$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: g0WW3MMXwZisXxmbC8xem5eXEPNGziRnVviGmkCUnTY= Subject key identifier: 17:21:DD:AB:C7:DC:59:EC:63:C9:D2:06:7D:26:DD:B8:61:13:26:83 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 31070220F38B0F6C732F60527E8C19B6D7CDB812 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 01A1 Signing time: Wed 23 Sep 2026 02:44:35 +0000 Manifest this update: Wed 23 Sep 2026 02:39:35 +0000 Manifest next update: Thu 24 Sep 2026 05:16:35 +0000 Files and hashes: 1: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: waNZ3Oz/JFA7iZLv6+b4j6Em9neozz8h1EfCj1HT+tA=) 2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 3: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:07:02:20:f3:8b:0f:6c:73:2f:60:52:7e:8c:19:b6:d7:cd:b8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Sep 23 02:39:35 2026 GMT Not After : Sep 24 05:16:35 2026 GMT Subject: CN=1721DDABC7DC59EC63C9D2067D26DDB861132683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:6e:1c:e8:22:9e:f9:14:40:5b:06:1e:4a: 0b:4d:3c:6b:ec:32:46:e4:98:a6:e5:bb:ab:8b:2a: 29:e2:4d:46:84:f1:3f:bf:79:91:52:fd:f7:46:85: 9f:a0:79:b6:ee:88:71:42:6e:c7:5b:1d:dd:1a:e2: a9:d7:73:39:64:c0:c1:65:57:26:1d:4f:2d:60:1e: 24:91:c1:40:2e:ce:64:77:b1:10:f3:57:1f:ce:74: d4:0b:b7:fe:b4:4a:dd:16:fb:c4:c5:38:56:e5:ee: 19:51:77:8b:c5:39:42:96:bd:29:9d:d6:33:ae:ac: 41:9b:dd:0f:ba:82:8d:ce:f7:86:9b:13:19:2e:78: 72:83:63:a9:ef:7f:5d:17:b1:04:65:d8:87:36:18: 7f:e2:05:d1:74:68:67:1f:e2:ce:ab:9f:48:63:b1: e1:9d:8f:0d:28:8b:2e:d0:d0:7b:a0:54:4a:8d:27: 9e:6a:66:7c:87:72:5c:3a:d8:68:20:fb:d5:8a:d4: e0:df:0a:e6:35:be:2e:ac:d1:6d:f7:8e:44:83:4b: 61:71:3f:85:48:6d:bf:15:d7:29:12:e8:6e:59:a2: c7:e7:d8:d9:b2:fd:fa:ee:ce:fe:97:03:ca:e8:c8: 69:09:37:d1:f8:b9:c8:16:be:ae:02:78:2d:22:1d: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:DD:AB:C7:DC:59:EC:63:C9:D2:06:7D:26:DD:B8:61:13:26:83 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:88:37:44:b9:3a:78:6a:1e:4b:45:ff:f3:8f:90:2c:de: 77:2a:79:a2:b0:9a:88:4c:ed:01:27:9b:ee:4f:27:58:cc:d8: 43:85:f1:e5:a0:b1:46:eb:02:18:91:b5:83:44:d5:91:ff:de: 6c:2b:72:43:92:b0:1f:33:f6:bc:9d:a6:35:9f:e0:e6:ce:81: c1:37:e0:ec:95:ca:60:74:12:d3:ff:b5:ad:b2:56:4d:72:fd: 9d:ab:93:56:27:20:94:11:39:63:d2:1b:98:d4:66:de:5d:c3: 6b:a0:50:64:1c:7a:e7:ed:4e:fd:b6:f5:24:0e:25:1e:f8:31: 58:57:e4:7c:b0:2f:4d:37:22:4d:22:a7:9d:c2:16:cf:e7:76: dc:4d:53:c3:d0:30:96:dd:24:4e:0b:17:52:33:16:c6:ba:c8: 90:23:5d:51:54:8d:e0:bf:8b:d8:32:b7:52:6a:48:3c:eb:fb: 14:35:cb:ab:ac:04:32:c0:3c:03:05:a0:6c:8f:78:da:48:0b: 3a:3d:96:82:9e:24:8f:ca:9a:ed:e7:fa:a3:7e:0a:57:5d:be: ec:e0:bf:59:6c:41:ca:ff:1b:9c:f8:2d:42:3b:da:88:40:6b: 89:20:6d:22:05:c3:ff:d5:48:2e:df:5b:1a:47:44:17:fd:6b: 1c:a2:56:ad -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUMQcCIPOLD2xzL2BSfowZttfNuBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA5MjMwMjM5MzVaFw0yNjA5MjQwNTE2MzVaMDMxMTAvBgNV BAMTKDE3MjFEREFCQzdEQzU5RUM2M0M5RDIwNjdEMjZEREI4NjExMzI2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJG4c6CKe+RRAWwYeSgtNPGvs MkbkmKblu6uLKiniTUaE8T+/eZFS/fdGhZ+gebbuiHFCbsdbHd0a4qnXczlkwMFl VyYdTy1gHiSRwUAuzmR3sRDzVx/OdNQLt/60St0W+8TFOFbl7hlRd4vFOUKWvSmd 1jOurEGb3Q+6go3O94abExkueHKDY6nvf10XsQRl2Ic2GH/iBdF0aGcf4s6rn0hj seGdjw0oiy7Q0HugVEqNJ55qZnyHclw62Ggg+9WK1ODfCuY1vi6s0W33jkSDS2Fx P4VIbb8V1ykS6G5Zosfn2Nmy/fruzv6XA8royGkJN9H4ucgWvq4CeC0iHUe3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUFyHdq8fcWexjydIGfSbduGETJoMwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa2IN0S5OnhqHktF//OP kCzedyp5orCaiEztASeb7k8nWMzYQ4Xx5aCxRusCGJG1g0TVkf/ebCtyQ5KwHzP2 vJ2mNZ/g5s6BwTfg7JXKYHQS0/+1rbJWTXL9nauTVicglBE5Y9IbmNRm3l3Da6BQ ZBx65+1O/bb1JA4lHvgxWFfkfLAvTTciTSKnncIWz+d23E1Tw9Awlt0kTgsXUjMW xrrIkCNdUVSN4L+L2DK3UmpIPOv7FDXLq6wEMsA8AwWgbI942kgLOj2Wgp4kj8qa 7ef6o34KV12+7OC/WWxByv8bnPgtQjvaiEBriSBtIgXD/9VILt9bGkdEF/1rHKJW rQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:11:59 2026 by rpki-client