$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft File: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft (raw, json) Hash identifier: gKi6EiP2Rz+qYKDIGmFUPRZR7Las/mG4fKSW5j7VRr8= Subject key identifier: B6:EB:1B:38:CC:B5:0E:CC:55:FC:91:51:56:84:99:E9:57:B7:DC:F2 Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Certificate serial: 2E56E681EF8D676C881D1329F06FCCE1C8729F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft Manifest number: B1 Signing time: Mon 21 Sep 2026 08:10:45 +0000 Manifest this update: Mon 21 Sep 2026 08:05:45 +0000 Manifest next update: Tue 22 Sep 2026 10:33:45 +0000 Files and hashes: 1: 3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa (hash: 1ABPmYy3OMkXM6hUipNaZqxStdmGCObQYP+N6B1Qe1M=) 2: 3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa (hash: L5DhNHLrlxwctN9vqKE08S22O12JNR5Iz8LhoGk9LAI=) 3: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl (hash: rJpGlzB1Qlh+8tojqgieIKsZXIAy6Q9eIUNlQsgj3Tg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 10:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:56:e6:81:ef:8d:67:6c:88:1d:13:29:f0:6f:cc:e1:c8:72:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Validity Not Before: Sep 21 08:05:45 2026 GMT Not After : Sep 22 10:33:45 2026 GMT Subject: CN=B6EB1B38CCB50ECC55FC9151568499E957B7DCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:ac:21:3e:2e:43:b5:da:64:06:bc:02:6c: c6:a6:1e:56:5b:5c:5a:70:91:76:3b:21:11:ec:da: b8:dd:28:56:d2:94:fc:da:11:a7:81:d0:44:e7:de: 83:56:fc:0d:25:8a:54:40:3c:f2:15:47:d7:8e:8a: 52:ad:20:3d:9d:da:8f:98:e8:ab:d9:e0:62:aa:28: 3c:61:00:ec:70:c1:8e:dd:9f:c8:0b:20:eb:40:38: 11:fb:7c:ef:49:c0:79:41:a3:2f:e4:4a:42:3b:8d: d8:7c:1c:9c:bd:a2:1c:ef:f9:df:40:ce:b0:12:ec: c0:cb:c3:0d:0d:f8:ca:24:6f:fb:a1:74:08:9c:5f: bb:8e:b0:d7:13:fa:9c:00:10:91:df:ca:c0:39:cd: 64:56:7e:c2:76:cb:be:f6:e2:f6:07:4d:28:8f:ae: eb:3f:46:94:d5:fc:99:39:09:56:21:eb:c5:47:22: df:05:b0:66:18:12:f1:3b:3a:b0:94:3a:30:41:0e: 0a:ee:aa:9f:df:43:6a:a2:56:3d:41:37:ad:61:83: b0:49:56:4f:f1:69:c4:6f:96:2a:83:ba:e5:9b:16: d2:22:d6:eb:57:4b:84:cf:98:07:75:3d:78:76:c8: 01:29:ad:12:54:24:4e:57:2e:85:ab:01:2f:96:16: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EB:1B:38:CC:B5:0E:CC:55:FC:91:51:56:84:99:E9:57:B7:DC:F2 X509v3 Authority Key Identifier: keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:0c:7a:74:21:36:4d:65:b8:1d:33:22:7f:10:cb:bf:2f: b7:c8:58:46:d2:d6:fb:d5:83:1d:97:78:c2:32:06:18:d5:1d: 8f:5d:3c:ba:31:42:c6:e6:16:ae:4e:79:74:6e:d4:90:3b:6f: 37:17:5b:44:10:4e:53:67:2e:e1:9a:63:e1:04:72:7a:52:4f: 87:df:12:82:b6:d9:f6:7c:d8:59:53:2e:e5:84:30:63:11:92: 45:26:b2:0a:38:08:58:09:32:37:22:ad:e2:2d:34:bf:0c:75: 2b:c1:8d:11:c9:1b:26:de:2f:78:82:d4:2c:6c:f6:a0:02:f8: 47:ad:c7:33:e0:8c:23:4e:f2:1a:0f:b5:b4:51:6f:e0:b9:b0: e0:fb:ee:3f:e1:13:0b:30:e3:07:8e:9b:1c:2b:f6:f1:52:da: 7f:ac:df:80:49:c0:4b:49:8f:16:64:35:41:04:4b:ab:68:6d: 96:1f:5a:10:51:f5:44:81:d5:bc:13:77:e5:a1:88:cd:be:ff: 31:39:08:00:02:bf:21:4b:7e:3c:2b:37:c8:ef:78:39:b7:bd: 8d:c2:54:3a:c1:9c:73:3b:02:07:44:71:61:86:18:3b:7b:98: c7:ce:3c:4d:3d:69:8d:ed:6b:22:d0:46:d8:98:d9:d5:4e:0a: b6:0e:46:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITLlbmge+NZ2yIHRMp8G/M4chynzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0ZDU5ZjY2NWE2NjcwZGY1ZjFlYWQ2YWViMDFlNWY4MGQ1 MGYwY2EwMB4XDTI2MDkyMTA4MDU0NVoXDTI2MDkyMjEwMzM0NVowMzExMC8GA1UE AxMoQjZFQjFCMzhDQ0I1MEVDQzU1RkM5MTUxNTY4NDk5RTk1N0I3RENGMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOOOrCE+LkO12mQGvAJsxqYeVltc WnCRdjshEezauN0oVtKU/NoRp4HQROfeg1b8DSWKVEA88hVH146KUq0gPZ3aj5jo q9ngYqooPGEA7HDBjt2fyAsg60A4Eft870nAeUGjL+RKQjuN2HwcnL2iHO/530DO sBLswMvDDQ34yiRv+6F0CJxfu46w1xP6nAAQkd/KwDnNZFZ+wnbLvvbi9gdNKI+u 6z9GlNX8mTkJViHrxUci3wWwZhgS8Ts6sJQ6MEEOCu6qn99DaqJWPUE3rWGDsElW T/FpxG+WKoO65ZsW0iLW61dLhM+YB3U9eHbIASmtElQkTlcuhasBL5YWgmECAwEA AaOCAkcwggJDMB0GA1UdDgQWBBS26xs4zLUOzFX8kVFWhJnpV7fc8jAfBgNVHSME GDAWgBRNWfZlpmcN9fHq1q6wHl+A1Q8MoDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9kZWNkM2IyYy0yZjEyLTRiM2ItYTc3OS05ODljODc0ZTUz ZjQvMC80RDU5RjY2NUE2NjcwREY1RjFFQUQ2QUVCMDFFNUY4MEQ1MEYwQ0EwLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVFZuMlphWm5EZlh4NnRhdXNCNWZnTlVQ REtBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlY2QzYjJjLTJm MTItNGIzYi1hNzc5LTk4OWM4NzRlNTNmNC8wLzRENTlGNjY1QTY2NzBERjVGMUVB RDZBRUIwMUU1RjgwRDUwRjBDQTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnsQx6dCE2TWW4HTMifxDL vy+3yFhG0tb71YMdl3jCMgYY1R2PXTy6MULG5hauTnl0btSQO283F1tEEE5TZy7h mmPhBHJ6Uk+H3xKCttn2fNhZUy7lhDBjEZJFJrIKOAhYCTI3Iq3iLTS/DHUrwY0R yRsm3i94gtQsbPagAvhHrccz4IwjTvIaD7W0UW/gubDg++4/4RMLMOMHjpscK/bx Utp/rN+AScBLSY8WZDVBBEuraG2WH1oQUfVEgdW8E3floYjNvv8xOQgAAr8hS348 KzfI73g5t72NwlQ6wZxzOwIHRHFhhhg7e5jHzjxNPWmN7Wsi0EbYmNnVTgq2DkYb -----END CERTIFICATE-----Generated at Mon Sep 21 16:31:59 2026 by rpki-client