$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft File: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft (raw, json) Hash identifier: 1iilcUAKUEEs0Pabq3D+svhjudqZOeaNNllNyNRAI6E= Subject key identifier: 81:2C:5B:33:69:92:41:7E:91:FE:91:BF:83:D2:4D:30:77:78:9B:98 Authority key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Certificate issuer: /CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Certificate serial: 68FE9CE952DF902A6CFED8A706289E235C66BEA8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft Manifest number: 1E Signing time: Mon 21 Sep 2026 19:06:16 +0000 Manifest this update: Mon 21 Sep 2026 19:01:16 +0000 Manifest next update: Tue 22 Sep 2026 22:08:16 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: WbkLmPY7vquDS69dIt63nnAZsib0q7kTLNkqlvd3rPA=) 2: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl (hash: TgI7vJs84PHpoQtD0bnv9Wh4wxe5iVdgjKgdnttHlzw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fe:9c:e9:52:df:90:2a:6c:fe:d8:a7:06:28:9e:23:5c:66:be:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Validity Not Before: Sep 21 19:01:16 2026 GMT Not After : Sep 22 22:08:16 2026 GMT Subject: CN=812C5B336992417E91FE91BF83D24D3077789B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:01:e6:63:f9:7f:7c:e3:63:68:b8:98:56: 2c:f1:41:77:89:7b:a3:6a:f2:96:aa:83:89:ea:45: 60:87:86:ea:c5:3f:54:49:1b:eb:e4:89:93:67:c0: 4b:99:54:fd:7f:bd:95:36:6a:7f:19:62:03:d4:a4: 31:7b:fe:56:23:db:31:85:87:0d:6b:46:8a:8d:75: 32:6a:45:44:29:29:86:81:b6:c0:4d:83:e2:03:74: be:2d:21:99:d9:6c:59:fb:59:5b:9d:30:e1:c5:8b: 07:5a:3b:29:37:8d:fc:e6:a5:cc:1c:88:d0:e2:61: 36:9c:c8:ae:4f:09:19:9f:96:dc:fc:6f:32:c9:ae: 0e:65:d1:0b:92:5d:dc:64:f5:1c:fc:42:a0:3c:fe: 08:8a:f1:bf:bf:50:51:1c:cf:3d:83:29:f3:f2:75: 78:87:ce:b6:f6:52:34:cf:54:b3:b4:83:0a:90:37: 02:85:e0:22:79:41:42:b3:1f:61:78:95:55:17:01: 83:d0:53:ee:e0:58:91:7d:92:a9:2f:69:7a:a6:60: 5a:a3:87:16:25:27:6d:68:04:b0:fe:67:21:f1:95: cf:29:cf:83:64:38:0d:a6:8b:dc:47:de:64:8f:04: 64:96:a6:8f:73:16:cd:26:db:19:33:e4:73:61:97: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2C:5B:33:69:92:41:7E:91:FE:91:BF:83:D2:4D:30:77:78:9B:98 X509v3 Authority Key Identifier: keyid:38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:da:7c:87:d8:11:36:88:07:75:3d:a3:4e:1a:ee:e4:fe:71: b0:f8:50:98:b1:18:5f:00:d7:1d:aa:d6:34:5b:91:68:11:18: 41:4a:7f:b9:92:7c:b8:85:09:af:0f:2b:64:e7:2f:34:14:3b: 5f:e8:a5:b3:c2:8a:4a:6a:6a:f2:e8:21:d7:39:98:ba:ce:bf: 26:cd:d0:ce:5e:4a:a9:2a:bb:c2:38:e4:4e:cf:80:13:2a:79: 31:72:8a:b9:0d:f7:92:df:e9:1f:88:2e:17:8b:b4:bd:86:aa: ed:4e:93:f6:2d:5c:ca:4d:42:41:07:3e:21:57:6c:9e:55:36: dc:62:a6:6b:60:1d:c5:3a:5b:d7:a0:69:d3:f7:36:a4:3e:f0: 53:3b:e8:92:7e:cf:a3:d5:03:fc:a6:32:5d:c7:d7:2b:8d:d7: f9:38:46:bb:c4:b4:f3:c5:17:01:e9:99:e5:ec:03:68:c9:78: d2:bd:2b:06:12:97:6f:29:02:d1:15:f6:e0:30:d8:64:76:90: c7:d5:dd:07:4c:05:74:bb:0f:60:35:ce:08:0b:ae:da:09:4e: f1:b1:fc:15:bc:c1:a2:d9:ea:13:f9:e3:c3:8d:7f:00:2d:1f: 2a:a6:e8:18:48:1f:e0:4a:64:df:b3:09:d3:a2:6f:a0:b5:d2: 8d:4f:f2:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaP6c6VLfkCps/tinBiieI1xmvqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1 QkIzNjBFOTAeFw0yNjA5MjExOTAxMTZaFw0yNjA5MjIyMjA4MTZaMDMxMTAvBgNV BAMTKDgxMkM1QjMzNjk5MjQxN0U5MUZFOTFCRjgzRDI0RDMwNzc3ODlCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2gHmY/l/fONjaLiYVizxQXeJ e6Nq8paqg4nqRWCHhurFP1RJG+vkiZNnwEuZVP1/vZU2an8ZYgPUpDF7/lYj2zGF hw1rRoqNdTJqRUQpKYaBtsBNg+IDdL4tIZnZbFn7WVudMOHFiwdaOyk3jfzmpcwc iNDiYTacyK5PCRmfltz8bzLJrg5l0QuSXdxk9Rz8QqA8/giK8b+/UFEczz2DKfPy dXiHzrb2UjTPVLO0gwqQNwKF4CJ5QUKzH2F4lVUXAYPQU+7gWJF9kqkvaXqmYFqj hxYlJ21oBLD+ZyHxlc8pz4NkOA2mi9xH3mSPBGSWpo9zFs0m2xkz5HNhlz7XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgSxbM2mSQX6R/pG/g9JNMHd4m5gwHwYDVR0j BBgwFoAUOJTZPYe6udCtmPKm/0PxRluzYOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzIvMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1QkIzNjBFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zODk0RDkzRDg3QkFCOUQwQUQ5OEYyQTZG RjQzRjE0NjVCQjM2MEU5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS8yLzM4OTREOTNE ODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJCMzYwRTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL2nyH 2BE2iAd1PaNOGu7k/nGw+FCYsRhfANcdqtY0W5FoERhBSn+5kny4hQmvDytk5y80 FDtf6KWzwopKamry6CHXOZi6zr8mzdDOXkqpKrvCOOROz4ATKnkxcoq5DfeS3+kf iC4Xi7S9hqrtTpP2LVzKTUJBBz4hV2yeVTbcYqZrYB3FOlvXoGnT9zakPvBTO+iS fs+j1QP8pjJdx9crjdf5OEa7xLTzxRcB6Znl7ANoyXjSvSsGEpdvKQLRFfbgMNhk dpDH1d0HTAV0uw9gNc4IC67aCU7xsfwVvMGi2eoT+ePDjX8ALR8qpugYSB/gSmTf swnTom+gtdKNT/KZ -----END CERTIFICATE-----Generated at Tue Sep 22 12:01:40 2026 by rpki-client