$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: Q4V0tXeeoKktZsh6W2C+V7WZoV+hew92ak2vYeHXEgc= Subject key identifier: A3:05:5F:78:32:A7:6F:D6:97:F0:85:95:0C:9B:53:BA:3D:C5:5D:ED Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 393861FEB0EF04A8595C07ED29AE7FF1A1335BD4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 01AE Signing time: Sat 26 Sep 2026 01:45:03 +0000 Manifest this update: Sat 26 Sep 2026 01:40:03 +0000 Manifest next update: Sun 27 Sep 2026 04:40:03 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) 3: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: KgfyCzXBW0pn3behYIDspbItQZWp4ocr4yMtgyy4Pfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 04:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:38:61:fe:b0:ef:04:a8:59:5c:07:ed:29:ae:7f:f1:a1:33:5b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Sep 26 01:40:03 2026 GMT Not After : Sep 27 04:40:03 2026 GMT Subject: CN=A3055F7832A76FD697F085950C9B53BA3DC55DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:33:d7:0e:76:e2:95:a1:54:67:bb:cb:ac: f3:e4:2b:2b:2f:dc:0b:fe:33:77:73:67:90:c9:0d: 43:fa:ca:88:e0:d4:0f:f8:d4:05:bc:c8:3f:9f:85: 2e:33:62:4c:ca:a8:01:78:62:4a:80:6d:a5:bf:16: 52:4a:aa:86:41:41:28:d8:83:b3:5f:e3:4a:45:48: bf:28:c0:b4:2f:4b:70:c4:7b:bd:d7:3e:6a:10:21: 2a:13:73:1d:12:37:5b:1b:f5:2d:b0:99:f4:00:bd: c4:11:05:72:ec:2c:a4:51:bd:5b:72:1d:fe:39:ff: 23:a1:65:4c:f7:b0:a7:2d:90:aa:61:63:9d:53:07: a4:76:24:32:0b:73:ad:5c:91:46:58:9e:f3:b4:cd: 1b:40:c6:93:0e:b3:ed:34:1d:8f:e2:fc:aa:7c:41: 17:b4:00:1f:1c:5e:11:a2:c4:ee:a1:d1:fe:0d:37: 93:d9:5f:8c:33:de:36:9e:8f:3d:8d:89:94:d5:f5: e7:fb:21:30:e7:f3:fa:70:d7:f8:f6:83:61:ac:19: e9:f0:f7:c4:22:a7:ed:9a:bb:40:70:cc:17:54:52: 72:50:b5:44:e4:0c:0c:f4:91:d1:ed:30:21:20:02: 7d:56:e9:df:86:02:bf:36:f4:d8:da:6e:f0:f9:60: b6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:5F:78:32:A7:6F:D6:97:F0:85:95:0C:9B:53:BA:3D:C5:5D:ED X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:26:76:d0:a4:93:62:e7:c5:94:d5:d5:e4:2a:85:8f:49:f4: c7:cf:28:27:20:e6:ea:3e:40:ca:35:d2:2e:1b:e5:4c:fa:5d: 22:e4:c4:9d:ef:b2:1b:47:ce:d1:28:9a:b2:09:63:27:fe:69: 9d:67:f2:18:b7:7a:f6:87:46:2c:49:16:df:07:51:38:e2:45: 4e:15:1f:9c:35:d7:64:50:bd:18:80:97:db:d4:8f:38:d9:8c: 2b:77:25:0c:a7:69:55:ed:ba:a5:14:e7:73:15:89:e8:24:6a: e2:a4:73:71:a2:09:6e:6e:37:00:44:59:53:00:f9:07:59:52: a2:72:3d:12:fa:f7:7e:20:1d:3c:85:1a:07:5e:c2:3d:83:b1: 23:da:76:c6:1c:2c:5c:a8:85:69:84:fe:64:95:b4:b7:24:6a: c7:96:7b:1f:bb:03:7d:89:60:56:8b:d2:aa:9f:7c:0c:8c:a9: 80:74:6e:c2:0a:be:8c:b4:19:c8:45:79:61:e1:d5:7a:aa:4b: 5e:83:2b:6c:ea:45:2c:41:a5:11:82:25:e5:5f:a1:5d:8e:40: 9f:34:17:41:2d:e3:85:d3:c3:07:4b:3f:a9:d3:d8:ec:41:15: d4:e2:91:1c:56:bb:c9:35:65:15:f8:9e:6c:84:3e:9e:33:3b: b5:23:8f:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOThh/rDvBKhZXAftKa5/8aEzW9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjA5MjYwMTQwMDNaFw0yNjA5MjcwNDQwMDNaMDMxMTAvBgNV BAMTKEEzMDU1Rjc4MzJBNzZGRDY5N0YwODU5NTBDOUI1M0JBM0RDNTVERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxzPXDnbilaFUZ7vLrPPkKysv 3Av+M3dzZ5DJDUP6yojg1A/41AW8yD+fhS4zYkzKqAF4YkqAbaW/FlJKqoZBQSjY g7Nf40pFSL8owLQvS3DEe73XPmoQISoTcx0SN1sb9S2wmfQAvcQRBXLsLKRRvVty Hf45/yOhZUz3sKctkKphY51TB6R2JDILc61ckUZYnvO0zRtAxpMOs+00HY/i/Kp8 QRe0AB8cXhGixO6h0f4NN5PZX4wz3jaejz2NiZTV9ef7ITDn8/pw1/j2g2GsGenw 98Qip+2au0BwzBdUUnJQtUTkDAz0kdHtMCEgAn1W6d+GAr829NjabvD5YLaBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUowVfeDKnb9aX8IWVDJtTuj3FXe0wHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIJnbQ pJNi58WU1dXkKoWPSfTHzygnIObqPkDKNdIuG+VM+l0i5MSd77IbR87RKJqyCWMn /mmdZ/IYt3r2h0YsSRbfB1E44kVOFR+cNddkUL0YgJfb1I842YwrdyUMp2lV7bql FOdzFYnoJGripHNxoglubjcARFlTAPkHWVKicj0S+vd+IB08hRoHXsI9g7Ej2nbG HCxcqIVphP5klbS3JGrHlnsfuwN9iWBWi9Kqn3wMjKmAdG7CCr6MtBnIRXlh4dV6 qktegyts6kUsQaURgiXlX6FdjkCfNBdBLeOF08MHSz+p09jsQRXU4pEcVrvJNWUV +J5shD6eMzu1I48B -----END CERTIFICATE-----Generated at Sat Sep 26 19:05:17 2026 by rpki-client