$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: GcvFW4AJzifysyps1+l/LbofTioRNZT90+UUspzGa74= Subject key identifier: 4D:63:2B:4F:F4:CD:60:2A:22:B6:3E:43:60:5C:91:10:73:74:1A:98 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 405390BFD348C039D0D7EB7846465724C5FB26B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 0174 Signing time: Fri 25 Sep 2026 02:56:57 +0000 Manifest this update: Fri 25 Sep 2026 02:51:57 +0000 Manifest next update: Sat 26 Sep 2026 05:29:57 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 0bK46l79exyZXWbIYDOT20N4nuYdK16mxIUJbbxC6cs=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:53:90:bf:d3:48:c0:39:d0:d7:eb:78:46:46:57:24:c5:fb:26:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Sep 25 02:51:57 2026 GMT Not After : Sep 26 05:29:57 2026 GMT Subject: CN=4D632B4FF4CD602A22B63E43605C911073741A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:cf:e1:e4:6e:fd:ff:a7:91:6d:73:63:5f: 08:d6:a1:dd:30:03:9b:cf:5d:77:0e:fd:3b:36:8f: fb:cb:09:9c:33:23:ad:19:1d:90:57:ef:94:8e:3d: a5:2e:40:9c:79:a7:2b:4b:1a:da:cd:19:64:65:ad: 35:66:48:57:53:cc:a9:3a:7a:31:f3:b3:0a:73:ec: bf:ae:b4:fb:71:8e:14:40:52:86:cc:bc:14:f7:88: 1e:bd:57:b1:2c:6d:b9:a3:e4:34:92:59:19:0f:10: 1b:9e:b9:f2:d3:1f:88:27:79:c3:d6:9b:ed:d3:91: f3:3b:d0:bb:19:7a:b2:bc:80:94:48:52:6d:fa:d0: d2:41:ad:b7:2b:a6:f9:09:3d:9b:c9:4f:3a:b5:60: 5f:a9:43:0c:c9:e3:bb:68:03:0e:59:37:79:97:f0: 1f:be:a6:4f:a7:6a:97:e7:a7:f0:cb:30:06:15:ea: cd:95:2f:0f:da:83:62:d6:42:fd:0b:e2:cd:5f:9f: 59:14:3f:95:df:72:56:6b:49:41:36:85:10:80:96: f3:1f:3a:41:0b:b1:12:6f:9d:60:72:77:3d:68:d9: 72:5c:2e:36:93:67:79:37:84:5c:12:d6:8c:31:5c: 08:39:d4:d2:f3:5b:7c:b3:99:85:96:ba:6a:66:24: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:2B:4F:F4:CD:60:2A:22:B6:3E:43:60:5C:91:10:73:74:1A:98 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8c:e7:c1:52:82:00:38:e7:15:9d:b6:b5:46:af:76:7e:66: 42:01:24:d9:9c:ae:88:05:f2:d0:f3:c1:4b:c7:25:ce:c6:6b: 7c:d5:3b:e3:0e:f2:03:5f:2b:24:ee:6d:d4:ea:9c:a6:fa:e3: 86:15:34:b3:39:68:4b:05:62:6f:f1:e8:2a:6b:99:d9:1a:18: 0e:64:c9:50:ce:22:84:2e:0f:b8:eb:8e:ed:be:62:3f:09:08: b2:01:82:66:96:e3:ae:18:fc:d9:0c:bd:09:69:62:cd:50:14: 54:e0:a9:f3:ef:58:87:16:f7:aa:da:05:ad:d4:14:53:e9:cc: a0:16:79:bc:c0:a1:3f:29:50:61:87:25:ec:c4:d9:df:1a:16: 5c:89:38:13:7a:01:f0:a3:0a:55:ca:45:bd:6d:8f:eb:66:34: 18:f2:d8:17:a1:5a:68:f3:09:79:3c:6d:d0:ef:1d:07:35:9e: c7:ba:c8:62:17:7a:95:80:0d:0a:8e:05:fd:11:f1:ff:da:0c: ea:be:2f:bb:24:a8:99:67:bf:c4:0b:f9:0a:39:0e:5c:21:db: b8:bb:f5:a1:ec:e4:6d:70:c2:c2:c3:03:70:92:9b:1d:e2:2b: a2:cf:d2:fd:31:4f:d8:83:01:5f:44:f0:a7:45:7d:54:fa:b8: 67:bc:1a:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQFOQv9NIwDnQ1+t4RkZXJMX7JrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA5MjUwMjUxNTdaFw0yNjA5MjYwNTI5NTdaMDMxMTAvBgNV BAMTKDRENjMyQjRGRjRDRDYwMkEyMkI2M0U0MzYwNUM5MTEwNzM3NDFBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbG8/h5G79/6eRbXNjXwjWod0w A5vPXXcO/Ts2j/vLCZwzI60ZHZBX75SOPaUuQJx5pytLGtrNGWRlrTVmSFdTzKk6 ejHzswpz7L+utPtxjhRAUobMvBT3iB69V7Esbbmj5DSSWRkPEBueufLTH4gnecPW m+3TkfM70LsZerK8gJRIUm360NJBrbcrpvkJPZvJTzq1YF+pQwzJ47toAw5ZN3mX 8B++pk+napfnp/DLMAYV6s2VLw/ag2LWQv0L4s1fn1kUP5XfclZrSUE2hRCAlvMf OkELsRJvnWBydz1o2XJcLjaTZ3k3hFwS1owxXAg51NLzW3yzmYWWumpmJCqPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTWMrT/TNYCoitj5DYFyREHN0GpgwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5jOfB UoIAOOcVnba1Rq92fmZCASTZnK6IBfLQ88FLxyXOxmt81TvjDvIDXysk7m3U6pym +uOGFTSzOWhLBWJv8egqa5nZGhgOZMlQziKELg+4647tvmI/CQiyAYJmluOuGPzZ DL0JaWLNUBRU4Knz71iHFveq2gWt1BRT6cygFnm8wKE/KVBhhyXsxNnfGhZciTgT egHwowpVykW9bY/rZjQY8tgXoVpo8wl5PG3Q7x0HNZ7HushiF3qVgA0KjgX9EfH/ 2gzqvi+7JKiZZ7/EC/kKOQ5cIdu4u/Wh7ORtcMLCwwNwkpsd4iuiz9L9MU/YgwFf RPCnRX1U+rhnvBp5 -----END CERTIFICATE-----Generated at Fri Sep 25 05:28:20 2026 by rpki-client