$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: 03hzuNTNhqywc7Xq3dG9vioDu60Q9DFP8EpzvEww9nU= Subject key identifier: 57:5F:38:D6:86:AE:43:A0:68:78:BC:E2:69:B0:F0:BD:E6:5D:EB:7C Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 7DD44F79EEE353D55E31A16FA872E0BF8406521D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 04B3 Signing time: Mon 28 Sep 2026 21:47:34 +0000 Manifest this update: Mon 28 Sep 2026 21:42:34 +0000 Manifest next update: Tue 29 Sep 2026 23:04:34 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: r6f2zT+zHKmn5au/DoyQHXgqi0bdjJgc3D5Ita4yuMA=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: oaOjsA/ea8mh2yvq3UO+jvNNoyPO/R0rHNTp+hGKo9A=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 17:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d4:4f:79:ee:e3:53:d5:5e:31:a1:6f:a8:72:e0:bf:84:06:52:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Sep 28 21:42:34 2026 GMT Not After : Sep 29 23:04:34 2026 GMT Subject: CN=575F38D686AE43A06878BCE269B0F0BDE65DEB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:ad:72:8f:8e:4f:be:1e:e9:ff:f9:c6:ea: b8:76:7f:17:fe:2b:a6:ef:69:a1:cf:0f:11:a2:2d: 6e:0a:7a:89:db:3c:15:99:78:d6:77:3c:27:23:c9: db:da:73:6a:56:5d:2a:62:4d:c9:84:92:f5:77:2b: 83:54:77:07:c2:16:55:0e:e7:e7:2d:e2:d0:36:1b: 46:85:ed:03:0e:02:f9:fb:cb:8f:24:ae:f7:f0:55: 72:59:37:5c:b8:98:78:e1:92:b8:bd:49:d7:76:60: ea:f3:d9:f4:44:38:06:5c:fa:ed:6d:1a:63:86:d1: b9:6a:0e:8f:bf:b2:1e:1e:3e:48:23:9d:fe:ea:0a: ef:c9:50:13:de:27:3c:57:99:c3:a3:1f:b2:ec:59: 06:cc:95:5b:0d:25:93:60:78:79:7b:a0:ec:8f:ce: 54:a3:5e:b5:1d:94:5e:54:f7:cf:7c:1a:1f:07:ab: 94:6c:9c:b9:aa:80:04:97:0a:a1:4c:a0:a6:90:29: 4b:06:36:ab:b9:f9:b0:21:75:cf:28:f9:c6:5d:5e: 61:a0:6c:0b:ef:40:99:35:fd:46:f0:cb:c1:0e:84: 64:63:cc:53:ff:f8:e8:d2:a1:8f:f1:40:0f:e7:fb: 7d:e7:19:c9:c4:c9:bf:14:27:e6:2e:77:50:84:97: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:38:D6:86:AE:43:A0:68:78:BC:E2:69:B0:F0:BD:E6:5D:EB:7C X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:27:a7:6e:34:da:8f:b8:c4:7a:78:b5:80:88:e6:8f:eb:aa: e8:a3:7c:8a:8d:06:e4:70:bb:39:ee:84:1d:4c:2b:26:45:7d: 8f:d7:37:dc:30:1a:5e:2e:0e:18:77:56:80:3c:92:9b:e2:20: 7f:85:85:99:fe:db:bb:19:c6:bb:dc:2b:9b:bc:51:e7:e2:ad: 01:74:2a:b8:6b:c4:c7:35:ef:58:d6:7f:be:63:af:94:f1:56: 79:e0:e5:17:29:59:d8:2e:ee:0d:16:03:e7:20:4c:06:0b:bc: 1f:e8:05:b4:62:16:47:87:0d:38:84:c6:e1:9e:c4:89:f3:7a: ee:54:8c:4c:68:14:9a:c6:7a:a5:81:53:a0:1d:3e:18:bd:c5: cd:ed:07:a1:c2:86:41:7f:b6:2e:3f:51:6a:d0:5d:8f:50:75: 97:f1:7b:f7:a5:b0:13:2b:72:24:09:9e:db:03:12:47:f9:d5: 4e:0e:98:86:71:93:25:a3:af:88:db:f4:f1:68:09:1c:05:bd: 48:1a:cf:dc:cf:42:bc:b0:7b:1f:89:49:4f:32:71:54:2d:e4: 70:3b:35:e2:59:16:cf:2e:1c:40:3c:f7:da:61:36:4c:e3:d0: de:21:12:05:ec:92:48:e8:ed:b5:21:b1:04:2c:11:11:46:00: 49:fa:05:e1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfdRPee7jU9VeMaFvqHLgv4QGUh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA5MjgyMTQyMzRaFw0yNjA5MjkyMzA0MzRaMDMxMTAvBgNV BAMTKDU3NUYzOEQ2ODZBRTQzQTA2ODc4QkNFMjY5QjBGMEJERTY1REVCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu361yj45Pvh7p//nG6rh2fxf+ K6bvaaHPDxGiLW4KeonbPBWZeNZ3PCcjydvac2pWXSpiTcmEkvV3K4NUdwfCFlUO 5+ct4tA2G0aF7QMOAvn7y48krvfwVXJZN1y4mHjhkri9Sdd2YOrz2fREOAZc+u1t GmOG0blqDo+/sh4ePkgjnf7qCu/JUBPeJzxXmcOjH7LsWQbMlVsNJZNgeHl7oOyP zlSjXrUdlF5U9898Gh8Hq5RsnLmqgASXCqFMoKaQKUsGNqu5+bAhdc8o+cZdXmGg bAvvQJk1/Ubwy8EOhGRjzFP/+OjSoY/xQA/n+33nGcnEyb8UJ+Yud1CEl7ZvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV1841oauQ6BoeLziabDwveZd63wwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTJ6du NNqPuMR6eLWAiOaP66roo3yKjQbkcLs57oQdTCsmRX2P1zfcMBpeLg4Yd1aAPJKb 4iB/hYWZ/tu7Gca73CubvFHn4q0BdCq4a8THNe9Y1n++Y6+U8VZ54OUXKVnYLu4N FgPnIEwGC7wf6AW0YhZHhw04hMbhnsSJ83ruVIxMaBSaxnqlgVOgHT4YvcXN7Qeh woZBf7YuP1Fq0F2PUHWX8Xv3pbATK3IkCZ7bAxJH+dVODpiGcZMlo6+I2/TxaAkc Bb1IGs/cz0K8sHsfiUlPMnFULeRwOzXiWRbPLhxAPPfaYTZM49DeIRIF7JJI6O21 IbEELBERRgBJ+gXh -----END CERTIFICATE-----Generated at Tue Sep 29 11:46:52 2026 by rpki-client