$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 1EgdbhlAq/jXBREBXgbD2S2A2bQqUTculdEv+VSfAhc= Subject key identifier: 21:09:20:FB:BC:3B:1B:8F:05:3E:B4:60:29:E5:5A:FC:BC:53:91:0F Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 08F78C187FE0C35DC393A80121CA2EB13933CF87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 0239 Signing time: Mon 21 Sep 2026 12:36:21 +0000 Manifest this update: Mon 21 Sep 2026 12:31:21 +0000 Manifest next update: Tue 22 Sep 2026 13:19:21 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: FidDazbhO++qx46l2aW/jxS/qW9b3tObHZmPbf26+F8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 06:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f7:8c:18:7f:e0:c3:5d:c3:93:a8:01:21:ca:2e:b1:39:33:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Sep 21 12:31:21 2026 GMT Not After : Sep 22 13:19:21 2026 GMT Subject: CN=210920FBBC3B1B8F053EB46029E55AFCBC53910F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:b9:5a:7b:2d:85:2f:8e:de:90:ba:54:04: 06:34:56:f4:4f:77:45:af:38:f1:ca:b0:e3:a2:49: f0:2d:ac:52:53:5e:1b:ad:9f:db:a7:2c:6b:1e:4a: 5f:32:98:cf:8b:53:16:e8:b0:88:f8:52:6a:fc:b1: 3a:fc:f4:02:77:fe:a8:d5:f1:35:ae:9b:49:45:48: 58:f4:73:f0:03:aa:90:31:97:65:cc:28:f7:ad:b7: 82:dc:32:ac:e0:1e:53:2a:2d:ce:63:f5:91:8f:d5: 55:19:5c:f1:c9:b2:78:98:f2:ee:98:3a:a6:47:ee: d3:bc:10:21:c6:c3:6a:60:b3:95:1d:0e:19:59:f2: 51:ce:59:f9:7b:6d:6c:af:c2:8e:bc:45:f0:92:81: 45:5f:08:10:91:34:e8:8d:e5:6a:5d:59:bb:f8:08: ba:24:7e:11:6f:9e:3e:40:ce:e3:05:07:fd:28:07: f5:51:f6:8a:37:83:bc:ec:0d:85:ac:7d:53:1a:bf: dc:13:56:8c:b6:69:13:32:67:3b:bc:3b:60:de:4a: 27:bd:9d:ec:93:9e:d7:fe:bc:c2:80:14:48:c3:1b: 8d:4c:a7:1a:01:5f:2c:36:fe:ff:00:84:61:42:c4: 4d:44:c5:19:9d:a0:7d:37:d3:79:0f:33:33:0f:14: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:20:FB:BC:3B:1B:8F:05:3E:B4:60:29:E5:5A:FC:BC:53:91:0F X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:55:ab:72:e8:3b:6c:f2:f2:46:91:c8:01:32:c9:65:d5:87: 01:9f:91:46:97:a5:47:9f:2e:a7:5c:fc:e4:a6:9c:39:e1:e4: 6e:0f:34:ea:8a:9d:08:b0:41:91:fb:ee:5a:7e:39:5e:e2:bf: 17:44:c9:23:e4:f0:3b:86:8b:09:bf:8b:bd:ab:8b:8d:76:4c: ed:cf:c2:45:52:32:78:28:c0:f7:fb:17:83:ea:bc:c4:75:2f: fb:40:ac:61:b7:7a:e6:cd:14:13:1a:9a:b0:87:66:cd:5f:4e: 4c:8d:a9:6f:ea:0b:08:d2:13:4e:08:ff:b5:a8:d2:3c:51:0e: b1:6c:c9:26:bb:c0:44:df:23:f4:75:78:b0:ab:2f:39:89:3c: 0f:f6:3a:ba:96:ae:78:3d:5d:5b:0b:d7:84:2a:1c:2f:39:dd: cc:7a:c3:05:e8:71:35:0c:8f:46:b4:ee:e8:23:d9:ce:fa:53: 09:bb:1e:5d:f5:42:37:e4:cc:2e:a3:b0:ea:92:af:be:cc:14: dd:41:2e:d0:c5:bc:28:ed:aa:86:14:97:ca:25:53:53:6c:5a: 3b:ea:2e:99:c5:87:c2:6b:43:ce:85:34:1a:ad:3b:db:27:88: 91:be:bc:06:4a:d2:ef:a6:3b:de:ee:57:e5:c5:8e:9e:dc:5e: bf:54:8a:67 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCPeMGH/gw13Dk6gBIcousTkzz4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA5MjExMjMxMjFaFw0yNjA5MjIxMzE5MjFaMDMxMTAvBgNV BAMTKDIxMDkyMEZCQkMzQjFCOEYwNTNFQjQ2MDI5RTU1QUZDQkM1MzkxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T7laey2FL47ekLpUBAY0VvRP d0WvOPHKsOOiSfAtrFJTXhutn9unLGseSl8ymM+LUxbosIj4Umr8sTr89AJ3/qjV 8TWum0lFSFj0c/ADqpAxl2XMKPett4LcMqzgHlMqLc5j9ZGP1VUZXPHJsniY8u6Y OqZH7tO8ECHGw2pgs5UdDhlZ8lHOWfl7bWyvwo68RfCSgUVfCBCRNOiN5WpdWbv4 CLokfhFvnj5AzuMFB/0oB/VR9oo3g7zsDYWsfVMav9wTVoy2aRMyZzu8O2DeSie9 neyTntf+vMKAFEjDG41MpxoBXyw2/v8AhGFCxE1ExRmdoH0303kPMzMPFEEPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIQkg+7w7G48FPrRgKeVa/LxTkQ8wHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATVaty 6Dts8vJGkcgBMsll1YcBn5FGl6VHny6nXPzkppw54eRuDzTqip0IsEGR++5afjle 4r8XRMkj5PA7hosJv4u9q4uNdkztz8JFUjJ4KMD3+xeD6rzEdS/7QKxht3rmzRQT Gpqwh2bNX05Mjalv6gsI0hNOCP+1qNI8UQ6xbMkmu8BE3yP0dXiwqy85iTwP9jq6 lq54PV1bC9eEKhwvOd3MesMF6HE1DI9GtO7oI9nO+lMJux5d9UI35Mwuo7Dqkq++ zBTdQS7Qxbwo7aqGFJfKJVNTbFo76i6ZxYfCa0POhTQarTvbJ4iRvrwGStLvpjve 7lflxY6e3F6/VIpn -----END CERTIFICATE-----Generated at Tue Sep 22 01:07:01 2026 by rpki-client