$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: 3GP3L4bQoUj6e/I0kbEI9q0KpZCFoO19LCJVEWoWOxI= Subject key identifier: 25:E7:CA:A6:26:D0:16:3C:64:33:67:53:A2:04:77:6E:45:99:6E:74 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 161A7249C7B0DAA62FAC4386B39E0B72EF2E0BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0328 Signing time: Sun 15 Nov 2026 00:40:10 +0000 Manifest this update: Sun 15 Nov 2026 00:35:10 +0000 Manifest next update: Mon 16 Nov 2026 00:44:10 +0000 Files and hashes: 1: 3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa (hash: 5nflC/ZAQBKmwe6R0T4Zf8LtCLe1A1oD7ZGFGhKypUg=) 2: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 3: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 5: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 6: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 77kxe2QSepgA/ynFzb3W+PZheCjMiVnJr+taLYB7XHc=) 8: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1a:72:49:c7:b0:da:a6:2f:ac:43:86:b3:9e:0b:72:ef:2e:0b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 15 00:35:10 2026 GMT Not After : Nov 16 00:44:10 2026 GMT Subject: CN=25E7CAA626D0163C64336753A204776E45996E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:9b:6c:a7:52:cd:8d:e4:10:54:5e:e9:f3: 73:39:35:54:76:fa:17:09:df:ca:bf:4c:12:b5:69: ad:ec:27:25:96:a9:95:f1:bb:87:0a:e8:24:3c:ad: 52:b6:ad:ff:a8:26:85:35:02:80:f2:47:e8:67:c2: 71:75:97:51:e1:68:78:d1:41:da:99:98:0b:48:d0: f2:7a:ef:bf:99:ed:55:62:65:95:d2:be:40:a3:9c: 8e:dc:5a:73:3a:f1:88:de:7b:da:3d:de:84:f5:3a: 47:00:55:c3:9d:43:53:24:45:f4:38:be:e9:25:f9: ae:a1:6c:ea:96:ff:22:fe:89:97:b5:ef:3c:39:aa: 7a:e0:31:e4:8a:e7:21:e9:e0:02:75:aa:d9:f7:53: 4f:5e:67:65:32:96:ca:e5:2f:13:32:57:1b:8d:5f: 01:28:1a:fb:fd:a3:e0:ec:2c:8a:6b:ed:e6:3f:b1: 65:8b:c7:a0:35:cb:d9:ce:74:69:35:65:1c:3b:29: f5:17:cd:12:90:2c:db:25:1d:81:41:90:1f:85:63: 1d:52:ff:6c:fe:58:a5:c1:2f:62:a1:b2:36:be:46: d2:5e:1e:23:42:83:97:ad:76:b1:99:73:2d:fd:73: 10:d7:cb:57:aa:65:32:71:f4:35:46:62:7d:e1:52: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E7:CA:A6:26:D0:16:3C:64:33:67:53:A2:04:77:6E:45:99:6E:74 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2a:82:70:37:09:79:4d:ec:7f:98:98:98:00:65:64:fd:82: b5:58:34:f7:49:a8:9e:af:11:86:06:20:e5:6e:c3:d8:1b:c7: 94:22:49:29:70:6c:53:82:b7:50:01:c0:80:f6:a3:2b:a6:43: 82:f1:f1:70:0f:de:77:c9:22:f3:2a:5a:c6:75:8a:66:ff:ed: 9d:da:42:35:c2:24:72:e4:59:9f:cb:69:38:f2:09:bc:22:2e: d8:20:67:d6:f2:3e:68:d2:15:6f:ae:29:b9:a4:fe:cd:f3:f1: 6d:cf:36:8a:12:65:7a:24:17:ba:5f:18:89:9b:08:82:52:ea: 58:71:43:52:ec:70:2f:f2:a3:b9:96:91:d6:e1:96:c8:40:cc: d3:6e:fb:ca:de:2b:dd:b0:0f:bd:bc:23:b2:86:98:a1:95:19: a3:15:ef:29:32:a6:51:0d:21:e8:97:91:73:85:02:14:86:8d: 4b:7e:d3:66:c1:20:7e:ef:de:b8:f6:a3:4e:46:36:07:d4:92: a8:bd:5f:05:15:d7:d5:8e:b6:f1:f8:d9:4c:e7:99:5d:03:e0: f2:ae:b7:5c:62:c7:d5:ce:48:60:e0:e9:8e:61:a8:6d:c1:e3: 13:46:27:65:fb:46:03:c9:74:b1:0b:18:df:83:ea:97:a7:d9: f9:30:b9:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFhpyScew2qYvrEOGs54Lcu8uC/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjExMTUwMDM1MTBaFw0yNjExMTYwMDQ0MTBaMDMxMTAvBgNV BAMTKDI1RTdDQUE2MjZEMDE2M0M2NDMzNjc1M0EyMDQ3NzZFNDU5OTZFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIptsp1LNjeQQVF7p83M5NVR2 +hcJ38q/TBK1aa3sJyWWqZXxu4cK6CQ8rVK2rf+oJoU1AoDyR+hnwnF1l1HhaHjR QdqZmAtI0PJ677+Z7VViZZXSvkCjnI7cWnM68Yjee9o93oT1OkcAVcOdQ1MkRfQ4 vukl+a6hbOqW/yL+iZe17zw5qnrgMeSK5yHp4AJ1qtn3U09eZ2UylsrlLxMyVxuN XwEoGvv9o+DsLIpr7eY/sWWLx6A1y9nOdGk1ZRw7KfUXzRKQLNslHYFBkB+FYx1S /2z+WKXBL2Khsja+RtJeHiNCg5etdrGZcy39cxDXy1eqZTJx9DVGYn3hUrtpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJefKpibQFjxkM2dTogR3bkWZbnQwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiqCcDcJeU3sf5iYmABl ZP2CtVg090monq8RhgYg5W7D2BvHlCJJKXBsU4K3UAHAgPajK6ZDgvHxcA/ed8ki 8ypaxnWKZv/tndpCNcIkcuRZn8tpOPIJvCIu2CBn1vI+aNIVb64puaT+zfPxbc82 ihJleiQXul8YiZsIglLqWHFDUuxwL/KjuZaR1uGWyEDM0277yt4r3bAPvbwjsoaY oZUZoxXvKTKmUQ0h6JeRc4UCFIaNS37TZsEgfu/euPajTkY2B9SSqL1fBRXX1Y62 8fjZTOeZXQPg8q63XGLH1c5IYODpjmGobcHjE0YnZftGA8l0sQsY34Pql6fZ+TC5 cA== -----END CERTIFICATE-----Generated at Sun Nov 15 09:53:54 2026 by rpki-client