$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft File: 08B09F355659D14A7514422FF8C0A470E09A616D.mft (raw, json) Hash identifier: fHkzrJ1cYYH0QKGZU/nmSDzHHEGn3xcUKpGyqS38c68= Subject key identifier: 3C:BB:59:D3:E1:F0:15:F1:55:C8:28:65:59:A5:21:51:07:4D:95:57 Authority key identifier: 08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D Certificate issuer: /CN=08B09F355659D14A7514422FF8C0A470E09A616D Certificate serial: 2037D7923861BEBEA770968A7088056BE64BE704 Authority info access: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft Manifest number: 1B Signing time: Sun 20 Sep 2026 04:43:43 +0000 Manifest this update: Sun 20 Sep 2026 04:38:43 +0000 Manifest next update: Mon 21 Sep 2026 07:15:43 +0000 Files and hashes: 1: 08B09F355659D14A7514422FF8C0A470E09A616D.crl (hash: vwgG9S9UwXDxyfViYnz7oY5+oLSi+EDlIn74Jb2ASeM=) 2: 326130363a613030323a666631303a3a2f34342d3434203d3e20323034303835.roa (hash: 2BnlrdBOBnxokteS24UUIuAvnkec/LOS5N4pjxZvNQU=) 3: 326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa (hash: YU6hYmLGunAuLNoT2NkLO6XcvryiKELepJNQzECBZLY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:37:d7:92:38:61:be:be:a7:70:96:8a:70:88:05:6b:e6:4b:e7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08B09F355659D14A7514422FF8C0A470E09A616D Validity Not Before: Sep 20 04:38:43 2026 GMT Not After : Sep 21 07:15:43 2026 GMT Subject: CN=3CBB59D3E1F015F155C8286559A52151074D9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:93:58:1b:ea:e7:84:0d:fa:ee:93:9c:69: 76:26:8f:dd:e7:c8:a1:fc:11:f2:51:3e:86:47:8d: 1a:18:b4:f5:ec:00:49:71:a8:b8:34:59:7e:3d:ba: 6a:af:3d:57:6e:41:df:cd:da:aa:88:46:0d:9b:7e: 68:bf:14:08:7b:8e:6f:90:1d:f2:b7:e0:1d:36:bc: 50:ce:79:ca:3e:62:6e:64:65:b0:4f:c9:5f:d8:6e: 7f:55:9d:95:ce:3b:3d:5f:f0:8c:59:61:28:bb:69: a5:b9:e7:a9:b7:b4:71:6e:53:d3:0f:39:20:dc:00: bd:b8:82:26:81:a1:a6:2f:bb:75:06:bd:7c:a3:ac: b5:cb:17:10:b7:96:c9:05:41:51:c2:55:46:0b:73: d5:0e:62:5b:c2:5b:81:87:81:1e:d8:6f:cf:59:8d: 84:1e:26:ec:81:03:3a:dc:9a:fe:02:d1:b0:d0:3d: ca:b9:9a:0e:37:89:d7:00:b5:2b:e7:d4:f3:1d:fb: 7d:e5:5b:c0:a8:0b:3e:c4:db:f9:b4:e2:33:84:8a: 98:b7:67:fe:e1:dd:8d:b6:6d:7e:e1:1b:19:b2:90: e2:a7:69:10:ec:77:6a:1c:7d:c2:a6:1a:08:39:59: 6c:5c:67:43:81:4b:7a:19:cd:f4:59:9f:38:50:30: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BB:59:D3:E1:F0:15:F1:55:C8:28:65:59:A5:21:51:07:4D:95:57 X509v3 Authority Key Identifier: keyid:08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl Authority Information Access: CA Issuers - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b0:06:c8:12:a5:cd:c9:37:a9:59:36:dc:77:75:a4:e0:1b: 13:68:73:d5:03:d2:f5:80:f7:51:24:c5:11:87:8f:69:43:8e: 34:1a:9f:b1:c6:ac:ea:9a:21:5f:f6:29:b0:5b:ca:5c:e9:9c: 98:da:7e:41:4d:ca:e7:bd:69:be:e5:5a:84:4d:ee:d7:77:d0: 98:47:13:24:1a:59:6f:ba:4c:85:ac:fd:82:df:a7:d8:70:66: bc:32:e2:e3:d7:a1:4a:80:8e:5c:54:f4:33:e5:ed:c2:15:38: 50:3a:2b:f0:94:ac:89:0a:4d:bf:f7:d2:78:33:f1:56:b5:9c: 59:d3:67:8c:6f:6c:2a:89:30:36:68:35:98:2a:76:06:ef:b0: 5a:47:8f:55:72:b8:e4:ed:dc:1d:76:e8:96:ac:1f:85:61:41: 9b:71:13:d4:00:4c:14:cf:ed:34:a6:5e:93:0a:0a:28:5d:cd: bd:44:3b:54:dd:71:dd:79:03:7c:76:fa:23:43:f1:27:98:e5: 7c:aa:80:ef:d0:37:27:b6:ef:d3:9c:6d:0b:1d:3c:75:ba:3a: f7:c5:d1:54:73:4e:78:51:29:31:4a:84:c5:43:0d:e4:d2:9b: 85:09:82:ff:59:fd:c1:b8:bd:eb:6b:42:05:e7:1a:64:21:33: 30:e2:d9:36 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUIDfXkjhhvr6ncJaKcIgFa+ZL5wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhCMDlGMzU1NjU5RDE0QTc1MTQ0MjJGRjhDMEE0NzBF MDlBNjE2RDAeFw0yNjA5MjAwNDM4NDNaFw0yNjA5MjEwNzE1NDNaMDMxMTAvBgNV BAMTKDNDQkI1OUQzRTFGMDE1RjE1NUM4Mjg2NTU5QTUyMTUxMDc0RDk1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OJNYG+rnhA367pOcaXYmj93n yKH8EfJRPoZHjRoYtPXsAElxqLg0WX49umqvPVduQd/N2qqIRg2bfmi/FAh7jm+Q HfK34B02vFDOeco+Ym5kZbBPyV/Ybn9VnZXOOz1f8IxZYSi7aaW556m3tHFuU9MP OSDcAL24giaBoaYvu3UGvXyjrLXLFxC3lskFQVHCVUYLc9UOYlvCW4GHgR7Yb89Z jYQeJuyBAzrcmv4C0bDQPcq5mg43idcAtSvn1PMd+33lW8CoCz7E2/m04jOEipi3 Z/7h3Y22bX7hGxmykOKnaRDsd2ocfcKmGgg5WWxcZ0OBS3oZzfRZnzhQMC15AgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUPLtZ0+HwFfFVyChlWaUhUQdNlVcwHwYDVR0j BBgwFoAUCLCfNVZZ0Up1FEIv+MCkcOCaYW0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTY2ZGNlNTQtMjBiOS00N2U4LWJjYzMtZDMwN2M3MGZk ZWE5LzEvMDhCMDlGMzU1NjU5RDE0QTc1MTQ0MjJGRjhDMEE0NzBFMDlBNjE2RC5j cmwwgYIGCCsGAQUFBwEBBHYwdDByBggrBgEFBQcwAoZmcnN5bmM6Ly9rcmlsbC5k aXNwYWlzeS5zeXN0ZW1zL3JlcG8vZGlzcGFpc3llbnRlcnByaXNlcy8zLzA4QjA5 RjM1NTY1OUQxNEE3NTE0NDIyRkY4QzBBNDcwRTA5QTYxNkQuY2VyMIGeBggrBgEF BQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtp LnJpcGUubmV0L3JlcG9zaXRvcnkvYTY2ZGNlNTQtMjBiOS00N2U4LWJjYzMtZDMw N2M3MGZkZWE5LzEvMDhCMDlGMzU1NjU5RDE0QTc1MTQ0MjJGRjhDMEE0NzBFMDlB NjE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBADawBsgSpc3JN6lZNtx3daTgGxNoc9UD0vWA91EkxRGH j2lDjjQan7HGrOqaIV/2KbBbylzpnJjafkFNyue9ab7lWoRN7td30JhHEyQaWW+6 TIWs/YLfp9hwZrwy4uPXoUqAjlxU9DPl7cIVOFA6K/CUrIkKTb/30ngz8Va1nFnT Z4xvbCqJMDZoNZgqdgbvsFpHj1VyuOTt3B126JasH4VhQZtxE9QATBTP7TSmXpMK Cihdzb1EO1Tdcd15A3x2+iND8SeY5XyqgO/QNye279OcbQsdPHW6OvfF0VRzTnhR KTFKhMVDDeTSm4UJgv9Z/cG4vetrQgXnGmQhMzDi2TY= -----END CERTIFICATE-----Generated at Sun Sep 20 13:18:04 2026 by rpki-client