$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: 0WYnlYKO43WRjBaiCeGz+BEA43j+EGbVpzJwUntMXwU= Subject key identifier: 2A:F9:75:A2:37:33:26:2D:DA:F1:CA:2E:F7:99:71:52:0D:62:AE:0A Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 200A7BF9E1397CA2765BC76B7230A155D5F4DF92 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 045C Signing time: Mon 21 Sep 2026 09:50:05 +0000 Manifest this update: Mon 21 Sep 2026 09:45:05 +0000 Manifest next update: Tue 22 Sep 2026 12:25:05 +0000 Files and hashes: 1: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=) 2: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=) 3: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=) 4: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 3CEWShjowdu3WIbSnJTIjxusIogjFUZGYsViicMCWQs=) 5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=) 6: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=) 7: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=) 8: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=) 9: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0a:7b:f9:e1:39:7c:a2:76:5b:c7:6b:72:30:a1:55:d5:f4:df:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Sep 21 09:45:05 2026 GMT Not After : Sep 22 12:25:05 2026 GMT Subject: CN=2AF975A23733262DDAF1CA2EF79971520D62AE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:da:39:09:a8:ac:df:02:ae:7b:bc:b0:3f:a9: 08:23:5f:1e:40:6b:86:b3:76:bb:a4:2c:37:26:dd: e4:d8:8c:73:25:eb:d7:d6:9a:14:7c:8a:fa:cd:45: 44:00:e8:0a:5d:68:46:88:ae:3f:20:c7:7e:fd:c5: 2e:5e:c8:e2:33:a8:e0:a9:b8:1e:b8:eb:fe:bd:5f: 87:bc:3b:f3:c7:70:4a:2d:f3:ac:c5:33:da:c3:1e: 78:6c:bc:13:08:03:ba:e8:04:06:a7:82:92:62:ba: d6:03:49:f0:d9:49:e9:d0:53:c0:b7:e8:33:ef:f0: 0a:70:bb:26:09:e7:ac:27:be:20:b1:0a:f1:a3:16: 7f:3f:1a:9d:39:f5:f1:71:4e:8d:f4:d4:cb:d7:fe: 1f:bc:1f:dc:67:a9:2c:e6:a3:8a:e5:1f:95:03:14: 4e:16:a6:a9:e2:d9:48:c6:b0:55:0e:e8:15:6c:26: cb:d4:de:11:4b:fc:26:06:c9:96:02:75:1e:ac:6f: 0d:3a:a4:46:20:f0:64:ae:8e:47:90:c7:2b:56:54: 73:98:7d:78:4c:4b:33:5b:fc:73:4b:d1:60:ea:ab: 43:a5:e0:ed:97:3e:48:6b:5b:a1:aa:c0:9b:56:6f: de:67:51:cd:d1:54:ed:fe:65:e9:40:f6:6b:7f:db: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F9:75:A2:37:33:26:2D:DA:F1:CA:2E:F7:99:71:52:0D:62:AE:0A X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:df:23:f2:62:91:ed:1c:be:87:f1:5f:f2:36:46:59:32: b0:09:1c:8d:d1:a6:6e:66:b2:c8:ea:60:e3:0e:cd:b7:b4:2f: 6e:86:53:37:41:a7:16:68:67:8a:fa:0c:84:b5:90:86:19:a3: d9:d3:66:ed:61:98:01:43:bb:eb:93:af:2f:85:5a:8f:29:37: 84:d4:bd:0a:f3:bb:3e:fb:0e:a0:10:d3:af:f2:e7:4b:1c:a8: eb:75:2f:42:38:ab:34:76:85:e3:1d:66:83:2e:c3:f3:2f:e9: fc:92:36:a5:b8:e9:30:a9:55:72:4a:95:f0:39:d9:6b:06:d7: ec:95:a6:2b:c5:92:6c:14:f0:ed:3e:f2:f1:b1:7c:60:40:2a: f6:2c:91:cc:49:a2:89:fa:c9:12:fd:b0:1b:98:48:2c:28:15: e6:10:49:ed:be:f9:01:3d:2a:3e:05:4e:56:57:b2:e4:22:4c: 60:b7:5d:7c:67:c5:9f:80:c7:02:25:b9:87:ef:04:e2:1d:b9: 1a:4b:8c:28:e4:11:e5:05:fc:f3:dc:34:2e:43:1d:9b:b9:a2: 04:03:f5:ab:af:2e:95:34:32:44:7e:25:6e:d8:c9:4c:21:bf: c8:43:ce:3f:98:03:0f:60:38:8b:fe:ae:bb:05:86:f0:45:19: 25:0e:82:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIAp7+eE5fKJ2W8drcjChVdX035IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA5MjEwOTQ1MDVaFw0yNjA5MjIxMjI1MDVaMDMxMTAvBgNV BAMTKDJBRjk3NUEyMzczMzI2MkREQUYxQ0EyRUY3OTk3MTUyMEQ2MkFFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl2jkJqKzfAq57vLA/qQgjXx5A a4azdrukLDcm3eTYjHMl69fWmhR8ivrNRUQA6ApdaEaIrj8gx379xS5eyOIzqOCp uB646/69X4e8O/PHcEot86zFM9rDHnhsvBMIA7roBAangpJiutYDSfDZSenQU8C3 6DPv8ApwuyYJ56wnviCxCvGjFn8/Gp059fFxTo301MvX/h+8H9xnqSzmo4rlH5UD FE4Wpqni2UjGsFUO6BVsJsvU3hFL/CYGyZYCdR6sbw06pEYg8GSujkeQxytWVHOY fXhMSzNb/HNL0WDqq0Ol4O2XPkhrW6GqwJtWb95nUc3RVO3+ZelA9mt/2+XVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKvl1ojczJi3a8cou95lxUg1irgowHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5hd8j 8mKR7Ry+h/Ff8jZGWTKwCRyN0aZuZrLI6mDjDs23tC9uhlM3QacWaGeK+gyEtZCG GaPZ02btYZgBQ7vrk68vhVqPKTeE1L0K87s++w6gENOv8udLHKjrdS9COKs0doXj HWaDLsPzL+n8kjaluOkwqVVySpXwOdlrBtfslaYrxZJsFPDtPvLxsXxgQCr2LJHM SaKJ+skS/bAbmEgsKBXmEEntvvkBPSo+BU5WV7LkIkxgt118Z8WfgMcCJbmH7wTi HbkaS4wo5BHlBfzz3DQuQx2buaIEA/Wrry6VNDJEfiVu2MlMIb/IQ84/mAMPYDiL /q67BYbwRRklDoIh -----END CERTIFICATE-----Generated at Mon Sep 21 13:26:28 2026 by rpki-client