$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: EbwSt2PWva6QGayfVju2EM0C4xbc7N+uviTk6BOQyxw= Subject key identifier: FA:1B:AC:1D:5F:DD:AE:B9:2B:AE:63:49:62:2A:74:27:F0:9E:99:EF Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 09D958A2C129B334BD9BB1045FE62E91EF051BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 070D Signing time: Tue 22 Sep 2026 00:50:47 +0000 Manifest this update: Tue 22 Sep 2026 00:45:47 +0000 Manifest next update: Wed 23 Sep 2026 04:23:47 +0000 Files and hashes: 1: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) 2: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=) 3: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: y0wXpV0FK7p0gj289yuBKhdBMbU7WqcUSNT/1+hV8BA=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 5: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: YkectCN3PwHXIUFvI6rErHB+GqYj62wKkXppDp93mWA=) 6: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 7: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: YxhfVM9eLNdkAj+bwkdCR2/6gTvImWFQQ1pkH8X8AKc=) 8: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 72O3M08TYSpTDlojnTt+mRlscbLgVOXQCHXBZP39kmI=) 9: 3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa (hash: cAakJn9uvoUMXZcUb5f3QeJYFtOG/tvLTFzKc+z86q8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d9:58:a2:c1:29:b3:34:bd:9b:b1:04:5f:e6:2e:91:ef:05:1b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Sep 22 00:45:47 2026 GMT Not After : Sep 23 04:23:47 2026 GMT Subject: CN=FA1BAC1D5FDDAEB92BAE6349622A7427F09E99EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:8a:8d:d0:ba:78:27:f2:b2:c5:8f:20:50: 0c:3c:23:85:a6:b9:40:87:b7:ae:8d:0d:1c:4a:7d: 0e:e1:3c:53:ac:12:f3:00:4f:ed:60:fe:39:63:a0: 3b:6b:8b:40:5c:35:d6:1c:c6:41:66:24:b5:46:a0: b1:6e:4f:aa:0c:d6:53:eb:5e:9a:f5:94:e4:ff:53: 4b:84:82:76:aa:35:52:9e:1c:37:76:e2:96:ea:50: ae:1b:d2:b5:9a:d1:14:4e:27:f8:77:ca:11:47:6b: 57:20:bf:28:c6:8d:14:94:1b:53:07:dc:8f:e3:ef: 74:60:d6:a8:59:00:82:18:34:6f:00:0f:6b:d8:d6: b1:f1:54:11:4e:77:e5:96:f8:32:2a:87:2b:8a:af: 6d:02:91:7c:72:da:cb:8c:e6:1f:09:df:eb:94:de: 51:e6:ab:01:69:f3:38:4d:df:8d:45:b4:18:df:7e: 88:40:22:a2:1e:b9:de:d1:b3:20:20:dd:3b:d4:1f: 48:7c:a6:3b:2b:a0:06:2d:ce:8c:a1:43:d9:3f:c2: 86:a9:9c:5e:61:13:d5:96:ca:41:b5:ae:75:76:8c: 42:5b:43:bf:d2:62:9d:c0:92:8e:aa:09:28:c1:58: ba:c3:67:cd:db:13:04:71:8d:9a:51:2b:46:d6:c7: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:AC:1D:5F:DD:AE:B9:2B:AE:63:49:62:2A:74:27:F0:9E:99:EF X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ee:f1:cd:9f:50:2f:0f:a7:ea:0e:2b:b3:1e:ab:15:76:e2: 7d:a5:fd:22:7f:ec:f2:20:bd:c4:88:47:52:e0:d7:5c:1d:7b: a2:a7:b5:6a:1f:ba:e3:7c:3b:e0:9c:be:ce:20:76:9f:bc:d5: 4b:97:c6:73:8c:a3:c8:d0:4e:b1:aa:98:be:0a:1d:91:0b:98: f9:d9:89:45:3d:c7:e1:cb:af:89:bf:1f:a0:c1:9c:fb:e3:0f: 00:60:e9:ac:1d:f7:9b:11:22:48:4b:34:d9:15:69:8a:9c:99: e6:f2:00:36:af:e4:92:9f:08:e1:f0:0e:c8:15:25:13:7d:7c: 6c:e5:75:77:50:e8:cf:15:06:6b:ba:3b:f3:12:95:b3:a0:e4: d4:4f:8a:c5:c2:c4:05:89:4f:14:9a:c5:86:c6:67:a4:5d:b3: 0c:ba:15:80:67:9f:f5:5f:19:b3:6d:07:39:c4:f1:4f:8c:a6: 81:fa:37:f6:d0:35:77:79:c4:33:2b:8c:01:a4:73:ab:cc:b9: a6:cc:28:cc:be:7d:4d:03:fa:8e:e2:41:f7:8c:e3:c6:05:a3: c4:ad:e9:bd:a8:f7:56:9a:49:6c:25:31:f2:66:3b:bc:b7:9e: 5b:7e:7e:c6:c2:6c:8c:5e:2c:71:54:bd:09:fd:21:8b:e6:b5: 69:59:b2:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCdlYosEpszS9m7EEX+Yuke8FG7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA5MjIwMDQ1NDdaFw0yNjA5MjMwNDIzNDdaMDMxMTAvBgNV BAMTKEZBMUJBQzFENUZEREFFQjkyQkFFNjM0OTYyMkE3NDI3RjA5RTk5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH24qN0Lp4J/KyxY8gUAw8I4Wm uUCHt66NDRxKfQ7hPFOsEvMAT+1g/jljoDtri0BcNdYcxkFmJLVGoLFuT6oM1lPr Xpr1lOT/U0uEgnaqNVKeHDd24pbqUK4b0rWa0RROJ/h3yhFHa1cgvyjGjRSUG1MH 3I/j73Rg1qhZAIIYNG8AD2vY1rHxVBFOd+WW+DIqhyuKr20CkXxy2suM5h8J3+uU 3lHmqwFp8zhN341FtBjffohAIqIeud7RsyAg3TvUH0h8pjsroAYtzoyhQ9k/woap nF5hE9WWykG1rnV2jEJbQ7/SYp3Ako6qCSjBWLrDZ83bEwRxjZpRK0bWxxR9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+husHV/drrkrrmNJYip0J/Ceme8wHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAje7xzZ9QLw+n6g4rsx6r FXbifaX9In/s8iC9xIhHUuDXXB17oqe1ah+643w74Jy+ziB2n7zVS5fGc4yjyNBO saqYvgodkQuY+dmJRT3H4cuvib8foMGc++MPAGDprB33mxEiSEs02RVpipyZ5vIA Nq/kkp8I4fAOyBUlE318bOV1d1DozxUGa7o78xKVs6Dk1E+KxcLEBYlPFJrFhsZn pF2zDLoVgGef9V8Zs20HOcTxT4ymgfo39tA1d3nEMyuMAaRzq8y5pswozL59TQP6 juJB94zjxgWjxK3pvaj3VppJbCUx8mY7vLeeW35+xsJsjF4scVS9Cf0hi+a1aVmy Fg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:26 2026 by rpki-client