$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: lEXVmmFaAFHVywrYbvw4FArdEygwEFPtd7DDxh500BE= Subject key identifier: 62:FF:B5:2D:6C:15:86:97:A2:F8:1F:0B:C2:CA:C6:BD:E3:14:CA:2E Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 01F9E39FF2214C7DF9A90A01184A1DE541FB7F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: EC Signing time: Sun 20 Sep 2026 08:13:48 +0000 Manifest this update: Sun 20 Sep 2026 08:08:48 +0000 Manifest next update: Mon 21 Sep 2026 09:15:48 +0000 Files and hashes: 1: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 2: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 3: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 4: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) 5: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 6: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 7: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: w2VzNOrt6LIvNd3RDSkbFBGTpTc4qKLK4ss0z3vxEt4=) 8: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 9: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 10: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 11: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 12: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:e3:9f:f2:21:4c:7d:f9:a9:0a:01:18:4a:1d:e5:41:fb:7f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Sep 20 08:08:48 2026 GMT Not After : Sep 21 09:15:48 2026 GMT Subject: CN=62FFB52D6C158697A2F81F0BC2CAC6BDE314CA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:6e:89:f6:75:b9:ef:32:2b:9a:98:c4:e2: 52:68:58:4f:44:dd:b8:53:3a:9c:79:4a:09:87:c6: 11:5a:ca:2c:7e:c8:f2:b0:f8:08:70:bc:66:ba:b7: e9:d6:12:83:b4:ea:8e:d6:25:1f:03:87:76:3f:e7: 07:db:67:60:ef:52:c5:45:1a:52:20:4b:de:0c:f2: a4:28:16:72:4e:c6:7d:97:a2:bd:8e:9e:c3:2a:71: dd:21:71:82:c7:1c:a8:5b:91:54:f5:b7:1b:27:fa: 38:a6:52:0c:8e:98:1a:05:43:a4:04:ba:a9:0b:31: c5:b9:39:4f:e8:d5:4c:25:7d:f8:75:4d:f8:48:16: c7:7b:3d:97:b2:84:35:47:fb:17:15:70:c5:49:2c: 8b:35:0e:5f:2e:86:76:50:bf:b6:6f:05:59:6b:33: bd:b3:bf:32:b8:3a:ab:b8:ba:9e:0d:70:f9:9a:2d: 42:fb:84:9f:74:69:14:3d:40:87:c8:4c:08:2e:59: 4b:bf:64:6c:9c:cb:f0:4f:eb:56:dc:80:3f:35:4d: 38:f6:ee:1d:f1:92:6c:c8:7d:78:08:3b:04:20:94: fb:47:d0:a3:68:be:4d:49:83:e1:12:01:66:47:bd: bf:21:ed:b3:b4:05:19:73:e1:11:3f:2b:ba:ba:b0: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:B5:2D:6C:15:86:97:A2:F8:1F:0B:C2:CA:C6:BD:E3:14:CA:2E X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4c:ba:de:b8:bc:85:09:55:f5:67:9b:85:95:d9:ef:41:a7: 5a:2e:cd:bc:f7:cd:f9:32:d2:73:c7:c9:f5:9b:a5:ab:c2:ba: 73:75:80:99:40:32:f6:db:73:70:ea:c8:25:38:c5:62:e0:84: 2a:4d:73:97:36:5f:69:14:2e:54:a2:c1:d2:9b:b0:be:52:66: 72:22:73:11:cc:3f:13:72:ca:67:36:ac:75:97:35:ab:68:d2: 6b:55:1b:bc:8e:41:75:ea:b8:a4:15:b6:15:64:e8:c9:d0:85: 6d:fc:d0:ed:e7:31:8c:e5:5b:e4:2c:02:18:9e:dc:a9:27:79: a6:34:ae:6f:43:7f:07:d3:30:0c:82:1c:9f:4f:18:d9:32:54: 29:fd:61:02:28:a6:12:81:c5:eb:ce:5f:c3:45:81:a3:87:45: b4:ac:a4:24:f9:e5:c9:04:00:d1:5c:8c:fe:d0:92:c4:4e:0b: 7b:68:9c:2e:79:c9:18:ad:76:a6:c2:ab:e0:35:89:a4:a2:d8: fc:34:e3:25:44:c0:a0:e7:87:62:4c:cc:3a:d6:db:d0:1a:42: 83:f5:64:82:c8:11:42:f0:26:5c:c7:62:c8:6f:89:c7:04:e3: 6b:55:12:10:6c:10:d6:a1:76:8e:79:23:7e:79:51:16:6d:73: 4a:06:d0:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAfnjn/IhTH35qQoBGEod5UH7f1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA5MjAwODA4NDhaFw0yNjA5MjEwOTE1NDhaMDMxMTAvBgNV BAMTKDYyRkZCNTJENkMxNTg2OTdBMkY4MUYwQkMyQ0FDNkJERTMxNENBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7m6J9nW57zIrmpjE4lJoWE9E 3bhTOpx5SgmHxhFayix+yPKw+AhwvGa6t+nWEoO06o7WJR8Dh3Y/5wfbZ2DvUsVF GlIgS94M8qQoFnJOxn2Xor2OnsMqcd0hcYLHHKhbkVT1txsn+jimUgyOmBoFQ6QE uqkLMcW5OU/o1Uwlffh1TfhIFsd7PZeyhDVH+xcVcMVJLIs1Dl8uhnZQv7ZvBVlr M72zvzK4Oqu4up4NcPmaLUL7hJ90aRQ9QIfITAguWUu/ZGycy/BP61bcgD81TTj2 7h3xkmzIfXgIOwQglPtH0KNovk1Jg+ESAWZHvb8h7bO0BRlz4RE/K7q6sHtFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYv+1LWwVhpei+B8LwsrGveMUyi4wHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvky63ri8hQlV9WebhZXZ 70GnWi7NvPfN+TLSc8fJ9Zulq8K6c3WAmUAy9ttzcOrIJTjFYuCEKk1zlzZfaRQu VKLB0puwvlJmciJzEcw/E3LKZzasdZc1q2jSa1UbvI5Bdeq4pBW2FWToydCFbfzQ 7ecxjOVb5CwCGJ7cqSd5pjSub0N/B9MwDIIcn08Y2TJUKf1hAiimEoHF685fw0WB o4dFtKykJPnlyQQA0VyM/tCSxE4Le2icLnnJGK12psKr4DWJpKLY/DTjJUTAoOeH YkzMOtbb0BpCg/VkgsgRQvAmXMdiyG+JxwTja1USEGwQ1qF2jnkjfnlRFm1zSgbQ Bg== -----END CERTIFICATE-----Generated at Sun Sep 20 13:44:54 2026 by rpki-client