$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: dDUe3rufj2AGuLjO5OVF1IIQ2DZUgN2yGmqRek4CfXg= Subject key identifier: AC:30:49:35:16:58:AA:E2:68:08:1C:F6:2E:05:E6:59:C1:C6:F9:61 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 46F48173FF85C5149721A8A5C0CECDA42885EBB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0478 Signing time: Mon 09 Nov 2026 17:48:58 +0000 Manifest this update: Mon 09 Nov 2026 17:43:58 +0000 Manifest next update: Tue 10 Nov 2026 17:49:58 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 3: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: FvZA6z8JvvCkS1nPqXJC3087pdBTVcR71VK5yFjWEEM=) 4: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 5: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 6: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 7: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 8: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 9: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 10: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=) 11: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: H++jQnj84ZflF5Bk8Wa0q/o2Nn4Rjr+SR4fsDqy9gG0=) 12: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 13: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 17:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f4:81:73:ff:85:c5:14:97:21:a8:a5:c0:ce:cd:a4:28:85:eb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Nov 9 17:43:58 2026 GMT Not After : Nov 10 17:49:58 2026 GMT Subject: CN=AC3049351658AAE268081CF62E05E659C1C6F961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:fd:d0:fa:3e:3e:2e:41:1d:c7:fe:7d:9b: f3:63:94:2e:2c:b1:0e:e9:c3:5d:7c:96:9a:c8:55: 9d:e1:eb:9d:be:c2:d3:bd:78:d7:a4:e7:b5:6f:b1: ad:a9:76:b5:d8:be:2f:ea:16:b9:86:1f:54:a8:40: 62:22:89:bf:f4:ac:05:60:24:1d:fd:2f:c8:9c:cd: ec:f0:4b:dc:cd:e7:b6:86:06:0c:59:40:f7:80:6b: 37:58:79:32:3f:ab:66:e1:23:f1:d3:25:46:79:1e: f6:bc:55:29:a3:ba:6f:80:c2:16:2a:d1:04:5d:26: fa:20:c6:bb:2b:f5:35:02:f3:60:62:8c:0d:bf:98: 20:5f:6b:78:fe:0d:08:cd:c8:df:00:e5:22:ea:7b: 4e:99:7c:f6:39:53:dd:9d:5a:ab:77:88:e8:04:b3: dd:ed:91:d2:24:b5:47:6b:15:ae:a5:ae:a9:24:2f: 72:7b:b4:b4:bd:bf:ba:b2:62:eb:64:61:21:8d:1e: 36:08:90:b5:69:ac:e0:0a:2b:e9:e8:3f:fb:d7:1a: c6:41:d3:7d:20:5a:f1:67:26:e4:62:d2:64:5c:f9: 43:04:99:4e:ae:02:42:0a:56:0b:8d:91:1d:bc:76: fb:af:1e:36:17:5b:12:2e:11:58:f7:cd:b7:80:6b: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:49:35:16:58:AA:E2:68:08:1C:F6:2E:05:E6:59:C1:C6:F9:61 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:06:3d:d5:92:16:df:72:16:f4:52:f7:71:59:0b:1d:33:48: fe:b9:75:5c:41:36:f4:3b:f1:de:49:1b:8b:62:4b:dc:ff:76: cd:44:09:ac:5b:56:91:f8:e0:47:83:16:88:71:d1:a3:9d:52: 9d:2d:ee:e9:96:9e:29:ad:8d:ed:af:67:ab:34:f8:6a:bc:ca: d9:94:38:b9:65:12:f5:28:fd:62:07:fa:cd:17:69:44:52:b1: 94:73:ae:60:b9:4b:f5:af:2f:6d:35:0d:22:58:1d:36:15:0d: c7:2a:fe:9c:6d:b3:fd:c3:00:13:36:19:ed:47:4b:af:ad:e4: fd:04:1d:49:d8:a7:46:77:53:33:b0:7b:fe:9e:25:29:11:fc: 76:18:cd:b0:c0:2d:ca:55:1b:92:55:ea:cf:9d:5b:a6:6d:2c: 0b:7e:e5:ec:4b:fc:86:af:56:d7:fb:fd:84:ee:6c:07:df:02: f5:f3:6a:c4:40:f8:e9:8c:2c:f9:30:37:00:60:b7:a3:09:fe: d1:4c:2b:0c:19:01:fd:dc:bd:e0:65:26:3e:0f:5d:2f:ee:a5: 6e:4e:2e:4a:d4:0a:8e:29:e7:e6:50:fa:ec:97:ca:a2:d9:46: 48:92:91:05:6c:4f:21:76:2f:4d:13:45:50:6a:c9:65:c8:02: 22:a8:e0:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURvSBc/+FxRSXIailwM7NpCiF67cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjExMDkxNzQzNThaFw0yNjExMTAxNzQ5NThaMDMxMTAvBgNV BAMTKEFDMzA0OTM1MTY1OEFBRTI2ODA4MUNGNjJFMDVFNjU5QzFDNkY5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOm/3Q+j4+LkEdx/59m/NjlC4s sQ7pw118lprIVZ3h652+wtO9eNek57Vvsa2pdrXYvi/qFrmGH1SoQGIiib/0rAVg JB39L8iczezwS9zN57aGBgxZQPeAazdYeTI/q2bhI/HTJUZ5Hva8VSmjum+AwhYq 0QRdJvogxrsr9TUC82BijA2/mCBfa3j+DQjNyN8A5SLqe06ZfPY5U92dWqt3iOgE s93tkdIktUdrFa6lrqkkL3J7tLS9v7qyYutkYSGNHjYIkLVprOAKK+noP/vXGsZB 030gWvFnJuRi0mRc+UMEmU6uAkIKVguNkR28dvuvHjYXWxIuEVj3zbeAaypJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrDBJNRZYquJoCBz2LgXmWcHG+WEwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAY91ZIW33IW9FL3cVkL HTNI/rl1XEE29Dvx3kkbi2JL3P92zUQJrFtWkfjgR4MWiHHRo51SnS3u6ZaeKa2N 7a9nqzT4arzK2ZQ4uWUS9Sj9Ygf6zRdpRFKxlHOuYLlL9a8vbTUNIlgdNhUNxyr+ nG2z/cMAEzYZ7UdLr63k/QQdSdinRndTM7B7/p4lKRH8dhjNsMAtylUbklXqz51b pm0sC37l7Ev8hq9W1/v9hO5sB98C9fNqxED46Yws+TA3AGC3own+0UwrDBkB/dy9 4GUmPg9dL+6lbk4uStQKjinn5lD67JfKotlGSJKRBWxPIXYvTRNFUGrJZcgCIqjg Ng== -----END CERTIFICATE-----Generated at Tue Nov 10 07:05:05 2026 by rpki-client