$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: bMMw1eJ6VtK8M75ELPGkxYbXs+tNbCBkCtuB8xjpJrg= Subject key identifier: 08:DA:5D:29:72:4F:6A:67:7C:9E:94:91:6A:22:9B:1F:30:5C:93:88 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 55352B753DE26D8A0D502C0BA9C8FB5784CCDC63 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: D2 Signing time: Thu 24 Sep 2026 04:55:01 +0000 Manifest this update: Thu 24 Sep 2026 04:50:01 +0000 Manifest next update: Fri 25 Sep 2026 05:04:01 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: 5glru1E8y72woI5/RFsh+oRe37qGXB8JIuZIiVeMrKo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 16:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:35:2b:75:3d:e2:6d:8a:0d:50:2c:0b:a9:c8:fb:57:84:cc:dc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Sep 24 04:50:01 2026 GMT Not After : Sep 25 05:04:01 2026 GMT Subject: CN=08DA5D29724F6A677C9E94916A229B1F305C9388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:69:77:36:8a:75:f5:d2:5c:69:24:99:6f: d0:e8:64:4d:ec:39:90:0d:5e:54:2b:3e:07:c8:f8: da:a8:26:34:f4:54:cb:ca:e1:7a:e2:c8:d0:0a:60: 56:f3:99:1d:5f:97:46:c1:97:3f:2b:9c:56:7c:f1: 9a:e5:fd:d4:f8:77:35:76:ce:77:b5:f5:ac:a3:54: 6b:83:5d:b5:60:78:9f:a0:3e:7a:0e:cb:ee:67:3d: b7:64:53:20:34:f7:f5:81:3e:63:2f:f4:08:e7:d3: e9:fc:7b:87:3a:d6:8c:96:e2:df:57:55:ce:ad:fb: 5b:3c:bb:1e:7b:00:83:17:7a:e4:e2:4b:53:b3:ea: a5:46:e4:f6:d2:24:65:68:b1:36:0a:ed:77:a9:b7: 6e:81:67:20:5c:66:52:f6:3c:ac:cd:3b:46:bf:7a: 0e:97:45:a5:b4:fb:ab:ba:60:73:63:6d:a9:88:e5: a8:f1:96:18:3c:51:dd:82:38:89:e5:f5:cd:c7:ca: f7:69:6f:ff:32:40:40:9d:61:75:2b:90:ca:90:08: a1:7d:c4:84:51:6b:89:d9:10:7d:03:4d:a6:6f:3f: d5:2d:f8:36:89:2b:7e:e2:63:1c:e5:a8:25:a1:58: cd:cf:16:44:4f:28:54:23:6d:09:d6:eb:7e:ea:ca: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:5D:29:72:4F:6A:67:7C:9E:94:91:6A:22:9B:1F:30:5C:93:88 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:29:a7:90:01:da:6c:fc:c4:22:22:b9:53:6c:ce:be:74: 20:7e:0d:a6:60:4a:bd:1d:cc:2f:bf:04:98:a6:17:b7:8b:7b: 97:e4:d1:8e:f7:22:46:78:d2:c9:c8:cf:9c:db:30:bf:09:07: 6a:95:c9:8b:59:b9:ec:33:ee:cb:3d:df:fb:39:6f:06:35:a9: eb:86:2a:55:12:ee:d6:0c:98:c5:20:70:94:c0:9c:96:8a:64: ea:8f:ac:98:e4:34:73:ae:32:79:3a:47:9e:00:4f:de:d2:ef: 81:9c:59:05:ee:26:18:10:3e:49:c0:d6:95:6e:0f:31:7a:45: 00:67:9b:84:93:66:28:6f:cb:b9:90:4a:d1:8f:1a:0e:7c:20: df:8f:29:ab:e8:f9:c3:d8:0d:58:9e:c3:b2:ae:2b:8a:e4:34: 8b:41:ce:76:48:6c:25:49:b5:55:00:8c:75:74:cd:d1:6f:4a: e2:6b:01:43:3e:54:54:03:d0:b9:8c:8c:07:d7:22:73:21:c8: 7c:b1:48:fc:38:7c:56:8a:24:ea:5e:bd:42:f5:9e:b0:b1:bf: 5f:fc:fe:4b:2d:b8:e4:21:31:ce:c4:53:ad:a3:c2:8a:53:0d: 8b:d0:25:d3:81:31:4f:16:72:e5:c9:3c:53:f9:42:a1:7c:80: 76:50:33:bd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVTUrdT3ibYoNUCwLqcj7V4TM3GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA5MjQwNDUwMDFaFw0yNjA5MjUwNTA0MDFaMDMxMTAvBgNV BAMTKDA4REE1RDI5NzI0RjZBNjc3QzlFOTQ5MTZBMjI5QjFGMzA1QzkzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVz2l3Nop19dJcaSSZb9DoZE3s OZANXlQrPgfI+NqoJjT0VMvK4XriyNAKYFbzmR1fl0bBlz8rnFZ88Zrl/dT4dzV2 zne19ayjVGuDXbVgeJ+gPnoOy+5nPbdkUyA09/WBPmMv9Ajn0+n8e4c61oyW4t9X Vc6t+1s8ux57AIMXeuTiS1Oz6qVG5PbSJGVosTYK7Xept26BZyBcZlL2PKzNO0a/ eg6XRaW0+6u6YHNjbamI5ajxlhg8Ud2COInl9c3Hyvdpb/8yQECdYXUrkMqQCKF9 xIRRa4nZEH0DTaZvP9Ut+DaJK37iYxzlqCWhWM3PFkRPKFQjbQnW637qyucZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCNpdKXJPamd8npSRaiKbHzBck4gwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAUCmn kAHabPzEIiK5U2zOvnQgfg2mYEq9HcwvvwSYphe3i3uX5NGO9yJGeNLJyM+c2zC/ CQdqlcmLWbnsM+7LPd/7OW8GNanrhipVEu7WDJjFIHCUwJyWimTqj6yY5DRzrjJ5 OkeeAE/e0u+BnFkF7iYYED5JwNaVbg8xekUAZ5uEk2Yob8u5kErRjxoOfCDfjymr 6PnD2A1YnsOyriuK5DSLQc52SGwlSbVVAIx1dM3Rb0riawFDPlRUA9C5jIwH1yJz Ich8sUj8OHxWiiTqXr1C9Z6wsb9f/P5LLbjkITHOxFOto8KKUw2L0CXTgTFPFnLl yTxT+UKhfIB2UDO9 -----END CERTIFICATE-----Generated at Thu Sep 24 07:47:38 2026 by rpki-client