$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: csQ6tU2AfRAu4/98Q6xSmoXHuQOXt5Z+jU4Pc4HaX9w= Subject key identifier: D5:96:01:BD:A1:C9:95:86:96:E5:1A:50:23:1F:EA:3F:E9:0E:48:BC Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 2E44F95375AD82335DA11A7F6A89320729E0E3D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 0559 Signing time: Mon 21 Sep 2026 09:52:43 +0000 Manifest this update: Mon 21 Sep 2026 09:47:43 +0000 Manifest next update: Tue 22 Sep 2026 12:46:43 +0000 Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: fz1uYAJ2XLeq0ANnKn8z0nA+p1Z2mRJLyXW7BBCoZGk=) 2: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 4: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) 5: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) 6: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) 7: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:44:f9:53:75:ad:82:33:5d:a1:1a:7f:6a:89:32:07:29:e0:e3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Sep 21 09:47:43 2026 GMT Not After : Sep 22 12:46:43 2026 GMT Subject: CN=D59601BDA1C9958696E51A50231FEA3FE90E48BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:b6:59:42:04:17:69:6b:e7:49:13:c9:dd: 95:43:13:92:07:4e:27:a4:d9:27:07:8e:0d:91:e9: a9:67:77:8f:03:50:29:66:a0:52:20:54:14:78:46: e7:d3:6c:fa:48:b8:c3:1f:4c:cb:6f:59:24:71:6f: 6e:6f:4d:62:35:56:00:51:99:12:43:0f:8f:ec:4b: 70:c3:62:df:90:e0:65:fd:14:4f:db:48:ca:22:15: 60:99:4d:3a:50:66:fc:0e:11:32:83:94:ff:f5:99: 54:53:3f:2a:40:ea:c4:af:85:38:eb:9a:57:30:9b: ab:03:c7:11:30:c9:b0:f3:9c:7e:84:9a:e3:f3:71: d3:6a:d1:de:07:b0:6b:b9:8f:a7:de:f4:9a:cd:ee: 77:00:1b:e4:e6:a6:59:3e:ea:51:be:d4:54:78:df: 43:71:59:8c:35:49:7c:f4:06:0e:96:09:ab:aa:86: 64:31:ec:9f:de:d9:2c:27:26:86:10:62:e0:ee:a0: 44:bf:75:58:cc:5c:b2:7b:bd:56:db:a1:2a:6f:04: 2c:ad:95:4e:da:0b:19:f6:34:68:e9:5b:7f:0d:e2: a5:82:39:89:2b:2d:b4:7a:d2:6b:c5:75:32:35:62: 23:64:b3:35:c1:9a:73:f7:b7:95:82:d3:8d:4c:17: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:96:01:BD:A1:C9:95:86:96:E5:1A:50:23:1F:EA:3F:E9:0E:48:BC X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2e:4c:92:96:bb:13:47:b1:ba:0c:a5:4e:e8:55:e2:df:ba: 55:b1:c9:23:fc:54:c4:1a:55:86:fa:0a:26:65:b4:b2:19:f0: fd:0f:18:52:51:81:d1:a0:41:6c:b5:67:ac:f4:0d:2e:8e:e2: 30:c5:33:95:e5:df:95:9e:cd:a5:f8:c5:bf:2a:03:a9:7e:df: f2:ca:01:54:25:d4:d4:e2:fb:6b:e9:31:aa:51:6c:0b:40:e5: 97:94:d3:31:5a:04:7f:3e:68:7a:82:1a:9b:29:32:28:8f:81: c5:f4:ff:ca:d8:51:25:32:2d:8e:a6:ce:6f:36:23:d2:f5:88: 15:75:4b:04:85:25:46:4f:6e:ed:9a:f3:8f:8d:2a:b9:28:52: 0d:1d:91:b9:28:db:37:1c:9e:96:30:09:8a:8c:a8:e3:17:6d: 3e:3c:b6:83:80:3b:a4:43:52:90:d5:43:99:ed:0d:16:39:37: de:5c:97:1e:cd:97:a7:75:ad:d1:45:4d:02:25:4e:bc:5f:59: a5:d8:3e:6c:de:9c:5d:01:1a:0b:2c:8b:f6:e1:88:47:1b:19: 83:b7:21:6a:14:c8:5c:3c:84:6c:bf:09:e0:b4:8d:7f:50:4a: ea:d9:02:63:f0:42:ff:19:9c:62:9d:c8:a5:4b:67:b0:c7:8f: 98:8b:7e:d8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIULkT5U3WtgjNdoRp/aokyByng49IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjA5MjEwOTQ3NDNaFw0yNjA5MjIxMjQ2NDNaMDMxMTAvBgNV BAMTKEQ1OTYwMUJEQTFDOTk1ODY5NkU1MUE1MDIzMUZFQTNGRTkwRTQ4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wbZZQgQXaWvnSRPJ3ZVDE5IH Tiek2ScHjg2R6alnd48DUClmoFIgVBR4RufTbPpIuMMfTMtvWSRxb25vTWI1VgBR mRJDD4/sS3DDYt+Q4GX9FE/bSMoiFWCZTTpQZvwOETKDlP/1mVRTPypA6sSvhTjr mlcwm6sDxxEwybDznH6EmuPzcdNq0d4HsGu5j6fe9JrN7ncAG+Tmplk+6lG+1FR4 30NxWYw1SXz0Bg6WCauqhmQx7J/e2SwnJoYQYuDuoES/dVjMXLJ7vVbboSpvBCyt lU7aCxn2NGjpW38N4qWCOYkrLbR60mvFdTI1YiNkszXBmnP3t5WC041MF11RAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU1ZYBvaHJlYaW5RpQIx/qP+kOSLwwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVLkySlrsTR7G6DKVO6FXi37pVsckj/FTE GlWG+gomZbSyGfD9DxhSUYHRoEFstWes9A0ujuIwxTOV5d+Vns2l+MW/KgOpft/y ygFUJdTU4vtr6TGqUWwLQOWXlNMxWgR/Pmh6ghqbKTIoj4HF9P/K2FElMi2Ops5v NiPS9YgVdUsEhSVGT27tmvOPjSq5KFINHZG5KNs3HJ6WMAmKjKjjF20+PLaDgDuk Q1KQ1UOZ7Q0WOTfeXJcezZenda3RRU0CJU68X1ml2D5s3pxdARoLLIv24YhHGxmD tyFqFMhcPIRsvwngtI1/UErq2QJj8EL/GZxincilS2ewx4+Yi37Y -----END CERTIFICATE-----Generated at Mon Sep 21 12:16:17 2026 by rpki-client