$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft File: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft (raw, json) Hash identifier: RBp/lZ7zBqS0YT39Pal4fUvHuOtDDzUrwS7JVIo/ayM= Subject key identifier: 3D:AE:EB:D2:03:26:0C:E7:DB:6E:8A:EF:A5:A8:ED:AD:B3:45:33:0A Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 72CF9DDDBB362D94F8822E358A90B3F81C2A7A0A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft Manifest number: 28 Signing time: Thu 24 Sep 2026 00:01:54 +0000 Manifest this update: Wed 23 Sep 2026 23:56:54 +0000 Manifest next update: Fri 25 Sep 2026 00:31:54 +0000 Files and hashes: 1: 326130353a646663363a3a2f33322d3438203d3e20323138383332.roa (hash: vkwaYaeWMNC1Ys7GO0AXyPEzVmDAxeBd8udglsBO7ZU=) 2: 326130353a646663363a3a2f33322d3438203d3e20323138393034.roa (hash: 5lbNdPAV2OZdblVdouY1xQHsnMnrbWb9RU2Hlj23tiI=) 3: 38352e3135352e3232362e302f32332d3233203d3e20323034343634.roa (hash: +acmDmMWHtQlMdklcaxLw6taQI5sUlK4TK6h9skpvvE=) 4: 326130353a646663363a3a2f33322d3438203d3e20323034343634.roa (hash: B8nf9oQedHxo7Uvn7kFEa7TPHRWtKI8dySGByyx8kYk=) 5: 38352e3135352e3232372e302f32342d3234203d3e20323138393034.roa (hash: qfTzGyn1Nl6egVGluNuViZeCMzqs0wSyO6mE/CC+VUI=) 6: 326130353a646663363a3a2f33322d3438203d3e20313939373436.roa (hash: OtbysRIpUSZzrNDU2rC91LQkafnSJ3qxzRUMD/qfhMg=) 7: 38352e3135352e3232362e302f32342d3234203d3e20323138383332.roa (hash: 1/jkEEeNOnP43ibyNPHAEJgCgm3Ka5HVhVqu++MU1P0=) 8: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl (hash: Dg9r6FihJDV+vIpIVG9uqyUIPdGOEsKrcXS6EiYIDoc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 00:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cf:9d:dd:bb:36:2d:94:f8:82:2e:35:8a:90:b3:f8:1c:2a:7a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 23 23:56:54 2026 GMT Not After : Sep 25 00:31:54 2026 GMT Subject: CN=3DAEEBD203260CE7DB6E8AEFA5A8EDADB345330A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:48:fa:a9:96:4e:a5:f5:66:99:ba:e4:d5:6a: 46:8c:1a:40:07:4f:ba:f5:88:54:40:fc:ab:e2:a8: fd:ad:68:91:e6:a6:74:54:58:b0:95:f8:64:6b:65: c3:7e:6a:52:5d:64:b0:bf:47:13:0e:44:49:09:6d: 9b:11:f4:f5:65:7f:b8:08:88:a4:28:c2:3f:b2:81: cc:77:f8:31:42:2b:8e:eb:4a:24:20:9c:7a:01:42: ef:23:f7:eb:82:ad:89:95:ef:c2:c2:b2:2d:78:af: 03:b5:1e:f7:72:83:37:cc:15:6e:5e:24:31:16:1c: fe:c3:e8:98:0c:b3:3f:62:d0:b3:b8:4d:ed:33:f4: 90:22:5c:59:ee:e5:69:c6:95:5c:58:4d:65:1e:e9: f3:16:e0:d6:47:dc:c1:95:3b:3e:7f:41:70:7f:e3: 44:33:46:6c:2f:05:91:9d:a1:3d:d2:bc:d3:6b:50: 8e:91:18:c0:da:f0:18:f0:64:d9:5a:37:a1:0e:12: ac:27:af:0e:d6:f0:2e:60:9a:af:21:fe:e6:50:24: 9e:be:ad:66:25:ca:a5:d1:65:a2:13:5f:8a:07:ae: 65:c2:b0:e3:6f:6b:36:17:4c:54:ac:b2:ab:24:d4: d8:ac:ee:96:c9:63:c5:60:49:1e:d7:d4:4c:92:63: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AE:EB:D2:03:26:0C:E7:DB:6E:8A:EF:A5:A8:ED:AD:B3:45:33:0A X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d6:18:51:77:6a:70:f2:20:06:fe:0b:0f:8e:d5:79:d6:32: 00:3c:ee:09:e6:fd:b2:8d:13:50:1f:ab:b0:a0:6f:55:a1:d0: 5b:88:a3:da:96:83:60:e7:b3:78:ab:44:7e:61:1b:24:1f:1a: d4:88:60:86:27:d5:7f:6b:11:c6:0a:0f:17:d0:a1:8e:f4:6c: a6:94:fd:fd:fa:19:9f:86:99:b3:0c:62:ab:51:7e:2a:c5:1a: 91:e2:c3:48:09:88:57:48:9f:e1:5d:4d:3b:d5:f9:dc:1a:7a: f8:da:46:3b:ef:2e:d0:12:83:4f:e4:ba:5c:f6:ae:53:ad:9e: 08:a5:7c:d7:4f:a9:83:bf:a3:85:92:34:c0:7e:75:be:52:5f: 51:8a:25:e1:32:53:e8:b6:1b:d4:93:b0:17:9b:24:f1:79:2b: 42:a9:7e:1a:7f:84:c5:1f:75:9a:e0:e5:b7:27:fa:c3:9c:24: 01:d6:a0:35:99:16:b2:fc:ab:58:7d:2a:a4:0e:c3:40:9f:20: 39:83:5e:49:dd:b1:d2:2c:d2:c4:69:65:79:36:74:66:ea:03: f4:33:1c:4b:6a:30:8a:27:be:b6:56:59:18:de:70:fd:ec:50: 24:29:7c:22:4b:dc:c9:8f:0f:c6:ae:a4:09:55:34:ef:3d:5a: 7f:65:de:73 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcs+d3bs2LZT4gi41ipCz+BwqegowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MjMyMzU2NTRaFw0yNjA5MjUwMDMxNTRaMDMxMTAvBgNV BAMTKDNEQUVFQkQyMDMyNjBDRTdEQjZFOEFFRkE1QThFREFEQjM0NTMzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDySPqplk6l9WaZuuTVakaMGkAH T7r1iFRA/KviqP2taJHmpnRUWLCV+GRrZcN+alJdZLC/RxMOREkJbZsR9PVlf7gI iKQowj+ygcx3+DFCK47rSiQgnHoBQu8j9+uCrYmV78LCsi14rwO1HvdygzfMFW5e JDEWHP7D6JgMsz9i0LO4Te0z9JAiXFnu5WnGlVxYTWUe6fMW4NZH3MGVOz5/QXB/ 40QzRmwvBZGdoT3SvNNrUI6RGMDa8BjwZNlaN6EOEqwnrw7W8C5gmq8h/uZQJJ6+ rWYlyqXRZaITX4oHrmXCsONvazYXTFSssqsk1Nis7pbJY8VgSR7X1EySYwn7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPa7r0gMmDOfbborvpajtrbNFMwowHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5Ni03 OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNC81MzcxNUYwNDc2RUExOUVCNjBE RDBGMzhEOTJGODRFOEQ0MEEwMjkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9YYUXdqcPIgBv4LD47V edYyADzuCeb9so0TUB+rsKBvVaHQW4ij2paDYOezeKtEfmEbJB8a1IhghifVf2sR xgoPF9ChjvRsppT9/foZn4aZswxiq1F+KsUakeLDSAmIV0if4V1NO9X53Bp6+NpG O+8u0BKDT+S6XPauU62eCKV810+pg7+jhZI0wH51vlJfUYol4TJT6LYb1JOwF5sk 8XkrQql+Gn+ExR91muDltyf6w5wkAdagNZkWsvyrWH0qpA7DQJ8gOYNeSd2x0izS xGlleTZ0ZuoD9DMcS2owiie+tlZZGN5w/exQJCl8IkvcyY8Pxq6kCVU07z1af2Xe cw== -----END CERTIFICATE-----Generated at Thu Sep 24 14:09:25 2026 by rpki-client