50:0a: b3:74:79:26:62:f4:6e:1d:90:6a:eb:76:6d:42:9c: f9:c7:20:f7:27:64:99:5f:5d:02:24:88:26:21:51: 38:7c:6c:90:90:f7:f6:6c:45:25:c4:d7:8b:fb:e4: 73:94:7f:2e:c5:54:32:07:71:ee:c6:a3:ab:e9:ec: fc:73:96:eb:47:2b:14:71:0a:b8:29:17:43:96:5e: 79:76:c7:00:ed:e3:37:bf:2c:0e:86:48:bd:36:e4: 77:b2:39:e2:0d:fb:2b:1d:d4:23:fd:e0:b6:c5:09: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:78:E0:A5:25:13:B5:BA:59:32:03:F4:27:92:F9:94:09:1F:CE:59 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:61:da:2c:07:c8:b5:16:b4:e4:3d:79:cd:af:55:72:dd:51: ad:e5:77:cd:45:8e:91:37:b3:68:e7:a0:7e:fc:5b:22:4e:3f: 6b:83:e4:9c:56:8e:b5:6f:32:29:6c:1a:5d:03:3b:d7:71:b9: 21:6e:73:9e:e4:a8:b5:e1:e0:43:81:50:24:f8:52:4e:5a:d4: 61:e9:9c:06:d7:e5:c2:42:3b:50:3e:de:0d:ea:65:80:b4:67: 96:56:1f:d4:2e:38:1b:fd:7f:85:20:22:54:61:eb:b4:cd:ca: 6b:04:03:05:b0:72:dc:d9:dd:16:df:1c:6a:f4:13:d0:2f:54: 79:80:74:11:f4:a0:20:5b:b9:96:27:b0:ab:98:47:47:9d:07: 0c:a3:bc:30:73:bf:58:de:b2:c4:11:ee:8a:22:90:c5:52:0b: ea:b2:a7:6f:b1:78:16:69:7f:82:fe:17:01:26:47:fd:9e:04: bb:b6:0f:c6:f1:83:6a:2a:c3:5b:aa:bf:b8:c5:72:7b:d4:43: b4:21:d9:a9:94:59:a3:63:23:8f:b9:a4:86:af:c3:bf:5c:93: 0b:e8:66:64:e8:88:7f:1f:db:4c:40:90:06:af:73:bc:6b:75: ba:94:55:9f:92:8b:bd:a7:f0:60:3b:ab:a5:63:71:c2:6e:f1: 4b:f2:f4:d1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEgMu4VhOmBQHH6dCbgmyL0VzzK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA5MjExNDU1MzBaFw0yNjA5MjIxODQzMzBaMDMxMTAvBgNV BAMTKEE5NzhFMEE1MjUxM0I1QkE1OTMyMDNGNDI3OTJGOTk0MDkxRkNFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4GZfdqS0sB90Ktgu9hd8qpxf W9t4di1mRTulV2jX6Jsi44Hv4HjpK57Nqq4tHnGeI6/D4Dfo2Wcx1wGRqE9yLYCs bQ9iIKNhcqmj30dazYQutnHBDc00CYvicpvxwdL6KzSPcuEMUoa4U8ZAVszo49WT mF1+WfNlOo/VFB3KUU2ihPAfYz87+uF0XRXkhOfISIxQCrN0eSZi9G4dkGrrdm1C nPnHIPcnZJlfXQIkiCYhUTh8bJCQ9/ZsRSXE14v75HOUfy7FVDIHce7Go6vp7Pxz lutHKxRxCrgpF0OWXnl2xwDt4ze/LA6GSL025HeyOeIN+ysd1CP94LbFCWJDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqXjgpSUTtbpZMgP0J5L5lAkfzlkwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6Ydos B8i1FrTkPXnNr1Vy3VGt5XfNRY6RN7No56B+/FsiTj9rg+ScVo61bzIpbBpdAzvX cbkhbnOe5Ki14eBDgVAk+FJOWtRh6ZwG1+XCQjtQPt4N6mWAtGeWVh/ULjgb/X+F ICJUYeu0zcprBAMFsHLc2d0W3xxq9BPQL1R5gHQR9KAgW7mWJ7CrmEdHnQcMo7ww c79Y3rLEEe6KIpDFUgvqsqdvsXgWaX+C/hcBJkf9ngS7tg/G8YNqKsNbqr+4xXJ7 1EO0IdmplFmjYyOPuaSGr8O/XJML6GZk6Ih/H9tMQJAGr3O8a3W6lFWfkou9p/Bg O6ulY3HCbvFL8vTR -----END CERTIFICATE-----Generated at Tue Sep 22 09:12:14 2026 by rpki-client