$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: wKOK8/fSae8jacxAeZwUAk6MuSqVPxLU79yIgXgfaeA= Subject key identifier: 87:75:3E:B6:18:5F:70:19:4B:14:6A:2B:7D:7D:33:76:98:E8:56:1C Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 432CB32AEAEE58BED3488F206B5690A049028241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 066B Signing time: Wed 23 Sep 2026 23:55:53 +0000 Manifest this update: Wed 23 Sep 2026 23:50:53 +0000 Manifest next update: Fri 25 Sep 2026 00:40:53 +0000 Files and hashes: 1: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 2: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: W6M9uoTTK4n3xvvKzm7cnJar5VLqBtAN0kHxOHBsvBw=) 3: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 4: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 5: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 6: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 7: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 8: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 9: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 10: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 11: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 12: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2c:b3:2a:ea:ee:58:be:d3:48:8f:20:6b:56:90:a0:49:02:82:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Sep 23 23:50:53 2026 GMT Not After : Sep 25 00:40:53 2026 GMT Subject: CN=87753EB6185F70194B146A2B7D7D337698E8561C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:0c:04:de:ba:b8:20:a8:0c:e1:2a:28:7e: f5:e5:e0:1c:d2:96:f3:8c:dd:4c:c4:af:6a:11:63: 37:14:a2:28:23:51:b9:d0:a7:1c:bd:aa:f2:c5:71: e6:a0:06:62:49:7f:dd:8a:fe:44:62:9c:e7:b2:b5: db:2d:d6:93:3b:34:f5:f8:9c:75:28:e9:b3:3a:1c: b7:e3:3c:15:0a:fe:5d:1d:49:20:59:3f:4c:60:04: b3:cc:46:00:d5:d0:12:6a:e4:d7:0a:9b:d6:a1:26: 6f:b2:cd:a7:34:e1:e5:9d:6f:45:4c:79:d2:5b:7e: e8:4a:cb:98:35:d1:dc:ca:39:ae:e5:9e:ae:c5:d0: 24:ae:d3:4a:e5:d2:23:f8:98:14:60:6c:a9:2a:cc: b2:42:94:98:06:78:ce:d0:4e:12:7d:6c:79:79:12: ad:95:86:70:02:9b:dd:5d:c6:cd:54:a2:a4:1f:96: 8a:83:65:62:2b:54:11:2e:d2:25:85:c3:82:ef:b3: cb:23:46:83:39:fb:74:bb:d8:de:27:20:bd:59:cf: c6:08:6d:c7:b4:a5:45:e1:a9:84:44:49:d3:37:54: 4a:4b:5e:c3:0f:e9:ef:5c:d8:1e:67:37:74:1a:69: 38:3e:07:f7:14:24:ff:4b:d0:15:ea:4c:ef:a0:57: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:3E:B6:18:5F:70:19:4B:14:6A:2B:7D:7D:33:76:98:E8:56:1C X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:87:65:26:2b:b1:fd:82:f7:b6:23:5d:cd:05:36:d3:ef: 52:58:a6:cb:8d:43:95:4f:d5:4e:0c:77:66:7d:03:cd:09:19: 0c:f7:bd:86:5a:6f:dd:1c:4f:84:a2:d2:6b:b4:af:73:31:04: d7:fe:5c:a2:99:30:f4:bc:7a:a5:04:55:b6:33:16:1f:4f:b4: ca:10:ac:c7:b1:1a:bf:34:cd:d0:a0:cc:32:68:40:74:0f:6d: d0:d4:fe:64:8a:7c:13:1f:86:e2:be:f5:b0:31:55:d5:99:c5: e0:61:65:8e:38:24:cb:10:b0:93:61:38:4b:7b:e3:a5:52:d3: 26:00:dc:59:60:2d:33:e1:0e:4b:56:22:c5:ba:67:63:a0:5b: 28:c0:b7:4d:ab:f9:be:08:e6:df:33:f2:dd:95:66:e9:13:85: 9e:78:79:4e:54:22:fe:ff:c2:bc:66:dd:99:27:53:a7:dc:6c: 6d:df:74:c6:03:02:c0:79:79:66:8c:e8:b1:99:88:18:8f:a7: 9d:fb:5a:54:b3:16:eb:f8:63:da:df:3d:c5:ed:74:fc:a2:18: 79:ff:65:4d:1b:dd:96:d7:ad:ff:c6:ad:12:94:65:40:0d:76: 2a:ae:ca:9f:05:fe:15:bd:2f:aa:00:f6:3a:3b:0b:a7:df:62: fc:54:d1:0e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQyyzKuruWL7TSI8ga1aQoEkCgkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA5MjMyMzUwNTNaFw0yNjA5MjUwMDQwNTNaMDMxMTAvBgNV BAMTKDg3NzUzRUI2MTg1RjcwMTk0QjE0NkEyQjdEN0QzMzc2OThFODU2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzAwE3rq4IKgM4SoofvXl4BzS lvOM3UzEr2oRYzcUoigjUbnQpxy9qvLFceagBmJJf92K/kRinOeytdst1pM7NPX4 nHUo6bM6HLfjPBUK/l0dSSBZP0xgBLPMRgDV0BJq5NcKm9ahJm+yzac04eWdb0VM edJbfuhKy5g10dzKOa7lnq7F0CSu00rl0iP4mBRgbKkqzLJClJgGeM7QThJ9bHl5 Eq2VhnACm91dxs1UoqQfloqDZWIrVBEu0iWFw4Lvs8sjRoM5+3S72N4nIL1Zz8YI bce0pUXhqYRESdM3VEpLXsMP6e9c2B5nN3QaaTg+B/cUJP9L0BXqTO+gV7+DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUh3U+thhfcBlLFGorfX0zdpjoVhwwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2uHZSYrsf2C97YjXc0F NtPvUlimy41DlU/VTgx3Zn0DzQkZDPe9hlpv3RxPhKLSa7SvczEE1/5copkw9Lx6 pQRVtjMWH0+0yhCsx7EavzTN0KDMMmhAdA9t0NT+ZIp8Ex+G4r71sDFV1ZnF4GFl jjgkyxCwk2E4S3vjpVLTJgDcWWAtM+EOS1YixbpnY6BbKMC3Tav5vgjm3zPy3ZVm 6ROFnnh5TlQi/v/CvGbdmSdTp9xsbd90xgMCwHl5ZozosZmIGI+nnftaVLMW6/hj 2t89xe10/KIYef9lTRvdltet/8atEpRlQA12Kq7KnwX+Fb0vqgD2OjsLp99i/FTR Dg== -----END CERTIFICATE-----Generated at Thu Sep 24 05:43:02 2026 by rpki-client