$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: Nht4zJLa7ApURYo1HHTifPfDqo5DyiZBdDKMZaxUiGk= Subject key identifier: 39:D7:60:EA:F7:E3:9C:6D:42:63:16:FA:AF:69:2F:4B:A1:B9:7C:87 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 063312DDC035A54B52A82645644E6FAEFE29090D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0329 Signing time: Sun 15 Nov 2026 16:45:22 +0000 Manifest this update: Sun 15 Nov 2026 16:40:22 +0000 Manifest next update: Mon 16 Nov 2026 16:46:22 +0000 Files and hashes: 1: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 2: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 3: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 4: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 6: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 1rohPUmTJZE1prShWnSyn4cJ6v7ziBC8UIcrtKGByH8=) 7: 3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa (hash: 5nflC/ZAQBKmwe6R0T4Zf8LtCLe1A1oD7ZGFGhKypUg=) 8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 9: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:33:12:dd:c0:35:a5:4b:52:a8:26:45:64:4e:6f:ae:fe:29:09:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 15 16:40:22 2026 GMT Not After : Nov 16 16:46:22 2026 GMT Subject: CN=39D760EAF7E39C6D426316FAAF692F4BA1B97C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:06:17:c8:44:d9:0f:04:22:cf:1a:84:76:af: ba:3f:c0:59:45:1e:b9:a5:bc:02:34:0b:19:f2:f8: e8:8e:25:c4:a0:32:c3:ab:ab:2e:8b:e1:64:11:12: 0a:91:86:16:79:80:8a:c4:cb:16:d9:41:60:72:9e: be:7a:7e:7a:3f:a5:58:16:71:56:ac:13:dc:7c:5c: df:1f:cf:c5:ee:91:73:56:1a:7c:94:d0:51:4f:c6: 6b:4b:b9:0f:6a:1c:f9:dc:73:11:a5:58:7f:61:b7: f5:26:4f:d5:43:49:dc:e1:0a:eb:9a:07:a1:ae:ff: 81:44:25:88:96:10:2a:7e:a7:a2:de:0d:75:09:a3: c8:d0:1a:c9:9d:09:02:49:e7:fd:5e:86:3a:20:52: 65:37:dc:0f:4a:43:f4:c0:85:ca:5b:88:d5:e5:bf: 09:69:13:0a:2b:de:6c:8e:69:61:48:99:60:78:42: a5:fb:69:a8:bb:7f:93:9d:ee:dd:5d:12:2a:92:68: f3:f0:28:74:7e:63:6c:a4:73:ef:d6:cf:27:0a:cf: 29:dd:81:55:63:66:23:51:a9:9b:d1:f0:fb:13:0e: 68:b9:a6:83:47:3e:79:53:f3:a1:0e:34:d3:c7:66: 15:0a:2e:23:c9:97:a7:66:02:b2:99:9e:7b:1f:5b: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:60:EA:F7:E3:9C:6D:42:63:16:FA:AF:69:2F:4B:A1:B9:7C:87 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:13:c1:1f:68:60:dd:65:08:ae:20:2e:c9:39:76:2a:09:bf: 6d:88:c6:41:1f:5b:10:30:2d:ed:73:74:ab:17:b7:1d:1c:3d: a5:00:be:09:d1:84:26:78:19:9b:11:7a:19:db:1f:0a:eb:05: be:d3:70:be:73:53:91:1e:0c:5c:1f:d6:66:75:20:9f:28:74: a3:3d:ab:bb:28:7b:44:2d:d8:cb:02:7a:1f:01:97:1f:58:95: 73:40:b4:d2:7e:84:fd:eb:28:e3:d3:51:e9:81:10:75:7d:1c: b7:e2:b2:da:bf:9e:63:c9:f5:9b:30:20:8d:1f:12:3b:95:df: e5:38:d7:a0:2a:58:02:12:65:da:b9:d3:6a:52:91:75:80:da: d8:63:d5:09:81:a8:62:72:58:4e:f6:84:a7:ba:82:06:34:f8: 37:43:35:55:92:b9:cb:ad:35:f3:c0:d1:47:77:b3:8a:05:51: d2:04:c0:5d:70:b5:94:fa:00:42:67:ba:8e:8e:2d:1d:dd:4a: 25:a9:dc:d9:f0:a2:3e:b9:22:5b:0b:94:88:51:9b:e3:63:dd: a2:8a:5c:ce:7a:f5:80:66:b0:59:fb:75:a4:29:79:79:34:a2: e2:2d:94:75:12:08:7c:d6:d2:01:d2:c0:8a:28:74:64:0b:d3: 59:a9:b9:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBjMS3cA1pUtSqCZFZE5vrv4pCQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjExMTUxNjQwMjJaFw0yNjExMTYxNjQ2MjJaMDMxMTAvBgNV BAMTKDM5RDc2MEVBRjdFMzlDNkQ0MjYzMTZGQUFGNjkyRjRCQTFCOTdDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzBhfIRNkPBCLPGoR2r7o/wFlF HrmlvAI0Cxny+OiOJcSgMsOrqy6L4WQREgqRhhZ5gIrEyxbZQWBynr56fno/pVgW cVasE9x8XN8fz8XukXNWGnyU0FFPxmtLuQ9qHPnccxGlWH9ht/UmT9VDSdzhCuua B6Gu/4FEJYiWECp+p6LeDXUJo8jQGsmdCQJJ5/1ehjogUmU33A9KQ/TAhcpbiNXl vwlpEwor3myOaWFImWB4QqX7aai7f5Od7t1dEiqSaPPwKHR+Y2ykc+/WzycKzynd gVVjZiNRqZvR8PsTDmi5poNHPnlT86EONNPHZhUKLiPJl6dmArKZnnsfWyJVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOddg6vfjnG1CYxb6r2kvS6G5fIcwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxPBH2hg3WUIriAuyTl2 Kgm/bYjGQR9bEDAt7XN0qxe3HRw9pQC+CdGEJngZmxF6GdsfCusFvtNwvnNTkR4M XB/WZnUgnyh0oz2ruyh7RC3YywJ6HwGXH1iVc0C00n6E/eso49NR6YEQdX0ct+Ky 2r+eY8n1mzAgjR8SO5Xf5TjXoCpYAhJl2rnTalKRdYDa2GPVCYGoYnJYTvaEp7qC BjT4N0M1VZK5y60188DRR3ezigVR0gTAXXC1lPoAQme6jo4tHd1KJanc2fCiPrki WwuUiFGb42Pdoopcznr1gGawWft1pCl5eTSi4i2UdRIIfNbSAdLAiih0ZAvTWam5 EQ== -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:08 2026 by rpki-client