$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: YZrrEsJtW/CkFLeolASg8bmpzBZjltIkl6AEuSqosts= Subject key identifier: A4:61:10:C5:AD:40:B0:A6:6E:78:F0:5C:81:8B:42:42:CB:4B:6E:7E Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 27141633051300D3931458EB65231F77B6887869 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0248 Signing time: Mon 21 Sep 2026 08:44:46 +0000 Manifest this update: Mon 21 Sep 2026 08:39:46 +0000 Manifest next update: Tue 22 Sep 2026 08:45:46 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: 3Oy0/+Zmc9e5z/F4yp6K4LzyzEeGtPjpxBkzzaKS8w0=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: g+KD/t7xfRkPymdd4Yfw0E2wUwrXz7eBRPUZ0i6kl3A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 06:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:14:16:33:05:13:00:d3:93:14:58:eb:65:23:1f:77:b6:88:78:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Sep 21 08:39:46 2026 GMT Not After : Sep 22 08:45:46 2026 GMT Subject: CN=A46110C5AD40B0A66E78F05C818B4242CB4B6E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:7b:bd:cb:0e:ac:d9:89:ca:2d:81:58:94: 13:0b:b5:97:d7:f2:c1:66:85:26:7b:07:dc:24:d9: c9:f0:0d:24:99:48:46:76:fb:7d:c7:5a:8d:c2:12: d0:f8:c5:b0:09:b6:ec:65:10:a4:a3:ec:be:c2:79: de:3c:69:85:b3:8e:b0:38:50:54:1a:f2:86:88:2a: e7:ba:83:cb:d7:29:35:ad:83:1b:07:fc:e9:c4:17: d2:d5:2a:2d:e2:3f:31:ca:0f:70:e3:48:36:64:46: bb:ea:c0:8a:ce:1f:c2:fa:25:1b:82:a8:95:04:07: a0:5f:0f:70:98:df:c9:e3:df:69:16:15:ae:96:50: 15:64:31:b7:ec:39:7c:56:c5:4d:6d:a3:15:84:fd: 8a:3a:50:5c:3a:17:72:af:49:c1:46:0d:dd:f6:19: 92:ed:91:3b:21:9b:48:4c:fa:20:b7:30:fc:0d:d5: af:f3:ba:26:c9:b8:de:a7:1c:19:9b:93:81:dd:45: d3:28:2d:d4:b1:1b:cb:50:25:78:ce:d0:ce:9e:60: d5:d2:1c:6e:bf:28:45:50:bb:77:f1:cb:ca:12:24: 07:fb:37:35:87:51:f5:cf:39:03:6a:0c:94:e2:24: a4:cc:f2:ab:a1:d7:24:33:04:38:37:15:4f:bb:e4: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:10:C5:AD:40:B0:A6:6E:78:F0:5C:81:8B:42:42:CB:4B:6E:7E X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f5:e6:35:f0:fe:49:ad:34:45:e5:05:a5:4b:df:79:d4:bb: c3:9d:a1:bd:e3:8e:45:14:b3:5e:c0:ff:2e:d4:3a:ac:cc:bb: a0:c1:8f:ca:73:6f:d4:e0:d9:20:8e:fb:c4:ee:52:c3:4e:d5: a9:e4:d3:18:9b:87:4a:ea:5c:59:eb:4d:40:f0:0c:f4:b5:67: 8f:81:5b:ff:4a:de:b9:87:9b:4c:a0:62:6a:b8:8e:2e:1a:37: b0:42:b9:6a:2e:4f:6c:06:12:8e:84:21:44:44:5e:94:5b:ad: 9c:48:02:ca:d8:b3:d5:a9:fd:7b:6a:ac:29:b4:13:4c:63:38: 10:4d:47:8b:4a:42:f2:49:a0:ac:d8:e8:51:a2:cd:62:88:34: 66:93:65:c8:7b:d3:d8:75:2c:86:78:c0:81:68:fd:28:f4:c1: d2:80:f8:d9:2c:53:c2:9d:b5:bf:0d:c2:b1:ce:ea:ed:7c:e8: 80:4b:54:91:45:76:2a:3f:06:95:a9:31:63:4f:b3:33:b9:c2: d7:0f:33:00:26:24:aa:9c:8d:19:69:20:fa:86:bc:0c:8c:b2: 77:15:0a:93:13:70:a5:ea:41:eb:d5:25:ed:ff:80:66:5a:39: e3:ec:67:6a:b7:9c:b1:39:54:4c:a6:88:12:b0:ae:a2:3d:17: 3a:b1:f8:e2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJxQWMwUTANOTFFjrZSMfd7aIeGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA5MjEwODM5NDZaFw0yNjA5MjIwODQ1NDZaMDMxMTAvBgNV BAMTKEE0NjExMEM1QUQ0MEIwQTY2RTc4RjA1QzgxOEI0MjQyQ0I0QjZFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdHu9yw6s2YnKLYFYlBMLtZfX 8sFmhSZ7B9wk2cnwDSSZSEZ2+33HWo3CEtD4xbAJtuxlEKSj7L7Ced48aYWzjrA4 UFQa8oaIKue6g8vXKTWtgxsH/OnEF9LVKi3iPzHKD3DjSDZkRrvqwIrOH8L6JRuC qJUEB6BfD3CY38nj32kWFa6WUBVkMbfsOXxWxU1toxWE/Yo6UFw6F3KvScFGDd32 GZLtkTshm0hM+iC3MPwN1a/zuibJuN6nHBmbk4HdRdMoLdSxG8tQJXjO0M6eYNXS HG6/KEVQu3fxy8oSJAf7NzWHUfXPOQNqDJTiJKTM8quh1yQzBDg3FU+75HNxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpGEQxa1AsKZuePBcgYtCQstLbn4wHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvXmNfD+Sa00ReUFpUvf edS7w52hveOORRSzXsD/LtQ6rMy7oMGPynNv1ODZII77xO5Sw07VqeTTGJuHSupc WetNQPAM9LVnj4Fb/0reuYebTKBiariOLho3sEK5ai5PbAYSjoQhRERelFutnEgC ytiz1an9e2qsKbQTTGM4EE1Hi0pC8kmgrNjoUaLNYog0ZpNlyHvT2HUshnjAgWj9 KPTB0oD42SxTwp21vw3Csc7q7XzogEtUkUV2Kj8GlakxY0+zM7nC1w8zACYkqpyN GWkg+oa8DIyydxUKkxNwpepB69Ul7f+AZlo54+xnarecsTlUTKaIErCuoj0XOrH4 4g== -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:45 2026 by rpki-client