$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft (raw, json) Hash identifier: xNRdnLRPNx6ikNrKC4lmcGbgxtuwPv23D9FcTAkMW90= Subject key identifier: A7:71:17:5D:02:85:80:4E:EB:19:CD:7D:87:F3:6F:D1:52:36:94:95 Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 5EB11A5A98D6F08DC3D99BB944787626ECD4BF8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft Manifest number: 80 Signing time: Wed 23 Sep 2026 19:14:20 +0000 Manifest this update: Wed 23 Sep 2026 19:09:20 +0000 Manifest next update: Thu 24 Sep 2026 21:06:20 +0000 Files and hashes: 1: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl (hash: y/dKd4Pl+kLhRWLVV93oS0iUH32HBOoM29CUhcL4ERE=) 2: 326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa (hash: 2ZmhaFBQ0V4dJSXyRSyc++rk/qANEJwxFFR6aJ/nMXQ=) 3: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer (hash: y71+RU9g54azV5dgw7DVE0zHxfVhDYGxNOf9szJbWnM=) 4: 326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa (hash: AfgwqGMO9CVHdwQKzdsRfhf5hmoXRPoKOMuiQAxIyuk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 21:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b1:1a:5a:98:d6:f0:8d:c3:d9:9b:b9:44:78:76:26:ec:d4:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Sep 23 19:09:20 2026 GMT Not After : Sep 24 21:06:20 2026 GMT Subject: CN=A771175D0285804EEB19CD7D87F36FD152369495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:ae:1d:8d:ff:8e:a6:f8:b8:bb:e0:79:8f: 5c:45:48:95:03:54:49:f2:9a:9d:b3:fc:66:40:84: 33:08:84:08:4f:bb:e7:78:e2:92:98:fc:67:0f:34: 99:5a:4b:f9:e6:6b:81:78:0c:fa:32:ea:c9:01:69: 7b:4e:de:a2:ec:11:f0:11:15:cc:32:ec:b4:55:f1: df:5e:01:94:86:88:5e:35:b6:5f:bf:81:1d:d4:4c: 7f:a4:03:cb:97:cb:1d:1b:f3:35:0f:50:ce:0a:94: 8b:10:fb:36:59:bb:46:05:b0:2d:79:79:8c:1c:ec: 9f:2b:4a:ce:4e:a5:2c:43:d5:cb:a3:61:a7:9b:1d: 31:ac:38:4b:28:e4:e5:a2:86:45:88:ba:a8:d1:19: 04:41:86:fb:aa:58:d8:d6:a8:cb:08:32:bc:2d:2a: 24:75:62:93:d4:28:bc:0f:4f:78:ba:f8:65:8d:f2: f6:44:9d:f3:84:e3:bf:e7:54:7b:7f:91:f0:a4:26: b3:10:f4:59:9c:6e:80:9f:f4:39:8e:96:dd:97:18: c9:2b:da:01:cc:3d:b9:b5:e9:ee:0c:84:ef:8e:24: 55:05:1c:ea:34:e4:80:3a:90:c0:7d:a4:c5:a9:50: 2e:bb:e4:a8:0b:65:33:0e:61:54:b1:65:38:e8:18: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:17:5D:02:85:80:4E:EB:19:CD:7D:87:F3:6F:D1:52:36:94:95 X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:24:88:8e:43:cd:82:ec:58:75:72:44:d2:43:bb:17:fb:f2: 20:eb:ea:a3:9e:06:b5:fd:71:7f:c3:21:62:26:2e:79:e1:74: e4:06:8a:db:b3:e5:59:c3:c4:15:65:fb:b5:a9:4a:15:fa:f7: cb:a6:a8:44:d4:20:12:8e:9e:3c:01:e2:bf:1b:ae:23:23:f6: 0e:ad:d4:d0:52:e4:1a:39:b2:13:43:6e:db:60:36:d8:67:8a: 97:69:67:82:89:54:47:4a:07:a2:ce:6d:52:69:29:98:8b:b1: 5e:83:8d:3b:a2:c6:d4:39:f9:74:e9:33:7c:22:cb:fb:55:fa: d2:05:de:27:03:76:fa:fb:b1:5f:b4:81:d3:e6:c7:78:a3:fe: 37:a2:65:50:b5:24:ba:20:3d:f3:46:1a:2a:ec:92:ae:fd:80: bf:e6:e5:75:dc:01:fc:19:fe:8b:70:bc:25:38:b0:23:a2:09: ed:23:96:b5:80:95:c0:07:f4:9a:3c:fd:8f:08:dc:82:f0:2e: 01:c9:88:c5:0b:cf:e0:53:cb:7a:76:db:93:64:2e:8b:12:bf: 19:7a:d9:75:66:9a:1b:c6:79:bc:0b:87:91:b9:ed:55:7d:b5: a5:ef:55:85:a0:f5:e0:42:80:d2:f2:33:0a:ac:25:03:05:8d: 8d:ef:0b:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXrEaWpjW8I3D2Zu5RHh2JuzUv4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA5MjMxOTA5MjBaFw0yNjA5MjQyMTA2MjBaMDMxMTAvBgNV BAMTKEE3NzExNzVEMDI4NTgwNEVFQjE5Q0Q3RDg3RjM2RkQxNTIzNjk0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqq4djf+Opvi4u+B5j1xFSJUD VEnymp2z/GZAhDMIhAhPu+d44pKY/GcPNJlaS/nma4F4DPoy6skBaXtO3qLsEfAR Fcwy7LRV8d9eAZSGiF41tl+/gR3UTH+kA8uXyx0b8zUPUM4KlIsQ+zZZu0YFsC15 eYwc7J8rSs5OpSxD1cujYaebHTGsOEso5OWihkWIuqjRGQRBhvuqWNjWqMsIMrwt KiR1YpPUKLwPT3i6+GWN8vZEnfOE47/nVHt/kfCkJrMQ9FmcboCf9DmOlt2XGMkr 2gHMPbm16e4MhO+OJFUFHOo05IA6kMB9pMWpUC675KgLZTMOYVSxZTjoGOw5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUp3EXXQKFgE7rGc19h/Nv0VI2lJUwHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY3ODJkMzhiLTQwMTYtNDk2YS04Mjk4LWUzZTk3YmVlOTdiZC8xLzMwMEY4N0U0 NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDWJIiO Q82C7Fh1ckTSQ7sX+/Ig6+qjnga1/XF/wyFiJi554XTkBorbs+VZw8QVZfu1qUoV +vfLpqhE1CASjp48AeK/G64jI/YOrdTQUuQaObITQ27bYDbYZ4qXaWeCiVRHSgei zm1SaSmYi7Feg407osbUOfl06TN8Isv7VfrSBd4nA3b6+7FftIHT5sd4o/43omVQ tSS6ID3zRhoq7JKu/YC/5uV13AH8Gf6LcLwlOLAjogntI5a1gJXAB/SaPP2PCNyC 8C4ByYjFC8/gU8t6dtuTZC6LEr8Zetl1Zpobxnm8C4eRue1VfbWl71WFoPXgQoDS 8jMKrCUDBY2N7wv5 -----END CERTIFICATE-----Generated at Thu Sep 24 09:33:29 2026 by rpki-client