$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft (raw, json) Hash identifier: gEUQQRzmy3UzLEW11XOWM/3PJzM/DpWSy5K2GpTmSGo= Subject key identifier: 33:8A:1E:83:C0:3F:03:B6:23:46:78:93:18:FD:34:1A:F9:B8:30:02 Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 015B4312FBCEBE9D004B318C5AC794BAE88052A7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft Manifest number: 83 Signing time: Fri 25 Sep 2026 23:59:54 +0000 Manifest this update: Fri 25 Sep 2026 23:54:54 +0000 Manifest next update: Sun 27 Sep 2026 02:56:54 +0000 Files and hashes: 1: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer (hash: y71+RU9g54azV5dgw7DVE0zHxfVhDYGxNOf9szJbWnM=) 2: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl (hash: 8UhotLzRQvMfsyGnuVmZJky/YgDZqSsZqMBLM6tmDs0=) 3: 326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa (hash: AfgwqGMO9CVHdwQKzdsRfhf5hmoXRPoKOMuiQAxIyuk=) 4: 326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa (hash: 2ZmhaFBQ0V4dJSXyRSyc++rk/qANEJwxFFR6aJ/nMXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:43:12:fb:ce:be:9d:00:4b:31:8c:5a:c7:94:ba:e8:80:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Sep 25 23:54:54 2026 GMT Not After : Sep 27 02:56:54 2026 GMT Subject: CN=338A1E83C03F03B62346789318FD341AF9B83002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:49:9e:b4:37:3d:47:b1:99:e6:de:34:24: 24:20:a5:5a:19:a8:5b:95:80:c2:fd:0d:5d:a9:af: e9:58:9d:3f:89:2a:22:3d:16:21:8c:89:36:d1:69: 36:72:33:7a:e0:7c:92:72:93:0c:d6:23:b4:eb:7e: 34:0f:be:46:e3:a1:c6:ad:ae:fb:f0:fa:b0:ae:a5: ca:19:96:23:7e:0b:d8:4b:34:7c:03:33:7f:1a:fa: 7c:74:a5:32:64:b7:90:91:12:c9:e0:89:94:f3:74: 4a:a2:9e:cb:b9:c9:3e:9e:af:b1:15:f5:36:63:48: 79:05:ff:e8:1e:95:87:7e:a2:6f:e7:e4:15:d4:14: cb:3b:8f:a1:74:0a:2e:6a:db:3c:d6:76:4b:35:de: e4:29:0e:29:9a:8e:dd:83:91:58:16:e7:d5:6d:3f: d3:f2:ef:2d:ce:31:e6:fb:26:54:d6:6e:5d:fc:8e: 68:c3:92:ac:6b:d8:66:8b:0b:c1:6a:13:b7:bd:e5: 74:0b:21:d8:4c:61:bc:f1:92:52:94:c1:00:0c:0a: cc:e4:12:1a:32:9a:2d:31:8b:0e:89:34:67:c4:b6: 07:7f:15:00:7d:38:38:51:f4:40:ce:17:98:c8:6a: 98:b9:ca:0a:78:63:eb:e2:df:26:83:82:5b:a5:62: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:1E:83:C0:3F:03:B6:23:46:78:93:18:FD:34:1A:F9:B8:30:02 X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:db:17:ec:a1:fc:62:47:6f:f9:06:55:74:88:b2:25:15:82: 72:ee:f3:93:06:bc:fa:d2:09:b9:f2:b7:96:c0:89:3b:15:39: 3a:a3:cd:35:c6:97:df:f5:d9:1c:30:21:25:73:f0:e9:1a:e7: 37:5b:57:5b:5b:6d:77:ad:26:37:7a:d4:73:51:b6:c0:46:a5: 40:2e:4e:3d:ee:ed:0a:c4:da:ac:86:cf:35:7b:d9:39:1d:de: b1:f6:08:48:7b:9e:32:34:56:0f:a6:6b:22:d0:5a:ce:66:fb: cf:01:ce:dd:25:55:1a:3d:64:7b:0f:af:ee:be:86:80:0b:da: 5f:c1:e8:5d:00:00:a4:7a:35:37:f2:15:71:09:4b:4c:31:c5: ba:d1:c0:ed:79:d0:1d:22:a3:f3:37:06:86:db:8c:8f:42:fc: f3:bc:2d:13:72:14:f7:0f:b4:ed:3e:7f:37:9d:53:19:30:90: 97:af:ac:7b:e4:86:92:a8:b7:23:1f:cd:55:b5:21:89:3a:40: 56:97:66:a5:c4:4c:24:c5:94:a3:2e:f7:b2:88:db:81:c9:d4: fd:fe:f5:a1:d3:cd:b8:8f:3d:57:72:d1:a6:af:d7:49:a8:39: e7:c3:5e:f3:5c:ea:ea:4c:4e:d0:0c:a2:61:55:ac:93:6c:7b: 52:d1:f6:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAVtDEvvOvp0ASzGMWseUuuiAUqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA5MjUyMzU0NTRaFw0yNjA5MjcwMjU2NTRaMDMxMTAvBgNV BAMTKDMzOEExRTgzQzAzRjAzQjYyMzQ2Nzg5MzE4RkQzNDFBRjlCODMwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEUmetDc9R7GZ5t40JCQgpVoZ qFuVgML9DV2pr+lYnT+JKiI9FiGMiTbRaTZyM3rgfJJykwzWI7TrfjQPvkbjocat rvvw+rCupcoZliN+C9hLNHwDM38a+nx0pTJkt5CREsngiZTzdEqinsu5yT6er7EV 9TZjSHkF/+gelYd+om/n5BXUFMs7j6F0Ci5q2zzWdks13uQpDimajt2DkVgW59Vt P9Py7y3OMeb7JlTWbl38jmjDkqxr2GaLC8FqE7e95XQLIdhMYbzxklKUwQAMCszk Ehoymi0xiw6JNGfEtgd/FQB9ODhR9EDOF5jIapi5ygp4Y+vi3yaDglulYnc1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM4oeg8A/A7YjRniTGP00Gvm4MAIwHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY3ODJkMzhiLTQwMTYtNDk2YS04Mjk4LWUzZTk3YmVlOTdiZC8xLzMwMEY4N0U0 NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK2xfs ofxiR2/5BlV0iLIlFYJy7vOTBrz60gm58reWwIk7FTk6o801xpff9dkcMCElc/Dp Guc3W1dbW213rSY3etRzUbbARqVALk497u0KxNqshs81e9k5Hd6x9ghIe54yNFYP pmsi0FrOZvvPAc7dJVUaPWR7D6/uvoaAC9pfwehdAACkejU38hVxCUtMMcW60cDt edAdIqPzNwaG24yPQvzzvC0TchT3D7TtPn83nVMZMJCXr6x75IaSqLcjH81VtSGJ OkBWl2alxEwkxZSjLveyiNuBydT9/vWh0824jz1XctGmr9dJqDnnw17zXOrqTE7Q DKJhVayTbHtS0fbO -----END CERTIFICATE-----Generated at Sat Sep 26 05:56:28 2026 by rpki-client