$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json) Hash identifier: RdyGvy+z+X09J5N61pw/rDGdeRyNVhX2pXVLEElpTXM= Subject key identifier: 3E:97:02:38:A2:E4:35:7F:3F:A5:DA:AC:B3:B6:85:48:1C:25:9C:B8 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 75644B60B363AFEAD03FEFA1D1EF9109D9C603AD Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft Manifest number: C5 Signing time: Sun 20 Sep 2026 17:28:42 +0000 Manifest this update: Sun 20 Sep 2026 17:23:42 +0000 Manifest next update: Tue 22 Sep 2026 17:28:42 +0000 Files and hashes: 1: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=) 2: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=) 3: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=) 4: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=) 5: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: vRZZBy4KXhRbSslN+w5PBlDp6SwPz/VDi6wT4oSANus=) 6: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=) 7: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=) 8: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=) 9: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=) 10: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=) 11: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:64:4b:60:b3:63:af:ea:d0:3f:ef:a1:d1:ef:91:09:d9:c6:03:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Sep 20 17:23:42 2026 GMT Not After : Sep 22 17:28:42 2026 GMT Subject: CN=3E970238A2E4357F3FA5DAACB3B685481C259CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:bc:7e:fe:11:4d:ee:05:15:2e:de:cf:ba: 87:df:66:cd:2f:23:65:85:b3:00:60:6e:e4:6c:fd: 46:66:6c:b5:8b:16:47:ff:0b:88:c4:b0:4c:bc:1b: 4b:83:c9:f7:97:75:92:f4:92:51:d4:24:28:8a:e2: 90:0c:43:98:11:31:6d:d6:d9:e6:16:1e:2e:29:a6: aa:02:75:aa:45:8e:a5:3b:96:9e:0c:35:f9:ab:f9: 50:0b:33:33:af:c7:32:55:cd:9d:29:ed:4e:ff:17: 2a:86:94:75:fa:10:1a:2a:b5:bc:e9:e9:e8:6a:87: 0f:82:28:bb:84:6b:21:3b:d2:3b:c4:1f:1f:57:84: b2:d1:e6:6a:b5:2d:fe:98:3b:8e:07:f5:dc:90:e3: 38:a9:0d:a8:02:ce:3c:b0:8c:1d:1c:d0:61:2b:83: 36:ae:3f:c0:20:3b:bd:ab:3a:05:17:50:fe:55:f4: 48:73:3b:ff:16:0a:38:ba:83:77:49:ea:15:b7:e7: 8c:0f:04:32:d1:0b:4f:6b:49:71:63:46:fa:f5:f6: ec:b1:30:4e:35:68:a8:39:da:c7:f4:c7:f3:3e:ec: d3:a5:ec:56:50:38:f8:41:83:f5:f1:6c:ce:ee:dc: fa:60:51:05:77:e5:20:79:c4:51:14:98:a5:ac:63: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:97:02:38:A2:E4:35:7F:3F:A5:DA:AC:B3:B6:85:48:1C:25:9C:B8 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f1:2c:cc:bf:95:02:d7:de:26:fc:1a:a4:32:a0:3a:08:de: d0:20:72:16:81:ec:55:32:d3:b7:31:23:91:a8:ab:b9:2a:6a: 46:f8:47:8d:39:7e:9f:2f:6b:3b:2b:71:b9:b7:cf:81:6b:91: 6f:81:8a:3a:4c:f5:9d:a7:76:8a:5e:4a:40:b0:78:cb:18:85: 6c:da:0a:bc:2e:95:b7:ed:a3:03:08:c0:93:84:a1:34:2a:23: a4:68:bc:f4:83:e8:5f:a5:03:09:a1:cc:7f:a3:89:f4:07:ec: ab:6a:70:e6:08:17:17:02:4b:6d:14:e8:72:b1:5e:b4:52:a0: a8:d3:13:f8:45:ed:57:5b:4a:3f:cb:d8:39:93:1c:57:70:80: 3b:7a:9f:a5:86:a8:2f:cb:b6:a9:6a:dd:ba:cc:93:c1:a4:48: a2:62:4b:9e:57:0e:4b:80:72:9a:da:54:d4:93:0f:03:3b:eb: f6:cb:3d:8c:7c:64:33:fc:95:18:3c:a6:18:c9:2f:e6:be:5b: 52:c6:18:a0:20:34:2e:66:1e:8a:fd:27:b5:bf:fc:a0:a7:1c: 6c:74:ae:f2:61:3d:54:fb:b6:48:3b:aa:a2:f2:dc:ae:54:de: bb:38:78:7f:ea:87:c8:93:3a:e5:09:f8:c9:67:77:16:38:ce: 1f:7b:49:f9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdWRLYLNjr+rQP++h0e+RCdnGA60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNjA5MjAxNzIzNDJaFw0yNjA5MjIxNzI4NDJaMDMxMTAvBgNV BAMTKDNFOTcwMjM4QTJFNDM1N0YzRkE1REFBQ0IzQjY4NTQ4MUMyNTlDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+bx+/hFN7gUVLt7PuoffZs0v I2WFswBgbuRs/UZmbLWLFkf/C4jEsEy8G0uDyfeXdZL0klHUJCiK4pAMQ5gRMW3W 2eYWHi4ppqoCdapFjqU7lp4MNfmr+VALMzOvxzJVzZ0p7U7/FyqGlHX6EBoqtbzp 6ehqhw+CKLuEayE70jvEHx9XhLLR5mq1Lf6YO44H9dyQ4zipDagCzjywjB0c0GEr gzauP8AgO72rOgUXUP5V9EhzO/8WCji6g3dJ6hW354wPBDLRC09rSXFjRvr19uyx ME41aKg52sf0x/M+7NOl7FZQOPhBg/XxbM7u3PpgUQV35SB5xFEUmKWsY+a7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPpcCOKLkNX8/pdqss7aFSBwlnLgwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMS8zNTM3Rjk2MTY2OEU0NzY1NTc4 MDk1QUIzM0E0MzUxQkI3MkM5QTYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/EszL+VAtfeJvwapDKg Ogje0CByFoHsVTLTtzEjkairuSpqRvhHjTl+ny9rOytxubfPgWuRb4GKOkz1nad2 il5KQLB4yxiFbNoKvC6Vt+2jAwjAk4ShNCojpGi89IPoX6UDCaHMf6OJ9Afsq2pw 5ggXFwJLbRTocrFetFKgqNMT+EXtV1tKP8vYOZMcV3CAO3qfpYaoL8u2qWrdusyT waRIomJLnlcOS4BymtpU1JMPAzvr9ss9jHxkM/yVGDymGMkv5r5bUsYYoCA0LmYe iv0ntb/8oKccbHSu8mE9VPu2SDuqovLcrlTeuzh4f+qHyJM65Qn4yWd3FjjOH3tJ +Q== -----END CERTIFICATE-----Generated at Mon Sep 21 18:24:31 2026 by rpki-client