$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: fw5TvBvwUICGfnkb8s4sUxUIh4Ono8Qin1Rey3LgUv4= Subject key identifier: AF:B4:FF:BB:E5:8A:9A:B6:08:62:A8:4C:5F:10:B9:4D:61:9A:05:26 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 2EE990E8B7005A7EA8003A34CB76C830309329F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 074A Signing time: Mon 21 Sep 2026 00:30:44 +0000 Manifest this update: Mon 21 Sep 2026 00:25:44 +0000 Manifest next update: Tue 22 Sep 2026 02:28:44 +0000 Files and hashes: 1: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 3: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: O/XczvICtVW578H4pujJjG0NlrBlkBVw8ic6aTFH+JU=) 4: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: NJ8e5PfWmzUYHpPpRBlfKFaWF/Hx/b98u+yojQv8Htc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 02:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e9:90:e8:b7:00:5a:7e:a8:00:3a:34:cb:76:c8:30:30:93:29:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Sep 21 00:25:44 2026 GMT Not After : Sep 22 02:28:44 2026 GMT Subject: CN=AFB4FFBBE58A9AB60862A84C5F10B94D619A0526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:c0:2e:e3:1a:d8:83:0d:bd:bd:17:39:68: 37:d6:e2:eb:21:d8:d3:14:e9:e0:57:48:1e:20:88: 34:af:8a:bd:3a:73:70:f6:d4:3c:7c:0b:b4:6f:09: e0:c5:ac:4b:29:ba:f4:32:d0:42:2d:8f:a3:d4:f5: f4:5f:1d:4a:c0:79:3a:39:c6:6f:17:84:2a:9a:fb: 9a:cf:ae:e6:19:c4:30:14:55:6c:23:7c:d9:62:ac: 73:0e:52:99:27:d3:68:ca:02:87:0a:16:f1:cb:43: 36:cf:d1:35:7d:3c:72:f1:31:06:1e:d6:81:e9:16: 65:bc:36:a0:fc:e1:2f:e3:42:b9:ca:ee:ca:ca:01: 47:30:65:5b:9e:46:4a:e4:7d:09:37:a5:ed:82:20: 51:07:74:32:2d:37:e0:db:e6:45:eb:b9:ce:f9:f6: ac:77:9d:82:e3:b1:ae:89:87:5c:e1:dc:fd:96:ad: d1:85:de:5c:68:b9:f9:6e:ba:f5:ca:64:f5:dc:5f: 27:78:c8:2f:3a:18:72:ba:0a:da:34:b1:d1:4b:96: 95:cf:fa:86:00:f7:dd:8a:a3:75:bf:6e:b7:94:fd: 90:aa:0d:73:89:ec:76:80:dc:c3:b8:ec:f2:17:0d: 26:94:8c:18:12:98:c2:9b:1c:a3:fd:ef:ec:c2:0c: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:FF:BB:E5:8A:9A:B6:08:62:A8:4C:5F:10:B9:4D:61:9A:05:26 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:df:cb:94:55:18:bc:77:fb:c5:ed:eb:fb:50:38:b8:77:91: 84:fb:5b:09:c8:19:d1:8a:29:72:36:b8:4c:13:3f:ef:90:c5: 40:18:bc:5c:7f:09:8d:57:f1:a6:ad:af:36:07:81:ba:d1:fc: ec:5d:50:ac:8d:fa:9d:20:25:fb:7a:f3:9e:45:31:ba:78:ab: dc:21:6a:e1:34:1b:c4:27:0b:09:e5:a1:71:a1:51:2e:c2:28: fa:30:05:85:21:3a:5f:4a:7c:63:c0:58:7c:24:dd:4a:71:45: 20:26:88:9e:e9:dd:d2:88:26:5d:f7:b6:a6:8c:34:08:69:bb: c4:82:b3:43:55:81:27:5c:25:65:12:17:51:78:01:9b:e2:7a: 67:a3:11:ac:70:fb:46:20:de:66:9c:95:b1:f1:ac:26:a8:52: 48:60:f0:11:79:7a:04:54:bf:e9:64:e1:47:b6:2b:f0:ea:59: 80:0b:ac:9b:62:78:eb:c7:82:6d:6e:d3:70:9d:d7:13:9b:b8: 9c:d5:5d:82:a6:43:a2:94:cf:eb:29:e4:68:ff:27:15:f6:b0: 0d:74:9a:ac:5a:f3:0c:92:0b:28:b0:c9:0f:c4:de:6d:a0:cb: 0b:c7:98:09:67:6b:14:e8:6a:31:28:9d:79:e6:eb:cf:f2:ea: d9:c1:3c:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULumQ6LcAWn6oADo0y3bIMDCTKfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA5MjEwMDI1NDRaFw0yNjA5MjIwMjI4NDRaMDMxMTAvBgNV BAMTKEFGQjRGRkJCRTU4QTlBQjYwODYyQTg0QzVGMTBCOTRENjE5QTA1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0sAu4xrYgw29vRc5aDfW4ush 2NMU6eBXSB4giDSvir06c3D21Dx8C7RvCeDFrEspuvQy0EItj6PU9fRfHUrAeTo5 xm8XhCqa+5rPruYZxDAUVWwjfNlirHMOUpkn02jKAocKFvHLQzbP0TV9PHLxMQYe 1oHpFmW8NqD84S/jQrnK7srKAUcwZVueRkrkfQk3pe2CIFEHdDItN+Db5kXruc75 9qx3nYLjsa6Jh1zh3P2WrdGF3lxoufluuvXKZPXcXyd4yC86GHK6Cto0sdFLlpXP +oYA992Ko3W/breU/ZCqDXOJ7HaA3MO47PIXDSaUjBgSmMKbHKP97+zCDJhHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUr7T/u+WKmrYIYqhMXxC5TWGaBSYwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd/LlFUYvHf7xe3r+1A4 uHeRhPtbCcgZ0Yopcja4TBM/75DFQBi8XH8JjVfxpq2vNgeButH87F1QrI36nSAl +3rznkUxunir3CFq4TQbxCcLCeWhcaFRLsIo+jAFhSE6X0p8Y8BYfCTdSnFFICaI nund0ogmXfe2pow0CGm7xIKzQ1WBJ1wlZRIXUXgBm+J6Z6MRrHD7RiDeZpyVsfGs JqhSSGDwEXl6BFS/6WThR7Yr8OpZgAusm2J468eCbW7TcJ3XE5u4nNVdgqZDopTP 6ynkaP8nFfawDXSarFrzDJILKLDJD8TebaDLC8eYCWdrFOhqMSideebrz/Lq2cE8 Eg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:23:50 2026 by rpki-client