$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: jghUhzg1ve+6kP1bNay1jRXF/AWhOyKsRq1fzbI4qwM= Subject key identifier: 3E:6A:F2:CA:3D:E9:4F:C3:6F:35:0A:4A:5F:5E:CF:DF:C0:6C:31:06 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 19EB99BEE6EBE89163D7080A24BCE73A4FF09586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: EA Signing time: Sun 20 Sep 2026 10:10:43 +0000 Manifest this update: Sun 20 Sep 2026 10:05:43 +0000 Manifest next update: Mon 21 Sep 2026 13:33:43 +0000 Files and hashes: 1: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) 2: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: XiwZlkbvolfIpmn7lLE2RkSz2VFdslt9VeoGCm6REQ0=) 3: 3138352e3131362e39302e302f32342d3234203d3e203235313938.roa (hash: 7mQW7H94fRqr8LtsWV8dOnF1L4/JFOSxrGXn/+VeEzY=) 4: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) 5: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) 6: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 13:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:eb:99:be:e6:eb:e8:91:63:d7:08:0a:24:bc:e7:3a:4f:f0:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Sep 20 10:05:43 2026 GMT Not After : Sep 21 13:33:43 2026 GMT Subject: CN=3E6AF2CA3DE94FC36F350A4A5F5ECFDFC06C3106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:6b:6a:f6:f3:1c:d4:9c:68:d0:49:00:4d: c7:2b:f6:67:ac:58:71:31:52:9a:dc:f2:ae:2a:8a: 28:f0:c8:6b:9d:75:33:13:c9:d8:54:3b:11:71:06: 42:8c:26:c9:e8:97:20:5c:b9:67:e8:a9:c8:bb:f6: 6d:97:b1:59:92:82:cf:33:f9:7c:01:56:59:84:e6: 27:7b:8e:35:cc:70:0b:d0:8d:0d:04:6e:22:67:4a: ef:81:7d:09:c9:79:31:a3:f5:b9:dc:0a:99:19:4e: 9a:66:28:eb:5d:e0:a9:01:2d:f6:5b:5a:01:ee:6d: e0:35:78:08:33:18:fe:2d:a5:8c:93:54:42:93:a5: f1:84:72:cb:e3:96:76:c7:db:96:2c:32:7b:72:dd: 34:2c:f1:70:d7:be:10:2b:f9:73:b5:80:67:18:32: 9a:80:3d:7f:d0:85:ba:91:a6:c1:e7:85:f0:45:07: c4:39:d2:6d:4c:9f:56:65:a8:83:cb:cd:c3:a7:c1: d3:9b:94:90:4b:94:cc:ab:f9:94:25:cd:22:1c:13: 3a:bc:be:5a:e9:4a:6b:bf:0b:fe:ba:16:3a:17:6c: 3f:c4:c6:b6:b1:81:df:07:aa:5d:ad:d7:ee:9c:56: 22:0e:8c:f8:53:88:52:90:ad:f1:a3:2e:59:9d:d8: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:F2:CA:3D:E9:4F:C3:6F:35:0A:4A:5F:5E:CF:DF:C0:6C:31:06 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8c:27:9a:f9:38:84:c4:ee:32:e4:bc:49:b7:85:33:7d:1f: fa:86:7e:c6:24:59:af:08:ed:01:fd:92:00:ac:a1:b3:84:81: 9c:e7:44:0f:14:a7:1c:3f:d0:f8:78:04:f7:91:33:53:35:15: 78:4b:bd:fe:16:e7:d2:9f:80:33:26:a5:be:e2:f1:1c:b1:d1: e8:c6:e9:69:b4:0d:17:78:73:6c:9d:87:16:09:bc:ef:29:8d: 9d:6b:7f:e9:40:8a:da:f1:dd:ac:97:c7:4a:1f:cb:0e:3b:18: af:d5:85:24:10:9c:d4:3a:a4:7e:f0:85:62:7b:88:55:aa:d0: f6:51:ed:4d:e2:fa:d7:ca:e3:3d:af:af:65:4f:7e:00:05:9f: 4f:14:bc:5c:7b:4c:ba:e5:2c:b7:f1:a5:5a:71:0d:24:b7:59: dd:d9:5e:18:51:75:39:d6:02:87:2b:2d:3f:0b:ea:72:d4:b9: 48:4f:59:7e:1d:15:e1:45:f3:72:09:d6:da:5c:61:4f:50:63: ef:ca:ca:da:7e:68:ce:2f:0e:ce:18:cb:99:33:7b:bb:84:b9: 01:f6:97:f7:8d:a2:ac:07:20:87:05:80:ca:29:98:43:b9:e3: 76:53:81:92:ca:2e:fb:59:0f:c7:51:6c:21:1d:a2:d6:02:8e: ea:0f:86:2b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGeuZvubr6JFj1wgKJLznOk/wlYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA5MjAxMDA1NDNaFw0yNjA5MjExMzMzNDNaMDMxMTAvBgNV BAMTKDNFNkFGMkNBM0RFOTRGQzM2RjM1MEE0QTVGNUVDRkRGQzA2QzMxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA2tq9vMc1Jxo0EkATccr9mes WHExUprc8q4qiijwyGuddTMTydhUOxFxBkKMJsnolyBcuWfoqci79m2XsVmSgs8z +XwBVlmE5id7jjXMcAvQjQ0EbiJnSu+BfQnJeTGj9bncCpkZTppmKOtd4KkBLfZb WgHubeA1eAgzGP4tpYyTVEKTpfGEcsvjlnbH25YsMnty3TQs8XDXvhAr+XO1gGcY MpqAPX/QhbqRpsHnhfBFB8Q50m1Mn1ZlqIPLzcOnwdOblJBLlMyr+ZQlzSIcEzq8 vlrpSmu/C/66FjoXbD/Exraxgd8Hql2t1+6cViIOjPhTiFKQrfGjLlmd2OkjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPmryyj3pT8NvNQpKX17P38BsMQYwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYwnmvk4hMTuMuS8SbeF M30f+oZ+xiRZrwjtAf2SAKyhs4SBnOdEDxSnHD/Q+HgE95EzUzUVeEu9/hbn0p+A MyalvuLxHLHR6MbpabQNF3hzbJ2HFgm87ymNnWt/6UCK2vHdrJfHSh/LDjsYr9WF JBCc1DqkfvCFYnuIVarQ9lHtTeL618rjPa+vZU9+AAWfTxS8XHtMuuUst/GlWnEN JLdZ3dleGFF1OdYChystPwvqctS5SE9Zfh0V4UXzcgnW2lxhT1Bj78rK2n5ozi8O zhjLmTN7u4S5AfaX942irAcghwWAyimYQ7njdlOBksou+1kPx1FsIR2i1gKO6g+G Kw== -----END CERTIFICATE-----Generated at Sun Sep 20 18:22:23 2026 by rpki-client