$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: 1KKeps8AI1yzP2t/1aXM/hHiisGTNIIrp/85NRSBJgc= Subject key identifier: A7:5A:9B:3E:92:C8:AE:C7:69:5A:FD:B3:AC:FE:73:80:FA:A8:97:D8 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 643DA14EACEDD4C6B4D437B031C147A1A0F51097 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 0330 Signing time: Fri 25 Sep 2026 11:51:50 +0000 Manifest this update: Fri 25 Sep 2026 11:46:50 +0000 Manifest next update: Sat 26 Sep 2026 15:23:50 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: 9IqYftX0HRjW9jZ0s3jVk2XA7obQJLcU6exb68VeAr4=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3d:a1:4e:ac:ed:d4:c6:b4:d4:37:b0:31:c1:47:a1:a0:f5:10:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Sep 25 11:46:50 2026 GMT Not After : Sep 26 15:23:50 2026 GMT Subject: CN=A75A9B3E92C8AEC7695AFDB3ACFE7380FAA897D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:c0:90:2f:0e:ef:24:d8:64:6f:3c:48:13: f7:4b:97:37:02:b5:f3:70:ad:a2:2c:21:22:8a:92: 4a:6d:30:a7:f9:b9:2d:19:96:19:28:59:64:44:f9: 72:a2:06:4e:e1:74:ec:6a:1e:68:b4:21:d7:af:f9: 30:0b:ca:7c:54:a3:81:61:34:d4:be:c0:21:b4:66: ff:95:12:9a:00:cd:8e:66:47:71:3e:72:65:c1:f9: e4:30:a2:8b:3e:07:93:93:7e:0b:f8:9e:ec:b9:ee: de:a3:59:d7:a5:53:61:c0:76:49:5a:33:fd:36:af: c2:f2:d2:3f:91:dc:49:40:1a:12:29:94:7e:3e:b8: df:ec:c5:4c:ab:66:bd:05:14:fe:30:4a:2e:ff:84: 3d:26:69:3b:a7:69:52:89:b4:0b:6a:81:8e:bc:e1: 69:00:f5:3b:ed:e8:cf:34:4f:91:47:e7:75:25:2d: 8f:e2:ae:2f:ab:41:54:25:e5:63:9d:31:fb:62:d7: 95:2a:74:53:7e:07:89:e8:06:51:62:d2:5b:74:9a: bc:2a:c0:0f:a5:62:aa:cf:ff:b0:9c:14:9f:c8:cf: 08:91:65:d1:2d:55:4c:80:d3:4e:ff:90:96:11:73: 69:29:86:79:85:b0:05:37:a0:cb:55:76:32:44:89: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5A:9B:3E:92:C8:AE:C7:69:5A:FD:B3:AC:FE:73:80:FA:A8:97:D8 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3c:72:7a:2e:e5:b1:6e:f5:e3:22:f3:13:12:3e:d1:55:08: 77:2c:40:06:90:49:73:6a:88:a9:f9:4a:73:23:ce:4b:26:cd: fd:21:6b:ef:94:7d:e4:03:c6:9f:1e:eb:97:fb:2d:5d:e5:a1: 28:58:42:ca:b7:24:04:83:70:db:53:b2:a3:2f:25:64:bd:30: ca:30:ea:8a:56:29:3b:c2:4a:c0:1c:aa:70:b1:3c:ea:16:73: b7:61:74:ac:3b:0a:f9:19:9b:79:c7:fd:a2:08:2a:9c:f4:63: c7:df:7b:8a:d1:f9:4e:0b:bf:75:f8:34:4f:67:57:5f:7c:71: 83:59:44:5c:9a:6b:1f:a8:fe:0c:c5:21:ab:f6:b8:7a:5a:63: 96:b4:b1:6b:df:02:b4:e6:7e:5e:89:b1:98:aa:91:3f:d0:32: d3:d1:b9:7d:0c:5f:23:56:ae:57:a8:e8:25:a6:88:10:c8:fb: 39:b0:51:08:7b:fe:78:4a:7e:d0:e4:0f:fb:ab:2a:3d:85:8e: 3f:18:e4:8a:23:d6:b2:13:00:52:65:77:b9:cd:5b:b3:c8:83: 0a:73:4a:ea:4f:de:0b:21:f2:ff:e7:54:b0:48:9c:71:4f:3b: 9a:e2:96:ed:58:a4:cc:de:2f:24:d1:de:da:59:6e:73:74:a4: 6d:b7:ba:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZD2hTqzt1Ma01DewMcFHoaD1EJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA5MjUxMTQ2NTBaFw0yNjA5MjYxNTIzNTBaMDMxMTAvBgNV BAMTKEE3NUE5QjNFOTJDOEFFQzc2OTVBRkRCM0FDRkU3MzgwRkFBODk3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJsCQLw7vJNhkbzxIE/dLlzcC tfNwraIsISKKkkptMKf5uS0ZlhkoWWRE+XKiBk7hdOxqHmi0Idev+TALynxUo4Fh NNS+wCG0Zv+VEpoAzY5mR3E+cmXB+eQwoos+B5OTfgv4nuy57t6jWdelU2HAdkla M/02r8Ly0j+R3ElAGhIplH4+uN/sxUyrZr0FFP4wSi7/hD0maTunaVKJtAtqgY68 4WkA9Tvt6M80T5FH53UlLY/iri+rQVQl5WOdMfti15UqdFN+B4noBlFi0lt0mrwq wA+lYqrP/7CcFJ/IzwiRZdEtVUyA007/kJYRc2kphnmFsAU3oMtVdjJEiW1DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUp1qbPpLIrsdpWv2zrP5zgPqol9gwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIPHJ6 LuWxbvXjIvMTEj7RVQh3LEAGkElzaoip+UpzI85LJs39IWvvlH3kA8afHuuX+y1d 5aEoWELKtyQEg3DbU7KjLyVkvTDKMOqKVik7wkrAHKpwsTzqFnO3YXSsOwr5GZt5 x/2iCCqc9GPH33uK0flOC791+DRPZ1dffHGDWURcmmsfqP4MxSGr9rh6WmOWtLFr 3wK05n5eibGYqpE/0DLT0bl9DF8jVq5XqOglpogQyPs5sFEIe/54Sn7Q5A/7qyo9 hY4/GOSKI9ayEwBSZXe5zVuzyIMKc0rqT94LIfL/51SwSJxxTzua4pbtWKTM3i8k 0d7aWW5zdKRtt7qZ -----END CERTIFICATE-----Generated at Sat Sep 26 01:52:02 2026 by rpki-client