$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: GvC84TzNRvJqa/rygUsJISbyIrMTLZC9b0OCie4nIq4= Subject key identifier: 1B:E0:B4:B3:35:55:87:0E:D8:90:2F:D6:C7:B3:3A:AA:A3:64:41:CB Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 216FE69F4B6F186A8A0DC58FF58D595863B82AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: C3 Signing time: Mon 21 Sep 2026 22:28:33 +0000 Manifest this update: Mon 21 Sep 2026 22:23:33 +0000 Manifest next update: Tue 22 Sep 2026 23:30:33 +0000 Files and hashes: 1: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) 2: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 3: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: ut74RF+od7q3PfA9/tkXTtzMHXkOM9Me3liFGgW3hgg=) 4: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 5: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 6: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:e6:9f:4b:6f:18:6a:8a:0d:c5:8f:f5:8d:59:58:63:b8:2a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Sep 21 22:23:33 2026 GMT Not After : Sep 22 23:30:33 2026 GMT Subject: CN=1BE0B4B33555870ED8902FD6C7B33AAAA36441CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:74:0d:d5:5e:f8:37:9e:19:08:b7:75:c6: 58:22:b9:a1:ce:e8:b5:e2:1b:9a:8e:c5:2b:50:9e: 06:33:3b:e8:ab:a0:f1:50:dc:7e:83:ea:a8:16:78: 49:29:68:23:fb:79:15:13:ce:c0:df:94:9d:23:e7: 64:b1:db:5d:de:8d:09:43:4c:35:fa:6e:38:e5:1c: 4b:7a:aa:72:8d:d8:de:d6:56:34:44:18:f5:e5:b8: 50:9b:7f:6a:dd:7f:51:81:ae:a9:e9:cc:84:01:41: d5:c9:ac:7b:b3:10:37:05:04:01:38:9b:e6:d5:7e: 6b:ec:e3:0a:9d:12:c5:60:03:70:b1:25:48:d7:de: 5d:37:5b:52:86:a5:b3:51:2a:4b:e4:47:bc:43:6b: 98:1c:9a:51:e1:be:2c:8f:ca:1f:6b:22:8b:01:8f: f3:5d:8c:36:97:9d:0d:a7:38:62:31:3a:81:01:e3: 03:55:35:e6:b7:d4:59:f7:94:dc:39:94:d9:2c:0a: d4:00:aa:0b:c9:fe:bf:8a:0d:aa:cb:91:0c:9e:6e: 5b:7f:2e:b0:80:66:86:79:46:43:65:10:b7:00:d9: ef:8d:4a:4c:69:44:80:2b:35:03:6a:62:05:a8:59: 38:16:62:28:ea:b2:02:54:f6:0e:04:5e:a5:fc:e9: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E0:B4:B3:35:55:87:0E:D8:90:2F:D6:C7:B3:3A:AA:A3:64:41:CB X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6e:85:e6:54:68:4a:b5:9d:cf:fe:dd:34:48:79:2c:5e:02: 9f:0b:65:af:c7:72:e1:97:97:e5:f3:88:98:63:6c:3e:88:4c: 50:3a:03:92:26:c7:88:85:2e:e3:e5:59:6f:fb:e4:51:84:a0: 35:f2:17:5b:98:37:8c:67:28:f9:18:b3:1c:0b:d4:03:69:26: d7:35:dd:d4:5f:b8:c1:ba:c3:e4:67:45:12:17:23:a8:a4:d7: 38:f0:f1:b6:cc:7a:91:4a:88:29:40:f0:cc:5a:6c:a1:0a:ba: f3:56:8b:f0:3d:57:b0:9b:8a:e8:4c:35:0e:73:a5:2e:f1:34: c6:fb:c1:5f:7d:d3:e1:85:b4:31:25:9a:52:94:36:2e:37:f0: a9:74:0f:11:7a:af:d3:f2:e2:26:2d:8d:23:c1:42:49:4e:f2: b7:b4:04:46:5c:e6:89:17:e1:9a:30:d3:c2:1c:3e:eb:68:a3: 75:cc:f1:84:76:08:3a:59:b6:e8:16:92:6e:28:35:d6:55:40: 88:22:6f:dd:41:98:0b:9d:19:7f:f1:10:58:f6:aa:1c:02:9e: 8d:2d:27:52:1a:c5:84:e8:77:c1:7c:4b:41:eb:c4:92:7b:db: 48:62:d1:c0:a4:08:22:b1:31:ab:5c:fc:c5:2f:93:d2:57:57: f3:4b:c2:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIW/mn0tvGGqKDcWP9Y1ZWGO4Kq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA5MjEyMjIzMzNaFw0yNjA5MjIyMzMwMzNaMDMxMTAvBgNV BAMTKDFCRTBCNEIzMzU1NTg3MEVEODkwMkZENkM3QjMzQUFBQTM2NDQxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqnQN1V74N54ZCLd1xlgiuaHO 6LXiG5qOxStQngYzO+iroPFQ3H6D6qgWeEkpaCP7eRUTzsDflJ0j52Sx213ejQlD TDX6bjjlHEt6qnKN2N7WVjREGPXluFCbf2rdf1GBrqnpzIQBQdXJrHuzEDcFBAE4 m+bVfmvs4wqdEsVgA3CxJUjX3l03W1KGpbNRKkvkR7xDa5gcmlHhviyPyh9rIosB j/NdjDaXnQ2nOGIxOoEB4wNVNea31Fn3lNw5lNksCtQAqgvJ/r+KDarLkQyeblt/ LrCAZoZ5RkNlELcA2e+NSkxpRIArNQNqYgWoWTgWYijqsgJU9g4EXqX86afTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUG+C0szVVhw7YkC/Wx7M6qqNkQcswHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW6F5lRoSrWdz/7dNEh5 LF4Cnwtlr8dy4ZeX5fOImGNsPohMUDoDkibHiIUu4+VZb/vkUYSgNfIXW5g3jGco +RizHAvUA2km1zXd1F+4wbrD5GdFEhcjqKTXOPDxtsx6kUqIKUDwzFpsoQq681aL 8D1XsJuK6Ew1DnOlLvE0xvvBX33T4YW0MSWaUpQ2LjfwqXQPEXqv0/LiJi2NI8FC SU7yt7QERlzmiRfhmjDTwhw+62ijdczxhHYIOlm26BaSbig11lVAiCJv3UGYC50Z f/EQWPaqHAKejS0nUhrFhOh3wXxLQevEknvbSGLRwKQIIrExq1z8xS+T0ldX80vC Hg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:44:06 2026 by rpki-client