$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 63Zul++qYEb+3Mxg7R4+do2Tmcth0vbQ6Nr7qwB9K7s= Subject key identifier: 85:BD:A1:8C:7C:96:84:8D:D6:6A:93:40:08:06:75:CD:10:F0:ED:BC Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 56AE63F3FBEA0DA6EC7A4DD35D6DDE374866BD68 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 024B Signing time: Wed 23 Sep 2026 10:24:48 +0000 Manifest this update: Wed 23 Sep 2026 10:19:48 +0000 Manifest next update: Thu 24 Sep 2026 12:08:48 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: RK2zoRITKpyAIDciJGtyHaQjrKqcAjWQEX7duY+dLWg=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: 3Oy0/+Zmc9e5z/F4yp6K4LzyzEeGtPjpxBkzzaKS8w0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 12:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ae:63:f3:fb:ea:0d:a6:ec:7a:4d:d3:5d:6d:de:37:48:66:bd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Sep 23 10:19:48 2026 GMT Not After : Sep 24 12:08:48 2026 GMT Subject: CN=85BDA18C7C96848DD66A9340080675CD10F0EDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:0b:3b:38:0e:55:9d:8b:6b:b2:5e:f1:e2: 08:bb:76:d7:d8:88:22:c6:78:b1:56:6d:d6:47:fe: 5a:91:85:89:28:85:31:b8:ad:b0:8a:ff:76:ad:2e: 61:e1:7a:af:4d:dd:19:fd:b3:fb:59:4e:de:44:48: 7f:48:62:f2:63:fb:d4:de:78:67:53:9b:8d:b2:07: 3c:f2:2e:30:54:67:95:2c:1a:57:ff:93:fb:c1:73: 81:14:2a:78:93:0c:45:28:11:7b:04:1c:eb:09:90: 2c:9e:4e:34:8a:31:f5:e9:b0:26:b2:7f:fa:0a:67: b9:d0:26:3e:1c:bc:7f:39:5d:52:50:6d:0c:7e:b8: f8:88:5a:fc:46:43:87:ef:3f:8e:cb:8a:cb:ce:9b: 88:52:68:8f:18:69:6f:a1:bf:e5:e8:4d:08:0b:a7: 6c:ca:f3:ef:35:51:d9:da:c1:7d:a7:52:e0:21:87: c0:cd:6a:6f:62:2f:29:98:34:ba:ef:dc:1f:7a:13: 99:33:55:91:73:93:86:80:01:c5:25:d3:33:43:cd: c8:d1:28:02:d9:28:91:c1:6b:2f:6b:6a:ff:57:af: 89:1c:64:2f:0a:5f:16:23:76:86:1c:82:28:12:e3: 09:45:d6:26:67:cc:3d:f0:ec:b7:ee:4b:9e:40:10: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:A1:8C:7C:96:84:8D:D6:6A:93:40:08:06:75:CD:10:F0:ED:BC X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bd:7e:1d:c5:da:43:33:f3:5c:9e:ef:1c:3d:cf:00:46:a9: 6d:19:0d:c3:52:af:a9:d6:20:e1:57:83:42:62:b9:69:f3:c4: f9:44:a8:98:92:ee:40:7c:b4:c9:a4:4e:b3:06:70:50:be:76: a8:3d:5f:e9:e1:44:cc:9e:55:ae:36:4b:76:8c:19:64:28:47: bd:34:4b:ee:a6:89:99:cc:10:e3:48:39:7d:b2:05:e2:06:d4: 5d:b1:f4:12:ce:02:24:ab:9e:7d:41:4c:c1:8d:d7:85:1d:eb: 60:d2:7d:52:1d:fb:00:0d:1f:e2:96:0a:48:7f:0e:bc:75:60: d6:1d:33:83:c0:2e:ef:dd:21:ca:d8:03:b3:18:86:a0:95:b5: d6:9b:9f:b7:50:2e:e2:ab:77:5e:0c:68:8c:cd:c0:e4:84:e4: b4:e3:1d:2a:d9:c8:69:05:ed:7c:37:a8:d5:76:58:0d:6d:25: 04:43:79:59:55:31:51:2f:70:00:47:5b:97:be:0c:d6:a3:98: b7:b9:03:a6:f2:b5:42:75:86:0f:29:10:fe:6c:3b:5a:28:05: df:d4:10:ce:e7:d3:16:26:64:16:22:49:39:fc:df:5d:4f:5b: ca:96:33:79:4b:42:e7:57:63:5a:2b:54:e7:2d:13:05:54:6f: 12:b7:27:ec -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVq5j8/vqDabsek3TXW3eN0hmvWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA5MjMxMDE5NDhaFw0yNjA5MjQxMjA4NDhaMDMxMTAvBgNV BAMTKDg1QkRBMThDN0M5Njg0OERENjZBOTM0MDA4MDY3NUNEMTBGMEVEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yQs7OA5VnYtrsl7x4gi7dtfY iCLGeLFWbdZH/lqRhYkohTG4rbCK/3atLmHheq9N3Rn9s/tZTt5ESH9IYvJj+9Te eGdTm42yBzzyLjBUZ5UsGlf/k/vBc4EUKniTDEUoEXsEHOsJkCyeTjSKMfXpsCay f/oKZ7nQJj4cvH85XVJQbQx+uPiIWvxGQ4fvP47LisvOm4hSaI8YaW+hv+XoTQgL p2zK8+81UdnawX2nUuAhh8DNam9iLymYNLrv3B96E5kzVZFzk4aAAcUl0zNDzcjR KALZKJHBay9rav9Xr4kcZC8KXxYjdoYcgigS4wlF1iZnzD3w7LfuS55AEHoPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUhb2hjHyWhI3WapNACAZ1zRDw7bwwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL1+HcXaQzPzXJ7vHD3P AEapbRkNw1KvqdYg4VeDQmK5afPE+USomJLuQHy0yaROswZwUL52qD1f6eFEzJ5V rjZLdowZZChHvTRL7qaJmcwQ40g5fbIF4gbUXbH0Es4CJKuefUFMwY3XhR3rYNJ9 Uh37AA0f4pYKSH8OvHVg1h0zg8Au790hytgDsxiGoJW11puft1Au4qt3XgxojM3A 5ITktOMdKtnIaQXtfDeo1XZYDW0lBEN5WVUxUS9wAEdbl74M1qOYt7kDpvK1QnWG DykQ/mw7WigF39QQzufTFiZkFiJJOfzfXU9bypYzeUtC51djWitU5y0TBVRvErcn 7A== -----END CERTIFICATE-----Generated at Thu Sep 24 07:04:53 2026 by rpki-client