$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: xfQYvcM7CZ8JvUz8BplHesKVpF29zVjE7M5hhmr37ok= Subject key identifier: 6B:A7:F3:CC:65:33:7B:56:BB:85:4A:30:21:D8:07:7C:6B:74:54:B7 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 54F7EFB3DCC200AEBABB7DFA6B34A96CB22E5AE3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: D6 Signing time: Sun 27 Sep 2026 01:55:03 +0000 Manifest this update: Sun 27 Sep 2026 01:50:03 +0000 Manifest next update: Mon 28 Sep 2026 04:16:03 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: QFJkQmBgjtNrqSAiEsMOgo5kTB5ujXqN/Zr2jd3vnK8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f7:ef:b3:dc:c2:00:ae:ba:bb:7d:fa:6b:34:a9:6c:b2:2e:5a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Sep 27 01:50:03 2026 GMT Not After : Sep 28 04:16:03 2026 GMT Subject: CN=6BA7F3CC65337B56BB854A3021D8077C6B7454B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:aa:2b:2a:d7:2d:14:36:e3:2b:61:21:ef: 86:ff:81:60:47:90:92:de:97:ce:f6:6c:59:45:da: e8:b4:84:7d:72:3a:ba:01:db:e4:66:20:1e:ae:9a: 6c:f5:df:3b:6e:73:34:32:a1:b8:cd:a2:d7:dc:9d: 8b:c7:c6:b4:b7:02:6c:79:ea:71:16:98:46:86:ea: ed:3e:82:2d:8e:96:8e:f1:d3:ec:07:b6:85:49:26: fb:c1:40:a8:d4:15:bb:28:f0:15:de:98:19:9b:42: 4a:f3:d1:d2:fd:e5:70:d1:a0:20:18:2e:c9:2a:27: dc:01:31:a8:3c:e6:95:4e:12:dd:bf:96:9c:12:d2: c0:01:d3:ad:c9:1e:ec:9b:75:eb:d7:4c:91:bd:73: 48:30:c9:2c:2a:18:57:82:b1:68:3e:2d:ea:11:cc: c5:0d:0a:9b:e2:96:4a:9f:ef:c5:a6:f3:f6:f0:9b: 9d:dc:ae:93:39:8a:f1:ab:c9:2d:7f:e7:dc:dd:1e: e2:c4:7f:ec:eb:c4:dc:6f:a4:63:13:96:91:6a:e9: ca:6a:e3:2d:eb:c3:da:5b:dc:76:8b:62:ca:3f:3e: 77:55:49:7d:42:38:41:aa:35:c0:66:cf:0b:38:fe: 3b:25:a9:f6:40:62:c2:dd:8a:3d:d1:02:79:a0:4e: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A7:F3:CC:65:33:7B:56:BB:85:4A:30:21:D8:07:7C:6B:74:54:B7 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:72:3e:e0:ad:31:ad:1f:a1:b5:76:c8:2c:64:d6:b5:f3:78: 30:6d:bd:8e:68:37:3c:6c:30:6c:72:c3:41:dd:59:08:c4:9e: 3f:bb:f1:03:47:fe:af:09:d7:46:24:2d:ab:d1:d9:32:c5:df: 79:06:02:c7:f2:89:1d:d4:a1:21:56:6f:22:59:2c:02:ef:3d: 44:be:a5:64:cd:ac:17:2b:34:15:00:a3:57:e1:87:60:96:89: 12:57:ca:19:45:a7:e1:83:73:a8:f9:cf:ac:9f:b3:dc:41:6d: 8c:45:4e:9e:eb:8b:86:72:05:e9:8a:d5:6a:02:c6:f3:26:05: 10:a7:ca:48:fd:86:83:37:6a:da:85:5b:f8:ba:4d:10:c0:a4: 6a:06:2b:95:bb:a6:b0:9b:98:98:b2:20:bf:3e:a4:8c:a5:c5: 7d:eb:1d:c9:93:15:2d:78:2a:6b:76:b1:66:ca:8c:03:fb:83: 6f:ac:54:ab:2d:bd:c6:38:90:2a:e8:30:83:00:cb:d0:fd:59: 88:ef:85:22:bf:62:4f:68:22:da:b3:07:c9:af:57:08:a7:b4: 38:21:0f:d0:ed:ee:67:fe:13:54:8c:32:66:b3:a8:0a:31:b8: 42:3b:84:99:d1:b4:d0:4a:53:56:06:2c:a9:c9:42:60:4f:fa: 16:4c:f8:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVPfvs9zCAK66u336azSpbLIuWuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA5MjcwMTUwMDNaFw0yNjA5MjgwNDE2MDNaMDMxMTAvBgNV BAMTKDZCQTdGM0NDNjUzMzdCNTZCQjg1NEEzMDIxRDgwNzdDNkI3NDU0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy06orKtctFDbjK2Eh74b/gWBH kJLel872bFlF2ui0hH1yOroB2+RmIB6ummz13ztuczQyobjNotfcnYvHxrS3Amx5 6nEWmEaG6u0+gi2Olo7x0+wHtoVJJvvBQKjUFbso8BXemBmbQkrz0dL95XDRoCAY LskqJ9wBMag85pVOEt2/lpwS0sAB063JHuybdevXTJG9c0gwySwqGFeCsWg+LeoR zMUNCpvilkqf78Wm8/bwm53crpM5ivGryS1/59zdHuLEf+zrxNxvpGMTlpFq6cpq 4y3rw9pb3HaLYso/PndVSX1COEGqNcBmzws4/jslqfZAYsLdij3RAnmgTkAFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa6fzzGUze1a7hUowIdgHfGt0VLcwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2cj7g rTGtH6G1dsgsZNa183gwbb2OaDc8bDBscsNB3VkIxJ4/u/EDR/6vCddGJC2r0dky xd95BgLH8okd1KEhVm8iWSwC7z1EvqVkzawXKzQVAKNX4YdglokSV8oZRafhg3Oo +c+sn7PcQW2MRU6e64uGcgXpitVqAsbzJgUQp8pI/YaDN2rahVv4uk0QwKRqBiuV u6awm5iYsiC/PqSMpcV96x3JkxUteCprdrFmyowD+4NvrFSrLb3GOJAq6DCDAMvQ /VmI74Uiv2JPaCLaswfJr1cIp7Q4IQ/Q7e5n/hNUjDJms6gKMbhCO4SZ0bTQSlNW BiypyUJgT/oWTPh5 -----END CERTIFICATE-----Generated at Sun Sep 27 21:36:39 2026 by rpki-client