$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: U1Kjd88J+Ia/uC1ww47uB7UiNVuPEw2aUIuYbTQQj9o= Subject key identifier: 15:A1:8D:40:55:01:D8:0A:83:49:B7:2C:6E:A8:6A:9A:ED:EF:11:11 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 03239DB33F0C0A7CC7F97C2B1E8C0AAD07CA516C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0421 Signing time: Sun 04 Oct 2026 16:09:40 +0000 Manifest this update: Sun 04 Oct 2026 16:04:40 +0000 Manifest next update: Mon 05 Oct 2026 18:30:40 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: fecPGPDRehYELON7QV08ux7YCxGkgCDFgCGJk/SSqMM=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:23:9d:b3:3f:0c:0a:7c:c7:f9:7c:2b:1e:8c:0a:ad:07:ca:51:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Oct 4 16:04:40 2026 GMT Not After : Oct 5 18:30:40 2026 GMT Subject: CN=15A18D405501D80A8349B72C6EA86A9AEDEF1111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:0a:ea:f9:02:7c:43:9b:1e:29:bd:25:db: 7f:3e:ef:b0:3e:90:f1:16:9b:42:11:3f:45:c0:ab: 11:8a:2a:f1:03:6b:2d:41:91:bc:bf:12:49:c1:bb: d9:95:85:b7:53:a5:c4:f6:8a:9c:a3:ba:ed:13:5f: d7:31:2b:65:11:93:3e:f5:a2:cf:f9:df:7d:db:4c: c5:a1:54:53:8d:70:cc:1e:aa:5a:34:6b:01:f9:64: 48:c6:80:08:2b:ee:d4:7c:25:c8:03:b3:e5:c9:da: 77:06:9d:92:bf:16:58:88:a2:89:2d:b3:1e:40:d1: 43:15:5a:7d:0a:68:ce:0f:8a:ab:6f:c2:53:b0:e1: 5d:d1:ea:c8:e2:ab:60:1f:1d:c2:76:56:23:81:9e: 72:66:45:36:81:41:01:40:e1:ef:1c:e4:41:85:31: ed:e8:35:90:1d:35:fb:9b:d9:2e:2d:e8:1c:88:ab: 3d:fa:d9:2b:63:5c:ca:55:46:fd:1b:9f:4f:4f:7b: e0:84:da:da:45:f3:02:9a:fa:dd:4d:cb:73:ce:31: c7:bf:3a:c9:32:86:4d:0f:b3:98:b0:6e:03:f8:46: 7f:bd:ba:1a:e8:0b:d0:21:e8:a6:a1:b2:c4:ac:ef: 28:54:66:3f:05:4e:23:ae:44:89:04:7c:aa:78:dd: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A1:8D:40:55:01:D8:0A:83:49:B7:2C:6E:A8:6A:9A:ED:EF:11:11 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:b5:e5:c1:23:ae:39:6e:07:c5:5c:50:98:42:46:1f:f9: 03:47:bc:3d:8f:0f:43:ca:2b:90:a9:10:74:75:5a:49:c9:cc: 28:fb:fc:71:cf:a3:5b:ff:f8:82:2a:45:fb:dc:b4:47:09:3e: b3:cf:6a:7e:24:ef:5f:c4:4b:b2:29:e1:7e:79:bc:69:da:89: e3:18:ba:9e:85:0e:d6:ee:13:5b:50:5b:87:7d:cb:e0:7c:59: 4a:8d:74:da:6f:d8:d2:fa:25:bc:90:0b:a6:80:d0:09:51:5f: 19:c1:69:05:08:41:60:4c:91:e0:a3:5a:4f:5d:51:75:d3:98: cb:74:18:19:ea:c4:10:2a:45:cb:d6:49:35:47:f9:f1:57:b5: bb:e4:06:a1:ca:8a:f6:2f:bd:cb:45:23:d3:e6:d2:25:c5:77: 52:7f:40:98:9f:cd:4f:50:79:24:2f:47:47:90:c8:9f:9b:ab: 70:ce:e8:c0:dc:71:6d:44:ca:e7:ef:0f:3b:d0:2a:64:11:8a: 52:42:12:b1:13:5c:94:7c:d7:6c:2c:d6:1f:a8:41:39:81:ec: ba:fd:6b:10:1d:0a:02:49:d6:9a:74:e1:a8:8b:29:16:48:35: 69:30:52:03:60:56:d7:ea:13:1e:e5:5a:c0:50:01:33:a3:72: 22:08:cb:34 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAyOdsz8MCnzH+XwrHowKrQfKUWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjEwMDQxNjA0NDBaFw0yNjEwMDUxODMwNDBaMDMxMTAvBgNV BAMTKDE1QTE4RDQwNTUwMUQ4MEE4MzQ5QjcyQzZFQTg2QTlBRURFRjExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoArq+QJ8Q5seKb0l238+77A+ kPEWm0IRP0XAqxGKKvEDay1Bkby/EknBu9mVhbdTpcT2ipyjuu0TX9cxK2URkz71 os/5333bTMWhVFONcMweqlo0awH5ZEjGgAgr7tR8JcgDs+XJ2ncGnZK/FliIookt sx5A0UMVWn0KaM4PiqtvwlOw4V3R6sjiq2AfHcJ2ViOBnnJmRTaBQQFA4e8c5EGF Me3oNZAdNfub2S4t6ByIqz362StjXMpVRv0bn09Pe+CE2tpF8wKa+t1Ny3POMce/ Oskyhk0Ps5iwbgP4Rn+9uhroC9Ah6KahssSs7yhUZj8FTiOuRIkEfKp43TltAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFaGNQFUB2AqDSbcsbqhqmu3vEREwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkmLXl wSOuOW4HxVxQmEJGH/kDR7w9jw9DyiuQqRB0dVpJycwo+/xxz6Nb//iCKkX73LRH CT6zz2p+JO9fxEuyKeF+ebxp2onjGLqehQ7W7hNbUFuHfcvgfFlKjXTab9jS+iW8 kAumgNAJUV8ZwWkFCEFgTJHgo1pPXVF105jLdBgZ6sQQKkXL1kk1R/nxV7W75Aah yor2L73LRSPT5tIlxXdSf0CYn81PUHkkL0dHkMifm6twzujA3HFtRMrn7w870Cpk EYpSQhKxE1yUfNdsLNYfqEE5gey6/WsQHQoCSdaadOGoiykWSDVpMFIDYFbX6hMe 5VrAUAEzo3IiCMs0 -----END CERTIFICATE-----Generated at Sun Oct 4 21:44:26 2026 by rpki-client