$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft File: 238A11AE245357E72FEB39785C7BC03A973A44E1.mft (raw, json) Hash identifier: IG69GVwwmiXBMAdjTV8AzP2zZKIQH5gQRMp2AiK8LzU= Subject key identifier: E8:1C:0F:A3:1C:3B:79:BE:5F:6D:F8:A9:E0:57:0E:2D:50:FF:89:1D Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 30CED5D5786080F2E4557684CD5B817E81A54F5A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft Manifest number: 1E Signing time: Mon 21 Sep 2026 19:06:17 +0000 Manifest this update: Mon 21 Sep 2026 19:01:17 +0000 Manifest next update: Tue 22 Sep 2026 22:08:17 +0000 Files and hashes: 1: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: b1a3Jjh6OCqVQv3BFg0/BsI0AK5ATcpf4fi1Bo5nYzQ=) 2: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: b5Idj5t7tuqn2ddvsBcRUBrXdLrx0alL1vLbTdmfpO0=) 3: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: rD43mzOj6hk9wZ+wkrs+0gGyJTyKVoY8YSNdSNkT6ww=) 4: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (hash: wLRhFi868Yq6U7aKu4r+Lg3ExFDFh+DUjWR9qvPNGKo=) 5: 238A11AE245357E72FEB39785C7BC03A973A44E1.crl (hash: ixbmlQwkbvRto9R2GRGXOiD7V4FglHNPTFllxI6zFhs=) 6: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: XNORQmyv4cfPM5H0Kk051iHyUovOT9YKU3T8ljTmEOg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ce:d5:d5:78:60:80:f2:e4:55:76:84:cd:5b:81:7e:81:a5:4f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 21 19:01:17 2026 GMT Not After : Sep 22 22:08:17 2026 GMT Subject: CN=E81C0FA31C3B79BE5F6DF8A9E0570E2D50FF891D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:f0:41:f2:16:3e:99:cb:2f:d9:ea:ca:b2: fc:a5:ed:f5:26:64:ca:a1:93:fd:ff:f1:02:a9:d6: 2f:ef:ec:f1:0d:ea:29:79:6e:ec:dc:29:a3:d9:80: 1e:c2:11:45:68:b6:6d:45:60:b3:be:f1:38:3e:47: 55:f0:60:73:94:fb:f2:a0:f2:15:bc:6d:9e:2c:01: b2:f4:b5:eb:0f:81:c3:80:8f:a3:7b:6f:9d:72:a8: 67:61:d7:52:e4:c7:b1:73:07:89:9e:55:46:38:c3: 41:db:d1:df:44:5b:6b:21:32:f4:88:e5:9f:aa:ab: 18:83:d6:9a:8c:f3:65:c5:cf:ab:fb:3f:99:25:f8: 6e:b9:dc:15:c1:f3:41:8e:89:d2:ca:e7:11:f5:f0: 47:b2:80:18:34:f1:6b:e3:ec:38:fa:5e:d0:83:4c: 74:10:5b:97:a6:99:fb:38:0a:23:50:fe:df:95:a4: 79:83:f0:2d:3d:8d:52:60:eb:11:49:54:ba:9e:19: 08:0b:ac:c7:bb:7a:aa:d5:95:f6:5d:a9:ed:7e:e4: e1:e1:c1:5a:77:09:99:3e:bf:72:57:bb:d2:df:93: 00:54:ee:10:ea:d4:6f:97:a5:e8:b3:b9:97:5c:ce: fa:a3:55:81:15:27:85:97:f0:b7:26:ce:48:d2:4c: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:0F:A3:1C:3B:79:BE:5F:6D:F8:A9:E0:57:0E:2D:50:FF:89:1D X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fa:ed:85:d8:b2:b6:c6:58:67:ff:38:44:45:62:11:98:dd: b4:97:23:5e:e3:47:c7:33:c2:0c:86:01:db:fe:ef:1a:e8:e1: 6e:d9:1e:50:b1:41:dd:80:0c:05:ff:6b:7f:85:19:01:a7:33: cf:cf:56:11:49:7f:18:59:3f:0a:54:1b:2e:2b:56:01:66:6c: 68:0c:8f:0b:b6:41:36:32:6b:da:79:b7:6e:12:50:2f:d7:10: fe:fb:76:38:9e:3e:68:02:8b:bf:1b:90:d1:8d:29:b5:d5:aa: d8:b1:f0:a1:34:7b:54:09:7b:c0:50:17:21:51:7b:95:3e:76: 10:d2:57:e7:45:b0:9a:f6:88:9b:c4:21:f2:87:ef:e8:e1:ce: 82:ae:9a:69:2f:69:1a:7d:68:ed:35:f3:68:d4:11:eb:be:4a: 4c:cf:fb:6f:98:da:61:28:f9:e3:dc:5b:1d:7a:c9:83:5a:72: e0:11:e8:a4:ef:d3:b0:99:73:9a:4d:4d:35:80:a2:9b:29:5d: dc:18:fa:12:a4:a0:31:14:40:24:82:1a:44:ce:e6:75:82:44: 93:80:a5:ce:71:b6:bc:9b:8d:f2:e5:28:a3:e5:77:d7:d4:bb: 0f:09:bd:95:bc:5f:c2:e2:b7:28:e5:58:1d:14:c3:4c:c1:86: d8:4d:b8:25 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMM7V1XhggPLkVXaEzVuBfoGlT1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MjExOTAxMTdaFw0yNjA5MjIyMjA4MTdaMDMxMTAvBgNV BAMTKEU4MUMwRkEzMUMzQjc5QkU1RjZERjhBOUUwNTcwRTJENTBGRjg5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2PBB8hY+mcsv2erKsvyl7fUm ZMqhk/3/8QKp1i/v7PEN6il5buzcKaPZgB7CEUVotm1FYLO+8Tg+R1XwYHOU+/Kg 8hW8bZ4sAbL0tesPgcOAj6N7b51yqGdh11Lkx7FzB4meVUY4w0Hb0d9EW2shMvSI 5Z+qqxiD1pqM82XFz6v7P5kl+G653BXB80GOidLK5xH18EeygBg08Wvj7Dj6XtCD THQQW5emmfs4CiNQ/t+VpHmD8C09jVJg6xFJVLqeGQgLrMe7eqrVlfZdqe1+5OHh wVp3CZk+v3JXu9LfkwBU7hDq1G+XpeizuZdczvqjVYEVJ4WX8LcmzkjSTCT1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6BwPoxw7eb5fbfip4FcOLVD/iR0wHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS81LzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBv+u2F 2LK2xlhn/zhERWIRmN20lyNe40fHM8IMhgHb/u8a6OFu2R5QsUHdgAwF/2t/hRkB pzPPz1YRSX8YWT8KVBsuK1YBZmxoDI8LtkE2MmvaebduElAv1xD++3Y4nj5oAou/ G5DRjSm11arYsfChNHtUCXvAUBchUXuVPnYQ0lfnRbCa9oibxCHyh+/o4c6Crppp L2kafWjtNfNo1BHrvkpMz/tvmNphKPnj3FsdesmDWnLgEeik79OwmXOaTU01gKKb KV3cGPoSpKAxFEAkghpEzuZ1gkSTgKXOcba8m43y5Sij5XfX1LsPCb2VvF/C4rco 5VgdFMNMwYbYTbgl -----END CERTIFICATE-----Generated at Tue Sep 22 01:14:36 2026 by rpki-client