$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: C7ZPTE9dLVsQtl8MRYAyZwmleLfA6j/ya8KsOyDm54k= Subject key identifier: 69:4F:20:00:DB:27:2A:47:9E:E2:78:F3:91:61:66:DB:D7:4C:CB:72 Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 3ABAE4E42FB0D6F13DAC6EB353A35DCCF60E3747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 05A3 Signing time: Sun 15 Nov 2026 06:33:40 +0000 Manifest this update: Sun 15 Nov 2026 06:28:40 +0000 Manifest next update: Mon 16 Nov 2026 09:43:40 +0000 Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: LWfKZVHhf3Dty8/wl84q8FK0r1W1d2oPP3nVBgbGSGs=) 2: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) 4: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) 5: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) 6: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 7: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:e4:e4:2f:b0:d6:f1:3d:ac:6e:b3:53:a3:5d:cc:f6:0e:37:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Nov 15 06:28:40 2026 GMT Not After : Nov 16 09:43:40 2026 GMT Subject: CN=694F2000DB272A479EE278F3916166DBD74CCB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:1f:bb:d6:21:7e:93:9b:6f:8d:9a:5b:03: a6:62:04:16:bf:5a:a9:81:17:32:c0:5b:7a:88:fa: bf:96:f6:77:70:58:ac:c6:d7:58:ca:22:83:52:fe: 80:58:1c:61:a7:27:f2:88:44:16:c5:33:b4:96:47: f1:e2:69:29:a7:cf:3e:8d:56:05:35:46:0d:66:fc: 6d:8b:07:af:e0:41:8a:fa:9e:03:11:c7:af:87:15: b1:d8:98:85:4f:00:29:21:30:eb:4c:e6:af:ad:45: 7b:40:d8:4e:85:48:8e:ff:fc:3d:b4:6e:76:61:5d: 6c:03:ca:a5:62:9f:18:0e:90:55:91:b6:88:de:9b: 65:65:61:a6:a5:63:ca:0b:60:b0:dc:59:3a:8e:24: 09:d1:c2:10:12:b2:dc:7e:36:50:b4:9a:b8:77:d8: 96:92:ea:f0:61:d0:9d:8c:5a:f7:bf:9c:d6:7d:8b: 79:e9:11:4d:3b:88:f4:a9:60:69:b2:59:1f:f3:31: fd:98:67:42:4f:fe:5a:85:7e:c0:0c:e4:65:e1:82: 58:5c:3d:af:51:58:6a:76:97:78:d4:77:bb:48:04: f6:46:6d:cc:32:5d:a9:a5:96:cd:da:3c:70:bb:74: 21:36:ef:80:af:b1:f7:64:a1:33:f9:9a:65:41:d4: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:20:00:DB:27:2A:47:9E:E2:78:F3:91:61:66:DB:D7:4C:CB:72 X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d8:b9:23:a0:c7:5c:8f:2e:9c:d5:10:8a:4a:46:45:b9:1c: 16:76:ee:54:b4:42:8a:a8:e4:5e:14:0a:77:c5:01:4d:ac:f5: d1:1e:0d:07:db:08:8b:83:0c:46:60:c8:dc:ac:6a:22:e1:ae: ed:b2:b8:b5:5b:9e:5a:7d:0b:48:91:12:8b:c3:70:09:e5:e2: 7e:cb:55:af:57:d3:d4:ee:b5:ad:f1:d5:0a:3a:b7:dc:26:65: be:ef:bb:9e:8a:62:39:5f:af:ac:a7:ce:0e:ef:34:19:12:ff: b2:32:d4:68:27:d7:95:a6:bf:9a:14:74:53:c0:50:2a:30:16: e1:b8:0f:9e:99:f0:0b:35:5b:d6:9d:15:a2:d2:e3:8b:44:95: bd:1d:dd:d8:6e:ad:fd:cc:fa:7e:34:42:ae:7e:ad:10:db:8c: 43:c8:0a:5f:e5:6e:a7:87:10:6f:16:c5:03:7c:98:97:35:d5: 36:02:20:de:bb:89:4a:56:46:c0:10:56:ce:29:41:5e:03:6a: a5:90:13:5c:a0:0d:a4:64:8e:72:b5:17:7c:97:6e:c7:20:64: 83:12:68:60:b5:19:b9:3e:0e:aa:95:dd:7c:db:85:42:6b:b7: a7:35:9b:7f:74:fe:c5:43:1d:2a:70:4b:93:89:08:3d:f0:24: 66:d9:29:92 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUOrrk5C+w1vE9rG6zU6NdzPYON0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjExMTUwNjI4NDBaFw0yNjExMTYwOTQzNDBaMDMxMTAvBgNV BAMTKDY5NEYyMDAwREIyNzJBNDc5RUUyNzhGMzkxNjE2NkRCRDc0Q0NCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZih+71iF+k5tvjZpbA6ZiBBa/ WqmBFzLAW3qI+r+W9ndwWKzG11jKIoNS/oBYHGGnJ/KIRBbFM7SWR/HiaSmnzz6N VgU1Rg1m/G2LB6/gQYr6ngMRx6+HFbHYmIVPACkhMOtM5q+tRXtA2E6FSI7//D20 bnZhXWwDyqVinxgOkFWRtojem2VlYaalY8oLYLDcWTqOJAnRwhASstx+NlC0mrh3 2JaS6vBh0J2MWve/nNZ9i3npEU07iPSpYGmyWR/zMf2YZ0JP/lqFfsAM5GXhglhc Pa9RWGp2l3jUd7tIBPZGbcwyXamlls3aPHC7dCE274CvsfdkoTP5mmVB1DhVAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUaU8gANsnKkee4njzkWFm29dMy3IwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh2LkjoMdcjy6c1RCKSkZFuRwWdu5UtEKK qOReFAp3xQFNrPXRHg0H2wiLgwxGYMjcrGoi4a7tsri1W55afQtIkRKLw3AJ5eJ+ y1WvV9PU7rWt8dUKOrfcJmW+77ueimI5X6+sp84O7zQZEv+yMtRoJ9eVpr+aFHRT wFAqMBbhuA+emfALNVvWnRWi0uOLRJW9Hd3Ybq39zPp+NEKufq0Q24xDyApf5W6n hxBvFsUDfJiXNdU2AiDeu4lKVkbAEFbOKUFeA2qlkBNcoA2kZI5ytRd8l27HIGSD EmhgtRm5Pg6qld1824VCa7enNZt/dP7FQx0qcEuTiQg98CRm2SmS -----END CERTIFICATE-----Generated at Sun Nov 15 12:07:32 2026 by rpki-client