$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: IAULKVDlZfV5ibwyKK7R7NEoYSvqlllKT8pzcQhr6Ck= Subject key identifier: F6:47:B3:D2:53:5F:AF:CB:82:71:8C:81:46:00:A4:5E:07:26:4A:BD Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 0CABCF239D267478E6A4E56569D16F0D1B566DE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 0145 Signing time: Sat 14 Nov 2026 18:01:45 +0000 Manifest this update: Sat 14 Nov 2026 17:56:45 +0000 Manifest next update: Sun 15 Nov 2026 18:55:45 +0000 Files and hashes: 1: 2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer (hash: oYkje0sF8CkR7r/hwE2e19NI4tSQCeFVMRYW18O/7cE=) 2: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 3: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) 4: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 5: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 6: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: EefUjL+DwI24gQMPu703KZxEU0SPjK/ve/WwHUKiRic=) 7: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 8: 326131333a633863333a623030303a3a2f33362d3336203d3e20323133393030.roa (hash: 5pF1gl1yYHLoBIyy0lSWX3qaNc3b70aHlcfFJ++4MCU=) 9: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 10: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 11: AS213900.asa (hash: iTbG190Wm1GpUl2oYblg0k2L2J2twuNo9Er0XN5N3SI=) 12: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 13: 326131333a633863333a613030303a3a2f33362d3336203d3e20323133393030.roa (hash: y+vnnWfb71f2j6r/VOPNbb/WJqL58gD67VxN9Xb04Qg=) 14: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ab:cf:23:9d:26:74:78:e6:a4:e5:65:69:d1:6f:0d:1b:56:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Nov 14 17:56:45 2026 GMT Not After : Nov 15 18:55:45 2026 GMT Subject: CN=F647B3D2535FAFCB82718C814600A45E07264ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:c4:b6:2d:68:32:26:42:3e:88:97:1e:02: 30:c6:7d:da:c3:57:98:41:42:f4:b7:48:68:a3:0a: d3:2a:07:15:c5:30:c6:75:75:41:2e:16:37:8d:c1: d3:a2:58:56:fe:09:7b:b5:9d:ec:04:0c:06:8f:55: f8:1b:fd:5e:6a:42:c0:2c:14:8c:e4:18:c9:52:ee: 5a:c7:3c:54:6f:cd:06:16:76:64:f2:8f:c3:71:15: e4:19:3f:52:1f:aa:90:66:51:a1:e2:22:45:48:3e: 62:cf:fb:fc:c1:84:1c:b7:c2:ae:2d:e9:4f:bf:c0: bb:11:3a:84:b4:12:f7:28:40:be:01:39:da:3f:30: 2a:e8:40:38:be:60:42:e6:96:06:0b:29:56:62:af: 9f:50:f5:1b:ca:83:64:5a:ac:6d:8b:a7:c0:bf:89: 03:f4:c4:fa:6d:e9:46:cd:5f:b1:dd:86:c5:bf:46: a2:1a:9e:92:9c:64:26:4a:8b:08:82:e7:f8:47:c9: b7:86:f4:c4:9c:31:4e:a3:17:af:ce:b0:6c:be:24: 02:9d:b0:df:1c:e5:76:7a:8e:b2:4e:6f:57:a3:99: 1e:f8:00:06:7b:14:92:06:57:e6:92:76:79:c1:0b: 4f:26:07:4a:2c:25:df:f2:2a:78:7f:07:2d:19:20: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:B3:D2:53:5F:AF:CB:82:71:8C:81:46:00:A4:5E:07:26:4A:BD X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:bb:3e:11:57:a5:7e:c5:14:5d:1f:48:9d:de:8f:26:15: 9f:2c:03:ff:70:59:c1:42:97:2f:7e:09:94:dd:75:b4:15:0a: ea:1f:31:11:e4:97:03:7b:36:3d:23:5d:df:8a:7f:ce:a4:81: 3b:5f:34:95:44:e5:84:5f:e6:e5:4d:33:5c:15:9b:6c:2a:b3: d2:ad:bd:1c:7c:4e:b4:de:af:47:34:2d:15:9e:bf:fd:fc:a9: 6b:62:0a:c9:97:f0:8a:6f:c0:eb:2e:df:de:42:3d:20:c9:8e: c6:1e:d7:06:16:cc:54:e1:d0:80:cb:40:7c:7a:52:70:a8:6f: 60:fa:6f:30:36:23:6f:a9:a2:12:04:c8:de:bf:00:41:fe:c2: 6a:dc:c6:c6:17:b2:5c:82:46:8b:ed:84:99:1c:4b:30:c5:86: 43:01:06:b2:e3:82:43:ed:ce:c8:1a:c5:19:1e:55:ee:04:f0: 32:fc:21:f6:08:a2:aa:62:65:f1:ba:af:5b:5f:96:f5:55:fe: 54:2f:e7:f0:40:82:81:06:a7:d6:2f:3d:45:4f:f1:48:aa:f1: f7:c1:d1:49:8e:20:94:c6:37:06:8a:88:12:ce:39:7c:4c:64: dc:40:45:7b:2e:22:24:78:e6:ea:b1:c1:08:68:9d:45:8b:d7: 92:25:87:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDKvPI50mdHjmpOVladFvDRtWbekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjExMTQxNzU2NDVaFw0yNjExMTUxODU1NDVaMDMxMTAvBgNV BAMTKEY2NDdCM0QyNTM1RkFGQ0I4MjcxOEM4MTQ2MDBBNDVFMDcyNjRBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJcS2LWgyJkI+iJceAjDGfdrD V5hBQvS3SGijCtMqBxXFMMZ1dUEuFjeNwdOiWFb+CXu1newEDAaPVfgb/V5qQsAs FIzkGMlS7lrHPFRvzQYWdmTyj8NxFeQZP1IfqpBmUaHiIkVIPmLP+/zBhBy3wq4t 6U+/wLsROoS0EvcoQL4BOdo/MCroQDi+YELmlgYLKVZir59Q9RvKg2RarG2Lp8C/ iQP0xPpt6UbNX7HdhsW/RqIanpKcZCZKiwiC5/hHybeG9MScMU6jF6/OsGy+JAKd sN8c5XZ6jrJOb1ejmR74AAZ7FJIGV+aSdnnBC08mB0osJd/yKnh/By0ZIKqfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9kez0lNfr8uCcYyBRgCkXgcmSr0wHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgry7PhFXpX7FFF0fSJ3e jyYVnywD/3BZwUKXL34JlN11tBUK6h8xEeSXA3s2PSNd34p/zqSBO180lUTlhF/m 5U0zXBWbbCqz0q29HHxOtN6vRzQtFZ6//fypa2IKyZfwim/A6y7f3kI9IMmOxh7X BhbMVOHQgMtAfHpScKhvYPpvMDYjb6miEgTI3r8AQf7CatzGxheyXIJGi+2EmRxL MMWGQwEGsuOCQ+3OyBrFGR5V7gTwMvwh9giiqmJl8bqvW1+W9VX+VC/n8ECCgQan 1i89RU/xSKrx98HRSY4glMY3BoqIEs45fExk3EBFey4iJHjm6rHBCGidRYvXkiWH 0g== -----END CERTIFICATE-----Generated at Sat Nov 14 23:12:42 2026 by rpki-client