$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: xFFpUdEhGppPjBoUTDRuFLTnIrmO8KASAtihXRuhbCQ= Subject key identifier: D2:F8:D9:9E:39:A6:62:E0:EF:B9:98:3C:5F:66:E6:EE:73:1B:60:94 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 2ADE3B6BCDCE49145AA53A941DD3A137BD5780B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0304 Signing time: Mon 21 Sep 2026 10:51:24 +0000 Manifest this update: Mon 21 Sep 2026 10:46:24 +0000 Manifest next update: Tue 22 Sep 2026 14:05:24 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: l121Unvo7Nfdx/Th0qy65pCT5VArgzsSXGh1xZDIayo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:de:3b:6b:cd:ce:49:14:5a:a5:3a:94:1d:d3:a1:37:bd:57:80:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Sep 21 10:46:24 2026 GMT Not After : Sep 22 14:05:24 2026 GMT Subject: CN=D2F8D99E39A662E0EFB9983C5F66E6EE731B6094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:86:4c:b2:88:6c:3c:fd:7f:db:06:a0:84: 6a:0a:6d:fa:03:9a:05:70:87:df:f4:3b:a9:39:b4: a5:f0:4b:bf:b3:39:ff:11:8c:4e:30:4e:95:94:65: 64:cb:6f:87:ec:30:b2:91:37:d3:5b:71:e7:a6:ed: 0c:5c:e7:52:d6:8b:d9:d4:f1:00:44:c2:f5:8c:07: a9:2d:41:64:3b:f4:5d:02:c6:cc:66:f5:00:92:f3: bb:49:63:e0:9e:6b:fb:ba:f1:e8:88:9e:ec:2b:a2: d2:cb:12:e8:0a:d6:67:ab:24:85:d9:bc:9d:48:fd: ae:da:d1:c0:15:3e:30:ae:5e:38:8a:bc:60:8c:64: cb:78:db:b6:b1:12:02:fb:ee:dc:1f:95:77:4b:0c: 18:17:0f:b6:fd:69:e5:bd:ca:17:0d:3f:03:52:7b: 26:2d:8a:00:78:84:fd:f9:c8:ff:25:c8:c3:f7:6a: c0:58:44:52:6a:88:32:9b:2b:03:96:ec:e5:f1:62: 93:2e:4b:e8:af:41:33:39:63:14:64:28:c1:3d:92: ef:9f:43:24:12:10:40:27:cb:2b:00:bf:a6:7c:95: 7f:3b:97:ae:63:41:05:07:3b:8e:76:d6:72:6e:ed: 29:36:dc:5d:ae:c0:41:d8:2e:09:d6:85:2d:a0:8c: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:D9:9E:39:A6:62:E0:EF:B9:98:3C:5F:66:E6:EE:73:1B:60:94 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3c:bb:84:36:8d:cb:8f:79:cf:19:5d:a0:d3:7e:fd:18:f2: 62:af:0e:b6:a9:66:5a:53:6d:11:3e:7c:74:7f:ac:e9:33:52: 5d:a2:2a:4f:8d:20:9b:3d:85:b3:cc:c2:22:d5:0b:c5:8c:61: f1:4d:c2:8b:e4:81:67:fb:ef:99:23:d6:9e:3f:6e:19:cf:7f: 0a:65:de:b2:33:84:13:35:76:f8:02:e8:c8:58:25:6e:93:fe: eb:1b:65:bb:4c:5b:64:3e:ec:e7:7c:08:e0:30:be:4c:5a:8d: d4:4c:df:47:97:69:98:88:a0:04:70:f6:88:f3:4b:cf:50:8e: d1:36:aa:41:fa:26:6c:59:ea:63:59:1e:0d:3f:f7:5e:91:0e: cc:10:bf:f4:e5:02:3f:13:d0:8e:54:ed:6b:33:dd:80:e7:dd: 16:c1:ca:80:b4:73:28:bc:2e:06:8d:c2:13:49:eb:cb:61:3a: eb:62:d3:66:b1:fd:79:bc:54:12:5d:60:ae:70:e1:7f:83:8a: d9:fe:76:92:5b:19:a1:92:ee:25:0a:a4:a1:35:f3:8a:ca:d6: 45:af:d7:18:20:b9:a4:28:66:16:7c:3c:f4:2a:a0:ce:30:82: e2:cc:79:b5:da:64:0d:94:83:ac:3c:53:e6:7f:74:10:76:a4: 33:71:7d:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKt47a83OSRRapTqUHdOhN71XgLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA5MjExMDQ2MjRaFw0yNjA5MjIxNDA1MjRaMDMxMTAvBgNV BAMTKEQyRjhEOTlFMzlBNjYyRTBFRkI5OTgzQzVGNjZFNkVFNzMxQjYwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7YZMsohsPP1/2waghGoKbfoD mgVwh9/0O6k5tKXwS7+zOf8RjE4wTpWUZWTLb4fsMLKRN9Nbceem7Qxc51LWi9nU 8QBEwvWMB6ktQWQ79F0Cxsxm9QCS87tJY+Cea/u68eiInuwrotLLEugK1merJIXZ vJ1I/a7a0cAVPjCuXjiKvGCMZMt427axEgL77twflXdLDBgXD7b9aeW9yhcNPwNS eyYtigB4hP35yP8lyMP3asBYRFJqiDKbKwOW7OXxYpMuS+ivQTM5YxRkKME9ku+f QyQSEEAnyysAv6Z8lX87l65jQQUHO4521nJu7Sk23F2uwEHYLgnWhS2gjOt1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0vjZnjmmYuDvuZg8X2bm7nMbYJQwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwPLuE No3Lj3nPGV2g0379GPJirw62qWZaU20RPnx0f6zpM1JdoipPjSCbPYWzzMIi1QvF jGHxTcKL5IFn+++ZI9aeP24Zz38KZd6yM4QTNXb4AujIWCVuk/7rG2W7TFtkPuzn fAjgML5MWo3UTN9Hl2mYiKAEcPaI80vPUI7RNqpB+iZsWepjWR4NP/dekQ7MEL/0 5QI/E9COVO1rM92A590WwcqAtHMovC4GjcITSevLYTrrYtNmsf15vFQSXWCucOF/ g4rZ/naSWxmhku4lCqShNfOKytZFr9cYILmkKGYWfDz0KqDOMILizHm12mQNlIOs PFPmf3QQdqQzcX36 -----END CERTIFICATE-----Generated at Mon Sep 21 23:28:00 2026 by rpki-client