$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: Cpryj6X0OPaL8xvGuYn7s6wkbMDOocS5vQ/icJMaAeM= Subject key identifier: 61:C1:45:E6:F3:09:D5:0B:E7:A5:EF:B6:0D:E4:A5:03:80:E7:4C:30 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 3C735C7731C35E69F7F97D497095A58661022286 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 013D Signing time: Sun 20 Sep 2026 04:30:42 +0000 Manifest this update: Sun 20 Sep 2026 04:25:42 +0000 Manifest next update: Mon 21 Sep 2026 06:21:42 +0000 Files and hashes: 1: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 2: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 3: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 4: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 5: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 6: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 7: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 8: 3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa (hash: c7rDwmaeg1ixtTlrBNd5rmSVyV1b9P8eB3zeUnPw2no=) 9: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: 1JDda58oVTTUjM8J+JTCXU1d0Mq9OM8x7WulkgqPIEk=) 10: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:73:5c:77:31:c3:5e:69:f7:f9:7d:49:70:95:a5:86:61:02:22:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Sep 20 04:25:42 2026 GMT Not After : Sep 21 06:21:42 2026 GMT Subject: CN=61C145E6F309D50BE7A5EFB60DE4A50380E74C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:e6:df:76:aa:0f:d4:2a:ea:2e:63:48:03: f4:5b:50:4e:80:cf:f3:0e:6d:6d:94:1d:48:d1:ab: ce:c0:82:c5:eb:c1:e0:c5:4e:de:d5:0a:01:1f:2a: f2:26:d6:a7:68:56:6d:23:38:d0:4a:81:b2:33:23: 82:6f:48:60:cb:a9:e2:9f:32:34:7b:39:9f:20:68: 27:cf:12:23:a2:4f:55:9c:92:04:ef:d7:9a:f9:50: 05:74:cc:9e:bd:b0:54:fc:4f:9c:ac:c2:22:6b:86: db:0f:50:6f:0a:97:1c:5b:da:8b:b9:6f:5f:ce:40: fb:0c:f6:b5:58:3e:97:7a:2b:3f:db:60:64:c9:bb: 58:62:62:16:46:dd:1c:89:95:17:86:64:8a:b8:e0: e3:92:3d:0e:07:30:43:dd:db:f5:f5:bb:7d:8e:c9: cc:a8:aa:f1:50:1a:47:00:f4:c4:11:2f:34:cb:84: 68:4b:0d:fc:32:5e:e5:49:18:73:4f:de:be:8f:4c: d4:b0:25:51:87:d2:7f:6c:e5:1e:86:8f:8b:c3:1b: 13:0c:39:65:20:d6:c3:72:dd:18:94:cf:20:8c:f1: 20:81:da:a0:ff:68:3e:65:c3:3b:08:c3:2b:42:48: 5b:52:d6:15:a0:18:86:fd:df:6a:72:cb:e1:72:39: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:45:E6:F3:09:D5:0B:E7:A5:EF:B6:0D:E4:A5:03:80:E7:4C:30 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:99:e6:1e:35:07:bb:f9:ce:32:05:af:68:35:be:aa:c9: 9e:43:fa:ca:93:5c:82:c6:d3:ec:79:f4:1b:64:35:9f:79:c6: aa:14:d4:35:db:05:94:29:e1:48:1b:ea:00:74:cc:b2:df:7b: 6c:4e:7d:26:5a:cb:fa:bf:80:bb:fe:24:4a:af:57:59:4a:f9: a8:6e:2e:a6:7e:82:4d:e2:38:dc:29:d3:50:d6:c3:7a:3e:6f: 30:0c:9e:82:e7:b3:71:a9:bb:ea:61:62:63:db:a8:e9:df:28: ea:e9:4b:3e:5c:3a:d5:3d:b4:23:5a:7c:ef:76:fe:0f:ef:8d: 63:92:d9:c5:e6:d1:f4:bb:1c:83:98:f7:71:d2:03:74:df:86: 64:b0:3d:1f:bd:49:3c:75:df:98:9a:ea:db:aa:be:81:44:9b: b5:eb:10:47:e4:8b:a4:bd:a3:30:30:1e:b7:4c:6f:d8:75:d7: 22:c4:18:58:c0:4f:c0:da:f8:76:82:1f:4d:ee:b6:9e:02:c2: a4:15:ae:32:0d:f2:b2:a3:3f:0d:71:4a:15:3c:9b:92:3a:69: 7d:50:bf:de:a3:cf:6a:55:30:13:51:be:b9:0d:1e:8e:bc:ac: 07:d7:3d:bb:ae:7a:5f:2b:69:cf:cd:e5:35:68:f8:fa:8a:4a: b4:cb:74:92 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPHNcdzHDXmn3+X1JcJWlhmECIoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA5MjAwNDI1NDJaFw0yNjA5MjEwNjIxNDJaMDMxMTAvBgNV BAMTKDYxQzE0NUU2RjMwOUQ1MEJFN0E1RUZCNjBERTRBNTAzODBFNzRDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpObfdqoP1CrqLmNIA/RbUE6A z/MObW2UHUjRq87AgsXrweDFTt7VCgEfKvIm1qdoVm0jONBKgbIzI4JvSGDLqeKf MjR7OZ8gaCfPEiOiT1WckgTv15r5UAV0zJ69sFT8T5yswiJrhtsPUG8Klxxb2ou5 b1/OQPsM9rVYPpd6Kz/bYGTJu1hiYhZG3RyJlReGZIq44OOSPQ4HMEPd2/X1u32O ycyoqvFQGkcA9MQRLzTLhGhLDfwyXuVJGHNP3r6PTNSwJVGH0n9s5R6Gj4vDGxMM OWUg1sNy3RiUzyCM8SCB2qD/aD5lwzsIwytCSFtS1hWgGIb932pyy+FyOQhfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYcFF5vMJ1Qvnpe+2DeSlA4DnTDAwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW1Znm HjUHu/nOMgWvaDW+qsmeQ/rKk1yCxtPsefQbZDWfecaqFNQ12wWUKeFIG+oAdMyy 33tsTn0mWsv6v4C7/iRKr1dZSvmobi6mfoJN4jjcKdNQ1sN6Pm8wDJ6C57Nxqbvq YWJj26jp3yjq6Us+XDrVPbQjWnzvdv4P741jktnF5tH0uxyDmPdx0gN034ZksD0f vUk8dd+Ymurbqr6BRJu16xBH5IukvaMwMB63TG/YddcixBhYwE/A2vh2gh9N7rae AsKkFa4yDfKyoz8NcUoVPJuSOml9UL/eo89qVTATUb65DR6OvKwH1z27rnpfK2nP zeU1aPj6ikq0y3SS -----END CERTIFICATE-----Generated at Sun Sep 20 18:08:06 2026 by rpki-client