$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: hNMzU3H1js0fhFGcofzjzzQDypnN9LzxKJj2p8SnliI= Subject key identifier: 88:BD:07:57:B0:6F:86:31:2E:79:F3:40:B2:68:F5:E3:93:C2:28:8D Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 3F9AA96BF84C4BDF16194D2396CD26408387255C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 011F Signing time: Tue 22 Sep 2026 20:20:47 +0000 Manifest this update: Tue 22 Sep 2026 20:15:47 +0000 Manifest next update: Wed 23 Sep 2026 23:47:47 +0000 Files and hashes: 1: 3137362e3130322e3137302e302f32342d3234203d3e20323138383932.roa (hash: vmUE36uirVg+qyVeYyyIT35k13krsMMnmBR1nuw3RCE=) 2: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (hash: KjqXi8WutHoDtcfgWO4eIZXy4bfZUhDCfps5/YiZVQw=) 3: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 4: 3137362e3130322e3137342e302f32342d3234203d3e20383334.roa (hash: 65OmSL/XRblwi58rq1Ib5dzvN6lqu+6Iunx32cGOXWM=) 5: 3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa (hash: dUWRnvNQrG03cFGRKewLSEVSnqrlP2WFLU1i5zJtdMs=) 6: 3137362e3130322e3137322e302f32342d3234203d3e20383334.roa (hash: lR0P/b2pLESvfEtW69Jl1aeQ0nMgaZVWJylK7oc6PxU=) 7: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) 8: 3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa (hash: BEvg5hkdDxVU/wJ2R3nH/rRQwVSA5SzU4zAT1MeeHZ4=) 9: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: GhpkIusXCLEQs82J5b2SlIpUOJBKUoZPVia0gmSFOsY=) 10: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 11: 3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa (hash: K2Kgw6dfaKGLV4vvS+1P0LI6GcXhxz2mSPH8vu81cPY=) 12: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 13: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 14: 3137362e3130322e3136392e302f32342d3234203d3e20383334.roa (hash: htqBX5xVmv8z6xUgxiiwHmJV6C5oPjjeGMryMjNnWZs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9a:a9:6b:f8:4c:4b:df:16:19:4d:23:96:cd:26:40:83:87:25:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Sep 22 20:15:47 2026 GMT Not After : Sep 23 23:47:47 2026 GMT Subject: CN=88BD0757B06F86312E79F340B268F5E393C2288D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:56:d1:04:48:34:51:68:37:e8:b9:bd:ff: 23:b9:ee:04:c2:ef:04:9a:2f:7b:a1:cc:fe:ea:6c: 04:ae:1c:d5:8b:64:4e:94:aa:0a:47:46:ca:67:08: 6e:09:98:54:2d:2d:80:34:eb:e0:c6:22:82:6e:ca: 0b:a5:35:54:e0:01:b1:5a:4f:75:a8:db:35:c1:f4: a5:c7:85:39:6c:18:8d:ee:ad:b6:08:8d:86:d0:55: 20:24:7e:ad:f1:33:d5:b3:d5:30:47:2e:75:89:0d: 8b:8d:f8:79:5a:b5:dd:08:36:af:ef:72:92:f2:b1: ea:db:c7:21:7c:cf:48:00:e5:64:d7:b0:93:be:e2: 6f:5b:d9:b7:43:85:14:69:e7:82:a1:a7:46:5b:ea: 37:84:7e:ed:9e:b8:25:a1:2b:c6:a5:b5:c7:42:62: 9b:bf:52:83:a3:2c:ad:5a:3a:bd:d4:2c:89:c2:21: 91:62:9a:1e:bb:1b:55:4d:b1:41:0b:7c:5e:d5:12: b7:19:43:d6:d1:e7:42:33:4a:32:ad:9e:30:8c:b4: c5:85:d5:21:e8:a8:68:17:13:30:ff:5a:bd:f2:e8: 1a:e0:3f:0f:6f:f1:1b:57:fa:44:e6:ee:de:f9:22: d2:29:3a:97:d6:7a:8e:f7:81:65:ab:c5:c6:cb:5e: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BD:07:57:B0:6F:86:31:2E:79:F3:40:B2:68:F5:E3:93:C2:28:8D X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ee:96:fa:5a:17:e9:85:e1:b8:86:73:8b:9e:e0:0c:2a:e4: b1:a6:0c:47:b5:15:57:d3:a2:e8:d1:53:b8:0d:07:00:3b:8d: 5e:ef:26:36:09:fc:b7:d0:52:1a:d1:18:85:d3:a6:c4:ed:7f: f6:a5:91:54:82:d3:a8:0a:2a:9c:1d:d7:3a:ca:ed:a8:df:ea: 97:2d:22:22:60:71:8c:5b:ff:61:f4:76:87:36:74:cb:aa:cb: ae:d3:17:4c:ea:ee:5e:27:82:00:97:c6:19:4c:5a:be:03:84: d2:79:f1:ad:2b:59:ea:e2:c6:2c:8a:4a:cf:b8:7c:31:5c:63: 06:f6:ba:6c:a7:bd:3b:2b:53:d1:d2:ac:08:2e:01:21:ec:09: ea:87:4e:21:33:41:ce:30:da:0f:27:76:fb:82:66:f0:ae:4c: 55:93:cc:74:ce:d4:7d:49:ae:5b:d7:15:e5:7b:44:eb:a5:c2: 2a:e1:02:f2:79:e3:6b:b0:78:cf:7a:df:af:86:ee:13:af:5b: c2:fe:1e:d7:1b:32:ee:72:a9:2f:c2:66:bd:0a:d1:5f:db:6a: 69:19:99:ae:19:72:de:6a:90:f8:ec:f7:cc:8a:aa:52:d9:12: fc:83:da:7f:c0:e6:08:40:89:65:fe:cd:00:8c:e6:c0:7a:c1: 32:21:e0:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP5qpa/hMS98WGU0jls0mQIOHJVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA5MjIyMDE1NDdaFw0yNjA5MjMyMzQ3NDdaMDMxMTAvBgNV BAMTKDg4QkQwNzU3QjA2Rjg2MzEyRTc5RjM0MEIyNjhGNUUzOTNDMjI4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+61bRBEg0UWg36Lm9/yO57gTC 7wSaL3uhzP7qbASuHNWLZE6UqgpHRspnCG4JmFQtLYA06+DGIoJuygulNVTgAbFa T3Wo2zXB9KXHhTlsGI3urbYIjYbQVSAkfq3xM9Wz1TBHLnWJDYuN+Hlatd0INq/v cpLyserbxyF8z0gA5WTXsJO+4m9b2bdDhRRp54Khp0Zb6jeEfu2euCWhK8altcdC Ypu/UoOjLK1aOr3ULInCIZFimh67G1VNsUELfF7VErcZQ9bR50IzSjKtnjCMtMWF 1SHoqGgXEzD/Wr3y6BrgPw9v8RtX+kTm7t75ItIpOpfWeo73gWWrxcbLXnm3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiL0HV7BvhjEuefNAsmj145PCKI0wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+6W+loX6YXhuIZzi57g DCrksaYMR7UVV9Oi6NFTuA0HADuNXu8mNgn8t9BSGtEYhdOmxO1/9qWRVILTqAoq nB3XOsrtqN/qly0iImBxjFv/YfR2hzZ0y6rLrtMXTOruXieCAJfGGUxavgOE0nnx rStZ6uLGLIpKz7h8MVxjBva6bKe9OytT0dKsCC4BIewJ6odOITNBzjDaDyd2+4Jm 8K5MVZPMdM7UfUmuW9cV5XtE66XCKuEC8nnja7B4z3rfr4buE69bwv4e1xsy7nKp L8JmvQrRX9tqaRmZrhly3mqQ+Oz3zIqqUtkS/IPaf8DmCECJZf7NAIzmwHrBMiHg 0Q== -----END CERTIFICATE-----Generated at Wed Sep 23 07:35:12 2026 by rpki-client