$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: tIosnZVx52CV2Xi2k3MCKe8LbUX94RMKhHCihjAjF4c= Subject key identifier: C1:B5:8F:05:76:C9:80:7E:29:D8:39:A2:32:F9:CD:4C:0D:42:35:97 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 26579D83F20898FD9E217BFA0C96D1817AEB1540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0564 Signing time: Mon 21 Sep 2026 07:55:45 +0000 Manifest this update: Mon 21 Sep 2026 07:50:45 +0000 Manifest next update: Tue 22 Sep 2026 10:38:45 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 3: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 4: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 5: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 6: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 7: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 8: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 9: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 10: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 11: 3135392e3235332e312e302f32342d3234203d3e20343031333632.roa (hash: QjYsR9MbUft7eF4N67W1ParO0QTKQ1t2pO8q+FvFFyk=) 12: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) 13: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: ++vQFopIZQhbpGY7zWlAParhqiFEDUMDVYat5r6Yxrw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 10:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:57:9d:83:f2:08:98:fd:9e:21:7b:fa:0c:96:d1:81:7a:eb:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Sep 21 07:50:45 2026 GMT Not After : Sep 22 10:38:45 2026 GMT Subject: CN=C1B58F0576C9807E29D839A232F9CD4C0D423597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b4:e7:fc:cb:9e:cb:97:1c:99:ab:78:2e:fc: 92:31:83:1c:b6:29:c3:db:6c:d2:6e:f5:a8:01:85: a0:80:01:c8:02:f8:82:9d:6a:78:d4:36:34:7f:20: a0:ba:a2:19:ea:47:da:16:6f:3c:4c:b2:b4:19:f4: d9:c6:8e:12:27:47:c2:0d:18:07:44:66:f5:5f:cc: e7:cd:0f:e7:b6:c5:84:49:66:3f:6c:a8:c3:cb:f1: 7e:72:d1:f8:3d:3b:9f:74:38:34:14:58:08:03:e4: 3b:50:cb:ef:17:58:9f:fa:4d:a4:c0:3d:5f:fa:1d: e5:1a:9b:eb:67:c7:90:08:fd:76:b3:a5:bd:d9:a3: df:12:f1:51:55:47:3b:dc:b7:25:05:99:2b:2c:f8: 26:78:2f:27:59:c0:47:ce:00:e7:cc:d8:e2:5e:d7: dd:bf:85:a4:03:7d:e9:cf:25:5d:9b:d3:a2:a0:d1: 5b:e6:53:93:7b:64:33:87:0a:ec:9a:af:24:b0:8e: 5e:8c:a1:d0:5f:e4:62:20:dd:21:a0:c1:8a:3f:2c: 10:15:c4:64:93:a7:94:aa:08:ea:59:21:1c:79:81: 22:63:55:f5:60:b7:53:9a:da:09:a0:e4:fb:c6:eb: 61:a1:13:ca:d3:e3:06:c1:ca:a6:f1:60:dd:4f:cb: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:8F:05:76:C9:80:7E:29:D8:39:A2:32:F9:CD:4C:0D:42:35:97 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4a:52:7e:4d:9c:16:8a:0d:2d:0a:b0:9c:12:b8:33:fc:e8: 2c:8c:24:95:40:79:c1:c5:51:3d:f4:06:b5:49:26:67:9a:00: 13:11:32:f8:d4:41:a6:9d:6a:39:ff:63:3c:63:4b:1c:3a:24: 84:21:e4:4e:43:25:f5:ba:41:65:f6:a9:8c:8d:de:78:33:47: 23:0f:16:7e:eb:0b:19:5a:43:b5:07:4b:e4:a0:1c:09:24:0e: df:ff:04:70:61:8b:51:78:d8:ae:27:f7:8d:7c:7c:01:66:d6: da:66:cd:9e:db:2f:5e:1c:cd:ba:f9:38:95:31:b0:5d:b6:de: 85:06:b9:44:77:5f:67:ec:b8:9a:74:d4:f6:df:65:7a:03:b7: 63:30:eb:04:a7:21:e1:1b:71:fb:d2:20:71:3a:c9:ab:c0:f3: 09:f8:88:20:ae:db:d4:1f:eb:54:8e:e5:4c:85:13:77:52:c0: 8b:32:03:63:bd:2f:74:d4:5e:1f:b7:b8:04:9c:07:a7:d3:15: c3:9e:e7:fc:21:ed:28:6a:b6:aa:7f:4f:f9:3e:47:53:48:b6: 5f:8a:b5:5b:17:1f:1c:92:71:ba:ad:45:3d:37:30:5c:e6:cf: d7:fc:38:7c:93:cb:d5:ce:d4:b0:2a:2b:f4:3a:2a:9d:d4:20: 65:5d:40:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJledg/IImP2eIXv6DJbRgXrrFUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA5MjEwNzUwNDVaFw0yNjA5MjIxMDM4NDVaMDMxMTAvBgNV BAMTKEMxQjU4RjA1NzZDOTgwN0UyOUQ4MzlBMjMyRjlDRDRDMEQ0MjM1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwtOf8y57LlxyZq3gu/JIxgxy2 KcPbbNJu9agBhaCAAcgC+IKdanjUNjR/IKC6ohnqR9oWbzxMsrQZ9NnGjhInR8IN GAdEZvVfzOfND+e2xYRJZj9sqMPL8X5y0fg9O590ODQUWAgD5DtQy+8XWJ/6TaTA PV/6HeUam+tnx5AI/Xazpb3Zo98S8VFVRzvctyUFmSss+CZ4LydZwEfOAOfM2OJe 192/haQDfenPJV2b06Kg0VvmU5N7ZDOHCuyarySwjl6ModBf5GIg3SGgwYo/LBAV xGSTp5SqCOpZIRx5gSJjVfVgt1Oa2gmg5PvG62GhE8rT4wbByqbxYN1Py8hDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwbWPBXbJgH4p2DmiMvnNTA1CNZcwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUpSfk2cFooNLQqwnBK4 M/zoLIwklUB5wcVRPfQGtUkmZ5oAExEy+NRBpp1qOf9jPGNLHDokhCHkTkMl9bpB ZfapjI3eeDNHIw8WfusLGVpDtQdL5KAcCSQO3/8EcGGLUXjYrif3jXx8AWbW2mbN ntsvXhzNuvk4lTGwXbbehQa5RHdfZ+y4mnTU9t9legO3YzDrBKch4Rtx+9IgcTrJ q8DzCfiIIK7b1B/rVI7lTIUTd1LAizIDY70vdNReH7e4BJwHp9MVw57n/CHtKGq2 qn9P+T5HU0i2X4q1WxcfHJJxuq1FPTcwXObP1/w4fJPL1c7UsCor9DoqndQgZV1A Rw== -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:50 2026 by rpki-client