$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: Ingqp8TRLJERQugxJDCztWqHnzxfxgl4LLxUrbs/wWc= Subject key identifier: AF:FC:E1:74:E0:54:96:B9:64:C2:F7:01:AF:EE:C5:C5:5C:EB:B0:77 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 371456BD92BC2ECF744AD9C71809022CA634FE16 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 021C Signing time: Sat 19 Sep 2026 22:32:31 +0000 Manifest this update: Sat 19 Sep 2026 22:27:31 +0000 Manifest next update: Mon 21 Sep 2026 02:07:31 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: jttxl3w5gtGvWvJGVtPuIaUM9EQsHbSyoOZ1w8vhwz4=) 2: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: zXv4dxEoWZj3834vIeXx6rPQFqpB/OVTEhNhi9FKQp8=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 4: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 5: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 6: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 7: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 8: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 02:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:14:56:bd:92:bc:2e:cf:74:4a:d9:c7:18:09:02:2c:a6:34:fe:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 19 22:27:31 2026 GMT Not After : Sep 21 02:07:31 2026 GMT Subject: CN=AFFCE174E05496B964C2F701AFEEC5C55CEBB077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:66:a6:6b:f5:02:4a:f8:10:32:07:21:61:df: 3a:54:94:7c:1b:f3:c3:8a:71:17:e2:09:06:36:d1: 1f:2a:f4:19:f6:29:66:d5:ce:31:64:23:6a:47:6c: 97:22:cc:47:5b:9f:f1:5e:12:e3:b3:dd:88:33:6e: db:fd:74:1d:b2:5b:c3:2c:1e:b4:59:6b:1f:da:68: f3:78:e1:51:0b:e9:bf:59:18:5c:e1:68:ff:df:2a: ac:a1:62:0a:5a:08:09:be:a1:92:d8:21:2f:d5:92: ae:29:59:28:74:71:70:2c:e4:ac:60:88:cc:a8:bf: 6e:76:4e:1c:59:8f:af:8c:b0:a7:54:a2:26:61:96: 31:c2:3c:2e:9e:b1:98:98:74:f4:30:29:39:af:34: 35:e9:7a:48:be:76:09:51:16:0f:11:c9:c3:de:51: 07:e0:d5:6b:d6:f6:cf:fd:dd:4f:05:d0:02:a0:90: dc:20:3a:3f:5d:9f:d9:2d:bc:8d:36:1e:68:64:f4: c7:76:aa:20:fb:66:46:7d:d2:11:1b:9c:9b:ec:76: fa:15:e4:d8:69:0f:20:e4:da:85:af:b8:98:26:2c: f2:4d:8d:47:35:0b:f3:1c:66:9a:c9:77:96:f6:78: 07:82:39:a8:95:84:9b:c1:d8:9d:85:54:6d:54:4b: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:E1:74:E0:54:96:B9:64:C2:F7:01:AF:EE:C5:C5:5C:EB:B0:77 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:bd:2b:c9:57:47:ff:cf:25:ab:27:55:c2:f5:e9:b9:d6: 33:f7:c8:e3:50:d8:81:3a:b3:24:27:37:11:d4:f5:52:c2:0b: 3e:d2:b8:e2:54:38:6d:7b:d4:58:44:af:aa:6f:b2:e5:41:62: 26:30:99:a9:ce:ad:e7:ad:a5:6c:60:18:7c:5c:80:c3:d9:19: 8a:f6:8e:18:03:ab:32:17:3d:f3:0f:ab:be:49:1c:c5:63:f7: 96:4f:87:bf:a1:ec:d2:d6:bb:fa:73:45:83:0f:8b:91:63:26: f7:78:34:c9:a2:99:11:14:ca:e1:84:97:65:8b:67:76:a4:cc: f9:c3:ad:19:f0:b4:cb:0b:78:26:fb:03:db:fd:e3:95:aa:6f: 69:62:88:65:0d:46:9f:53:90:03:8b:4d:0c:71:17:28:32:56: f3:80:d0:a2:ec:0a:8a:30:ca:7f:68:3d:65:3f:84:1a:32:48: 1a:b7:48:f4:67:dd:fd:98:f4:03:90:90:93:fe:55:0e:63:6c: 74:34:bf:08:6a:a0:24:07:a5:cf:de:24:97:f7:dd:99:23:75: 56:d9:50:08:f6:2b:c2:d1:e5:0d:85:6e:0e:3f:6f:f1:a3:79: 32:9d:bc:ce:9c:ae:99:a5:ff:93:b7:e5:da:ea:4a:fa:78:87: f5:b0:ed:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNxRWvZK8Ls90StnHGAkCLKY0/hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA5MTkyMjI3MzFaFw0yNjA5MjEwMjA3MzFaMDMxMTAvBgNV BAMTKEFGRkNFMTc0RTA1NDk2Qjk2NEMyRjcwMUFGRUVDNUM1NUNFQkIwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsZqZr9QJK+BAyByFh3zpUlHwb 88OKcRfiCQY20R8q9Bn2KWbVzjFkI2pHbJcizEdbn/FeEuOz3Ygzbtv9dB2yW8Ms HrRZax/aaPN44VEL6b9ZGFzhaP/fKqyhYgpaCAm+oZLYIS/Vkq4pWSh0cXAs5Kxg iMyov252ThxZj6+MsKdUoiZhljHCPC6esZiYdPQwKTmvNDXpeki+dglRFg8RycPe UQfg1WvW9s/93U8F0AKgkNwgOj9dn9ktvI02Hmhk9Md2qiD7ZkZ90hEbnJvsdvoV 5NhpDyDk2oWvuJgmLPJNjUc1C/McZprJd5b2eAeCOaiVhJvB2J2FVG1USxSVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUr/zhdOBUlrlkwvcBr+7FxVzrsHcwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEO70r yVdH/88lqydVwvXpudYz98jjUNiBOrMkJzcR1PVSwgs+0rjiVDhte9RYRK+qb7Ll QWImMJmpzq3nraVsYBh8XIDD2RmK9o4YA6syFz3zD6u+SRzFY/eWT4e/oezS1rv6 c0WDD4uRYyb3eDTJopkRFMrhhJdli2d2pMz5w60Z8LTLC3gm+wPb/eOVqm9pYohl DUafU5ADi00McRcoMlbzgNCi7AqKMMp/aD1lP4QaMkgat0j0Z939mPQDkJCT/lUO Y2x0NL8IaqAkB6XP3iSX992ZI3VW2VAI9ivC0eUNhW4OP2/xo3kynbzOnK6Zpf+T t+Xa6kr6eIf1sO04 -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:42 2026 by rpki-client