$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: XqL1327u+BbAet4fjO9eLoriALbQed+ByEd+EFO2wPU= Subject key identifier: DA:45:B9:EA:36:0D:3A:8C:E7:14:33:D6:31:75:A8:D1:52:F4:34:9B Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 65451031EE27817F878C018E349F6746081372AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 03AA Signing time: Sun 20 Sep 2026 16:43:26 +0000 Manifest this update: Sun 20 Sep 2026 16:38:26 +0000 Manifest next update: Mon 21 Sep 2026 19:39:26 +0000 Files and hashes: 1: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) 2: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: 9PVIlw/MqWn93BRaSYoWgrDF8fucEUCtfyMWPq0CXdo=) 3: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 19:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:45:10:31:ee:27:81:7f:87:8c:01:8e:34:9f:67:46:08:13:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Sep 20 16:38:26 2026 GMT Not After : Sep 21 19:39:26 2026 GMT Subject: CN=DA45B9EA360D3A8CE71433D63175A8D152F4349B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:1a:04:50:07:00:93:72:61:38:d5:b3:bf: f0:f9:6a:49:41:1d:5c:37:14:3e:90:01:c2:41:6e: 1d:38:45:a5:f1:97:bd:23:82:5d:2b:08:97:9f:1f: c8:69:22:01:7c:b9:86:ea:eb:23:11:b6:33:ca:45: 9e:59:20:b1:bd:97:a6:e5:25:06:15:28:b3:8d:08: e5:a8:3f:e7:d7:82:d5:79:da:bc:ce:94:ba:d1:c7: 85:89:be:c8:0d:e5:82:ec:66:a2:a8:63:04:66:d7: 40:e4:9d:93:00:18:b2:48:0b:f6:8a:6d:92:e4:59: 08:69:90:d0:d5:54:17:c1:90:1d:c0:99:f0:e5:bf: 99:d5:40:80:23:e4:d2:95:8b:d8:fe:dd:b9:2b:4a: c3:ce:59:a2:c0:f2:13:e0:84:b7:82:6f:d1:85:f8: c0:8d:40:1b:a2:7f:47:79:ed:0d:d1:76:9c:65:c0: ee:c2:22:52:b4:91:53:d0:2b:f8:88:81:cb:a2:e1: 29:1d:79:7d:50:18:48:62:ec:7b:aa:76:a4:22:da: 4e:ce:a0:ea:76:6e:7d:37:82:37:c1:f8:48:f9:2b: 7a:f1:5b:fa:57:8d:72:74:27:2e:7e:90:af:4c:78: 9b:04:34:55:bf:56:9b:20:76:f6:29:33:a6:07:6c: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:B9:EA:36:0D:3A:8C:E7:14:33:D6:31:75:A8:D1:52:F4:34:9B X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:dc:c4:f9:fd:56:28:ba:bb:9e:e8:c7:37:e4:5c:1e:b3: b0:17:35:99:e4:ff:31:4f:f1:8a:61:da:8d:b6:58:a1:0e:55: d2:b1:2e:43:45:fa:20:be:c5:cc:c7:cc:ad:31:e6:9f:78:9e: f8:a7:23:fc:db:61:18:f3:9f:94:c3:ea:26:24:58:d2:52:3e: 11:07:51:97:b5:75:4a:19:ba:f0:55:64:3d:1d:21:8f:0b:b4: 33:d9:a5:ac:f5:b4:5b:38:d1:59:56:a6:1e:37:bb:0a:9e:ad: c3:a8:d7:e3:0d:0e:bf:70:c4:be:51:27:d9:03:81:70:98:a9: 58:7d:05:60:c0:43:c1:1e:1e:8a:c7:96:b7:fe:8f:48:43:1c: 7c:e0:30:f7:37:16:82:ab:2b:1d:e3:3d:14:90:9a:0e:cb:0c: 32:2c:a6:d2:9f:9b:9c:05:24:44:97:9c:bf:17:8c:2b:d5:da: ea:ed:d2:aa:9c:ed:fe:27:8f:2c:61:e6:11:2c:b6:76:91:af: 47:f6:b2:6e:d4:b4:ad:15:76:0b:6d:a1:ba:5a:b2:68:f5:11: d6:6c:2d:52:1c:2e:c2:c4:4a:b8:f0:fc:dc:4c:33:4d:9e:84: 3d:32:24:a9:20:92:59:93:04:e3:e9:ff:f3:42:39:aa:67:ef: 2c:0a:38:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZUUQMe4ngX+HjAGONJ9nRggTcqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA5MjAxNjM4MjZaFw0yNjA5MjExOTM5MjZaMDMxMTAvBgNV BAMTKERBNDVCOUVBMzYwRDNBOENFNzE0MzNENjMxNzVBOEQxNTJGNDM0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaBoEUAcAk3JhONWzv/D5aklB HVw3FD6QAcJBbh04RaXxl70jgl0rCJefH8hpIgF8uYbq6yMRtjPKRZ5ZILG9l6bl JQYVKLONCOWoP+fXgtV52rzOlLrRx4WJvsgN5YLsZqKoYwRm10DknZMAGLJIC/aK bZLkWQhpkNDVVBfBkB3AmfDlv5nVQIAj5NKVi9j+3bkrSsPOWaLA8hPghLeCb9GF +MCNQBuif0d57Q3RdpxlwO7CIlK0kVPQK/iIgcui4SkdeX1QGEhi7HuqdqQi2k7O oOp2bn03gjfB+Ej5K3rxW/pXjXJ0Jy5+kK9MeJsENFW/VpsgdvYpM6YHbN6NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2kW56jYNOoznFDPWMXWo0VL0NJswHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYDcxPn9Vii6u57oxzfk XB6zsBc1meT/MU/ximHajbZYoQ5V0rEuQ0X6IL7FzMfMrTHmn3ie+Kcj/NthGPOf lMPqJiRY0lI+EQdRl7V1Shm68FVkPR0hjwu0M9mlrPW0WzjRWVamHje7Cp6tw6jX 4w0Ov3DEvlEn2QOBcJipWH0FYMBDwR4eiseWt/6PSEMcfOAw9zcWgqsrHeM9FJCa DssMMiym0p+bnAUkRJecvxeMK9Xa6u3Sqpzt/iePLGHmESy2dpGvR/aybtS0rRV2 C22hulqyaPUR1mwtUhwuwsRKuPD83EwzTZ6EPTIkqSCSWZME4+n/80I5qmfvLAo4 XQ== -----END CERTIFICATE-----Generated at Mon Sep 21 06:13:52 2026 by rpki-client