$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: LmpeZLN6rtiuLYdGXXlxQSjgD7XOhNq0HKFv0t4o8NE= Subject key identifier: C9:88:E0:68:72:79:CC:C1:D8:B5:5C:48:6F:7E:AB:65:20:D3:D3:31 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 0549B11C86ADAD3A1CB01570745F5FCE7F157000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0436 Signing time: Tue 22 Sep 2026 10:16:57 +0000 Manifest this update: Tue 22 Sep 2026 10:11:57 +0000 Manifest next update: Wed 23 Sep 2026 12:34:57 +0000 Files and hashes: 1: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 3: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: fc3aQuDgY4SMjtoZe8jVXsriQtgqmWzsuWLIwrLMG+Q=) 4: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 5: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 6: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 7: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 8: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 9: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 10: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 11: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 12: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=) 13: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 12:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:49:b1:1c:86:ad:ad:3a:1c:b0:15:70:74:5f:5f:ce:7f:15:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Sep 22 10:11:57 2026 GMT Not After : Sep 23 12:34:57 2026 GMT Subject: CN=C988E0687279CCC1D8B55C486F7EAB6520D3D331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:3a:02:8e:c1:1c:10:d7:c7:8c:a3:d2:22: 4a:32:99:43:d3:1c:db:bb:d8:0d:b7:83:bb:da:f9: 15:0e:6f:0a:fe:d4:7f:ba:5c:d1:ae:5c:61:c1:7d: dd:c8:1f:e5:d6:62:f1:84:fb:58:a8:33:90:61:13: 29:ea:ca:e7:8c:9f:6e:0a:30:5a:05:3b:c8:20:c7: 73:c7:91:2b:f7:7c:f6:ad:7f:85:cf:24:a1:cc:f8: 99:1c:a1:01:d4:45:8d:30:71:2d:e6:e9:75:99:0b: 8a:21:bf:22:03:1d:e3:da:3f:ee:6c:47:22:76:b3: a9:da:25:38:93:06:c5:31:29:8d:38:da:45:af:67: 58:3e:75:65:75:70:14:e7:13:6b:23:87:cb:99:56: 89:a7:b6:70:7b:9e:8e:51:ca:2f:5b:c2:a5:4e:5b: f6:17:cd:9c:74:d6:a0:aa:52:dd:0b:f2:8f:fe:26: 64:09:60:11:18:62:6c:9f:3e:25:24:8c:e2:f7:e0: c6:b3:ad:b0:7b:1f:83:d6:ff:9e:fd:e2:35:e9:24: ed:19:ea:22:73:4a:6c:bb:b7:4e:ed:9c:11:a1:73: e4:72:7a:d8:7b:36:58:83:6f:57:13:16:58:f7:7a: a0:8c:ac:bc:17:b4:e0:2a:7d:f7:78:12:15:65:34: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:E0:68:72:79:CC:C1:D8:B5:5C:48:6F:7E:AB:65:20:D3:D3:31 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bc:10:04:5c:06:c1:89:6c:90:dc:69:25:6d:ba:47:85:35: 1d:e7:9a:06:f5:b7:7c:6c:5a:b6:5f:23:6b:d7:b9:b9:b9:ce: b3:ab:d1:27:69:13:06:ac:35:a8:fc:13:20:47:60:82:6a:da: 5b:bd:7d:03:7b:a4:09:97:cc:a3:f2:d4:7e:91:ca:32:34:dd: f2:06:be:82:93:d4:7b:b2:c3:54:df:61:ab:c4:af:92:38:cb: 18:17:fe:5c:48:03:19:09:32:9b:d2:30:7e:af:70:d1:3b:9e: 75:22:36:ae:2e:66:43:1f:22:7e:1e:be:c8:b1:1c:3c:65:f4: e2:18:78:07:9e:9b:4d:00:7e:87:3f:85:2c:a8:a0:ba:1f:78: 39:a8:b6:93:3f:1e:3e:ad:df:7a:8a:4a:9a:19:da:06:6f:d4: bb:9f:2b:0c:23:f6:51:d2:de:6a:71:84:db:03:ee:a7:46:4a: ae:9b:5d:45:d0:6f:0a:33:90:28:2e:e6:52:b6:a0:2a:29:ff: f8:fa:e9:95:76:0f:5d:a1:51:73:79:2a:13:23:20:fd:c0:14: 90:e2:61:9f:ce:51:26:15:11:7f:f9:1a:f5:ba:11:c3:4f:ce: 84:d0:f9:91:f0:b7:be:8f:af:47:ea:80:08:a9:2b:66:7a:b1: 3e:1e:c6:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBUmxHIatrTocsBVwdF9fzn8VcAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjA5MjIxMDExNTdaFw0yNjA5MjMxMjM0NTdaMDMxMTAvBgNV BAMTKEM5ODhFMDY4NzI3OUNDQzFEOEI1NUM0ODZGN0VBQjY1MjBEM0QzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulDoCjsEcENfHjKPSIkoymUPT HNu72A23g7va+RUObwr+1H+6XNGuXGHBfd3IH+XWYvGE+1ioM5BhEynqyueMn24K MFoFO8ggx3PHkSv3fPatf4XPJKHM+JkcoQHURY0wcS3m6XWZC4ohvyIDHePaP+5s RyJ2s6naJTiTBsUxKY042kWvZ1g+dWV1cBTnE2sjh8uZVomntnB7no5Ryi9bwqVO W/YXzZx01qCqUt0L8o/+JmQJYBEYYmyfPiUkjOL34MazrbB7H4PW/5794jXpJO0Z 6iJzSmy7t07tnBGhc+Ryeth7NliDb1cTFlj3eqCMrLwXtOAqffd4EhVlNKiZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyYjgaHJ5zMHYtVxIb36rZSDT0zEwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7wQBFwGwYlskNxpJW26 R4U1HeeaBvW3fGxatl8ja9e5ubnOs6vRJ2kTBqw1qPwTIEdggmraW719A3ukCZfM o/LUfpHKMjTd8ga+gpPUe7LDVN9hq8SvkjjLGBf+XEgDGQkym9Iwfq9w0TuedSI2 ri5mQx8ifh6+yLEcPGX04hh4B56bTQB+hz+FLKiguh94Oai2kz8ePq3feopKmhna Bm/Uu58rDCP2UdLeanGE2wPup0ZKrptdRdBvCjOQKC7mUragKin/+PrplXYPXaFR c3kqEyMg/cAUkOJhn85RJhURf/ka9boRw0/OhND5kfC3vo+vR+qACKkrZnqxPh7G wA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:40:17 2026 by rpki-client