$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json) Hash identifier: w1JpGyJOQOTiGBb38cQ5eiYNzboyY/Nmj+mere8+ok4= Subject key identifier: 90:DA:7D:BB:FC:85:94:04:B8:72:97:85:15:40:DF:38:F9:93:72:89 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 16C6DB9A24509851CBD36E5F13F58BDD15064AE5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft Manifest number: 05D6 Signing time: Sat 26 Sep 2026 21:20:45 +0000 Manifest this update: Sat 26 Sep 2026 21:15:45 +0000 Manifest next update: Mon 28 Sep 2026 00:34:45 +0000 Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: 4GotnHcZhZa4JO7pA37eUtErw6g94RpPn3IvvWIIkmQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 23:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c6:db:9a:24:50:98:51:cb:d3:6e:5f:13:f5:8b:dd:15:06:4a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Sep 26 21:15:45 2026 GMT Not After : Sep 28 00:34:45 2026 GMT Subject: CN=90DA7DBBFC859404B87297851540DF38F9937289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:4e:3f:e8:a9:47:5e:1e:7a:e2:ff:a1:7a: 38:2b:57:fc:8d:96:49:a7:cc:8a:ae:3d:8f:a4:f8: 0c:9e:ff:a4:75:e6:65:bb:16:50:60:66:04:b0:0a: 67:c5:e1:b4:22:fd:f1:4c:3c:9e:b4:04:41:03:46: 0d:3b:ea:cd:97:86:21:82:ab:75:ba:50:c0:dd:ca: cf:cd:13:c5:2d:23:9f:89:14:55:88:7c:7e:a4:7a: ba:c7:b7:57:76:f3:08:b9:b6:ce:a1:b0:4b:06:c0: 73:7a:e8:fa:d8:96:7b:d6:a3:b0:66:c4:26:2f:c6: df:9f:5d:29:f3:76:d4:1d:3d:c8:ae:02:e2:0a:b1: b0:32:58:33:2c:d3:43:03:d2:1c:6a:6e:fb:35:4b: a0:b3:25:0b:db:84:1e:ed:e7:ad:ea:1c:ba:3c:dc: 38:45:b8:3e:77:f9:02:f5:a6:14:56:59:8b:91:03: 23:28:e3:90:b3:45:64:dd:a1:a6:cf:f5:5a:48:28: fb:9e:04:ef:28:3e:df:ab:db:28:45:ea:54:27:2f: 8d:6b:ba:53:ea:7e:38:d3:d3:13:e8:c5:32:14:5f: b7:03:db:c1:77:14:24:f8:c9:f7:0f:39:f5:3c:43: 1a:d9:24:b8:b9:74:dc:8e:3f:7b:d5:49:b3:0e:9e: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:7D:BB:FC:85:94:04:B8:72:97:85:15:40:DF:38:F9:93:72:89 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bb:a7:02:f7:45:c7:33:83:e2:4c:85:b0:af:d3:7d:e8:14: af:ca:d7:d0:45:63:fa:6a:2d:e3:f6:4b:51:76:e4:57:b1:a8: a8:1f:7c:75:d8:df:b7:8d:33:19:a8:da:2a:bb:2c:e8:1d:63: 40:29:a6:70:e5:ae:72:bc:50:95:1b:ac:0f:12:b0:1f:24:51: 7a:24:e0:81:27:9e:57:b9:d7:f5:02:7f:00:c5:26:c9:81:39: 45:c6:06:46:e7:2f:13:9b:0b:6c:02:23:35:8a:09:a5:2d:bb: 7e:27:0d:ce:95:55:85:5f:bb:40:6b:e7:75:2c:df:f5:cb:80: ed:b0:51:df:56:e8:d5:4b:15:11:1a:80:20:f8:79:9f:f3:05: b8:ba:d3:ad:97:c0:16:df:a1:b9:aa:9a:c3:6a:8b:13:5a:01: 17:5d:de:21:90:32:2f:a4:68:40:a3:27:ce:a6:a6:65:75:20: 5e:2f:86:79:fd:fc:dd:a0:53:0b:08:21:3d:11:6a:18:fe:a0: f4:f5:af:5c:77:ab:1e:81:6d:33:6b:a3:60:c5:0f:48:f3:93: ee:3d:9f:8c:29:92:0e:ae:7e:f2:68:88:a4:bf:aa:39:ef:40: 00:5c:b3:ef:8a:c1:87:7e:fa:75:cb:d6:d7:4c:31:1c:7d:20: 88:cb:c0:80 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFsbbmiRQmFHL025fE/WL3RUGSuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjA5MjYyMTE1NDVaFw0yNjA5MjgwMDM0NDVaMDMxMTAvBgNV BAMTKDkwREE3REJCRkM4NTk0MDRCODcyOTc4NTE1NDBERjM4Rjk5MzcyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9204/6KlHXh564v+hejgrV/yN lkmnzIquPY+k+Aye/6R15mW7FlBgZgSwCmfF4bQi/fFMPJ60BEEDRg076s2XhiGC q3W6UMDdys/NE8UtI5+JFFWIfH6kerrHt1d28wi5ts6hsEsGwHN66PrYlnvWo7Bm xCYvxt+fXSnzdtQdPciuAuIKsbAyWDMs00MD0hxqbvs1S6CzJQvbhB7t563qHLo8 3DhFuD53+QL1phRWWYuRAyMo45CzRWTdoabP9VpIKPueBO8oPt+r2yhF6lQnL41r ulPqfjjT0xPoxTIUX7cD28F3FCT4yfcPOfU8QxrZJLi5dNyOP3vVSbMOnqUNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUkNp9u/yFlAS4cpeFFUDfOPmTcokwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8xLzMwRUMzNDFD QzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeu6cC 90XHM4PiTIWwr9N96BSvytfQRWP6ai3j9ktRduRXsaioH3x12N+3jTMZqNoquyzo HWNAKaZw5a5yvFCVG6wPErAfJFF6JOCBJ55Xudf1An8AxSbJgTlFxgZG5y8Tmwts AiM1igmlLbt+Jw3OlVWFX7tAa+d1LN/1y4DtsFHfVujVSxURGoAg+Hmf8wW4utOt l8AW36G5qprDaosTWgEXXd4hkDIvpGhAoyfOpqZldSBeL4Z5/fzdoFMLCCE9EWoY /qD09a9cd6segW0za6NgxQ9I85PuPZ+MKZIOrn7yaIikv6o570AAXLPvisGHfvp1 y9bXTDEcfSCIy8CA -----END CERTIFICATE-----Generated at Sun Sep 27 10:12:13 2026 by rpki-client