$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: j+ru13k5JGhpugG5UAoh9PVDA85AqBbhXyX59On4Yec= Subject key identifier: CB:DD:49:2D:70:4A:1F:F0:D1:86:66:1E:2E:EF:AA:10:23:86:DA:BF Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 7ECE26D48B33B4904B6CA00FE8D93F76F595348D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: D0 Signing time: Fri 25 Sep 2026 13:34:19 +0000 Manifest this update: Fri 25 Sep 2026 13:29:19 +0000 Manifest next update: Sat 26 Sep 2026 15:22:19 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: 2/3YD+RTPmhZ5rwkjUDtPL1Ue0xteLenvgVsCMignKY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ce:26:d4:8b:33:b4:90:4b:6c:a0:0f:e8:d9:3f:76:f5:95:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Sep 25 13:29:19 2026 GMT Not After : Sep 26 15:22:19 2026 GMT Subject: CN=CBDD492D704A1FF0D186661E2EEFAA102386DABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d9:86:76:2a:40:fe:eb:f4:a6:0a:53:ef:64: d2:b5:31:3c:07:f8:0e:b3:9b:d0:d6:4d:a3:27:0b: 49:56:0c:9c:b5:c3:fa:91:c4:69:5e:ca:e1:a8:86: 8b:a9:97:e6:d5:74:19:3e:7f:7d:f6:a0:92:d1:20: 9f:b5:3d:67:05:e6:90:37:72:aa:fb:79:5e:5f:8a: 68:aa:7e:d4:fd:b6:47:a3:75:cb:ea:57:12:be:30: f5:3e:64:56:3d:c4:59:c3:47:a4:60:6c:5d:df:b6: 21:1e:82:32:27:e3:16:ba:36:c8:43:15:3c:a3:66: a7:f5:c6:5d:6b:cf:d5:f3:2c:9b:7b:9b:76:90:c9: 97:c0:aa:d2:3a:93:48:0c:16:43:b3:86:36:15:c2: 0f:42:64:48:de:da:3e:cd:76:ef:4f:6a:a6:f5:8e: a9:94:1f:d2:c7:53:23:98:01:12:5f:3d:b9:b4:02: b6:c9:81:52:1b:c5:ed:a5:1a:42:28:11:a5:e3:f9: 4f:7b:d8:83:5a:05:68:da:4f:c7:f1:9d:ef:fa:60: 97:3a:4c:ee:7a:36:dd:0d:f6:b6:cf:03:a9:36:d3: 9c:b5:86:44:66:32:69:5f:89:c6:43:59:21:f1:97: 6b:1f:6f:f3:41:92:b5:ca:c5:8a:36:40:7e:e9:54: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:49:2D:70:4A:1F:F0:D1:86:66:1E:2E:EF:AA:10:23:86:DA:BF X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:01:c1:98:d9:b6:9a:52:47:fb:ad:8f:20:8d:64:75:23:95: c1:d6:9f:fe:a5:53:87:ee:77:df:fc:24:ca:ce:6f:bd:5e:8d: 4a:9c:b7:a3:33:97:00:67:14:c1:b9:05:4c:a0:83:96:cb:d5: 76:5e:43:21:f9:94:b7:5e:b6:22:cc:63:d0:f8:9e:4e:e7:b6: 65:59:c0:18:73:f1:76:2b:aa:b7:f6:19:67:30:f5:f4:6f:cd: db:a7:de:c0:c4:87:97:7a:7a:db:21:b1:30:e2:5d:96:5d:a0: 4d:d9:85:82:e9:8a:cc:1b:8d:6b:61:82:f4:34:db:2a:5d:b7: 07:14:ae:db:f9:af:f2:79:c4:99:84:30:e4:d0:2c:6e:91:df: 18:b8:6e:d7:ca:3a:cb:26:14:01:7a:ef:d0:2a:51:03:21:c3: 2b:ae:11:f3:90:1e:82:be:7a:f1:b1:46:67:9d:17:14:67:e1: fe:b2:1d:96:be:b3:c2:d7:ce:18:72:6e:4e:42:50:2c:1f:bf: fe:64:46:f5:59:8a:b9:6a:ca:8d:fd:84:bf:6a:04:b3:c0:99: 6d:49:76:2f:ea:5f:b5:ce:c6:6a:6f:7e:0b:7b:ab:f4:02:36: 24:63:4d:2b:51:8a:6c:bd:c6:6d:9e:34:ac:d6:2d:61:2e:9a: e3:e2:4c:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfs4m1IsztJBLbKAP6Nk/dvWVNI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA5MjUxMzI5MTlaFw0yNjA5MjYxNTIyMTlaMDMxMTAvBgNV BAMTKENCREQ0OTJENzA0QTFGRjBEMTg2NjYxRTJFRUZBQTEwMjM4NkRBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2YZ2KkD+6/SmClPvZNK1MTwH +A6zm9DWTaMnC0lWDJy1w/qRxGleyuGohoupl+bVdBk+f332oJLRIJ+1PWcF5pA3 cqr7eV5fimiqftT9tkejdcvqVxK+MPU+ZFY9xFnDR6RgbF3ftiEegjIn4xa6NshD FTyjZqf1xl1rz9XzLJt7m3aQyZfAqtI6k0gMFkOzhjYVwg9CZEje2j7Ndu9Paqb1 jqmUH9LHUyOYARJfPbm0ArbJgVIbxe2lGkIoEaXj+U972INaBWjaT8fxne/6YJc6 TO56Nt0N9rbPA6k205y1hkRmMmlficZDWSHxl2sfb/NBkrXKxYo2QH7pVOUDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUy91JLXBKH/DRhmYeLu+qECOG2r8wHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDYAcGY 2baaUkf7rY8gjWR1I5XB1p/+pVOH7nff/CTKzm+9Xo1KnLejM5cAZxTBuQVMoIOW y9V2XkMh+ZS3XrYizGPQ+J5O57ZlWcAYc/F2K6q39hlnMPX0b83bp97AxIeXenrb IbEw4l2WXaBN2YWC6YrMG41rYYL0NNsqXbcHFK7b+a/yecSZhDDk0Cxukd8YuG7X yjrLJhQBeu/QKlEDIcMrrhHzkB6CvnrxsUZnnRcUZ+H+sh2WvrPC184Ycm5OQlAs H7/+ZEb1WYq5asqN/YS/agSzwJltSXYv6l+1zsZqb34Le6v0AjYkY00rUYpsvcZt njSs1i1hLprj4kx8 -----END CERTIFICATE-----Generated at Fri Sep 25 23:57:10 2026 by rpki-client