$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft File: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft (raw, json) Hash identifier: ROU5r6UmuYmi/hj7QsHJk/06DR/WlhMlbReywrEAGGk= Subject key identifier: F3:CE:33:AA:14:D7:29:14:02:2E:33:C3:AA:8A:F0:25:40:CF:41:8D Authority key identifier: DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 Certificate issuer: /CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Certificate serial: 76184F3EBC6775315D16E0AAF857EDD7CF7B16A6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft Manifest number: 0E Signing time: Wed 23 Sep 2026 13:54:08 +0000 Manifest this update: Wed 23 Sep 2026 13:49:08 +0000 Manifest next update: Thu 24 Sep 2026 17:29:08 +0000 Files and hashes: 1: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl (hash: /826naQcvrAaf1hmniRJaTEsIUTGi/hZHG87Qvk+jAk=) 2: 326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa (hash: Gbowl8vsy50/ah5uPyffPGlJE1BZVfw0DnfMCMuMiD8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:18:4f:3e:bc:67:75:31:5d:16:e0:aa:f8:57:ed:d7:cf:7b:16:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Validity Not Before: Sep 23 13:49:08 2026 GMT Not After : Sep 24 17:29:08 2026 GMT Subject: CN=F3CE33AA14D72914022E33C3AA8AF02540CF418D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ce:17:79:a6:cc:d0:58:3d:43:4e:4b:26:9c: df:ff:78:81:9c:e7:e8:60:aa:c7:41:d5:bc:09:1f: 6e:7b:c9:5f:a2:f1:8d:ce:dd:d9:c7:ee:33:81:cb: 1d:7c:ad:98:2b:63:a4:23:a0:a7:f4:03:c9:5c:00: ad:a8:de:1c:c3:7a:4e:9c:00:3b:12:16:2f:09:df: 59:df:8d:2c:8d:4f:32:5c:2f:c1:a3:69:fc:a7:e0: ea:89:78:6a:fd:18:46:18:f8:fc:a8:20:c0:37:0c: ec:29:55:85:a0:11:15:cd:97:42:80:3c:ca:23:60: 79:07:e4:d7:7a:51:3d:58:f0:b8:84:b7:8e:05:eb: 4e:9c:74:65:95:d4:24:57:e8:c0:a9:e1:a8:66:82: ff:75:17:0e:2e:35:2b:c6:3a:d4:82:2e:7b:90:0b: dc:92:49:39:81:c7:6b:43:90:4d:5a:19:8a:bb:46: c6:8c:65:b4:cd:0f:4b:ef:58:b6:6b:01:41:cf:e5: 2d:11:34:4d:11:c0:03:5d:b0:57:c7:2d:2f:dd:77: 3f:cd:8a:63:c5:c2:6c:56:14:25:b0:b1:f1:70:22: f5:19:1f:e1:24:a3:7b:be:6f:2d:ff:c6:80:af:ef: 52:f7:98:c0:78:bb:44:b0:71:59:5a:42:78:63:b1: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CE:33:AA:14:D7:29:14:02:2E:33:C3:AA:8A:F0:25:40:CF:41:8D X509v3 Authority Key Identifier: keyid:DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c8:98:d6:45:6b:cd:6f:61:a3:89:d0:6e:9f:09:50:2c:6a: d2:5d:5c:a5:f7:ff:c4:ae:46:6a:93:51:51:66:97:f7:ab:b6: 7c:2c:4c:a0:a4:a7:d4:05:ae:ce:f3:bb:52:5d:99:6a:d0:a0: 8f:fa:aa:10:0f:c8:4f:e7:bb:58:f8:44:1a:bb:41:23:66:48: 54:e6:ef:8d:86:03:2d:c4:f3:e9:4f:03:e7:b6:88:c4:49:5c: b5:cd:4a:42:a8:c2:1f:82:18:a8:0e:a1:db:49:3c:62:a6:fc: 98:3d:20:e5:a1:ee:c4:33:ce:a8:dd:8a:2f:f9:21:95:55:77: f5:f9:54:12:cf:d0:55:10:5d:ff:d9:ea:48:01:d1:52:aa:06: 0e:cd:47:57:18:98:4b:c7:1c:e8:94:7c:5a:e3:14:cb:df:bd: e1:fe:42:ce:92:d8:3e:59:46:f6:02:b7:33:81:4e:30:a9:d5: 44:f0:f4:73:eb:61:d0:e2:ba:31:c6:50:4f:35:21:80:7b:9d: 68:20:52:d8:ba:0a:61:6e:27:6e:51:64:56:38:81:ac:d1:7d: 58:a7:87:80:87:ed:e7:20:b7:8c:f0:fe:95:d4:98:56:1b:16: cc:c2:f5:07:93:46:4a:23:ee:d5:7f:92:33:f7:e7:6d:ce:d1: f4:96:76:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdhhPPrxndTFdFuCq+Fft1897FqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1 RkRCNjdDMTAeFw0yNjA5MjMxMzQ5MDhaFw0yNjA5MjQxNzI5MDhaMDMxMTAvBgNV BAMTKEYzQ0UzM0FBMTRENzI5MTQwMjJFMzNDM0FBOEFGMDI1NDBDRjQxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzhd5pszQWD1DTksmnN//eIGc 5+hgqsdB1bwJH257yV+i8Y3O3dnH7jOByx18rZgrY6QjoKf0A8lcAK2o3hzDek6c ADsSFi8J31nfjSyNTzJcL8Gjafyn4OqJeGr9GEYY+PyoIMA3DOwpVYWgERXNl0KA PMojYHkH5Nd6UT1Y8LiEt44F606cdGWV1CRX6MCp4ahmgv91Fw4uNSvGOtSCLnuQ C9ySSTmBx2tDkE1aGYq7RsaMZbTND0vvWLZrAUHP5S0RNE0RwANdsFfHLS/ddz/N imPFwmxWFCWwsfFwIvUZH+Eko3u+by3/xoCv71L3mMB4u0SwcVlaQnhjsW8VAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU884zqhTXKRQCLjPDqorwJUDPQY0wHwYDVR0j BBgwFoAU3NI1KmmTYtCQvJ6c+doI3V/bZ8EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGNkMDNiZTItNmIwMi00YzU5LWE5MzctNDFlMjY0Y2Rl NjM2LzEvRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1RkRCNjdDMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9EQ0QyMzUyQTY5OTM2MkQwOTBCQzlFOUNG OURBMDhERDVGREI2N0MxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhjZDAzYmUyLTZiMDItNGM1OS1hOTM3LTQxZTI2NGNkZTYzNi8xL0RDRDIzNTJB Njk5MzYyRDA5MEJDOUU5Q0Y5REEwOERENUZEQjY3QzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAByJjW RWvNb2GjidBunwlQLGrSXVyl9//ErkZqk1FRZpf3q7Z8LEygpKfUBa7O87tSXZlq 0KCP+qoQD8hP57tY+EQau0EjZkhU5u+NhgMtxPPpTwPntojESVy1zUpCqMIfghio DqHbSTxipvyYPSDloe7EM86o3Yov+SGVVXf1+VQSz9BVEF3/2epIAdFSqgYOzUdX GJhLxxzolHxa4xTL373h/kLOktg+WUb2ArczgU4wqdVE8PRz62HQ4roxxlBPNSGA e51oIFLYugphbiduUWRWOIGs0X1Yp4eAh+3nILeM8P6V1JhWGxbMwvUHk0ZKI+7V f5Iz9+dtztH0lnaG -----END CERTIFICATE-----Generated at Wed Sep 23 18:43:23 2026 by rpki-client