$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: SHrsJ7Tz7rMFOjoXtPDgVtt4ficrBjY9zPH27qf4aZo= Subject key identifier: 10:F1:46:FD:B7:69:A3:66:8B:A4:54:7F:62:F5:54:52:40:34:C4:08 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 3A46DD6731713D99AE7230E13D1A92AF31AD70E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 014E Signing time: Fri 25 Sep 2026 09:55:33 +0000 Manifest this update: Fri 25 Sep 2026 09:50:33 +0000 Manifest next update: Sat 26 Sep 2026 10:05:33 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: 66FXNE34k1vLNdh+AjOK3KmiqWcm6S4E5pt2kRjMnXk=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 10:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:46:dd:67:31:71:3d:99:ae:72:30:e1:3d:1a:92:af:31:ad:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Sep 25 09:50:33 2026 GMT Not After : Sep 26 10:05:33 2026 GMT Subject: CN=10F146FDB769A3668BA4547F62F554524034C408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:81:41:2c:e3:71:ff:cb:08:9c:41:2e:2f: c9:56:94:8d:d3:7c:e0:39:75:dc:03:db:9d:64:43: 34:32:a5:2b:f7:f8:42:9f:73:8c:53:25:6f:ca:ae: 22:7a:33:a6:88:62:dc:57:49:50:53:d6:d8:2f:05: 20:42:4d:be:3a:53:be:4e:43:15:61:2d:9e:f9:17: 0e:73:33:c0:e2:44:e4:ef:19:ae:a3:04:34:e4:77: a1:4b:f0:7b:ab:9b:a7:88:d0:18:a0:06:2a:d2:be: 40:a2:4f:a7:bd:0e:f4:f7:b1:d2:f4:ed:c3:d1:f6: f8:e3:f6:43:09:39:30:02:e0:eb:69:0a:f4:a5:81: 98:55:3f:a3:14:0f:8e:80:9b:e0:a4:1c:ac:2e:ac: 44:5b:07:8e:57:75:a1:59:99:df:cf:c7:bc:1d:64: 8f:40:46:02:30:d5:a8:45:1a:97:95:b0:3c:a5:fa: 79:ca:94:29:7f:d6:41:52:ab:b8:79:32:b3:69:ae: 79:f3:5f:99:79:fd:a5:71:62:9e:b2:e1:46:34:88: 70:d7:fb:78:0d:74:2c:9b:c1:15:a5:b4:99:a0:68: ce:dd:50:f4:6d:b3:bb:89:c6:72:21:3f:b3:e7:84: b4:80:c7:1f:ae:26:86:a3:5c:d3:f7:7c:eb:30:79: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:46:FD:B7:69:A3:66:8B:A4:54:7F:62:F5:54:52:40:34:C4:08 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:99:9c:b5:71:d4:5c:89:f3:70:16:b9:e4:d9:e5:aa:02: 19:20:37:75:4c:b6:be:e3:f4:f7:e3:c9:3e:88:f4:0c:17:ba: bc:83:f1:f3:fa:10:97:0f:ed:1f:7f:81:4e:0f:f1:ac:6a:e3: 90:19:50:dd:26:b7:d7:67:c6:6e:f7:6a:a9:21:80:eb:4f:6f: 8a:8d:4f:14:51:fd:34:87:41:15:95:f0:92:59:f7:33:6f:e6: 6e:5b:6c:3b:cc:f1:ed:1f:76:79:22:73:10:66:17:0b:b4:0a: a8:72:b6:0a:48:b6:7f:ec:46:64:65:45:45:d6:45:8f:1e:c5: 0a:48:99:1d:52:13:d9:de:16:14:d6:f8:b6:d0:59:4d:1a:42: bf:14:99:31:1a:c9:54:10:35:29:66:a1:9a:a1:bc:c3:1a:b4: a5:db:67:db:02:0c:11:bb:47:c2:8c:fd:f4:c0:0b:95:52:ab: 51:7f:d9:ee:7e:85:7a:d2:13:e6:37:2c:e6:57:34:67:c9:0e: 5b:24:66:57:bc:01:07:7f:65:2c:b4:3e:18:b6:e1:5d:9d:44: fa:1f:a5:ee:c2:8b:f4:72:4b:4b:49:e0:b5:c7:86:de:e6:c7: d1:aa:82:9f:6b:c0:a8:98:e7:2b:c0:d3:2e:0b:5c:23:61:31: 9f:5b:9b:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOkbdZzFxPZmucjDhPRqSrzGtcOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA5MjUwOTUwMzNaFw0yNjA5MjYxMDA1MzNaMDMxMTAvBgNV BAMTKDEwRjE0NkZEQjc2OUEzNjY4QkE0NTQ3RjYyRjU1NDUyNDAzNEM0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsoFBLONx/8sInEEuL8lWlI3T fOA5ddwD251kQzQypSv3+EKfc4xTJW/KriJ6M6aIYtxXSVBT1tgvBSBCTb46U75O QxVhLZ75Fw5zM8DiROTvGa6jBDTkd6FL8Hurm6eI0BigBirSvkCiT6e9DvT3sdL0 7cPR9vjj9kMJOTAC4OtpCvSlgZhVP6MUD46Am+CkHKwurERbB45XdaFZmd/Px7wd ZI9ARgIw1ahFGpeVsDyl+nnKlCl/1kFSq7h5MrNprnnzX5l5/aVxYp6y4UY0iHDX +3gNdCybwRWltJmgaM7dUPRts7uJxnIhP7PnhLSAxx+uJoajXNP3fOsweXPhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEPFG/bdpo2aLpFR/YvVUUkA0xAgwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiXpmc tXHUXInzcBa55NnlqgIZIDd1TLa+4/T348k+iPQMF7q8g/Hz+hCXD+0ff4FOD/Gs auOQGVDdJrfXZ8Zu92qpIYDrT2+KjU8UUf00h0EVlfCSWfczb+ZuW2w7zPHtH3Z5 InMQZhcLtAqocrYKSLZ/7EZkZUVF1kWPHsUKSJkdUhPZ3hYU1vi20FlNGkK/FJkx GslUEDUpZqGaobzDGrSl22fbAgwRu0fCjP30wAuVUqtRf9nufoV60hPmNyzmVzRn yQ5bJGZXvAEHf2UstD4YtuFdnUT6H6Xuwov0cktLSeC1x4be5sfRqoKfa8ComOcr wNMuC1wjYTGfW5u4 -----END CERTIFICATE-----Generated at Sat Sep 26 03:12:22 2026 by rpki-client