$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft File: E9AE8529E9A69A4FA376F17695E6EB8731823068.mft (raw, json) Hash identifier: Z9a74QYHil+nEwmJhQZbQu0f/x04Fa4l1ug5YVE+FMM= Subject key identifier: 75:A9:AA:0C:14:53:F4:26:24:76:44:A8:25:34:32:BA:DD:DE:6C:16 Authority key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 Certificate issuer: /CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Certificate serial: 118A7889EC240C50BF50A1D766BDB729A22933ED Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft Manifest number: 0143 Signing time: Fri 25 Sep 2026 23:53:51 +0000 Manifest this update: Fri 25 Sep 2026 23:48:51 +0000 Manifest next update: Sun 27 Sep 2026 00:08:51 +0000 Files and hashes: 1: E9AE8529E9A69A4FA376F17695E6EB8731823068.crl (hash: f6SPe2WoV14jWw0jw86K60i0PnmQLLGWRpcacR7Su7M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8a:78:89:ec:24:0c:50:bf:50:a1:d7:66:bd:b7:29:a2:29:33:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Validity Not Before: Sep 25 23:48:51 2026 GMT Not After : Sep 27 00:08:51 2026 GMT Subject: CN=75A9AA0C1453F426247644A8253432BADDDE6C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:38:2a:21:17:04:84:8a:98:93:9b:ac:c1: 6d:85:35:db:6b:63:b6:5a:3f:17:dd:29:c3:ae:dc: b8:74:36:53:5d:be:06:2c:b6:d3:3d:5c:5e:bc:6c: 1e:72:98:c0:6c:f3:96:3b:65:23:15:5c:d3:be:37: 75:0f:59:f3:39:bf:95:35:2c:70:4f:03:53:c7:cd: 97:06:03:99:42:e4:41:a7:fe:43:05:4c:c1:b5:ba: 0b:fb:93:03:57:04:bf:a2:f1:3d:95:7f:41:45:66: 6e:ed:9d:75:78:85:36:ea:1b:a5:6c:c7:c2:67:15: 1c:7e:ce:ed:a8:50:33:22:d7:9e:e1:21:b7:d0:10: b3:3c:f3:48:fc:11:cd:e8:aa:ef:86:7f:70:8f:f5: e8:5d:e2:70:1b:b5:d0:c1:f3:46:8c:dc:f3:8e:78: ba:ae:9e:5a:c5:53:66:3b:61:51:4e:94:6a:42:6f: 35:3a:af:ff:83:b7:09:14:ae:6b:f3:1c:2f:b6:45: 47:b8:6a:c6:75:d0:9e:31:69:57:ab:d3:19:3f:38: 6c:47:8c:58:05:4a:47:19:f2:f6:a6:3b:90:e1:3e: 20:f9:4d:90:18:da:55:b1:fc:cd:f9:a7:41:a6:d6: 34:8e:9d:82:98:29:35:de:c1:78:e8:db:2c:ec:fa: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A9:AA:0C:14:53:F4:26:24:76:44:A8:25:34:32:BA:DD:DE:6C:16 X509v3 Authority Key Identifier: keyid:E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:b8:db:0a:83:87:6e:da:b3:09:ad:56:7f:a1:b5:2f:6b: c2:8d:2b:4b:18:6f:11:6f:a5:69:91:9d:44:11:a4:9b:23:31: 79:5b:00:24:dd:51:61:d5:90:ab:f5:62:2b:4b:c2:45:ba:35: 61:b5:05:5c:54:a4:60:27:6e:7d:11:e6:c7:03:91:ff:49:7f: bf:b4:f9:3e:34:eb:e1:02:fd:30:e9:a0:eb:da:66:cc:95:1b: 06:4d:1b:f4:be:d6:ce:70:18:0f:25:5a:f7:b2:c1:8b:77:07: 9d:18:6b:9c:15:0a:ef:db:cf:ac:7e:b9:70:77:09:39:ae:3d: 44:a4:d5:05:db:d6:72:98:d8:94:52:fa:97:f3:52:cd:01:d1: 82:aa:fb:d7:05:7c:7f:88:8b:41:96:3b:9d:8b:ba:b7:1a:34: a5:34:2f:d6:0d:1e:20:54:0a:d3:28:aa:af:0f:f3:f1:42:75: fd:f5:e3:dd:98:5a:44:8e:2c:eb:08:5b:61:00:db:34:ef:d5: 85:29:eb:c4:78:a7:b8:6e:51:20:bd:7e:d7:bd:03:8d:17:e0: 15:2e:b0:95:8c:32:5d:82:f6:d0:c1:ca:d4:27:d2:f5:e2:88: bf:e2:d6:b4:d0:ca:55:f7:75:47:bb:5a:7f:fd:cf:0c:69:f7: 83:8c:97:f9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEYp4iewkDFC/UKHXZr23KaIpM+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODcz MTgyMzA2ODAeFw0yNjA5MjUyMzQ4NTFaFw0yNjA5MjcwMDA4NTFaMDMxMTAvBgNV BAMTKDc1QTlBQTBDMTQ1M0Y0MjYyNDc2NDRBODI1MzQzMkJBRERERTZDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCzgqIRcEhIqYk5uswW2FNdtr Y7ZaPxfdKcOu3Lh0NlNdvgYsttM9XF68bB5ymMBs85Y7ZSMVXNO+N3UPWfM5v5U1 LHBPA1PHzZcGA5lC5EGn/kMFTMG1ugv7kwNXBL+i8T2Vf0FFZm7tnXV4hTbqG6Vs x8JnFRx+zu2oUDMi157hIbfQELM880j8Ec3oqu+Gf3CP9ehd4nAbtdDB80aM3POO eLqunlrFU2Y7YVFOlGpCbzU6r/+DtwkUrmvzHC+2RUe4asZ10J4xaVer0xk/OGxH jFgFSkcZ8vamO5DhPiD5TZAY2lWx/M35p0Gm1jSOnYKYKTXewXjo2yzs+votAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUdamqDBRT9CYkdkSoJTQyut3ebBYwHwYDVR0j BBgwFoAU6a6FKemmmk+jdvF2lebrhzGCMGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgyMzA2OC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgy MzA2OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9FOUFFODUyOUU5QTY5QTRGQTM3 NkYxNzY5NUU2RUI4NzMxODIzMDY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn642wqDh27aswmtVn+h tS9rwo0rSxhvEW+laZGdRBGkmyMxeVsAJN1RYdWQq/ViK0vCRbo1YbUFXFSkYCdu fRHmxwOR/0l/v7T5PjTr4QL9MOmg69pmzJUbBk0b9L7WznAYDyVa97LBi3cHnRhr nBUK79vPrH65cHcJOa49RKTVBdvWcpjYlFL6l/NSzQHRgqr71wV8f4iLQZY7nYu6 txo0pTQv1g0eIFQK0yiqrw/z8UJ1/fXj3ZhaRI4s6whbYQDbNO/VhSnrxHinuG5R IL1+170DjRfgFS6wlYwyXYL20MHK1CfS9eKIv+LWtNDKVfd1R7taf/3PDGn3g4yX +Q== -----END CERTIFICATE-----Generated at Sat Sep 26 07:06:55 2026 by rpki-client