$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: FWvoCCrqdp5gnLkVUHC3e9P+rC8ukVRTqhLvumh4FwU= Subject key identifier: 8A:59:48:BE:BE:6D:0C:DD:7B:C0:31:E1:CA:E9:A7:29:6B:FD:70:36 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 3E4C9A30B2C540E2258F8A96B09158009A6D4AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 01A1 Signing time: Mon 21 Sep 2026 02:16:28 +0000 Manifest this update: Mon 21 Sep 2026 02:11:28 +0000 Manifest next update: Tue 22 Sep 2026 02:50:28 +0000 Files and hashes: 1: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 2: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 3: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 4: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 5: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: POg9t8p3tOchyl5UPErgZpmqiL383joUFYH9vJ+Xysg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4c:9a:30:b2:c5:40:e2:25:8f:8a:96:b0:91:58:00:9a:6d:4a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Sep 21 02:11:28 2026 GMT Not After : Sep 22 02:50:28 2026 GMT Subject: CN=8A5948BEBE6D0CDD7BC031E1CAE9A7296BFD7036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:e9:1f:8f:a4:09:7c:0b:f1:4c:4c:38:d2: 1f:a7:d3:a2:ac:4f:03:cc:a7:01:c4:88:1a:02:43: a8:11:ae:cc:fe:96:a9:62:4c:56:95:ee:22:84:f6: 6c:6c:f7:0e:f7:91:4d:9b:51:e2:cb:a9:4a:82:43: 72:94:19:5b:a0:16:f8:3f:f0:17:d6:87:0e:f9:da: 39:84:51:60:67:70:13:93:e9:93:12:74:a6:90:a3: 52:0b:ca:43:8e:74:41:85:21:16:de:da:1c:8e:15: 69:02:35:79:34:30:67:81:7d:cc:be:8e:11:b4:6f: e9:1a:21:67:10:02:18:40:a3:73:4d:92:2d:18:dc: 6e:02:45:75:5e:09:0b:20:86:5e:41:dc:57:45:41: 3a:82:b8:ef:0c:74:00:4d:19:1c:6b:72:d7:5e:e3: 01:c2:ab:14:69:e3:17:66:97:95:00:8d:d3:fc:33: 31:0d:45:d3:74:33:d6:07:70:e1:b7:d8:c3:de:a4: 54:4f:de:3d:55:ab:eb:42:2d:cf:a5:20:f2:a3:74: c1:a8:f5:b0:4a:70:00:17:60:e9:1d:e4:26:75:01: 4e:6d:cc:76:15:a6:58:e1:32:97:ed:37:69:be:25: 44:c1:10:ef:a0:69:75:7f:b7:e5:4f:70:1d:4b:36: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:48:BE:BE:6D:0C:DD:7B:C0:31:E1:CA:E9:A7:29:6B:FD:70:36 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d6:28:f9:54:bb:11:9b:0d:8b:06:5b:16:fb:9b:1e:73:7d: c2:dc:de:ca:b3:08:f4:28:59:25:24:8d:f4:d3:d2:c2:ae:78: d7:d5:95:5a:d4:ef:33:96:02:8b:a5:b9:9f:c6:ca:82:16:54: 60:68:16:d4:40:59:fc:13:f3:e4:ed:d5:8b:18:e1:24:d5:25: e1:78:c2:92:c2:0f:ad:a2:0b:dc:39:69:92:ab:83:ce:ac:fe: b4:51:dc:1b:77:d8:81:8b:36:cb:b8:52:1c:df:e6:53:1b:66: 65:7c:a8:24:d7:64:f4:c2:7a:ab:68:e2:86:b9:95:5c:04:12: e6:d3:15:5f:37:67:88:4e:73:fc:cc:4f:61:81:ae:b9:07:59: 8e:14:0b:8b:77:a8:70:16:12:06:85:a0:a8:0f:21:96:77:be: 64:7c:98:32:60:eb:bd:7e:05:fc:89:9b:01:39:2a:24:bf:02: 69:3e:21:fc:c0:b8:a1:8d:2e:b8:91:40:fe:af:bb:c1:20:77: 9a:aa:ed:16:86:64:81:d9:d5:ae:b9:12:0b:33:eb:61:c6:81: ae:79:c3:e5:1d:de:2f:76:0b:26:5d:cd:15:5d:03:6c:0a:3d: e9:b0:53:72:d8:a5:49:ed:81:d2:16:4c:6a:2c:e0:51:cc:8a: 59:0c:58:51 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPkyaMLLFQOIlj4qWsJFYAJptSu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA5MjEwMjExMjhaFw0yNjA5MjIwMjUwMjhaMDMxMTAvBgNV BAMTKDhBNTk0OEJFQkU2RDBDREQ3QkMwMzFFMUNBRTlBNzI5NkJGRDcwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbPukfj6QJfAvxTEw40h+n06Ks TwPMpwHEiBoCQ6gRrsz+lqliTFaV7iKE9mxs9w73kU2bUeLLqUqCQ3KUGVugFvg/ 8BfWhw752jmEUWBncBOT6ZMSdKaQo1ILykOOdEGFIRbe2hyOFWkCNXk0MGeBfcy+ jhG0b+kaIWcQAhhAo3NNki0Y3G4CRXVeCQsghl5B3FdFQTqCuO8MdABNGRxrctde 4wHCqxRp4xdml5UAjdP8MzENRdN0M9YHcOG32MPepFRP3j1Vq+tCLc+lIPKjdMGo 9bBKcAAXYOkd5CZ1AU5tzHYVpljhMpftN2m+JUTBEO+gaXV/t+VPcB1LNuWVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUillIvr5tDN17wDHhyumnKWv9cDYwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNYo+VS7EZsNiwZbFvub HnN9wtzeyrMI9ChZJSSN9NPSwq5419WVWtTvM5YCi6W5n8bKghZUYGgW1EBZ/BPz 5O3VixjhJNUl4XjCksIPraIL3DlpkquDzqz+tFHcG3fYgYs2y7hSHN/mUxtmZXyo JNdk9MJ6q2jihrmVXAQS5tMVXzdniE5z/MxPYYGuuQdZjhQLi3eocBYSBoWgqA8h lne+ZHyYMmDrvX4F/ImbATkqJL8CaT4h/MC4oY0uuJFA/q+7wSB3mqrtFoZkgdnV rrkSCzPrYcaBrnnD5R3eL3YLJl3NFV0DbAo96bBTctilSe2B0hZMaizgUcyKWQxY UQ== -----END CERTIFICATE-----Generated at Mon Sep 21 21:30:00 2026 by rpki-client