$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft File: BA8265B3E7B7C69E093A2C17538206A387735430.mft (raw, json) Hash identifier: 3Jl37u+UqAZHboVG7nG31KGEO4CZouVQnF8jsf2juYk= Subject key identifier: 07:E8:15:35:A7:5B:36:F3:93:00:93:C1:94:E3:16:62:EA:87:80:C1 Authority key identifier: BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 Certificate issuer: /CN=BA8265B3E7B7C69E093A2C17538206A387735430 Certificate serial: 5C18207DDD4B21916571D3908F1D590B898C7931 Authority info access: rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft Manifest number: 2B Signing time: Sun 15 Nov 2026 12:01:52 +0000 Manifest this update: Sun 15 Nov 2026 11:56:52 +0000 Manifest next update: Mon 16 Nov 2026 14:48:52 +0000 Files and hashes: 1: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: KWAJxLous/FJWMVgJmJnGgVitA2Dvpz0bBRnVwm5fg8=) 2: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: H5Wr1psOU24iM5xEQpZOrGler3AwKDy3LxebwRPbQEs=) 3: 326131333a633863343a373530303a3a2f34302d3430203d3e20323139343138.roa (hash: cCyLA9vauchZ/HYwN55ye1GSS197bn77EM67aAcuMdU=) 4: BA8265B3E7B7C69E093A2C17538206A387735430.crl (hash: S+ZfnrCsB6HLNs5qJmBOZKjsC/QM/lxF8yMk0+5NKFc=) 5: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: or7wCAMWjHZYCAGRq2C2X4rletz/gXy3rx8p8GG5MWc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.crl rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:18:20:7d:dd:4b:21:91:65:71:d3:90:8f:1d:59:0b:89:8c:79:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA8265B3E7B7C69E093A2C17538206A387735430 Validity Not Before: Nov 15 11:56:52 2026 GMT Not After : Nov 16 14:48:52 2026 GMT Subject: CN=07E81535A75B36F3930093C194E31662EA8780C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:3d:3d:9b:05:48:ae:24:fc:40:16:15:21: 28:63:2f:14:9b:90:72:e0:10:2e:d4:f6:e7:92:e7: 16:e2:58:1c:fa:7f:31:b9:db:d6:93:03:2a:1f:11: f6:59:98:52:6b:74:85:8e:3d:97:2d:3a:20:44:8f: 7d:46:23:05:b2:b3:fd:ec:40:9a:2e:99:69:9e:1a: c4:e5:15:53:66:81:48:cd:f2:ad:de:fb:15:8a:69: c2:da:1d:3e:4f:34:b4:75:b5:82:30:f8:4e:13:a5: 60:e4:69:ad:1f:e3:dd:bf:7f:be:54:76:42:aa:32: b0:61:68:e5:19:6a:f7:20:6b:69:32:9f:5a:c8:f5: 13:49:97:68:17:f6:46:6f:f4:55:e7:f9:62:99:de: 6a:5c:da:ce:cf:df:d8:3d:04:0b:68:94:b4:da:41: ef:31:10:70:18:ef:fb:f1:a3:57:ae:e4:2b:f3:21: e0:41:67:c7:27:23:92:ea:69:f5:0b:44:f5:e2:14: 29:0c:73:8a:72:e5:84:40:e9:dc:63:a9:47:f3:cd: 3f:fb:30:6e:e1:f8:45:ee:6e:6f:d1:69:94:30:4c: 9e:99:fa:7f:3d:cf:56:7d:af:a3:b8:1d:9c:41:a4: c8:28:0c:c8:91:54:28:43:3b:b5:0b:7f:79:a2:c5: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:15:35:A7:5B:36:F3:93:00:93:C1:94:E3:16:62:EA:87:80:C1 X509v3 Authority Key Identifier: keyid:BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.crl Authority Information Access: CA Issuers - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:16:a1:76:24:81:0f:54:9a:72:aa:f2:f2:92:94:02:65: bb:6c:2d:33:fc:36:22:1f:78:2f:44:b9:62:89:f9:ee:6a:20: 2b:75:cc:61:64:1e:af:99:f6:af:f8:a7:14:2a:85:af:48:87: f5:e4:a0:f1:c7:80:59:92:48:13:6d:86:d5:ec:be:30:25:3d: 7d:e8:3d:f1:c3:7b:3d:9b:40:7c:b9:a4:66:3b:aa:3f:8b:db: 93:67:ef:ae:52:9b:83:2d:1c:73:d1:1a:da:f6:fe:69:91:18: 11:4e:d9:cc:b1:30:e0:77:e3:75:57:4f:e3:ae:95:e7:45:1e: b7:0e:b7:bf:bf:92:39:83:d1:86:e4:b1:28:f4:7d:6b:21:81: 9b:79:09:4f:54:6a:40:07:43:56:92:12:0f:43:25:8c:95:bd: 45:fa:0d:11:56:e1:09:25:94:bd:ad:da:c3:94:0a:46:c7:cb: 47:7c:bd:2c:69:2c:75:31:fc:06:5e:5f:09:e8:66:b5:d9:79: b3:fa:62:bb:ee:5a:ee:c1:12:a8:d3:ba:56:93:57:12:a3:b1: 87:78:68:73:b2:76:f1:db:10:39:17:44:c8:f2:a8:cd:e4:4a: 40:6e:9b:84:49:b1:60:7f:0e:aa:05:a2:04:b2:6b:43:3f:28: ce:6d:22:20 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUXBggfd1LIZFlcdOQjx1ZC4mMeTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MjY1QjNFN0I3QzY5RTA5M0EyQzE3NTM4MjA2QTM4 NzczNTQzMDAeFw0yNjExMTUxMTU2NTJaFw0yNjExMTYxNDQ4NTJaMDMxMTAvBgNV BAMTKDA3RTgxNTM1QTc1QjM2RjM5MzAwOTNDMTk0RTMxNjYyRUE4NzgwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDT09mwVIriT8QBYVIShjLxSb kHLgEC7U9ueS5xbiWBz6fzG529aTAyofEfZZmFJrdIWOPZctOiBEj31GIwWys/3s QJoumWmeGsTlFVNmgUjN8q3e+xWKacLaHT5PNLR1tYIw+E4TpWDkaa0f492/f75U dkKqMrBhaOUZavcga2kyn1rI9RNJl2gX9kZv9FXn+WKZ3mpc2s7P39g9BAtolLTa Qe8xEHAY7/vxo1eu5CvzIeBBZ8cnI5LqafULRPXiFCkMc4py5YRA6dxjqUfzzT/7 MG7h+EXubm/RaZQwTJ6Z+n89z1Z9r6O4HZxBpMgoDMiRVChDO7ULf3mixaHZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUB+gVNadbNvOTAJPBlOMWYuqHgMEwHwYDVR0j BBgwFoAUuoJls+e3xp4JOiwXU4IGo4dzVDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWY4MWViYzEtMGFlOC00OWVlLTgzYWMtMjIwZDVjY2M5 YTJhLzEvQkE4MjY1QjNFN0I3QzY5RTA5M0EyQzE3NTM4MjA2QTM4NzczNTQzMC5j cmwweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3JzeW5jLnJw a2kuYXMyMDU5NDEub3JnL3JlcG8vQVMyMDU5NDEvMS9CQTgyNjVCM0U3QjdDNjlF MDkzQTJDMTc1MzgyMDZBMzg3NzM1NDMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4w gYsGCCsGAQUFBzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L2VmODFlYmMxLTBhZTgtNDllZS04M2FjLTIyMGQ1Y2NjOWEyYS8x L0JBODI2NUIzRTdCN0M2OUUwOTNBMkMxNzUzODIwNkEzODc3MzU0MzAubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBx4xahdiSBD1Sacqry8pKUAmW7bC0z/DYiH3gvRLliifnuaiArdcxhZB6v mfav+KcUKoWvSIf15KDxx4BZkkgTbYbV7L4wJT196D3xw3s9m0B8uaRmO6o/i9uT Z++uUpuDLRxz0Rra9v5pkRgRTtnMsTDgd+N1V0/jrpXnRR63Dre/v5I5g9GG5LEo 9H1rIYGbeQlPVGpAB0NWkhIPQyWMlb1F+g0RVuEJJZS9rdrDlApGx8tHfL0saSx1 MfwGXl8J6Ga12Xmz+mK77lruwRKo07pWk1cSo7GHeGhzsnbx2xA5F0TI8qjN5EpA bpuESbFgfw6qBaIEsmtDPyjObSIg -----END CERTIFICATE-----Generated at Sun Nov 15 17:59:26 2026 by rpki-client