$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: Z3LetAdikD7yWWkMdcxsrUkN8yuMWa56kwdIYc89RpU= Subject key identifier: A7:90:82:3D:EA:34:3F:17:86:8B:27:43:13:89:04:01:C9:F5:8B:77 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 472A6335FFDD9BEE21E62FA5F379B3C058495C61 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 019F Signing time: Mon 21 Sep 2026 13:49:31 +0000 Manifest this update: Mon 21 Sep 2026 13:44:31 +0000 Manifest next update: Tue 22 Sep 2026 16:28:31 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: ZinuhGYwK03648FVc0cF0B6oLo58ua7huyIno8lyWM4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 13:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2a:63:35:ff:dd:9b:ee:21:e6:2f:a5:f3:79:b3:c0:58:49:5c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Sep 21 13:44:31 2026 GMT Not After : Sep 22 16:28:31 2026 GMT Subject: CN=A790823DEA343F17868B274313890401C9F58B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:e0:9a:4c:5a:2b:12:4e:c5:6a:0e:21:55: 31:33:b6:c1:0a:e9:3d:78:dc:b4:b7:2b:fd:45:6b: 55:56:69:83:3d:f8:37:40:bd:d4:1f:60:a5:d0:ca: a3:d1:c9:39:13:61:25:dd:ee:60:e3:35:c5:f0:cd: 72:64:65:8e:17:37:58:2e:4e:5b:f3:b5:f0:b5:e6: 5b:d1:f7:f9:a9:97:9a:3b:7e:81:94:f5:43:7f:ee: 71:25:05:6a:e6:e1:45:0d:df:3f:88:9a:ff:be:d2: 78:07:70:4f:ff:8d:f0:a1:17:95:64:9b:63:be:eb: 64:26:2f:65:0f:b4:60:fc:53:f5:87:bf:3b:38:d1: 6f:e4:8c:fc:90:b9:9d:25:71:12:f0:bb:d2:4e:f4: cb:41:4a:5b:38:b6:43:aa:54:45:e7:ba:bf:40:bd: b0:e8:3d:52:4c:70:8a:6d:1a:58:fe:ca:9a:01:c0: 43:9a:6f:09:ed:97:d4:c4:f7:86:a9:98:4b:a9:29: 24:d7:58:8b:04:7a:6d:ea:6e:56:c4:40:88:13:16: 3d:c1:00:e0:b1:8a:c9:ac:b7:4b:b0:fe:fc:47:aa: 89:dc:79:96:59:18:df:48:52:54:06:92:6e:d6:eb: cb:01:0b:7a:5c:72:dd:44:c0:8d:c1:45:2a:53:a3: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:90:82:3D:EA:34:3F:17:86:8B:27:43:13:89:04:01:C9:F5:8B:77 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:85:dc:83:6f:1a:6a:85:86:9c:4d:40:26:3f:33:27:96: 13:c5:ed:fd:6c:24:cd:c9:09:68:9b:63:ba:7e:a0:a2:f7:94: e0:af:4e:42:b2:57:32:0b:29:49:e8:f3:63:54:3f:6e:15:ec: d5:e1:36:82:e4:d1:cb:22:a4:a4:da:bf:e6:86:32:03:df:d4: df:72:78:5a:42:76:92:84:11:2f:fa:33:ef:e4:d2:a6:b5:3f: 86:a1:34:03:32:13:29:de:ed:7a:6a:58:b5:bd:3a:0b:de:f0: 2d:93:79:60:0f:fe:af:55:4a:e8:64:31:f5:45:ae:fe:05:ed: 0d:9e:18:59:ed:df:6e:fa:00:df:94:a6:71:8b:2c:23:13:58: d5:bd:dc:38:e7:73:bf:39:8e:99:7b:2d:47:2d:77:f8:3f:8f: 29:a4:fd:8b:b4:77:61:4e:ee:30:75:46:a7:4b:36:c6:29:f2: 21:6e:e5:be:0b:ee:29:d9:a7:16:53:3d:58:40:bc:eb:30:54: 0f:fe:89:83:10:36:b7:65:15:3f:61:d5:b0:5c:c2:70:c0:ab: 59:f5:90:96:b8:0e:be:4d:44:63:cf:f8:ce:54:96:24:a2:7d: 48:78:bc:cf:2b:26:5d:65:d2:53:8d:65:22:67:0b:da:de:47: 93:e8:df:56 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURypjNf/dm+4h5i+l83mzwFhJXGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA5MjExMzQ0MzFaFw0yNjA5MjIxNjI4MzFaMDMxMTAvBgNV BAMTKEE3OTA4MjNERUEzNDNGMTc4NjhCMjc0MzEzODkwNDAxQzlGNThCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTbeCaTForEk7Fag4hVTEztsEK 6T143LS3K/1Fa1VWaYM9+DdAvdQfYKXQyqPRyTkTYSXd7mDjNcXwzXJkZY4XN1gu TlvztfC15lvR9/mpl5o7foGU9UN/7nElBWrm4UUN3z+Imv++0ngHcE//jfChF5Vk m2O+62QmL2UPtGD8U/WHvzs40W/kjPyQuZ0lcRLwu9JO9MtBSls4tkOqVEXnur9A vbDoPVJMcIptGlj+ypoBwEOabwntl9TE94apmEupKSTXWIsEem3qblbEQIgTFj3B AOCxismst0uw/vxHqonceZZZGN9IUlQGkm7W68sBC3pcct1EwI3BRSpTo3CPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUp5CCPeo0PxeGiydDE4kEAcn1i3cwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUaF3INvGmqFhpxNQCY/ MyeWE8Xt/WwkzckJaJtjun6goveU4K9OQrJXMgspSejzY1Q/bhXs1eE2guTRyyKk pNq/5oYyA9/U33J4WkJ2koQRL/oz7+TSprU/hqE0AzITKd7tempYtb06C97wLZN5 YA/+r1VK6GQx9UWu/gXtDZ4YWe3fbvoA35SmcYssIxNY1b3cOOdzvzmOmXstRy13 +D+PKaT9i7R3YU7uMHVGp0s2xinyIW7lvgvuKdmnFlM9WEC86zBUD/6JgxA2t2UV P2HVsFzCcMCrWfWQlrgOvk1EY8/4zlSWJKJ9SHi8zysmXWXSU41lImcL2t5Hk+jf Vg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:33:55 2026 by rpki-client