$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: m5nVxPRO4zcww1t2yb8/54SaAYANIDuxHv+TSZ/qOfU= Subject key identifier: 04:43:A9:DA:C8:76:4C:FE:63:90:FF:8F:2F:E0:F7:7C:77:D1:B9:64 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 04097A5ED865EA993F5978969423793653242775 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 02F7 Signing time: Sun 04 Oct 2026 10:15:10 +0000 Manifest this update: Sun 04 Oct 2026 10:10:10 +0000 Manifest next update: Mon 05 Oct 2026 13:43:10 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: hVVtSmH9/kSm1eUGK9PVBKPNWiY2iF64P6/X5hxSIdM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:09:7a:5e:d8:65:ea:99:3f:59:78:96:94:23:79:36:53:24:27:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Oct 4 10:10:10 2026 GMT Not After : Oct 5 13:43:10 2026 GMT Subject: CN=0443A9DAC8764CFE6390FF8F2FE0F77C77D1B964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:7b:8a:bb:7c:3f:0c:3e:4b:35:5d:1b:fc: 7f:dd:85:1b:8e:a8:cc:14:a5:9c:08:16:cc:87:85: ab:ba:a7:ec:8d:b6:13:f4:a5:28:09:86:6f:e9:ab: 19:d9:bb:26:2f:a0:b6:96:46:46:0b:f2:36:7a:6f: a7:90:9f:4e:5c:3c:ba:11:70:cb:ba:93:b4:39:8d: 40:fa:30:0b:37:c6:6b:96:35:8f:64:64:39:08:41: 82:7c:d1:3d:a3:7d:22:80:e7:23:94:60:d4:1a:6e: f2:d5:14:cc:f1:8c:c3:55:38:09:0a:a3:9c:fd:9c: e8:a2:81:80:12:17:2f:8f:f0:ff:0d:33:c0:53:14: 2c:4d:7c:7a:67:0c:33:87:a8:f3:43:3e:ad:e5:08: 2d:c4:2e:06:c3:ff:a9:54:3a:24:1d:2a:b0:86:e8: 35:36:4d:62:25:e1:e7:8c:fd:d1:62:79:9b:3c:0e: 4b:c6:25:1b:52:17:96:27:49:90:ce:ac:10:7e:07: 35:3b:9a:1a:70:0a:da:5a:06:b1:ad:2a:d3:26:6b: 5f:ab:75:ff:1c:a3:9f:78:52:1d:d3:3d:ce:a6:24: 00:72:e5:72:40:24:bc:0c:50:28:8a:5e:31:b0:62: fa:54:7a:01:5b:10:85:77:4d:c6:26:c4:f0:48:44: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:A9:DA:C8:76:4C:FE:63:90:FF:8F:2F:E0:F7:7C:77:D1:B9:64 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:03:d9:2a:b5:b5:f1:e7:46:b8:e6:c2:73:2f:b9:c5:af: 32:6f:e3:5d:0c:eb:1f:54:0a:9a:1f:6d:cd:63:41:7b:61:86: e4:80:49:1b:b5:00:f8:bb:19:31:7e:4a:83:6d:c5:3c:62:e2: 6f:8a:87:d7:f8:c8:43:a9:92:2e:a6:f0:06:78:21:59:87:c5: b5:9a:b7:05:ba:ed:21:f1:56:35:6b:07:76:1c:07:7e:bd:9c: 4d:f5:07:89:68:3a:c2:74:39:a5:11:1a:8c:a8:03:c8:0f:ad: a7:58:10:46:67:50:d3:78:27:8e:7f:33:13:4a:1b:4b:00:21: d8:85:56:1e:01:d0:4f:59:c3:1c:10:65:d8:85:2e:48:63:2a: cf:dd:1f:d7:2c:77:e5:3e:32:ae:d7:72:17:c8:95:42:c5:d4: 9e:20:61:f1:a0:66:0a:49:5a:fc:be:c2:3f:4b:bf:e8:38:92: f5:b8:da:41:80:2c:27:1e:37:6d:af:f1:d9:5f:82:fe:de:d1: 6e:15:e5:9d:d0:81:61:f1:b2:6a:38:03:74:4f:2f:60:a2:d3: 98:3b:63:75:32:ce:09:3a:42:04:b7:da:30:4e:49:d9:55:46: 73:3c:f1:cf:e6:62:73:d4:0f:9a:b3:3f:8e:58:ab:1d:47:bc: af:fb:23:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBAl6Xthl6pk/WXiWlCN5NlMkJ3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjEwMDQxMDEwMTBaFw0yNjEwMDUxMzQzMTBaMDMxMTAvBgNV BAMTKDA0NDNBOURBQzg3NjRDRkU2MzkwRkY4RjJGRTBGNzdDNzdEMUI5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvHuKu3w/DD5LNV0b/H/dhRuO qMwUpZwIFsyHhau6p+yNthP0pSgJhm/pqxnZuyYvoLaWRkYL8jZ6b6eQn05cPLoR cMu6k7Q5jUD6MAs3xmuWNY9kZDkIQYJ80T2jfSKA5yOUYNQabvLVFMzxjMNVOAkK o5z9nOiigYASFy+P8P8NM8BTFCxNfHpnDDOHqPNDPq3lCC3ELgbD/6lUOiQdKrCG 6DU2TWIl4eeM/dFieZs8DkvGJRtSF5YnSZDOrBB+BzU7mhpwCtpaBrGtKtMma1+r df8co594Uh3TPc6mJABy5XJAJLwMUCiKXjGwYvpUegFbEIV3TcYmxPBIRLSPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBEOp2sh2TP5jkP+PL+D3fHfRuWQwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbowPZ KrW18edGuObCcy+5xa8yb+NdDOsfVAqaH23NY0F7YYbkgEkbtQD4uxkxfkqDbcU8 YuJviofX+MhDqZIupvAGeCFZh8W1mrcFuu0h8VY1awd2HAd+vZxN9QeJaDrCdDml ERqMqAPID62nWBBGZ1DTeCeOfzMTShtLACHYhVYeAdBPWcMcEGXYhS5IYyrP3R/X LHflPjKu13IXyJVCxdSeIGHxoGYKSVr8vsI/S7/oOJL1uNpBgCwnHjdtr/HZX4L+ 3tFuFeWd0IFh8bJqOAN0Ty9gotOYO2N1Ms4JOkIEt9owTknZVUZzPPHP5mJz1A+a sz+OWKsdR7yv+yM4 -----END CERTIFICATE-----Generated at Sun Oct 4 22:03:09 2026 by rpki-client