$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: 0FbjrbPwsqtiX7jvcIS47Wn2NREHqb99rzMGVPQCaeQ= Subject key identifier: 7E:4B:DA:A7:47:22:2A:73:1E:66:09:78:33:6A:1D:85:B8:3C:BA:2B Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 6E711EB86643E3D9B37E2B865773478048192C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 06CD Signing time: Tue 10 Nov 2026 02:32:19 +0000 Manifest this update: Tue 10 Nov 2026 02:27:19 +0000 Manifest next update: Wed 11 Nov 2026 02:56:19 +0000 Files and hashes: 1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: ZQ/gQDVcH3B2cQgRAwtFjfGw+peiskH0hMkxmTE0tks=) 2: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 3: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 02:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:71:1e:b8:66:43:e3:d9:b3:7e:2b:86:57:73:47:80:48:19:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Nov 10 02:27:19 2026 GMT Not After : Nov 11 02:56:19 2026 GMT Subject: CN=7E4BDAA747222A731E660978336A1D85B83CBA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:e1:80:29:15:4a:8c:d0:2c:fa:47:6c:38: 32:0e:39:aa:c7:af:b3:b2:56:45:2f:81:41:ba:a3: 0c:01:88:d9:a6:ef:90:07:78:82:94:b2:c3:b5:94: f7:28:c4:77:ab:27:94:66:48:f3:2a:b9:1d:1b:be: 9b:c8:0d:c4:c5:5d:88:cc:86:2a:11:50:98:b5:aa: e0:fb:24:04:49:08:11:62:7b:c3:27:64:4a:b3:bd: 63:31:83:1b:14:eb:f8:71:ae:ac:cb:82:95:41:02: 63:ba:f6:8e:c7:69:09:89:f8:35:c2:ff:34:80:db: 5b:e9:bc:8b:6f:52:d5:73:60:b6:49:33:08:61:0c: 18:4a:52:0f:4d:ee:86:b8:ec:dc:e8:1b:4d:e3:13: a4:bb:34:81:65:13:99:f1:35:30:58:c8:29:f2:dc: e9:23:da:c3:0e:2a:62:59:12:ce:9e:ac:0b:30:86: 5e:a4:f6:9b:90:6d:df:88:28:19:c9:1e:05:28:91: 06:9c:43:fd:35:b9:e4:b0:65:49:92:70:1b:d1:c2: 1e:d0:9d:f8:d6:4d:ad:bb:32:7d:b6:55:29:1b:93: 46:27:6a:da:83:43:09:61:31:ab:42:99:bb:e0:6a: d9:e6:4c:b1:be:12:43:0d:27:43:6d:73:df:3f:e0: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4B:DA:A7:47:22:2A:73:1E:66:09:78:33:6A:1D:85:B8:3C:BA:2B X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fa:5d:8c:e8:57:52:c9:23:2e:e4:0a:b0:77:d1:9e:93:2c: 0d:eb:33:58:10:f3:40:19:bf:84:af:e8:a0:0f:64:92:4f:93: 73:2e:36:0a:5d:50:b5:99:80:6f:91:43:69:77:e3:f8:74:bc: 47:9f:b6:4e:27:7c:82:3e:93:24:20:78:fd:7f:5d:85:12:b5: f1:b1:28:8f:34:bd:2a:09:10:06:da:43:d7:5e:60:75:78:18: f3:24:cd:c5:51:11:9b:be:a8:d4:3b:09:67:f6:a9:3c:b1:d7: 94:d0:45:1a:d3:b7:7e:08:4d:42:9b:20:ff:66:0b:7c:1b:bb: c5:66:5d:dc:e4:36:dd:7a:2b:9e:1b:b8:80:89:9d:f5:ff:a1: 37:76:4f:f6:4c:8d:75:21:bc:66:14:8f:fa:10:56:b2:f7:42: e1:86:01:00:ba:4b:5e:98:0a:44:e8:ff:da:c8:62:95:7f:33: 6b:3c:e2:4d:00:9a:16:68:50:24:ee:0f:f6:fb:03:24:c2:16: d6:f5:47:05:e6:08:df:a6:a1:61:f2:83:cc:c2:e4:08:ff:89: c0:2a:2b:fe:d3:0b:6d:7e:15:42:9e:ae:c1:d6:01:ad:fc:25: be:0d:4f:c6:4f:36:11:99:ce:6f:65:d1:19:51:be:f3:19:05: 25:17:40:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbnEeuGZD49mzfiuGV3NHgEgZLC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjExMTAwMjI3MTlaFw0yNjExMTEwMjU2MTlaMDMxMTAvBgNV BAMTKDdFNEJEQUE3NDcyMjJBNzMxRTY2MDk3ODMzNkExRDg1QjgzQ0JBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi+GAKRVKjNAs+kdsODIOOarH r7OyVkUvgUG6owwBiNmm75AHeIKUssO1lPcoxHerJ5RmSPMquR0bvpvIDcTFXYjM hioRUJi1quD7JARJCBFie8MnZEqzvWMxgxsU6/hxrqzLgpVBAmO69o7HaQmJ+DXC /zSA21vpvItvUtVzYLZJMwhhDBhKUg9N7oa47NzoG03jE6S7NIFlE5nxNTBYyCny 3Okj2sMOKmJZEs6erAswhl6k9puQbd+IKBnJHgUokQacQ/01ueSwZUmScBvRwh7Q nfjWTa27Mn22VSkbk0YnatqDQwlhMatCmbvgatnmTLG+EkMNJ0Ntc98/4IFTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfkvap0ciKnMeZgl4M2odhbg8uiswHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPpdjOhXUskjLuQKsHfR npMsDeszWBDzQBm/hK/ooA9kkk+Tcy42Cl1QtZmAb5FDaXfj+HS8R5+2Tid8gj6T JCB4/X9dhRK18bEojzS9KgkQBtpD115gdXgY8yTNxVERm76o1DsJZ/apPLHXlNBF GtO3fghNQpsg/2YLfBu7xWZd3OQ23Xornhu4gImd9f+hN3ZP9kyNdSG8ZhSP+hBW svdC4YYBALpLXpgKROj/2shilX8zazziTQCaFmhQJO4P9vsDJMIW1vVHBeYI36ah YfKDzMLkCP+JwCor/tMLbX4VQp6uwdYBrfwlvg1Pxk82EZnOb2XRGVG+8xkFJRdA fw== -----END CERTIFICATE-----Generated at Tue Nov 10 14:36:04 2026 by rpki-client