$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: aeJpBEk6QKRkAbvyBDBzdF9Db66wMU1S62p0teCV66A= Subject key identifier: E3:DC:26:6A:21:FF:38:8A:8F:02:AB:6C:F3:83:DC:4D:1E:58:DE:FF Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 7F9AB1EE4261F669DBBA0EAA07C22E15CBE8CC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: EE Signing time: Mon 21 Sep 2026 18:48:48 +0000 Manifest this update: Mon 21 Sep 2026 18:43:48 +0000 Manifest next update: Tue 22 Sep 2026 20:29:48 +0000 Files and hashes: 1: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 2: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 3: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 4: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 5: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 6: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: rJ9/QSGsfpwpe4IR8bcEKoL8bjCGfqmx7Vf6LFS742s=) 7: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 8: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 9: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) 10: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 11: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 12: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:b1:ee:42:61:f6:69:db:ba:0e:aa:07:c2:2e:15:cb:e8:cc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Sep 21 18:43:48 2026 GMT Not After : Sep 22 20:29:48 2026 GMT Subject: CN=E3DC266A21FF388A8F02AB6CF383DC4D1E58DEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:8c:42:ea:6d:0b:58:09:46:a2:2c:f7:49: 85:58:62:bf:f1:c1:d4:4e:e3:7a:54:c0:2c:82:20: c4:08:c7:d3:ee:80:ab:33:08:65:2d:30:8d:96:cb: 3c:ba:ea:45:1d:4e:11:7a:a1:de:5f:1d:5c:60:0a: 05:e9:77:04:4a:c9:a7:b6:d8:12:44:70:46:ce:b9: ba:04:65:0d:2f:f2:a2:46:fb:91:eb:ef:2f:96:ca: 3c:58:72:fb:47:94:f8:82:22:33:69:f1:5e:de:cc: ee:44:1c:6e:5e:89:4b:bc:e3:dd:83:f5:a9:e8:e4: d5:8c:1f:0a:07:91:53:12:5d:67:64:8d:e1:a9:24: 83:74:2c:9b:db:38:07:91:e6:77:ca:d1:c3:a4:3e: 30:5a:f6:dd:41:4e:06:eb:2c:91:7b:c7:ba:43:1a: 84:de:d7:01:5e:97:88:66:17:a6:10:3f:82:50:25: 18:45:44:5e:4c:b9:96:e3:96:ea:d4:66:0e:a7:48: 39:f3:f8:97:78:72:8f:34:7b:e9:f1:e0:ce:ed:aa: ba:b6:96:17:de:68:d2:b9:1c:f4:f7:c1:52:a9:06: 10:fc:36:f7:c7:6d:e9:f6:fb:6d:2c:0c:7f:11:ef: 84:48:eb:47:44:01:8d:b8:73:e0:11:22:93:10:10: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DC:26:6A:21:FF:38:8A:8F:02:AB:6C:F3:83:DC:4D:1E:58:DE:FF X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:07:d4:75:6e:c9:d2:92:b4:e0:7b:8b:33:2c:75:7d:27:c2: a9:43:e8:79:c3:c3:ec:25:b6:e0:40:2d:0f:92:14:db:01:6b: 6c:10:dd:c3:6f:7a:da:b1:ff:7a:d2:bf:fe:e5:ec:91:17:75: 7f:84:c5:fc:69:9c:97:97:d3:7c:eb:4b:37:6c:34:04:7a:82: e0:17:70:a1:cf:54:cc:3d:78:ed:8b:fd:62:0b:9b:6a:38:0a: 03:75:55:36:7f:d8:bd:50:d4:5f:b1:ea:38:ba:18:42:bb:07: a9:e5:2b:0f:61:e7:1d:c7:cd:bd:d5:51:11:f0:02:03:16:4d: 05:6d:f6:11:67:ff:f0:76:41:41:48:e7:37:6e:f5:dd:2f:32: 90:53:eb:af:ce:dc:ab:25:6e:27:fd:89:a5:70:32:3f:55:7a: c0:40:f4:a0:57:c2:02:4d:01:a7:26:c1:55:e0:d3:26:7a:1c: 76:8d:fc:b5:f7:11:6a:d8:99:c9:3e:36:16:43:32:bf:89:ec: 5f:00:71:23:f5:cc:10:4f:92:fb:e9:24:c1:36:f3:2c:68:37: 90:70:30:8a:07:1c:56:1c:3c:dd:b4:40:91:16:6d:2a:43:c1: 05:75:25:27:56:3f:bd:03:50:c0:da:6f:b6:83:62:ed:f0:f6: 50:2a:52:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf5qx7kJh9mnbug6qB8IuFcvozDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA5MjExODQzNDhaFw0yNjA5MjIyMDI5NDhaMDMxMTAvBgNV BAMTKEUzREMyNjZBMjFGRjM4OEE4RjAyQUI2Q0YzODNEQzREMUU1OERFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OoxC6m0LWAlGoiz3SYVYYr/x wdRO43pUwCyCIMQIx9PugKszCGUtMI2Wyzy66kUdThF6od5fHVxgCgXpdwRKyae2 2BJEcEbOuboEZQ0v8qJG+5Hr7y+WyjxYcvtHlPiCIjNp8V7ezO5EHG5eiUu8492D 9ano5NWMHwoHkVMSXWdkjeGpJIN0LJvbOAeR5nfK0cOkPjBa9t1BTgbrLJF7x7pD GoTe1wFel4hmF6YQP4JQJRhFRF5MuZbjlurUZg6nSDnz+Jd4co80e+nx4M7tqrq2 lhfeaNK5HPT3wVKpBhD8NvfHben2+20sDH8R74RI60dEAY24c+ARIpMQELSHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU49wmaiH/OIqPAqts84PcTR5Y3v8wHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAfUdW7J0pK04HuLMyx1 fSfCqUPoecPD7CW24EAtD5IU2wFrbBDdw2962rH/etK//uXskRd1f4TF/Gmcl5fT fOtLN2w0BHqC4Bdwoc9UzD147Yv9YgubajgKA3VVNn/YvVDUX7HqOLoYQrsHqeUr D2HnHcfNvdVREfACAxZNBW32EWf/8HZBQUjnN2713S8ykFPrr87cqyVuJ/2JpXAy P1V6wED0oFfCAk0BpybBVeDTJnocdo38tfcRatiZyT42FkMyv4nsXwBxI/XMEE+S ++kkwTbzLGg3kHAwigccVhw83bRAkRZtKkPBBXUlJ1Y/vQNQwNpvtoNi7fD2UCpS TA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:54:27 2026 by rpki-client