$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: v5LluvrDcrOL4QmA4+GHYt4Hs0Pl8HBorcq2B8lsa48= Subject key identifier: B2:22:B2:0C:C2:8D:2D:52:96:00:E6:D2:77:3A:ED:F3:A9:30:24:31 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 65AF1D1DA751DA6E9B6C55A6C7AF7861650D81F7 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 0656 Signing time: Mon 21 Sep 2026 22:04:21 +0000 Manifest this update: Mon 21 Sep 2026 21:59:21 +0000 Manifest next update: Tue 22 Sep 2026 23:36:21 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: RfRRtyI73a9fwV0XaAIAozX3NvK+WzfArRO7Se3CnOA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:af:1d:1d:a7:51:da:6e:9b:6c:55:a6:c7:af:78:61:65:0d:81:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Sep 21 21:59:21 2026 GMT Not After : Sep 22 23:36:21 2026 GMT Subject: CN=B222B20CC28D2D529600E6D2773AEDF3A9302431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8f:16:b5:c7:bc:e6:13:49:c8:ff:4b:39:70: 2a:c6:83:42:ea:14:a7:a0:40:49:74:9c:02:16:56: fa:53:57:38:d6:ce:86:b8:8f:b3:74:3c:f6:b2:c1: 84:40:3c:ba:40:e6:4a:25:ad:d5:4e:12:1a:b3:a4: ac:81:42:d1:f6:b0:c1:be:6e:02:81:b7:15:2e:d3: 88:b6:aa:12:25:d3:2f:14:04:09:92:67:5b:52:ad: d4:44:a7:65:7c:79:c1:9e:db:41:00:86:10:8d:44: 74:40:2c:a3:03:bf:ce:d4:3e:4d:84:5c:3d:07:ee: 90:c0:17:3e:b8:71:ad:80:6a:8e:8c:58:39:6d:eb: ad:6f:ea:13:58:8e:d0:06:41:97:e4:4e:82:50:03: 71:cb:c6:f3:4e:4a:bb:06:eb:c9:83:76:af:32:5f: e2:96:c2:6c:e6:14:55:99:c4:6a:f7:15:61:eb:f3: de:3b:0f:d3:c6:30:e2:12:11:95:17:c4:ef:b2:21: 50:e0:b0:a8:8a:f4:0e:f7:ac:4a:d2:a3:89:d9:93: 59:ce:62:99:d6:5a:a7:25:b3:75:33:2b:c4:d2:cc: 10:48:1a:5a:c6:34:05:98:bf:16:8b:d0:04:ae:22: 19:4a:43:bd:1b:70:23:0d:d3:ab:00:5e:2d:19:23: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:22:B2:0C:C2:8D:2D:52:96:00:E6:D2:77:3A:ED:F3:A9:30:24:31 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4f:2b:01:48:56:d6:63:30:6b:4c:db:f5:15:cc:cc:43:e1: e3:82:0d:92:63:3a:4e:65:8a:73:18:00:c9:b9:76:14:84:e7: 1a:f6:ee:27:93:36:f5:76:2d:7a:16:e1:0f:79:31:5f:f7:38: 29:4a:f4:d4:32:2a:34:36:75:f7:57:a5:8e:0f:62:4a:d1:6d: 33:04:15:36:97:fe:fd:71:a2:10:3d:f8:bf:80:50:72:82:ee: 93:8a:90:aa:a3:78:ee:b9:db:37:f1:61:77:5d:ef:0f:3d:0f: 6a:ad:d9:83:e8:16:c4:04:21:2e:a6:a2:b6:e8:f7:91:6f:1f: b0:5f:a8:34:de:1f:f5:5e:3d:14:85:e6:98:6d:59:79:6d:e9: fd:6c:a5:85:b7:cb:c2:a3:6e:d7:8f:a1:8b:49:40:ae:92:e9: 42:22:42:ba:c5:c7:4c:a0:59:0b:1f:bb:1b:73:7c:e0:f0:4c: 2f:39:1a:83:72:b3:58:a7:8d:60:6e:0d:43:e5:18:13:7e:89: 2c:c8:96:42:f0:1b:7b:8d:11:88:8b:bd:ee:8f:b9:8a:d3:92: 55:eb:10:ae:fc:8f:94:05:ee:ed:dc:53:dd:93:93:e4:b4:eb: 60:25:71:fb:7e:a4:92:fe:ee:fe:e6:0c:06:38:2a:b4:88:43: 25:0c:15:6e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUZa8dHadR2m6bbFWmx694YWUNgfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNjA5MjEyMTU5MjFaFw0yNjA5MjIyMzM2MjFaMDMxMTAvBgNV BAMTKEIyMjJCMjBDQzI4RDJENTI5NjAwRTZEMjc3M0FFREYzQTkzMDI0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCajxa1x7zmE0nI/0s5cCrGg0Lq FKegQEl0nAIWVvpTVzjWzoa4j7N0PPaywYRAPLpA5kolrdVOEhqzpKyBQtH2sMG+ bgKBtxUu04i2qhIl0y8UBAmSZ1tSrdREp2V8ecGe20EAhhCNRHRALKMDv87UPk2E XD0H7pDAFz64ca2Aao6MWDlt661v6hNYjtAGQZfkToJQA3HLxvNOSrsG68mDdq8y X+KWwmzmFFWZxGr3FWHr8947D9PGMOISEZUXxO+yIVDgsKiK9A73rErSo4nZk1nO YpnWWqcls3UzK8TSzBBIGlrGNAWYvxaL0ASuIhlKQ70bcCMN06sAXi0ZI1TBAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUsiKyDMKNLVKWAObSdzrt86kwJDEwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS08rAUhW1mMwa0zb9RXMzEPh44INkmM6 TmWKcxgAybl2FITnGvbuJ5M29XYtehbhD3kxX/c4KUr01DIqNDZ191eljg9iStFt MwQVNpf+/XGiED34v4BQcoLuk4qQqqN47rnbN/Fhd13vDz0Paq3Zg+gWxAQhLqai tuj3kW8fsF+oNN4f9V49FIXmmG1ZeW3p/WylhbfLwqNu14+hi0lArpLpQiJCusXH TKBZCx+7G3N84PBMLzkag3KzWKeNYG4NQ+UYE36JLMiWQvAbe40RiIu97o+5itOS VesQrvyPlAXu7dxT3ZOT5LTrYCVx+36kkv7u/uYMBjgqtIhDJQwVbg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:19:26 2026 by rpki-client