$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: LgrL81BPeGfAYRbysZqo1MBi6C8iM8s3SDufMCtFvVw= Subject key identifier: D7:43:AF:E6:75:4D:37:81:2A:B8:E7:97:E6:0B:E7:34:95:C4:E2:99 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 70C6484CE25EA729EC42353AD4ADA4D6E9E4A365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0666 Signing time: Sun 20 Sep 2026 09:00:43 +0000 Manifest this update: Sun 20 Sep 2026 08:55:43 +0000 Manifest next update: Mon 21 Sep 2026 09:55:43 +0000 Files and hashes: 1: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 2: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 3: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 4: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 5: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 6: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 7: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 8: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: D+GYUDvSNQqbp6BVaO2J3ysOZiOzqKjierkU3Rc+F3k=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 10: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 11: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 12: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c6:48:4c:e2:5e:a7:29:ec:42:35:3a:d4:ad:a4:d6:e9:e4:a3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Sep 20 08:55:43 2026 GMT Not After : Sep 21 09:55:43 2026 GMT Subject: CN=D743AFE6754D37812AB8E797E60BE73495C4E299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:12:40:e5:6b:8b:96:7f:56:1a:e3:4f:74: e9:a5:c5:b0:5e:0d:61:6d:7e:9e:94:74:4a:d7:d9: 10:c5:d7:65:b3:13:d6:1a:68:ac:ee:5d:17:f3:15: e7:26:dc:7f:83:a7:4b:5d:cf:eb:5f:92:d4:9e:7e: 83:ee:d6:e2:12:33:e0:02:b7:3f:20:e5:b1:06:33: a3:c5:6e:14:4e:5a:d1:23:40:b1:2a:5a:db:f9:6c: aa:b8:0c:2e:41:d7:55:f0:cf:33:99:05:4d:b2:0c: 4f:d4:01:50:34:2f:e9:bb:44:af:72:b5:5e:41:cf: d1:ec:a6:28:96:64:e4:fc:08:f8:fb:14:86:ca:51: 59:ea:5d:70:12:a7:44:ba:39:40:11:22:02:5d:5c: e6:dc:20:45:58:d3:28:9b:e8:b5:14:a2:02:2e:58: 45:ce:40:da:52:01:8a:a2:03:1f:6c:5e:b0:49:62: a3:c3:2e:df:f4:16:d8:a9:5b:1e:22:17:21:55:3c: 67:a7:ee:21:42:10:29:25:88:f3:cf:31:73:11:51: a3:b5:59:2c:ab:20:9d:37:f6:b1:23:88:e1:98:03: d0:4f:c7:50:2e:50:6d:a9:03:e9:b1:65:10:e8:74: 18:e6:42:44:9d:1e:53:b0:69:38:8b:e3:35:78:5d: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:43:AF:E6:75:4D:37:81:2A:B8:E7:97:E6:0B:E7:34:95:C4:E2:99 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7a:4e:18:b1:df:95:95:d2:f2:39:a6:bd:df:eb:b3:a2:b8: 33:42:ca:f9:e0:16:1a:08:98:ae:a8:9a:60:3c:f6:8e:3d:7c: e0:d4:57:ea:bd:75:e8:98:bc:0a:c7:52:6c:01:26:47:41:17: 72:21:f4:59:b3:6b:52:97:5c:20:10:c7:3f:74:48:79:9b:e8: ee:73:ab:6f:b0:16:e1:c0:77:59:54:89:a5:39:44:bc:2a:4c: aa:e5:8f:50:e1:db:35:5f:7e:f2:81:7f:b7:93:a4:46:25:cc: e6:41:75:7c:07:52:1b:30:a1:ab:82:78:69:e9:6b:59:6f:5d: 9c:e9:bb:89:e1:6f:f0:f3:d4:48:0b:31:dd:da:85:c9:f6:95: f1:d2:2a:3f:a1:37:16:77:45:22:d8:d8:08:67:e2:d3:0f:78: 76:42:a2:5a:78:c3:15:b0:fd:2b:99:e7:38:20:41:88:c0:10: f6:53:b5:a8:78:ba:c3:ed:76:f0:49:f4:76:34:4a:11:66:28: 0a:3f:9a:49:12:5d:81:2e:8c:80:20:cb:bd:5a:3f:ea:a9:bd: 55:30:c3:06:5b:93:45:bc:d4:e4:a8:8b:1e:fa:95:01:f6:8d: bd:23:01:0a:6a:9d:6e:ab:cc:2f:1f:22:cb:f0:1c:d7:ec:17: 39:f1:dc:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcMZITOJepynsQjU61K2k1unko2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA5MjAwODU1NDNaFw0yNjA5MjEwOTU1NDNaMDMxMTAvBgNV BAMTKEQ3NDNBRkU2NzU0RDM3ODEyQUI4RTc5N0U2MEJFNzM0OTVDNEUyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyxJA5WuLln9WGuNPdOmlxbBe DWFtfp6UdErX2RDF12WzE9YaaKzuXRfzFecm3H+Dp0tdz+tfktSefoPu1uISM+AC tz8g5bEGM6PFbhROWtEjQLEqWtv5bKq4DC5B11XwzzOZBU2yDE/UAVA0L+m7RK9y tV5Bz9HspiiWZOT8CPj7FIbKUVnqXXASp0S6OUARIgJdXObcIEVY0yib6LUUogIu WEXOQNpSAYqiAx9sXrBJYqPDLt/0FtipWx4iFyFVPGen7iFCECkliPPPMXMRUaO1 WSyrIJ039rEjiOGYA9BPx1AuUG2pA+mxZRDodBjmQkSdHlOwaTiL4zV4XZYDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU10Ov5nVNN4EquOeX5gvnNJXE4pkwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXpOGLHflZXS8jmmvd/r s6K4M0LK+eAWGgiYrqiaYDz2jj184NRX6r116Ji8CsdSbAEmR0EXciH0WbNrUpdc IBDHP3RIeZvo7nOrb7AW4cB3WVSJpTlEvCpMquWPUOHbNV9+8oF/t5OkRiXM5kF1 fAdSGzChq4J4aelrWW9dnOm7ieFv8PPUSAsx3dqFyfaV8dIqP6E3FndFItjYCGfi 0w94dkKiWnjDFbD9K5nnOCBBiMAQ9lO1qHi6w+128En0djRKEWYoCj+aSRJdgS6M gCDLvVo/6qm9VTDDBluTRbzU5KiLHvqVAfaNvSMBCmqdbqvMLx8iy/Ac1+wXOfHc xQ== -----END CERTIFICATE-----Generated at Mon Sep 21 01:32:39 2026 by rpki-client