$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: RSTYMnpllo638XPj/OfRmIJmtk7722yZDpHUxcl0Vos= Subject key identifier: 21:EE:0D:5D:8F:EA:63:DD:56:68:25:B2:D6:12:4B:4A:7D:84:F2:FE Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 2D719AEB13EED854EB0DDCC07BF5BD662E833DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 02E1 Signing time: Wed 23 Sep 2026 00:05:48 +0000 Manifest this update: Wed 23 Sep 2026 00:00:48 +0000 Manifest next update: Thu 24 Sep 2026 02:23:48 +0000 Files and hashes: 1: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 2: 3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa (hash: 5nflC/ZAQBKmwe6R0T4Zf8LtCLe1A1oD7ZGFGhKypUg=) 3: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 6: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 2nK1GzqQx6h7/8TaNyKfz/iCUX6xc1TAiZiuqm3i2B8=) 7: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 9: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 02:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:71:9a:eb:13:ee:d8:54:eb:0d:dc:c0:7b:f5:bd:66:2e:83:3d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Sep 23 00:00:48 2026 GMT Not After : Sep 24 02:23:48 2026 GMT Subject: CN=21EE0D5D8FEA63DD566825B2D6124B4A7D84F2FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:9b:84:d6:73:be:77:c5:00:e7:c9:ef:ef: 66:a7:00:93:4f:cf:50:19:0e:9b:a9:f3:b1:18:f7: 5b:e3:29:4f:56:06:00:39:63:2e:a5:7f:b7:62:b9: 26:3a:71:f9:89:99:25:eb:bf:70:2f:f1:92:64:81: d8:b3:1f:3d:2c:a9:a9:03:43:75:07:53:31:a7:a4: eb:64:3d:5b:55:cb:82:eb:b9:b8:31:35:df:b4:cb: ce:ed:bd:d0:f0:95:e9:7f:13:f7:87:20:83:bf:43: 40:ab:70:16:f8:d9:af:85:83:b8:25:34:3a:bf:e9: 68:1c:e0:54:26:d4:30:3c:22:7c:76:e2:7d:9d:49: 45:77:46:4d:8a:e8:ce:31:5c:c0:c7:79:30:e7:e2: 9e:af:38:d2:53:65:6d:52:bf:9d:c1:43:64:33:4d: 65:46:97:45:d4:d7:3a:97:f7:3d:5b:b3:3e:fa:6c: 33:1a:64:4c:ee:ef:a3:95:49:cf:8a:42:e2:76:26: 7b:99:3c:4a:ee:2b:f3:a9:3a:1b:c5:2d:69:97:ea: c0:93:5e:ca:a7:b5:4f:18:1b:76:4b:ef:bf:0f:21: c7:18:0b:d2:d7:37:04:8e:66:e5:41:59:87:c8:ed: bc:51:1a:da:a8:70:aa:05:dc:d7:b0:c0:09:9f:0f: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:0D:5D:8F:EA:63:DD:56:68:25:B2:D6:12:4B:4A:7D:84:F2:FE X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:87:0c:eb:80:e4:2f:e2:9f:1b:71:4d:48:19:83:c3:c3:0f: fc:cd:74:cc:ec:49:25:c6:f1:de:62:b7:db:8b:1c:b3:26:e6: f7:52:29:6e:3d:e3:61:0c:62:97:b6:cd:36:c3:66:dd:04:2a: 17:24:4a:f8:44:24:31:80:cb:05:3b:cb:2e:fe:37:db:02:7a: cd:46:f9:5e:78:e1:bb:1e:cb:a7:77:b3:05:74:f5:24:ab:9d: b8:e8:4d:6d:f3:3b:50:b5:22:be:fc:45:0d:8d:d2:81:9b:7e: 1e:47:c0:16:fb:b6:26:cb:c3:26:ef:de:2b:be:78:99:32:7f: 56:2c:f1:45:3e:11:0c:9f:c9:e4:e2:aa:75:70:cf:13:d1:5d: bc:16:97:0a:7c:7c:cf:43:c3:22:70:a6:99:65:04:ce:26:75: fd:97:1e:1a:81:e6:f2:95:b4:06:19:ce:94:4a:0c:f2:ab:2e: e9:33:a0:23:12:84:5c:b6:9f:c3:c4:82:3b:a3:f5:4f:90:34: 27:7e:ea:64:f6:e0:7f:bf:2f:e5:92:f8:f6:fe:b3:bd:3a:da: d6:24:99:f9:02:0e:56:44:70:f2:a8:ca:37:58:f7:ca:65:b1: 3d:1b:c5:46:aa:f6:5d:fd:7b:52:be:c6:70:88:15:1b:de:92: a3:8c:0b:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULXGa6xPu2FTrDdzAe/W9Zi6DPeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA5MjMwMDAwNDhaFw0yNjA5MjQwMjIzNDhaMDMxMTAvBgNV BAMTKDIxRUUwRDVEOEZFQTYzREQ1NjY4MjVCMkQ2MTI0QjRBN0Q4NEYyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUapuE1nO+d8UA58nv72anAJNP z1AZDpup87EY91vjKU9WBgA5Yy6lf7diuSY6cfmJmSXrv3Av8ZJkgdizHz0sqakD Q3UHUzGnpOtkPVtVy4LrubgxNd+0y87tvdDwlel/E/eHIIO/Q0CrcBb42a+Fg7gl NDq/6Wgc4FQm1DA8Inx24n2dSUV3Rk2K6M4xXMDHeTDn4p6vONJTZW1Sv53BQ2Qz TWVGl0XU1zqX9z1bsz76bDMaZEzu76OVSc+KQuJ2JnuZPEruK/OpOhvFLWmX6sCT XsqntU8YG3ZL778PIccYC9LXNwSOZuVBWYfI7bxRGtqocKoF3NewwAmfD2TlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIe4NXY/qY91WaCWy1hJLSn2E8v4wHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANocM64DkL+KfG3FNSBmD w8MP/M10zOxJJcbx3mK324scsybm91Ipbj3jYQxil7bNNsNm3QQqFyRK+EQkMYDL BTvLLv432wJ6zUb5Xnjhux7Lp3ezBXT1JKuduOhNbfM7ULUivvxFDY3SgZt+HkfA Fvu2JsvDJu/eK754mTJ/VizxRT4RDJ/J5OKqdXDPE9FdvBaXCnx8z0PDInCmmWUE ziZ1/ZceGoHm8pW0BhnOlEoM8qsu6TOgIxKEXLafw8SCO6P1T5A0J37qZPbgf78v 5ZL49v6zvTra1iSZ+QIOVkRw8qjKN1j3ymWxPRvFRqr2Xf17Ur7GcIgVG96So4wL iA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:18 2026 by rpki-client