$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: uJidM63YZQf2EJjJgTvyw2LCH3/mBG9sBdL/+WWHxu8= Subject key identifier: 7B:A8:27:D3:90:45:1B:EF:A3:F9:58:10:2E:D9:21:7E:01:8E:C5:BA Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 4E0C9CFE103CF9E3E82140A161DB948B39709156 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 026A Signing time: Thu 24 Sep 2026 16:24:28 +0000 Manifest this update: Thu 24 Sep 2026 16:19:28 +0000 Manifest next update: Fri 25 Sep 2026 20:11:28 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=) 2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: XhZP0kdWXCg3l5fBkxCxOz10XXL8Wcx0/U0ftGVlR3U=) 3: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=) 4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: TQW6ysixu0tP91BwcnDo0gwRpG74gPFiPCid6NcU7fI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 20:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0c:9c:fe:10:3c:f9:e3:e8:21:40:a1:61:db:94:8b:39:70:91:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Sep 24 16:19:28 2026 GMT Not After : Sep 25 20:11:28 2026 GMT Subject: CN=7BA827D390451BEFA3F958102ED9217E018EC5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:23:8c:17:d7:b0:2c:34:8e:aa:95:0c:4a: 0a:87:de:d4:64:d9:30:7c:c6:a2:c3:a8:16:7d:34: 9d:ad:87:c1:db:d4:87:79:25:0d:f5:25:49:29:5a: ad:5b:4c:53:81:02:7d:33:39:83:0c:03:d4:b0:bd: c4:38:d6:a3:29:1d:e5:21:46:d5:68:da:95:98:12: 77:92:f8:f9:40:66:19:99:e0:42:85:98:7d:51:6d: a5:62:ed:71:52:e1:69:53:dd:00:62:c2:8c:f3:56: 3d:ae:5c:c1:c7:fb:bb:3a:23:cb:1a:d6:b9:5c:30: 4e:68:4b:f9:5e:54:4d:3c:17:b4:d5:8a:6a:c4:8b: 26:0c:2b:eb:7d:5f:b9:73:33:80:20:b0:3c:07:0d: 96:2b:ae:55:be:fa:f8:d8:86:ae:d3:6b:96:db:8b: b4:66:12:e3:cb:b5:99:5e:b8:0c:a0:32:54:e4:0a: a0:46:1d:77:df:cf:70:3b:5f:8e:97:4c:e5:4d:cc: cc:8c:95:8f:2a:a5:a3:8e:c2:77:10:b3:fd:6c:dc: 75:ad:39:39:81:aa:c9:66:c4:14:84:b3:f3:4d:ba: d3:65:13:3b:0f:b2:05:ca:e2:d4:7a:c1:16:aa:c2: 26:67:63:1a:fd:fa:c6:8f:51:f3:4c:5c:5e:d0:01: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A8:27:D3:90:45:1B:EF:A3:F9:58:10:2E:D9:21:7E:01:8E:C5:BA X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8e:91:7e:de:00:c6:bd:e2:c9:f0:56:a1:c1:9f:b3:76:56: 01:57:3b:40:67:76:f6:88:aa:0c:2f:87:c5:3c:b3:e2:11:07: dd:59:62:68:9e:c7:cd:14:ea:7b:a5:51:26:5a:c5:4c:3f:f1: 71:2f:4a:8b:c5:83:6e:11:9c:e0:ee:ef:1b:41:aa:61:0c:20: 50:7f:38:8f:5f:e1:80:3c:1f:80:72:26:dc:48:ea:29:fb:7f: 75:4b:63:44:72:a1:1e:15:bc:99:b5:22:f0:84:05:43:fb:77: 46:95:0f:45:4f:9a:bf:38:d3:19:d1:9d:62:d0:cc:ac:a2:3d: a1:35:a9:81:5d:09:db:aa:05:de:78:43:e5:27:3e:15:83:88: 42:3a:cf:c7:91:ee:65:be:03:4b:78:29:5e:22:b0:37:cd:61: 5a:6b:47:a2:cf:0c:18:da:ac:b3:00:31:4c:e4:aa:43:a5:cf: 2e:c4:33:fa:2a:9e:81:80:50:bc:5e:a1:21:90:c7:8a:69:b3: 4c:c5:a1:4e:7b:3b:17:1b:06:d3:d9:1b:02:f2:b3:e2:6b:b0: ca:58:5a:3d:dd:99:c9:b9:6d:32:7d:6b:b0:59:31:3d:17:01: fa:38:65:0a:91:f2:8a:d6:af:a2:35:ba:14:98:3f:c5:f4:42: 73:79:0d:47 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUTgyc/hA8+ePoIUChYduUizlwkVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjA5MjQxNjE5MjhaFw0yNjA5MjUyMDExMjhaMDMxMTAvBgNV BAMTKDdCQTgyN0QzOTA0NTFCRUZBM0Y5NTgxMDJFRDkyMTdFMDE4RUM1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XiOMF9ewLDSOqpUMSgqH3tRk 2TB8xqLDqBZ9NJ2th8Hb1Id5JQ31JUkpWq1bTFOBAn0zOYMMA9SwvcQ41qMpHeUh RtVo2pWYEneS+PlAZhmZ4EKFmH1RbaVi7XFS4WlT3QBiwozzVj2uXMHH+7s6I8sa 1rlcME5oS/leVE08F7TVimrEiyYMK+t9X7lzM4AgsDwHDZYrrlW++vjYhq7Ta5bb i7RmEuPLtZleuAygMlTkCqBGHXffz3A7X46XTOVNzMyMlY8qpaOOwncQs/1s3HWt OTmBqslmxBSEs/NNutNlEzsPsgXK4tR6wRaqwiZnYxr9+saPUfNMXF7QAZ3RAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUe6gn05BFG++j+VgQLtkhfgGOxbowHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA D46Rft4Axr3iyfBWocGfs3ZWAVc7QGd29oiqDC+HxTyz4hEH3VliaJ7HzRTqe6VR JlrFTD/xcS9Ki8WDbhGc4O7vG0GqYQwgUH84j1/hgDwfgHIm3EjqKft/dUtjRHKh HhW8mbUi8IQFQ/t3RpUPRU+avzjTGdGdYtDMrKI9oTWpgV0J26oF3nhD5Sc+FYOI QjrPx5HuZb4DS3gpXiKwN81hWmtHos8MGNqsswAxTOSqQ6XPLsQz+iqegYBQvF6h IZDHimmzTMWhTns7FxsG09kbAvKz4muwylhaPd2ZybltMn1rsFkxPRcB+jhlCpHy itavojW6FJg/xfRCc3kNRw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:33:14 2026 by rpki-client