$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json) Hash identifier: jdqe7OQq5l7OGywIQ12sb07qDgVPlt0cXoiB0FKcZMk= Subject key identifier: 24:D8:16:F1:A2:CA:1C:81:0B:C6:95:95:54:D8:AF:B0:9D:D1:4E:D1 Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Certificate serial: 20FF985259230040A351785D72B6B1CAE9F9AA7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft Manifest number: 0186 Signing time: Fri 25 Sep 2026 12:52:28 +0000 Manifest this update: Fri 25 Sep 2026 12:47:28 +0000 Manifest next update: Sat 26 Sep 2026 13:31:28 +0000 Files and hashes: 1: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=) 2: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: YLjl9CYX+31A3y5LvoUUGomuEgWz2jYQdsrDVVaCpFg=) 3: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=) 4: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=) 5: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ff:98:52:59:23:00:40:a3:51:78:5d:72:b6:b1:ca:e9:f9:aa:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Validity Not Before: Sep 25 12:47:28 2026 GMT Not After : Sep 26 13:31:28 2026 GMT Subject: CN=24D816F1A2CA1C810BC6959554D8AFB09DD14ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:76:51:8b:41:8c:69:b9:19:5a:b9:07:e3: ac:b7:21:ec:7a:02:bb:88:1f:d4:aa:d2:22:95:f5: 0f:44:46:42:74:56:38:9b:ab:98:ad:97:4d:de:61: 1e:b8:d2:60:ce:03:9a:21:e6:a5:75:47:aa:02:ad: 9f:c9:bd:cc:25:0a:df:78:77:e0:06:9b:38:60:1c: 51:0a:91:83:a6:de:69:5f:e6:86:35:60:c4:27:1d: 81:ea:73:4b:33:df:e7:3a:04:15:b3:d3:15:44:a4: be:2b:4b:c4:28:4d:04:2e:ea:fa:03:51:91:9a:1d: e7:ee:05:c9:de:58:62:d0:50:a9:46:e1:5d:27:18: 31:80:9f:0f:98:db:59:40:d2:89:c2:0d:66:55:99: 2e:49:5b:a0:ee:87:fe:eb:13:b4:48:e1:61:70:4c: 91:89:3f:81:dd:2d:3a:29:51:f7:ec:4a:e9:cb:6f: d7:36:2e:ef:8c:64:2a:bd:c9:5b:ec:93:3c:12:84: 90:a4:41:fc:72:ec:a3:ec:a3:9d:7d:70:f3:ff:05: ac:6b:7f:ae:32:ee:cc:9b:de:cc:1e:e4:ce:4f:f0: ae:f9:2c:3a:f1:69:d9:7a:55:f3:15:0c:c3:e0:9e: 03:1f:c3:0a:6e:d1:bf:59:96:e8:cd:be:78:de:df: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D8:16:F1:A2:CA:1C:81:0B:C6:95:95:54:D8:AF:B0:9D:D1:4E:D1 X509v3 Authority Key Identifier: keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c7:9f:bf:53:b1:7d:d0:2a:a5:b4:47:1a:bb:f1:9c:e7:7d: ae:11:e4:30:48:93:4f:34:9c:04:d7:a7:df:e2:5f:5d:82:ad: e3:4d:57:a7:3a:6d:7b:59:06:6b:b0:e2:e4:e1:71:2a:27:50: f7:6b:2c:8b:92:52:0b:fe:b4:b4:c6:6d:3f:02:11:7d:a1:6d: e5:2f:46:70:81:a6:40:3d:96:e7:c4:10:68:f9:8e:c2:65:c4: 3a:d9:1a:d2:f3:d8:75:e9:27:81:3d:59:19:94:0b:d7:cd:b3: fa:3e:08:75:07:46:5f:97:87:ff:3b:d1:e4:f3:79:23:3a:79: ce:60:c4:e9:7e:10:0a:0e:43:4d:7a:3a:8d:a2:d9:a6:87:dc: b0:cc:0c:56:b2:a2:ce:be:23:e0:11:26:e1:1f:94:cd:c9:b5: e7:eb:80:72:23:39:37:f7:9d:c8:54:04:66:a2:2e:ec:1d:03: c9:22:45:80:eb:6c:54:3b:ad:7b:47:12:c0:84:e1:21:50:e3: 3c:4b:d7:89:fc:35:f3:78:ab:ed:f5:25:bc:46:b0:17:6e:34: d4:af:8d:48:5b:b6:b5:8c:30:83:66:b9:92:91:0c:a6:c2:76: 8f:00:cd:81:2c:54:c6:37:43:1c:71:7c:a9:b0:95:10:41:c7: 02:e2:73:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIP+YUlkjAECjUXhdcraxyun5qnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1YjYwYmIwY2JiNGE1M2Q5NTQ1YmMyMGI3NzRmZmEw MzZiNGE0NjAeFw0yNjA5MjUxMjQ3MjhaFw0yNjA5MjYxMzMxMjhaMDMxMTAvBgNV BAMTKDI0RDgxNkYxQTJDQTFDODEwQkM2OTU5NTU0RDhBRkIwOUREMTRFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3XZRi0GMabkZWrkH46y3Iex6 AruIH9Sq0iKV9Q9ERkJ0Vjibq5itl03eYR640mDOA5oh5qV1R6oCrZ/JvcwlCt94 d+AGmzhgHFEKkYOm3mlf5oY1YMQnHYHqc0sz3+c6BBWz0xVEpL4rS8QoTQQu6voD UZGaHefuBcneWGLQUKlG4V0nGDGAnw+Y21lA0onCDWZVmS5JW6Duh/7rE7RI4WFw TJGJP4HdLTopUffsSunLb9c2Lu+MZCq9yVvskzwShJCkQfxy7KPso519cPP/Baxr f64y7syb3swe5M5P8K75LDrxadl6VfMVDMPgngMfwwpu0b9ZlujNvnje36FrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJNgW8aLKHIELxpWVVNivsJ3RTtEwHwYDVR0j BBgwFoAUKVtguwy7SlPZVFvCC3dP+gNrSkYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzUvMjk1QjYwQkIwQ0JCNEE1M0Q5NTQ1QkMyMEI3NzRGRkEwMzZCNEE0Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tWdGd1d3k3U2xQWlZGdkNDM2RQLWdO clNrWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvNS8yOTVCNjBCQjBDQkI0QTUzRDk1 NDVCQzIwQjc3NEZGQTAzNkI0QTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcefv1OxfdAqpbRHGrvx nOd9rhHkMEiTTzScBNen3+JfXYKt401Xpzpte1kGa7Di5OFxKidQ92ssi5JSC/60 tMZtPwIRfaFt5S9GcIGmQD2W58QQaPmOwmXEOtka0vPYdekngT1ZGZQL182z+j4I dQdGX5eH/zvR5PN5Izp5zmDE6X4QCg5DTXo6jaLZpofcsMwMVrKizr4j4BEm4R+U zcm15+uAciM5N/edyFQEZqIu7B0DySJFgOtsVDute0cSwIThIVDjPEvXifw183ir 7fUlvEawF2401K+NSFu2tYwwg2a5kpEMpsJ2jwDNgSxUxjdDHHF8qbCVEEHHAuJz Tg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:51:07 2026 by rpki-client