$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: fyQsWxMXvxksWCz7kFci1oiQcJLjaiMlUyJ2ZLvsee8= Subject key identifier: E8:0A:EE:7C:64:89:8B:2A:93:29:8B:09:FB:3E:CE:15:CD:9B:A9:33 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 71C05237FBFC2AEB1F51DF78716733B0AF373B67 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 022B Signing time: Wed 30 Sep 2026 18:00:51 +0000 Manifest this update: Wed 30 Sep 2026 17:55:51 +0000 Manifest next update: Thu 01 Oct 2026 21:43:51 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: jttxl3w5gtGvWvJGVtPuIaUM9EQsHbSyoOZ1w8vhwz4=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 3: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 4: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: LjXLVKawHfjxwlnzEPj/O4eLJ/0ypP1ElNw9Bcg9ZBY=) 6: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 7: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 8: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: R/sf3Tq0V++7pWkaGjinx95Sz2y2pP8eESjcvzlVZy0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 16:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:52:37:fb:fc:2a:eb:1f:51:df:78:71:67:33:b0:af:37:3b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 30 17:55:51 2026 GMT Not After : Oct 1 21:43:51 2026 GMT Subject: CN=E80AEE7C64898B2A93298B09FB3ECE15CD9BA933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:92:55:b5:67:96:e0:81:83:c7:f0:77:69: 09:31:e6:3a:38:22:2e:36:ab:5e:db:62:a7:61:a9: c8:cc:02:f3:60:9a:04:44:61:e0:11:9e:5e:94:e4: 13:28:2e:f3:17:07:82:62:d3:4f:6f:66:5e:71:a7: 61:7e:7b:eb:ff:2d:c6:a2:5c:79:e1:87:01:5a:93: 12:93:bb:86:9d:59:b5:3b:39:79:95:ff:be:66:b4: 8f:79:04:91:e9:b6:eb:c0:89:10:85:78:06:bd:52: e0:b2:22:0c:f8:a3:ab:24:1d:cc:78:3e:42:50:b1: bf:a0:77:e7:9c:22:1e:17:74:3a:0b:90:fa:d3:fb: 5b:c2:86:80:b4:2a:ed:98:3a:e2:c4:c2:ec:2a:15: 5b:e8:de:9e:29:76:6f:db:7e:12:ac:07:e1:a8:3c: 45:ec:79:82:90:e6:a9:ea:52:34:22:93:60:3e:da: d5:fe:2e:72:5b:44:4e:d2:04:d1:7d:8c:d0:7e:39: 20:fd:c4:10:7e:d4:52:2a:a8:65:79:b3:8e:ed:b4: 63:34:07:f4:4d:43:84:5b:8f:47:b5:9e:96:92:cf: 80:1e:e8:d8:da:15:60:7c:de:ee:ce:7c:26:3c:05: 94:f7:01:e9:ee:47:a5:6a:1f:8c:0a:e2:d6:9f:59: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0A:EE:7C:64:89:8B:2A:93:29:8B:09:FB:3E:CE:15:CD:9B:A9:33 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cc:37:c3:60:fb:bb:c4:24:50:e9:83:04:15:f2:dd:e7:2c: c0:e4:0e:b5:07:f6:13:63:69:46:00:b0:29:9e:de:0d:31:0a: fb:b6:d9:b0:2b:cd:35:0c:d8:b4:60:7a:d3:60:41:e4:1f:de: c3:5f:f3:ca:83:b9:b9:d5:fe:7f:e7:5a:60:bc:97:ca:67:91: 7c:98:e6:c7:26:10:be:47:0e:f2:04:ad:1f:31:cf:59:67:24: a5:d7:fc:a9:08:4c:e6:f4:f7:9e:3a:ad:55:69:bc:67:b0:93: 05:69:a9:21:00:4b:97:dc:3f:12:47:7d:f9:62:b6:57:28:db: da:6a:50:0e:0a:50:10:fd:65:df:d7:ac:a0:2c:d9:10:ff:cf: b4:84:a5:0e:4b:5b:ba:9d:4b:26:32:da:66:3a:71:f7:fc:20: 02:ac:cf:56:2d:24:f9:97:7e:a2:9b:f6:cc:a2:b2:29:4f:64: 20:47:e6:e9:fa:0e:e0:3a:3c:ac:29:9d:2d:63:f4:0b:91:66: a4:4f:2d:12:6f:0e:a4:53:65:8e:20:17:f2:e0:f6:42:3e:da: 3f:f9:a8:01:c1:c1:a6:a3:f2:91:05:21:6a:a7:67:58:6b:4c: 62:53:9c:82:9d:af:5d:94:c0:5e:ba:95:7c:e5:4a:41:b2:01: 4c:ac:ee:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUccBSN/v8KusfUd94cWczsK83O2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA5MzAxNzU1NTFaFw0yNjEwMDEyMTQzNTFaMDMxMTAvBgNV BAMTKEU4MEFFRTdDNjQ4OThCMkE5MzI5OEIwOUZCM0VDRTE1Q0Q5QkE5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBpJVtWeW4IGDx/B3aQkx5jo4 Ii42q17bYqdhqcjMAvNgmgREYeARnl6U5BMoLvMXB4Ji009vZl5xp2F+e+v/Lcai XHnhhwFakxKTu4adWbU7OXmV/75mtI95BJHptuvAiRCFeAa9UuCyIgz4o6skHcx4 PkJQsb+gd+ecIh4XdDoLkPrT+1vChoC0Ku2YOuLEwuwqFVvo3p4pdm/bfhKsB+Go PEXseYKQ5qnqUjQik2A+2tX+LnJbRE7SBNF9jNB+OSD9xBB+1FIqqGV5s47ttGM0 B/RNQ4Rbj0e1npaSz4Ae6NjaFWB83u7OfCY8BZT3AenuR6VqH4wK4tafWSZRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6ArufGSJiyqTKYsJ+z7OFc2bqTMwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/zDfD YPu7xCRQ6YMEFfLd5yzA5A61B/YTY2lGALApnt4NMQr7ttmwK801DNi0YHrTYEHk H97DX/PKg7m51f5/51pgvJfKZ5F8mObHJhC+Rw7yBK0fMc9ZZySl1/ypCEzm9Pee Oq1VabxnsJMFaakhAEuX3D8SR335YrZXKNvaalAOClAQ/WXf16ygLNkQ/8+0hKUO S1u6nUsmMtpmOnH3/CACrM9WLST5l36im/bMorIpT2QgR+bp+g7gOjysKZ0tY/QL kWakTy0Sbw6kU2WOIBfy4PZCPto/+agBwcGmo/KRBSFqp2dYa0xiU5yCna9dlMBe upV85UpBsgFMrO4L -----END CERTIFICATE-----Generated at Thu Oct 1 00:56:47 2026 by rpki-client