$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: /SaScLOTxeKSmmXK291BXitxitVuMFij+6W/Uw+MKJo= Subject key identifier: 91:C9:84:4A:85:63:B0:F8:A6:F7:26:A6:2D:68:BD:11:F1:9E:CD:AD Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 5235CF4C7CEC2C4D7A9E8E509C96AC2B23EC64DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 03B5 Signing time: Fri 25 Sep 2026 13:25:38 +0000 Manifest this update: Fri 25 Sep 2026 13:20:38 +0000 Manifest next update: Sat 26 Sep 2026 13:54:38 +0000 Files and hashes: 1: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) 2: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) 3: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: pWa773v7HWYT1zWwh4JLjXnqgZeIieqoXBrSqBZZweU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 13:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:35:cf:4c:7c:ec:2c:4d:7a:9e:8e:50:9c:96:ac:2b:23:ec:64:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Sep 25 13:20:38 2026 GMT Not After : Sep 26 13:54:38 2026 GMT Subject: CN=91C9844A8563B0F8A6F726A62D68BD11F19ECDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:e5:7c:1d:f8:16:9f:56:78:0d:ed:1e:4a: 90:d7:0a:dc:f5:a3:e6:a0:fe:a3:bf:3f:55:3f:a7: 6d:63:e5:96:58:e6:51:58:08:2d:09:8f:19:76:91: af:52:f2:d0:d8:9b:eb:6a:5f:f2:56:ae:55:bb:89: 14:4b:56:d0:11:da:52:6a:c1:87:69:f6:48:e8:10: 6c:fe:ac:f0:97:6b:02:8f:b4:ca:f5:b3:be:e5:1f: ca:68:26:d8:d6:93:ac:97:83:ff:85:c0:6a:6e:79: ed:ed:8d:04:66:60:f6:c6:9a:9a:11:ef:4f:8f:bf: ef:62:a8:bc:ca:cb:04:f5:fe:dd:e5:36:37:13:4c: 38:56:fd:22:2f:37:d4:c9:3e:2a:ac:4f:6b:b1:71: 26:0f:6e:49:fa:1c:35:a3:15:a4:d4:a8:db:10:54: 81:dc:35:a1:87:c0:2e:e8:db:b1:07:e6:c6:b8:af: 0a:6d:d4:08:ac:fc:38:8a:1c:89:19:b7:da:28:4e: b2:d7:07:ee:38:f5:bc:8a:5e:53:d0:83:28:98:c0: fa:91:a6:d4:3d:8a:21:30:4a:f6:2f:71:5d:66:ab: 48:3f:14:04:74:c6:aa:74:10:93:88:17:37:4c:0c: 79:70:27:93:47:0c:b6:b0:9b:62:a9:ff:4e:7d:a3: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:84:4A:85:63:B0:F8:A6:F7:26:A6:2D:68:BD:11:F1:9E:CD:AD X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:12:64:53:b3:52:63:25:59:0a:c4:fc:1d:ad:e9:34:f1:86: b2:87:d1:d1:71:b8:71:c0:87:13:cd:2f:40:97:17:50:01:8b: 2b:5e:22:50:8d:43:8a:db:d8:53:82:67:c0:5d:cb:c9:9a:d5: b8:fc:1f:8f:6a:b8:17:ac:3f:73:b0:6c:48:d2:1f:e7:80:08: 32:81:ec:88:74:ed:0a:4b:ca:7f:89:4a:fe:65:8a:0b:14:4e: d7:7a:b9:bf:57:92:e7:f0:56:aa:7b:af:98:ba:4e:6c:ad:fe: 1b:5d:cb:91:19:d6:74:cf:c2:a8:e0:57:91:08:ea:cb:a5:08: 15:60:d4:46:e7:10:75:2b:d2:6c:37:5f:46:30:f1:58:f4:56: a6:90:be:55:bf:10:a4:b5:8d:96:1d:f1:1d:0b:d0:3d:56:25: d3:ec:49:bf:23:a3:b6:3c:55:c1:5f:f7:c5:9f:f3:6d:34:52: 00:8d:b4:ce:6a:9b:ad:f4:47:2b:2b:31:a6:d7:2b:11:b8:ab: e5:f0:12:63:d2:bc:7b:ee:0f:b9:cf:a5:88:6e:01:e6:40:29: 01:80:20:33:11:55:e7:11:d9:b0:2f:ce:13:03:40:06:40:69: 57:3d:ce:c1:9b:66:e7:94:d7:ff:f2:92:e4:b1:74:db:b5:d1: 11:21:de:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUjXPTHzsLE16no5QnJasKyPsZN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA5MjUxMzIwMzhaFw0yNjA5MjYxMzU0MzhaMDMxMTAvBgNV BAMTKDkxQzk4NDRBODU2M0IwRjhBNkY3MjZBNjJENjhCRDExRjE5RUNEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTuV8HfgWn1Z4De0eSpDXCtz1 o+ag/qO/P1U/p21j5ZZY5lFYCC0Jjxl2ka9S8tDYm+tqX/JWrlW7iRRLVtAR2lJq wYdp9kjoEGz+rPCXawKPtMr1s77lH8poJtjWk6yXg/+FwGpuee3tjQRmYPbGmpoR 70+Pv+9iqLzKywT1/t3lNjcTTDhW/SIvN9TJPiqsT2uxcSYPbkn6HDWjFaTUqNsQ VIHcNaGHwC7o27EH5sa4rwpt1Ais/DiKHIkZt9ooTrLXB+449byKXlPQgyiYwPqR ptQ9iiEwSvYvcV1mq0g/FAR0xqp0EJOIFzdMDHlwJ5NHDLawm2Kp/059o3i9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkcmESoVjsPim9yamLWi9EfGeza0wHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhJkU7NSYyVZCsT8Ha3p NPGGsofR0XG4ccCHE80vQJcXUAGLK14iUI1DitvYU4JnwF3LyZrVuPwfj2q4F6w/ c7BsSNIf54AIMoHsiHTtCkvKf4lK/mWKCxRO13q5v1eS5/BWqnuvmLpObK3+G13L kRnWdM/CqOBXkQjqy6UIFWDURucQdSvSbDdfRjDxWPRWppC+Vb8QpLWNlh3xHQvQ PVYl0+xJvyOjtjxVwV/3xZ/zbTRSAI20zmqbrfRHKysxptcrEbir5fASY9K8e+4P uc+liG4B5kApAYAgMxFV5xHZsC/OEwNABkBpVz3OwZtm55TX//KS5LF027XRESHe Yw== -----END CERTIFICATE-----Generated at Fri Sep 25 23:32:13 2026 by rpki-client