$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: XsACR48KXwGVTUQqKWOePCYdHqs1QHlVmbjok4kpLac= Subject key identifier: D4:F4:02:CD:A5:70:08:CF:AF:90:DE:71:69:E8:22:12:A7:A4:5A:58 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 0C5FF2462C92907D9765FB10A8132E1E6C7D181B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 04FD Signing time: Mon 21 Sep 2026 13:38:32 +0000 Manifest this update: Mon 21 Sep 2026 13:33:32 +0000 Manifest next update: Tue 22 Sep 2026 14:16:32 +0000 Files and hashes: 1: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=) 3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=) 4: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: F8yDHoINo5Xqcnquyf5WYhGbUNbh+t/NguJZ04GpyRE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5f:f2:46:2c:92:90:7d:97:65:fb:10:a8:13:2e:1e:6c:7d:18:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Sep 21 13:33:32 2026 GMT Not After : Sep 22 14:16:32 2026 GMT Subject: CN=D4F402CDA57008CFAF90DE7169E82212A7A45A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:3e:48:ed:2a:be:26:98:4d:cf:48:b2:e2: e6:5e:fc:ea:6a:0a:9e:6a:83:2c:fa:10:16:dc:9c: b8:ac:9a:73:0d:15:1f:17:c9:b3:46:df:cf:41:67: 1d:2e:b4:c7:ef:15:80:0f:95:48:83:fd:59:e9:59: 2d:55:da:11:44:03:13:9b:a1:10:a1:28:8b:74:f7: d1:93:96:e2:50:fe:87:05:77:f3:8f:be:20:9e:2e: af:c2:93:92:a0:ae:5f:80:c2:91:f0:5c:12:20:54: a0:1d:14:a6:9a:1e:28:3b:0f:e2:97:de:c2:ac:20: f6:57:56:2c:d4:b3:26:76:ca:0f:5c:09:82:b3:30: 92:ad:e1:68:d2:61:f0:f7:13:a1:24:85:b7:76:df: 31:12:19:74:6f:a1:95:3a:12:26:68:92:1d:ba:64: 0c:e0:76:2f:43:78:ef:b8:69:1f:48:0a:36:7b:32: 06:fb:f1:12:20:b5:af:f4:9b:bb:66:0d:e6:11:89: b7:72:00:07:c5:cc:27:94:37:bf:68:00:ea:4c:f8: 03:b1:ad:ba:07:24:30:55:ee:af:3d:0d:bb:50:5e: d8:fc:d7:bf:bf:cb:15:93:0f:60:6e:0a:48:79:61: 07:d5:a0:00:dc:13:cd:b1:2f:10:e6:e1:c7:62:ed: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:02:CD:A5:70:08:CF:AF:90:DE:71:69:E8:22:12:A7:A4:5A:58 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d2:aa:0d:23:19:48:cb:f9:82:1a:24:6a:f2:a9:b4:da:bd: ac:24:fc:26:9b:9c:d2:bd:15:99:fa:63:44:e1:aa:bf:27:3a: b6:c0:ff:e6:17:93:7d:55:a6:7b:e9:9c:85:f1:0f:79:7f:d4: cc:8d:9d:15:f9:f2:b4:3c:b7:84:06:ce:6c:d5:f2:e1:0b:24: 8a:d9:d5:de:ce:23:5f:1e:0f:e4:ee:ff:48:8d:8a:d3:65:f0: d5:3c:b5:a1:30:92:58:da:8b:75:e4:9b:b4:9a:dd:6d:92:49: c5:a5:94:df:2c:c2:90:0a:b9:84:30:c2:a0:a0:2f:38:b5:df: 74:46:c5:a7:8c:e5:94:ce:e7:c2:7f:1d:f4:fd:7b:95:2b:70: 52:cb:d5:d4:66:28:a0:cd:4a:3d:67:33:82:6c:33:23:bb:3d: 67:56:aa:87:3e:7e:15:bc:a1:32:3d:0f:7f:77:47:5e:16:5b: 8f:91:90:e6:62:bc:e0:56:48:5d:45:b9:89:0b:1b:95:ca:22: 67:22:88:d3:68:9a:ea:ec:bb:13:9b:77:cc:21:eb:31:c0:36: 3c:7d:67:d2:28:c3:51:8a:a1:cd:98:3d:4f:34:77:24:c5:ae: 3b:ff:61:ba:3a:41:b0:54:30:7f:ba:37:5e:c6:b6:1b:b6:a3: ce:7f:38:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDF/yRiySkH2XZfsQqBMuHmx9GBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNjA5MjExMzMzMzJaFw0yNjA5MjIxNDE2MzJaMDMxMTAvBgNV BAMTKEQ0RjQwMkNEQTU3MDA4Q0ZBRjkwREU3MTY5RTgyMjEyQTdBNDVBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zj5I7Sq+JphNz0iy4uZe/Opq Cp5qgyz6EBbcnLismnMNFR8XybNG389BZx0utMfvFYAPlUiD/VnpWS1V2hFEAxOb oRChKIt099GTluJQ/ocFd/OPviCeLq/Ck5Kgrl+AwpHwXBIgVKAdFKaaHig7D+KX 3sKsIPZXVizUsyZ2yg9cCYKzMJKt4WjSYfD3E6Ekhbd23zESGXRvoZU6EiZokh26 ZAzgdi9DeO+4aR9ICjZ7Mgb78RIgta/0m7tmDeYRibdyAAfFzCeUN79oAOpM+AOx rboHJDBV7q89DbtQXtj817+/yxWTD2BuCkh5YQfVoADcE82xLxDm4cdi7djNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1PQCzaVwCM+vkN5xaegiEqekWlgwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudKqDSMZSMv5ghokavKp tNq9rCT8Jpuc0r0VmfpjROGqvyc6tsD/5heTfVWme+mchfEPeX/UzI2dFfnytDy3 hAbObNXy4QskitnV3s4jXx4P5O7/SI2K02Xw1Ty1oTCSWNqLdeSbtJrdbZJJxaWU 3yzCkAq5hDDCoKAvOLXfdEbFp4zllM7nwn8d9P17lStwUsvV1GYooM1KPWczgmwz I7s9Z1aqhz5+FbyhMj0Pf3dHXhZbj5GQ5mK84FZIXUW5iQsblcoiZyKI02ia6uy7 E5t3zCHrMcA2PH1n0ijDUYqhzZg9TzR3JMWuO/9hujpBsFQwf7o3Xsa2G7ajzn84 0Q== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:34 2026 by rpki-client