$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: 4dYUDcdutoaUlFKwm1PA3cIvROB/F010WP0Dxi5XqfA= Subject key identifier: AD:B7:36:DF:4B:FA:72:3B:0D:34:38:01:E7:E2:6F:4C:C4:25:DE:CE Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 28CAB0DA5BBD87C508552CDAC91DE3503E44452A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 019E Signing time: Sun 20 Sep 2026 20:04:31 +0000 Manifest this update: Sun 20 Sep 2026 19:59:31 +0000 Manifest next update: Mon 21 Sep 2026 21:49:31 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: MbAubaQ9Wzs1Suae2FkeDPjyOR0LfWN3W9Jr78ba1NI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 21:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ca:b0:da:5b:bd:87:c5:08:55:2c:da:c9:1d:e3:50:3e:44:45:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Sep 20 19:59:31 2026 GMT Not After : Sep 21 21:49:31 2026 GMT Subject: CN=ADB736DF4BFA723B0D343801E7E26F4CC425DECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:99:6d:8d:a9:94:1d:d8:ae:a4:fd:c1:a2: 66:f1:bb:5d:87:8a:ed:5d:cf:4d:26:c2:d5:a2:a7: 03:e5:6a:96:97:cb:9c:b4:bf:71:87:bb:5d:19:af: 58:c9:f9:26:c9:64:00:57:39:a1:25:ba:d5:e8:b0: be:2e:52:c2:34:8a:3a:03:23:8b:6d:77:16:71:d1: c0:29:fa:67:65:32:b0:ce:bb:65:9b:6e:7a:2b:d0: 64:84:7c:9c:22:a3:4e:36:24:23:4e:a4:27:04:40: 7a:d4:04:80:9b:36:f2:cc:9d:be:04:6b:37:71:db: 10:c8:67:a8:d1:c2:ac:54:9f:6c:e9:b9:6b:c0:7c: c9:43:c1:72:0c:ce:62:2f:c7:64:39:6c:8a:8f:9e: 11:ef:22:eb:5d:b5:44:97:fa:88:35:4b:31:3c:13: 39:c2:19:03:f1:72:e8:e2:f8:3b:14:f1:76:a4:ae: 46:7a:b3:8f:b7:0b:75:42:09:49:2b:f1:f2:bd:a8: a5:ab:9c:62:c4:a0:21:97:94:f4:20:13:18:2d:19: 93:c6:fb:fd:31:ce:00:fc:a5:a4:1d:6c:99:f1:96: 1d:7f:55:d5:2f:ee:67:90:db:58:85:79:ae:93:be: 74:ce:20:ee:29:fb:ac:ec:b9:5c:9c:5b:08:6b:38: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:36:DF:4B:FA:72:3B:0D:34:38:01:E7:E2:6F:4C:C4:25:DE:CE X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:47:f0:b3:9d:99:b6:aa:25:d8:bb:a5:86:6d:18:df:90:85: 1d:63:f0:b7:96:c1:fe:01:0d:e5:f8:37:cf:c9:80:5e:9a:2d: 5b:c4:4a:02:88:fe:75:42:4c:51:ce:1a:42:cc:2b:5f:3d:a8: ef:cf:a9:5f:b6:e7:71:d7:18:6e:9c:1a:9a:c1:da:ee:e3:6e: b1:7a:1a:0c:03:68:0a:3a:45:60:67:7c:52:a3:01:9f:51:d1: 4c:b6:90:c6:32:dc:6d:c2:74:5c:6b:9f:d6:6f:47:0d:6d:f2: 49:50:28:5c:91:f4:b9:0d:d0:56:76:73:5d:30:c1:ed:d8:81: 38:f3:71:bc:f1:e8:84:70:ba:31:fd:c2:82:76:bd:b8:24:19: 95:9c:fe:5d:3c:c7:23:90:eb:cb:2a:02:32:b2:4d:dd:c4:96: 66:e6:bb:5e:43:86:c9:06:89:df:21:35:76:36:e8:81:a5:75: 96:2b:9f:da:71:1b:90:c8:d3:78:10:82:db:89:b2:9c:25:c5: 36:54:fb:e7:57:da:b9:8a:17:ce:61:87:1b:0f:f0:25:9d:bf: 99:81:cf:61:05:ef:f4:c2:49:cd:74:3e:d8:16:62:ea:50:9b: 86:4e:c9:aa:4c:c4:11:bb:4b:c1:49:49:b7:f5:65:ce:ee:48: 73:e2:77:f3 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUKMqw2lu9h8UIVSzayR3jUD5ERSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA5MjAxOTU5MzFaFw0yNjA5MjEyMTQ5MzFaMDMxMTAvBgNV BAMTKEFEQjczNkRGNEJGQTcyM0IwRDM0MzgwMUU3RTI2RjRDQzQyNURFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtpltjamUHdiupP3Bombxu12H iu1dz00mwtWipwPlapaXy5y0v3GHu10Zr1jJ+SbJZABXOaElutXosL4uUsI0ijoD I4ttdxZx0cAp+mdlMrDOu2Wbbnor0GSEfJwio042JCNOpCcEQHrUBICbNvLMnb4E azdx2xDIZ6jRwqxUn2zpuWvAfMlDwXIMzmIvx2Q5bIqPnhHvIutdtUSX+og1SzE8 EznCGQPxcuji+DsU8XakrkZ6s4+3C3VCCUkr8fK9qKWrnGLEoCGXlPQgExgtGZPG +/0xzgD8paQdbJnxlh1/VdUv7meQ21iFea6TvnTOIO4p+6zsuVycWwhrOB43AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUrbc230v6cjsNNDgB5+JvTMQl3s4wHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0fws52Ztqol2Lulhm0Y 35CFHWPwt5bB/gEN5fg3z8mAXpotW8RKAoj+dUJMUc4aQswrXz2o78+pX7bncdcY bpwamsHa7uNusXoaDANoCjpFYGd8UqMBn1HRTLaQxjLcbcJ0XGuf1m9HDW3ySVAo XJH0uQ3QVnZzXTDB7diBOPNxvPHohHC6Mf3Cgna9uCQZlZz+XTzHI5DryyoCMrJN 3cSWZua7XkOGyQaJ3yE1djbogaV1liuf2nEbkMjTeBCC24mynCXFNlT751fauYoX zmGHGw/wJZ2/mYHPYQXv9MJJzXQ+2BZi6lCbhk7JqkzEEbtLwUlJt/Vlzu5Ic+J3 8w== -----END CERTIFICATE-----Generated at Mon Sep 21 06:54:05 2026 by rpki-client