$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft File: 379234C5E71F2624C3A35F324BC6732473DEF7D4.mft (raw, json) Hash identifier: Brh6BCf/TnkuAmr2G7iIhkTJJziJNpmgHj1QlBL1JAo= Subject key identifier: 68:01:E9:7A:77:68:10:CE:A5:83:2C:1B:66:60:E9:3C:E0:71:3F:D6 Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 2F5ACFBD46FCB5DDCA5D3F2A880231CBE922CB5B Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft Manifest number: 20 Signing time: Tue 22 Sep 2026 06:47:28 +0000 Manifest this update: Tue 22 Sep 2026 06:42:28 +0000 Manifest next update: Wed 23 Sep 2026 07:15:28 +0000 Files and hashes: 1: 326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa (hash: 6pqnMmr7+bNaS8ZFVOFF0jbH70Kf/THIum4De2bpy9w=) 2: 326130623a346530373a326232303a3a2f34342d3434203d3e20323139333331.roa (hash: XCdBR5A/zD17d/EtlBzMKZNZWUKvbnbyuzYMF7mStUg=) 3: 379234C5E71F2624C3A35F324BC6732473DEF7D4.crl (hash: 5m9BSTjOn2hkFTBZG5kS8lKzkGD0EzYm1dhaujmjscs=) 4: 326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa (hash: loyhwL3pSNC/lKJ6tVn3vsv+juNVKmavfgHP3HNEMhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:cf:bd:46:fc:b5:dd:ca:5d:3f:2a:88:02:31:cb:e9:22:cb:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 22 06:42:28 2026 GMT Not After : Sep 23 07:15:28 2026 GMT Subject: CN=6801E97A776810CEA5832C1B6660E93CE0713FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:c9:8d:52:97:da:29:1a:7d:66:07:03:0c: e1:cd:be:e8:2d:f7:33:c6:6e:80:04:db:17:dc:7c: b9:c7:4a:11:ec:df:6b:f6:c4:a0:fb:ac:e5:49:ca: fd:7d:cc:f7:ed:32:14:3c:bc:11:36:e5:f5:e0:e4: 8f:59:44:c3:cd:27:8d:3a:4d:d0:c9:b7:1d:df:86: b9:25:d4:5a:f8:e7:10:63:6e:22:b0:c4:af:9e:6b: 3e:df:6c:98:ad:f6:2e:fa:37:80:0e:57:f6:4e:c0: 47:3f:b4:85:c6:0d:a2:6b:25:f8:7f:e2:af:4b:02: 5f:5e:c9:35:b6:8f:83:06:62:86:07:e8:a6:84:a0: 2d:53:3d:65:d3:4a:3a:ed:b3:67:bc:3b:8a:6e:37: 47:28:5f:d9:0f:ed:4d:81:b6:e9:e3:ff:ea:0d:eb: 6d:90:72:3e:2a:36:b3:72:e0:b2:84:ba:53:44:c6: 80:97:68:af:03:25:60:ce:77:9c:c5:1d:b6:ed:c5: 2e:22:83:3d:fb:7f:33:b9:b3:f8:ae:b5:2f:9d:41: 70:c2:05:36:f4:2c:39:d5:bb:d2:b8:c1:b4:58:27: 1d:af:e4:c8:16:cd:4f:5c:1d:fa:ef:37:26:e2:ff: 29:90:9e:52:a9:fa:8f:aa:98:ea:e6:fe:57:a5:d4: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:E9:7A:77:68:10:CE:A5:83:2C:1B:66:60:E9:3C:E0:71:3F:D6 X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:38:16:a8:07:49:d4:12:3f:1c:6e:14:c6:94:6a:b1:0c:f1: 90:96:b1:2e:a9:e8:86:84:86:83:27:b2:5f:6e:5e:4f:18:2a: 7c:61:29:75:2e:0e:99:91:8b:8d:6e:fb:68:57:7d:2a:c1:b6: 1b:29:1a:9e:fd:43:aa:57:31:25:60:47:25:72:21:da:c1:fc: 2a:f5:e6:a2:7c:c7:21:da:a2:60:06:2f:f8:17:69:d1:10:2e: c4:f5:d2:55:7f:66:75:c2:ae:9d:8d:a3:68:dc:99:b1:1d:21: 58:a5:50:a3:54:71:5e:6b:69:84:47:b5:e5:58:08:d2:7f:4f: 14:46:dc:fb:eb:8e:c6:d2:cb:90:4c:fa:7f:cb:0a:63:dd:19: b5:70:8c:c3:1a:c1:97:fe:f5:bf:bc:ec:25:b7:ff:5a:5e:15: c1:87:cc:14:da:d8:ee:47:54:64:58:4f:7e:bb:3c:2a:c4:65: 74:b0:c9:55:70:a5:01:95:da:b9:c6:f8:a0:3b:d6:61:3c:a6: 44:5b:d8:c3:28:b5:99:24:dc:7c:52:56:f3:1a:77:a9:b2:cd: 52:9b:f4:a4:bf:b8:c0:32:83:78:37:dc:3d:7f:b2:6a:b1:60: 69:0a:5e:69:0d:eb:4d:c3:54:fb:df:6c:ba:89:33:8f:b0:ec: 9e:92:51:78 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUL1rPvUb8td3KXT8qiAIxy+kiy1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MjIwNjQyMjhaFw0yNjA5MjMwNzE1MjhaMDMxMTAvBgNV BAMTKDY4MDFFOTdBNzc2ODEwQ0VBNTgzMkMxQjY2NjBFOTNDRTA3MTNGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJ8mNUpfaKRp9ZgcDDOHNvugt 9zPGboAE2xfcfLnHShHs32v2xKD7rOVJyv19zPftMhQ8vBE25fXg5I9ZRMPNJ406 TdDJtx3fhrkl1Fr45xBjbiKwxK+eaz7fbJit9i76N4AOV/ZOwEc/tIXGDaJrJfh/ 4q9LAl9eyTW2j4MGYoYH6KaEoC1TPWXTSjrts2e8O4puN0coX9kP7U2Btunj/+oN 622Qcj4qNrNy4LKEulNExoCXaK8DJWDOd5zFHbbtxS4igz37fzO5s/iutS+dQXDC BTb0LDnVu9K4wbRYJx2v5MgWzU9cHfrvNybi/ymQnlKp+o+qmOrm/lel1B3PAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUaAHpendoEM6lgywbZmDpPOBxP9YwHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjkwMDNlYy1m YTM1LTQ5NzktOWFjOC1lMzBiZTAwNTIxNjMvMS8zNzkyMzRDNUU3MUYyNjI0QzNB MzVGMzI0QkM2NzMyNDczREVGN0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzgWqAdJ1BI/HG4UxpRq sQzxkJaxLqnohoSGgyeyX25eTxgqfGEpdS4OmZGLjW77aFd9KsG2Gykanv1Dqlcx JWBHJXIh2sH8KvXmonzHIdqiYAYv+Bdp0RAuxPXSVX9mdcKunY2jaNyZsR0hWKVQ o1RxXmtphEe15VgI0n9PFEbc++uOxtLLkEz6f8sKY90ZtXCMwxrBl/71v7zsJbf/ Wl4VwYfMFNrY7kdUZFhPfrs8KsRldLDJVXClAZXaucb4oDvWYTymRFvYwyi1mSTc fFJW8xp3qbLNUpv0pL+4wDKDeDfcPX+yarFgaQpeaQ3rTcNU+99suokzj7DsnpJR eA== -----END CERTIFICATE-----Generated at Tue Sep 22 09:33:01 2026 by rpki-client