$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: olwbDI0gsGb7bfWgJKHzcozDPmEcLj1yhY3o5X5yfV4= Subject key identifier: EE:56:D4:C8:43:19:DE:33:22:49:FB:95:79:1A:88:A4:7E:3D:56:FB Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 174B323D0F4A647254C14D84DDE7DC28166559A0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 023D Signing time: Thu 24 Sep 2026 10:02:34 +0000 Manifest this update: Thu 24 Sep 2026 09:57:34 +0000 Manifest next update: Fri 25 Sep 2026 12:15:34 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: mO41bkvntJAbuY9ksbQgwknvPUIAzdHDWu26HFe46So=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 12:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4b:32:3d:0f:4a:64:72:54:c1:4d:84:dd:e7:dc:28:16:65:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Sep 24 09:57:34 2026 GMT Not After : Sep 25 12:15:34 2026 GMT Subject: CN=EE56D4C84319DE332249FB95791A88A47E3D56FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:8c:12:f6:76:a7:24:34:8f:87:dd:73:c8: 18:c5:6e:28:ce:ab:c3:ab:80:1f:10:39:1b:26:8d: 74:0d:38:1f:1c:46:3a:df:35:7e:33:1b:01:0b:05: 46:78:e3:aa:46:5d:11:8e:00:93:0c:b4:7b:ec:14: 18:e7:03:ec:b5:4b:37:56:f8:8b:c1:be:c4:00:a0: c3:61:93:1f:66:f7:49:0b:6f:94:d8:b0:73:82:e3: 6b:8d:2b:6a:e6:c9:f0:8e:f3:b4:59:20:e4:ab:47: a7:a3:7f:54:c4:26:11:d2:2e:e4:37:21:e8:63:d9: b0:b2:41:2b:e2:46:4d:e4:b7:bb:04:1c:4f:84:0b: ac:d9:dc:89:35:a5:05:2e:5c:15:c5:5d:e6:15:9c: 5f:e0:52:17:14:82:0d:a4:ec:11:8e:de:0d:18:43: dc:82:ce:92:1a:1b:51:00:0a:06:c8:aa:b5:4c:d5: 9c:cd:cf:ab:87:1d:c5:b2:63:6e:1c:a9:88:ac:f2: 9d:8a:50:81:ba:4f:1a:0b:31:fa:6b:d4:63:bc:f7: 85:fa:c0:f2:2c:cd:81:0f:c8:9c:69:9b:39:23:bf: 5e:66:0e:a5:84:a9:70:9d:07:08:45:60:bf:86:79: 99:a2:95:a6:7e:85:f3:9b:b2:14:9d:45:f7:26:03: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:56:D4:C8:43:19:DE:33:22:49:FB:95:79:1A:88:A4:7E:3D:56:FB X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:9f:60:e6:e1:7e:40:6c:cd:50:8d:11:25:cb:eb:c4:d3: b1:bb:c2:4c:b5:f6:b0:6c:1b:27:ee:9a:bd:87:34:a2:34:bc: 60:fe:8a:c0:4e:81:fb:91:95:44:a0:25:32:ed:df:57:53:89: 32:bc:7a:f7:fd:17:e0:42:5f:90:4c:7f:7f:bc:3f:4a:a5:b2: dc:67:8b:ef:ff:d1:4e:5b:c3:5f:aa:e4:d9:c5:ac:fd:a3:ed: 5b:93:f2:28:7d:d5:32:06:19:d8:2f:c7:18:33:74:60:c8:60: 30:35:51:07:80:c9:c4:71:6b:ed:94:c3:a9:c9:23:33:5d:fc: 26:5a:2e:c9:0b:87:e3:b1:53:3d:e7:4c:28:2f:5f:a2:31:b0: cf:9a:c7:f2:d4:32:70:25:10:fe:70:5b:95:27:42:ad:ef:82: ab:63:e2:a0:39:34:bb:e7:a7:1a:75:d7:68:9f:c0:5e:4b:4c: b3:d3:66:25:8b:b7:17:44:4d:37:42:d8:7f:d5:15:ef:a2:4e: 28:08:c5:00:01:40:e2:7b:7b:c8:3d:2a:ba:67:06:80:c9:86: f9:16:ca:42:56:1b:0f:7d:61:45:b8:a6:cd:2a:bb:b2:25:07: 1b:55:f3:20:87:ee:0f:6a:b9:c6:1b:3a:f6:4c:40:1c:88:83: 23:12:f2:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUF0syPQ9KZHJUwU2E3efcKBZlWaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA5MjQwOTU3MzRaFw0yNjA5MjUxMjE1MzRaMDMxMTAvBgNV BAMTKEVFNTZENEM4NDMxOURFMzMyMjQ5RkI5NTc5MUE4OEE0N0UzRDU2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oYwS9nanJDSPh91zyBjFbijO q8OrgB8QORsmjXQNOB8cRjrfNX4zGwELBUZ446pGXRGOAJMMtHvsFBjnA+y1SzdW +IvBvsQAoMNhkx9m90kLb5TYsHOC42uNK2rmyfCO87RZIOSrR6ejf1TEJhHSLuQ3 Iehj2bCyQSviRk3kt7sEHE+EC6zZ3Ik1pQUuXBXFXeYVnF/gUhcUgg2k7BGO3g0Y Q9yCzpIaG1EACgbIqrVM1ZzNz6uHHcWyY24cqYis8p2KUIG6TxoLMfpr1GO894X6 wPIszYEPyJxpmzkjv15mDqWEqXCdBwhFYL+GeZmilaZ+hfObshSdRfcmA+LXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7lbUyEMZ3jMiSfuVeRqIpH49VvswHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAslp9g 5uF+QGzNUI0RJcvrxNOxu8JMtfawbBsn7pq9hzSiNLxg/orAToH7kZVEoCUy7d9X U4kyvHr3/RfgQl+QTH9/vD9KpbLcZ4vv/9FOW8NfquTZxaz9o+1bk/IofdUyBhnY L8cYM3RgyGAwNVEHgMnEcWvtlMOpySMzXfwmWi7JC4fjsVM950woL1+iMbDPmsfy 1DJwJRD+cFuVJ0Kt74KrY+KgOTS756cadddon8BeS0yz02Yli7cXRE03Qth/1RXv ok4oCMUAAUDie3vIPSq6ZwaAyYb5FspCVhsPfWFFuKbNKruyJQcbVfMgh+4ParnG Gzr2TEAciIMjEvIs -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:58 2026 by rpki-client