$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: Oe3Ql9JgorEJTxsM2hvETkItV2SvLfXhkX5C0lCVOZU= Subject key identifier: 8B:33:E6:1C:2A:33:71:89:97:C3:C5:D9:73:56:4C:46:BF:A9:4E:CC Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 0F35770FB54AA64F57631EEA88DE158A3CBD6F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: F0 Signing time: Wed 23 Sep 2026 07:13:49 +0000 Manifest this update: Wed 23 Sep 2026 07:08:49 +0000 Manifest next update: Thu 24 Sep 2026 09:06:49 +0000 Files and hashes: 1: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 2: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 3: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 4: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 5: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 6: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 7: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 8: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 9: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 10: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 11: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: sJaTj2ozh1xZUACVn8uQREsuu35FSv24TafsR+oJzRI=) 12: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:35:77:0f:b5:4a:a6:4f:57:63:1e:ea:88:de:15:8a:3c:bd:6f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Sep 23 07:08:49 2026 GMT Not After : Sep 24 09:06:49 2026 GMT Subject: CN=8B33E61C2A33718997C3C5D973564C46BFA94ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:e4:22:31:41:5b:12:66:6b:3c:bc:91:ce: bf:55:5f:11:ed:51:09:89:91:60:ef:25:dd:33:03: 58:2b:72:61:ec:ad:cc:ec:84:23:0d:5e:38:d6:5a: 91:81:8a:07:9b:e9:a9:03:b0:89:0c:15:a6:6f:ba: 4c:c1:aa:62:71:d6:2d:eb:1c:05:71:b5:17:61:48: fa:89:99:cc:f9:b2:db:7d:02:93:5c:e6:15:7a:b4: 77:83:8d:02:28:71:ed:32:1f:4e:39:e4:41:0e:aa: cc:c5:fa:5e:d7:5d:09:4c:6f:62:82:4e:65:2e:c7: bd:52:80:1b:74:91:f2:f8:ef:60:50:43:dd:53:5c: 68:83:1a:9a:62:78:55:41:02:ce:07:a7:92:41:a8: 74:ec:05:68:b6:72:8a:50:4e:20:91:a8:3c:bd:5f: c9:2a:2b:40:3e:5b:b1:b8:02:2a:44:1d:0b:5a:bc: 63:5a:7a:e5:66:ce:db:56:06:e4:8e:76:95:4a:72: 13:2b:6e:29:82:f6:5b:d2:67:35:6c:ce:62:95:f8: 7c:99:da:62:88:5a:3d:32:2b:3b:43:07:e6:8d:14: ae:13:37:0c:66:2b:10:56:ea:50:7f:1e:a0:3a:35: 96:c6:bb:ef:77:ba:db:1b:a0:fc:3b:b4:9c:98:68: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:33:E6:1C:2A:33:71:89:97:C3:C5:D9:73:56:4C:46:BF:A9:4E:CC X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:06:6b:15:23:fe:98:0c:f4:56:bc:27:9b:a6:1a:c5:34:a2: 51:42:85:22:44:0d:92:9f:55:ba:9b:2b:9e:9d:bc:9f:2a:30: ad:4a:8f:25:b1:62:9f:8a:ad:93:bc:80:5c:76:65:13:3d:e9: ce:dd:9e:c3:ed:5f:2a:e6:7a:14:27:c1:9e:c5:5b:37:19:fb: f5:28:f5:1c:92:df:6d:72:95:e0:e0:10:6d:a8:d1:2f:d7:f7: af:49:3c:59:7a:c1:4f:24:86:84:27:46:d4:40:d3:73:c0:b3: 2a:39:15:b0:f7:b8:e0:46:68:16:6e:3c:cc:21:d5:50:4c:97: 63:3d:da:77:ba:ec:04:0d:d2:c4:2a:7f:0c:ca:f1:d5:f1:67: f0:c6:b0:cf:de:2d:50:e6:a1:66:d2:cc:64:11:21:72:e8:65: ec:10:c7:7b:cc:a9:7b:6e:8c:d2:8c:14:4f:12:82:07:00:81: 89:40:47:ea:71:cb:93:87:24:d8:13:aa:af:ef:7a:ca:f6:07: 23:d1:15:96:53:54:54:e2:99:41:b5:85:02:c9:8a:7d:65:c4: 11:bf:f1:6c:f8:c6:7a:49:c6:64:ad:34:4e:cc:80:75:a6:92: 5d:46:b2:2d:68:3c:f8:1f:db:8d:df:f7:24:7a:c3:a9:6b:32: 9a:14:30:ea -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDzV3D7VKpk9XYx7qiN4Vijy9bz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA5MjMwNzA4NDlaFw0yNjA5MjQwOTA2NDlaMDMxMTAvBgNV BAMTKDhCMzNFNjFDMkEzMzcxODk5N0MzQzVEOTczNTY0QzQ2QkZBOTRFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaROQiMUFbEmZrPLyRzr9VXxHt UQmJkWDvJd0zA1grcmHsrczshCMNXjjWWpGBigeb6akDsIkMFaZvukzBqmJx1i3r HAVxtRdhSPqJmcz5stt9ApNc5hV6tHeDjQIoce0yH0455EEOqszF+l7XXQlMb2KC TmUux71SgBt0kfL472BQQ91TXGiDGppieFVBAs4Hp5JBqHTsBWi2copQTiCRqDy9 X8kqK0A+W7G4AipEHQtavGNaeuVmzttWBuSOdpVKchMrbimC9lvSZzVszmKV+HyZ 2mKIWj0yKztDB+aNFK4TNwxmKxBW6lB/HqA6NZbGu+93utsboPw7tJyYaIhTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUizPmHCozcYmXw8XZc1ZMRr+pTswwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwZrFSP+mAz0Vrwnm6Ya xTSiUUKFIkQNkp9Vupsrnp28nyowrUqPJbFin4qtk7yAXHZlEz3pzt2ew+1fKuZ6 FCfBnsVbNxn79Sj1HJLfbXKV4OAQbajRL9f3r0k8WXrBTySGhCdG1EDTc8CzKjkV sPe44EZoFm48zCHVUEyXYz3ad7rsBA3SxCp/DMrx1fFn8Mawz94tUOahZtLMZBEh cuhl7BDHe8ype26M0owUTxKCBwCBiUBH6nHLk4ck2BOqr+96yvYHI9EVllNUVOKZ QbWFAsmKfWXEEb/xbPjGeknGZK00TsyAdaaSXUayLWg8+B/bjd/3JHrDqWsymhQw 6g== -----END CERTIFICATE-----Generated at Wed Sep 23 10:07:53 2026 by rpki-client