$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: Fr5xoSotpDNvsFcaHQUeEshUHiiqFXMm7h5yLmaA86U= Subject key identifier: 15:76:57:51:BB:74:52:11:FC:96:99:66:41:71:3E:3C:92:B6:2B:21 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 0517931EB322DDA40CB1CD3EB12216CAA681133F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: 015C Signing time: Mon 28 Sep 2026 19:42:08 +0000 Manifest this update: Mon 28 Sep 2026 19:37:08 +0000 Manifest next update: Tue 29 Sep 2026 23:36:08 +0000 Files and hashes: 1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) 2: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: zz15ZZaVsnwlwsGkl6Dp82EJOu8+gbC27Imszs8bW4I=) 3: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 4: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 5: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) 6: 326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa (hash: jkUpaqC40AVryws2M4l3hA6Beu5Hl97BKn2xwWx/2YU=) 7: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 8: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 23:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:17:93:1e:b3:22:dd:a4:0c:b1:cd:3e:b1:22:16:ca:a6:81:13:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Sep 28 19:37:08 2026 GMT Not After : Sep 29 23:36:08 2026 GMT Subject: CN=15765751BB745211FC96996641713E3C92B62B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:74:db:33:5b:f4:16:25:c1:de:1b:19:f2: 25:42:9d:83:fc:a2:79:0d:01:28:ca:97:bb:e3:ff: ef:32:2e:13:97:fd:0f:a7:15:9b:07:28:4d:04:7a: ac:0a:51:0b:ca:ff:50:e1:47:1b:c5:e1:4b:a8:f1: df:a7:b0:0d:df:2d:42:8a:26:90:1f:4c:6d:3d:12: 7d:d5:90:d1:22:96:b4:3d:18:fe:ff:c1:b1:29:09: 30:f8:9c:c1:9c:d1:3e:c6:f6:43:ad:0c:1b:7e:b3: ab:e6:2b:ce:af:14:5a:61:05:be:62:9d:f2:8a:1c: 60:84:e3:b4:29:33:88:86:c0:97:d0:8d:ce:79:42: 24:93:da:36:c9:d4:1e:92:d7:75:91:2b:1d:d0:66: 8a:60:cd:d4:92:06:f4:1a:de:32:21:6d:10:03:d2: 30:a5:e5:61:f0:83:23:b0:2f:7e:95:97:f0:51:5e: 02:9f:23:6f:3f:23:3d:e8:2f:46:3b:89:51:e1:a0: 81:29:be:c4:f9:2a:ba:45:43:14:9e:63:b0:1e:2b: c8:64:16:63:69:27:76:7b:57:8e:3c:b9:fa:37:73: 80:3a:35:21:d3:ab:6b:c6:b9:65:54:9b:de:7b:c2: fe:10:47:16:04:96:bc:76:ac:d2:ba:ca:0a:a1:aa: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:76:57:51:BB:74:52:11:FC:96:99:66:41:71:3E:3C:92:B6:2B:21 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b8:79:f9:21:d3:35:14:33:d9:3f:67:ff:c6:70:02:48:3e: 73:84:b0:85:2b:ac:57:68:c7:ce:56:5c:cc:36:be:13:b7:13: 1e:f5:42:f3:0f:db:00:d6:24:26:17:40:e7:76:ff:5c:c3:35: 73:85:73:cc:13:49:e5:41:61:df:6e:b3:85:8a:e8:ef:97:7c: 3c:9b:9e:8b:24:42:df:70:4b:58:db:6f:d3:95:d6:e5:f9:40: 6d:f3:2a:91:fc:72:e5:11:2a:4a:52:63:2e:78:ea:ea:fb:60: b8:a6:69:b2:0d:59:fd:bc:33:7d:bf:91:df:6b:70:21:15:db: 6d:57:37:38:5a:c8:8a:7d:fe:2a:d9:7f:27:42:3a:55:52:24: e0:3b:56:e7:ba:03:bc:5d:c1:8f:44:ec:07:c3:10:6b:64:2f: f6:7f:eb:c0:e3:ce:97:38:78:7c:3d:ae:b3:15:8f:68:52:68: a7:c9:16:21:da:4b:8d:0e:30:58:ba:79:63:5e:dc:c4:7b:00: 78:32:13:4b:d8:76:b3:d5:f7:e0:57:06:0a:54:66:51:71:87: 83:a8:f5:1a:b4:27:91:c7:4f:1c:75:08:60:1d:cb:6c:e9:ac: 2b:78:5e:f7:3a:5b:69:7f:b9:15:79:92:47:7d:4e:0d:52:8d: 38:f9:15:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBReTHrMi3aQMsc0+sSIWyqaBEz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA5MjgxOTM3MDhaFw0yNjA5MjkyMzM2MDhaMDMxMTAvBgNV BAMTKDE1NzY1NzUxQkI3NDUyMTFGQzk2OTk2NjQxNzEzRTNDOTJCNjJCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNxXTbM1v0FiXB3hsZ8iVCnYP8 onkNASjKl7vj/+8yLhOX/Q+nFZsHKE0EeqwKUQvK/1DhRxvF4Uuo8d+nsA3fLUKK JpAfTG09En3VkNEilrQ9GP7/wbEpCTD4nMGc0T7G9kOtDBt+s6vmK86vFFphBb5i nfKKHGCE47QpM4iGwJfQjc55QiST2jbJ1B6S13WRKx3QZopgzdSSBvQa3jIhbRAD 0jCl5WHwgyOwL36Vl/BRXgKfI28/Iz3oL0Y7iVHhoIEpvsT5KrpFQxSeY7AeK8hk FmNpJ3Z7V448ufo3c4A6NSHTq2vGuWVUm957wv4QRxYElrx2rNK6ygqhqkENAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFXZXUbt0UhH8lplmQXE+PJK2KyEwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLuHn5 IdM1FDPZP2f/xnACSD5zhLCFK6xXaMfOVlzMNr4TtxMe9ULzD9sA1iQmF0Dndv9c wzVzhXPME0nlQWHfbrOFiujvl3w8m56LJELfcEtY22/Tldbl+UBt8yqR/HLlESpK UmMueOrq+2C4pmmyDVn9vDN9v5Hfa3AhFdttVzc4WsiKff4q2X8nQjpVUiTgO1bn ugO8XcGPROwHwxBrZC/2f+vA486XOHh8Pa6zFY9oUminyRYh2kuNDjBYunljXtzE ewB4MhNL2Haz1ffgVwYKVGZRcYeDqPUatCeRx08cdQhgHcts6awreF73Oltpf7kV eZJHfU4NUo04+RXa -----END CERTIFICATE-----Generated at Tue Sep 29 12:56:50 2026 by rpki-client