$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: e3us9e1NeP+RLJpWjzAea+1vShtv4hN9j9uu5V/IfcA= Subject key identifier: AA:E2:01:C4:AC:F4:EB:8D:F5:C9:4B:B5:EC:C1:D8:87:0D:14:48:8B Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: F1FED4E117CC33E1E685337F90965C5BAA9464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 068D Signing time: Wed 23 Sep 2026 20:14:46 +0000 Manifest this update: Wed 23 Sep 2026 20:09:46 +0000 Manifest next update: Thu 24 Sep 2026 20:34:46 +0000 Files and hashes: 1: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) 3: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: LbePHgdPtEAyq7+dPnJ6fl69R1uXE3Pw4Yx+Sp8D2H8=) 4: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f1:fe:d4:e1:17:cc:33:e1:e6:85:33:7f:90:96:5c:5b:aa:94:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Sep 23 20:09:46 2026 GMT Not After : Sep 24 20:34:46 2026 GMT Subject: CN=AAE201C4ACF4EB8DF5C94BB5ECC1D8870D14488B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:2e:3a:88:55:0c:a7:54:a1:67:f8:d2:90: 67:fb:40:68:8d:d3:a3:15:70:14:3e:28:5d:15:4e: 7e:e4:e9:1a:3d:f5:e3:c5:6d:2d:bb:e4:79:a9:d4: 5b:8e:39:b7:ce:c8:f8:a0:59:b3:dc:13:ef:b5:0b: ab:5c:4e:4c:ce:73:af:d3:5b:5b:97:46:2a:3a:d4: d0:bb:4b:53:3c:01:71:0a:ae:a0:7e:b5:e8:8e:1f: 23:8a:c2:39:f5:df:50:36:ef:f9:23:c7:60:5a:74: 32:1e:45:08:8d:9e:38:0c:59:be:7a:9a:7b:50:55: 16:42:87:be:de:01:64:84:40:de:bc:1f:6f:a9:b3: f2:73:7b:5f:55:63:8a:04:c1:91:48:86:65:5f:06: 09:71:57:7d:c0:4c:90:9b:50:37:0e:fa:58:ed:47: fa:ec:a1:f6:1a:f5:2d:19:56:b7:17:13:06:da:62: 2b:f9:68:42:39:d5:a4:cb:fb:10:c0:67:61:d8:0b: 3a:5c:55:35:74:a4:8f:52:17:bf:87:f3:44:05:05: eb:49:e5:19:2d:bd:05:cc:c9:68:bd:dc:7f:4a:05: 19:f2:b3:29:b3:7d:56:09:fc:64:fc:99:36:3f:2d: 69:fb:1d:4f:b8:42:4b:e6:ae:9a:8a:df:9b:3b:da: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:01:C4:AC:F4:EB:8D:F5:C9:4B:B5:EC:C1:D8:87:0D:14:48:8B X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e8:ce:a3:20:ea:b7:4e:1b:e9:0e:cb:6b:ab:e2:9b:32:a3: a7:f2:a4:45:e5:ed:18:1c:e2:6d:45:a5:67:6e:80:bf:86:3d: 94:9b:da:2c:69:62:42:7d:41:09:61:32:0e:f5:e8:d8:e2:1f: 62:09:48:d1:3b:31:92:b7:62:f7:a8:57:f2:72:cb:29:26:6a: 2c:f8:60:c0:0f:61:61:47:ca:6c:8c:46:b4:9b:f6:42:57:bd: 78:b7:88:4c:dd:7a:fe:ee:03:5e:bd:eb:b0:d4:74:fc:07:8a: 4b:96:3f:a0:c9:91:aa:ac:34:1d:b7:50:d2:0b:7d:d0:54:5e: 2a:a0:43:55:c5:bf:7b:07:cf:f3:a6:7e:33:2d:f3:eb:15:e3: 50:2e:58:4a:bb:5b:ce:23:29:ec:79:59:76:29:cf:f6:9d:de: f0:ac:37:a1:66:9d:17:66:ba:4e:90:b9:54:d2:b9:01:fe:2b: 8e:13:37:66:bd:05:d3:b7:a9:4e:aa:91:5f:b0:cb:a3:72:22: fd:58:ff:46:5e:94:8b:5b:ee:f4:64:14:dc:a5:3b:f6:c5:39: dd:41:8d:38:da:ce:63:f9:a6:bc:f9:e4:e7:81:1f:ad:80:5f: 2f:ae:e4:1b:c4:fe:3a:c1:87:8f:a8:87:9e:ca:02:d8:58:be: 2f:20:38:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAPH+1OEXzDPh5oUzf5CWXFuqlGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA5MjMyMDA5NDZaFw0yNjA5MjQyMDM0NDZaMDMxMTAvBgNV BAMTKEFBRTIwMUM0QUNGNEVCOERGNUM5NEJCNUVDQzFEODg3MEQxNDQ4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dy46iFUMp1ShZ/jSkGf7QGiN 06MVcBQ+KF0VTn7k6Ro99ePFbS275Hmp1FuOObfOyPigWbPcE++1C6tcTkzOc6/T W1uXRio61NC7S1M8AXEKrqB+teiOHyOKwjn131A27/kjx2BadDIeRQiNnjgMWb56 mntQVRZCh77eAWSEQN68H2+ps/Jze19VY4oEwZFIhmVfBglxV33ATJCbUDcO+ljt R/rsofYa9S0ZVrcXEwbaYiv5aEI51aTL+xDAZ2HYCzpcVTV0pI9SF7+H80QFBetJ 5RktvQXMyWi93H9KBRnysymzfVYJ/GT8mTY/LWn7HU+4QkvmrpqK35s72pLZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUquIBxKz06431yUu17MHYhw0USIswHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+jOoyDqt04b6Q7La6vi mzKjp/KkReXtGBzibUWlZ26Av4Y9lJvaLGliQn1BCWEyDvXo2OIfYglI0Tsxkrdi 96hX8nLLKSZqLPhgwA9hYUfKbIxGtJv2Qle9eLeITN16/u4DXr3rsNR0/AeKS5Y/ oMmRqqw0HbdQ0gt90FReKqBDVcW/ewfP86Z+My3z6xXjUC5YSrtbziMp7HlZdinP 9p3e8Kw3oWadF2a6TpC5VNK5Af4rjhM3Zr0F07epTqqRX7DLo3Ii/Vj/Rl6Ui1vu 9GQU3KU79sU53UGNONrOY/mmvPnk54EfrYBfL67kG8T+OsGHj6iHnsoC2Fi+LyA4 hQ== -----END CERTIFICATE-----Generated at Thu Sep 24 04:57:59 2026 by rpki-client