$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: AH6BYDJkhmWxOWYWBT/EEg9FXrfBmCisMzXejK9oRiM= Subject key identifier: D7:CF:41:AB:5E:65:DC:EA:DF:35:D1:17:BB:7F:1E:30:3F:BE:6F:7C Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 60C52E389F674152215D3BE7F4595DE27310D81F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 04B2 Signing time: Mon 28 Sep 2026 02:12:34 +0000 Manifest this update: Mon 28 Sep 2026 02:07:34 +0000 Manifest next update: Tue 29 Sep 2026 05:45:34 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: lYzCV5xK/ah0o9Ea9nP+ash9tgZQbCCJOb3LGM5aNjE=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: oaOjsA/ea8mh2yvq3UO+jvNNoyPO/R0rHNTp+hGKo9A=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 21:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c5:2e:38:9f:67:41:52:21:5d:3b:e7:f4:59:5d:e2:73:10:d8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Sep 28 02:07:34 2026 GMT Not After : Sep 29 05:45:34 2026 GMT Subject: CN=D7CF41AB5E65DCEADF35D117BB7F1E303FBE6F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:8a:d4:24:81:46:20:74:70:11:6c:e8:c5: 93:2e:d8:fb:30:20:05:51:18:37:75:fa:9d:fe:b6: 73:94:41:64:73:09:79:2f:df:b9:cd:2c:5b:ec:3d: 73:a2:17:12:e9:c8:7f:1d:44:31:f6:c5:5a:4b:2c: ee:9a:fd:51:54:c5:eb:57:1d:89:29:be:0d:83:59: e3:00:3a:3c:df:2b:97:8d:ae:53:ac:e7:d5:ad:18: 52:41:3b:77:f2:f9:62:91:42:3d:59:58:4f:04:09: 69:82:20:8c:05:c2:93:42:65:e9:2a:21:d8:80:4a: 81:ce:05:e0:c4:11:69:ae:db:b8:45:b1:0a:c4:37: 37:19:0e:d1:1f:b1:20:1d:50:00:f2:59:0e:14:2b: a1:58:50:8a:b8:dd:9f:3d:b1:2f:34:d7:21:29:9b: 93:0c:80:ce:ac:ee:6a:0c:01:60:01:16:b1:9d:41: 7c:d0:8b:0d:0e:20:2d:6b:fa:c6:13:a9:46:b3:32: 41:8b:ea:95:26:82:29:b5:86:9c:ba:eb:a6:75:ae: 6d:44:3b:1d:6d:3c:be:cf:a9:e5:9f:1c:be:a2:3e: 37:3a:9f:4a:99:31:02:d3:0e:70:af:56:41:09:29: 31:80:da:b3:0f:f1:09:f0:98:c8:df:d7:3d:b2:26: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:41:AB:5E:65:DC:EA:DF:35:D1:17:BB:7F:1E:30:3F:BE:6F:7C X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:28:95:6a:34:3e:8d:98:aa:d3:8a:88:5a:dd:93:0a:6a:0b: 87:99:0c:a3:f0:13:8a:d2:9f:da:71:5a:25:7f:ef:a8:85:38: ef:33:23:c2:53:be:b6:b6:fe:3b:57:43:e8:66:2e:1b:8e:7e: 9d:dc:db:ea:14:ff:52:20:ce:d1:48:0d:f3:bb:e4:96:e4:08: 1b:7f:59:fb:bb:35:5d:3f:81:c4:59:21:c4:81:64:57:50:20: a9:9c:fc:5d:99:95:ce:bf:a7:87:09:42:65:50:5f:6f:61:2a: 5e:00:04:03:28:7d:61:94:4f:cf:a1:16:1b:13:5a:47:2f:73: ff:3f:f6:9b:9a:5d:a0:c1:d1:cb:9d:4f:f9:54:73:63:bb:81: 05:32:ec:c2:84:13:4e:66:9c:11:99:02:dd:da:65:cc:33:8a: 92:1a:66:a4:2e:98:32:e7:ba:88:bf:8d:f5:93:23:ae:a8:71: 5b:31:ee:08:d3:6b:d5:47:a8:1b:01:9f:53:e7:8f:e3:9d:ce: 55:79:ab:af:34:42:62:e2:c0:33:8e:5d:29:94:2a:4e:ef:b4: dc:f6:2a:8a:1b:18:72:7c:7f:f3:29:05:00:64:ce:97:23:aa: e7:93:77:2d:d5:40:cf:b1:00:2f:b6:3a:1b:0e:d0:2a:92:8a: ce:45:fb:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYMUuOJ9nQVIhXTvn9Fld4nMQ2B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA5MjgwMjA3MzRaFw0yNjA5MjkwNTQ1MzRaMDMxMTAvBgNV BAMTKEQ3Q0Y0MUFCNUU2NURDRUFERjM1RDExN0JCN0YxRTMwM0ZCRTZGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13orUJIFGIHRwEWzoxZMu2Psw IAVRGDd1+p3+tnOUQWRzCXkv37nNLFvsPXOiFxLpyH8dRDH2xVpLLO6a/VFUxetX HYkpvg2DWeMAOjzfK5eNrlOs59WtGFJBO3fy+WKRQj1ZWE8ECWmCIIwFwpNCZekq IdiASoHOBeDEEWmu27hFsQrENzcZDtEfsSAdUADyWQ4UK6FYUIq43Z89sS801yEp m5MMgM6s7moMAWABFrGdQXzQiw0OIC1r+sYTqUazMkGL6pUmgim1hpy666Z1rm1E Ox1tPL7PqeWfHL6iPjc6n0qZMQLTDnCvVkEJKTGA2rMP8QnwmMjf1z2yJg1bAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU189Bq15l3OrfNdEXu38eMD++b3wwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFKJVq ND6NmKrTioha3ZMKaguHmQyj8BOK0p/acVolf++ohTjvMyPCU762tv47V0PoZi4b jn6d3NvqFP9SIM7RSA3zu+SW5Agbf1n7uzVdP4HEWSHEgWRXUCCpnPxdmZXOv6eH CUJlUF9vYSpeAAQDKH1hlE/PoRYbE1pHL3P/P/abml2gwdHLnU/5VHNju4EFMuzC hBNOZpwRmQLd2mXMM4qSGmakLpgy57qIv431kyOuqHFbMe4I02vVR6gbAZ9T54/j nc5VeauvNEJi4sAzjl0plCpO77Tc9iqKGxhyfH/zKQUAZM6XI6rnk3ct1UDPsQAv tjobDtAqkorORfso -----END CERTIFICATE-----Generated at Mon Sep 28 14:09:01 2026 by rpki-client