$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: jh4jINyrk6OCA25WcFzAK8JN3NIu1rTth32bYbvO2ec= Subject key identifier: 0B:96:9A:EA:64:8F:88:E8:0D:C9:D2:87:D9:E3:1A:74:D9:DB:1F:01 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 7CBD37EC15BBAFAC13C0D424CF394210F265D71C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 074D Signing time: Wed 23 Sep 2026 06:25:49 +0000 Manifest this update: Wed 23 Sep 2026 06:20:49 +0000 Manifest next update: Thu 24 Sep 2026 09:32:49 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: 5/VaSwXgKobs4KmbASc8XCdCjOZyOCQdO11mpBFSnXk=) 2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: O/XczvICtVW578H4pujJjG0NlrBlkBVw8ic6aTFH+JU=) 3: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 4: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bd:37:ec:15:bb:af:ac:13:c0:d4:24:cf:39:42:10:f2:65:d7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Sep 23 06:20:49 2026 GMT Not After : Sep 24 09:32:49 2026 GMT Subject: CN=0B969AEA648F88E80DC9D287D9E31A74D9DB1F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:b8:2c:94:51:ee:c9:c9:34:ed:7a:a7:6e: 96:4e:56:34:a1:81:ef:c1:fd:b6:d2:6c:95:c3:2d: 8a:c3:06:b0:71:2d:b7:1f:0f:a4:b8:1b:f7:b7:7b: 9c:76:43:9f:7e:ee:44:08:5d:04:9d:1e:bb:4e:12: 97:03:6b:84:89:a3:ef:62:01:af:39:9a:b9:6b:5a: f6:cd:2e:3b:43:c8:fa:f2:86:bc:3d:26:16:84:74: f3:84:d1:cd:fd:72:d0:1d:6e:f5:20:6c:72:a0:9e: 01:8a:7c:09:4b:d0:fa:28:c5:a7:50:be:1a:5f:52: 72:5b:61:40:ed:1d:fa:9f:ae:65:e2:4a:68:91:1f: 00:ec:9e:cd:7b:69:45:fc:26:bc:33:15:4d:10:91: ef:08:6f:8a:af:3d:1a:2d:f5:f2:4a:8d:eb:8f:c4: 84:6f:3c:66:27:8f:27:f1:0c:e4:e8:c8:0f:6f:db: f8:ee:56:73:24:af:7a:3e:53:e6:ff:2b:6f:ca:44: 37:21:36:56:bc:b9:f2:ad:84:69:2b:9c:51:49:41: 68:b2:02:9e:b3:3c:60:d0:8d:b5:43:86:7f:3f:3c: b7:62:da:f1:7c:ca:f6:83:63:f0:14:7c:f3:c4:15: cd:a5:74:f0:30:e7:74:b5:71:fb:1e:89:aa:02:62: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:9A:EA:64:8F:88:E8:0D:C9:D2:87:D9:E3:1A:74:D9:DB:1F:01 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:94:25:28:8e:4b:24:69:2b:4e:8d:20:2c:38:12:1b:75:2d: 2e:0a:1f:6c:53:cf:b1:35:8d:19:53:0a:3a:0d:67:3f:f9:99: ec:63:6e:f1:4c:06:25:8f:a3:eb:08:db:5c:3b:95:75:f9:f4: 6d:77:03:a7:f1:af:06:d9:c3:2d:fc:e9:97:12:21:5a:ab:5d: ca:c8:17:e6:54:20:a4:09:6b:d7:00:26:99:51:e8:7d:21:af: 85:e9:bd:72:52:d5:eb:e0:a1:cd:28:7c:c2:9e:42:db:30:d1: 3a:90:12:a6:a7:b2:6b:69:82:e5:fd:64:a0:0f:37:32:08:e6: 97:1e:c5:f8:91:fb:be:2f:b5:7d:69:73:10:6c:ef:3d:86:85: 00:1c:bc:85:47:35:2c:ac:fd:d3:74:76:2e:76:64:09:0f:e3: de:82:b0:0a:8a:46:08:f8:7e:f7:96:54:e6:a0:c4:41:21:bc: cc:68:60:45:9d:48:e1:56:42:aa:43:63:7a:e6:17:54:3c:01: df:e4:e3:f3:de:d7:f6:f0:61:36:5b:a0:48:da:9c:31:fa:ae: 1a:1b:23:f9:10:d3:33:62:77:64:76:6e:87:59:22:e8:42:9e: f1:be:48:99:92:9e:6b:81:04:fb:52:48:69:5c:c6:15:83:e9: cc:de:2b:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfL037BW7r6wTwNQkzzlCEPJl1xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA5MjMwNjIwNDlaFw0yNjA5MjQwOTMyNDlaMDMxMTAvBgNV BAMTKDBCOTY5QUVBNjQ4Rjg4RTgwREM5RDI4N0Q5RTMxQTc0RDlEQjFGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfrgslFHuyck07XqnbpZOVjSh ge/B/bbSbJXDLYrDBrBxLbcfD6S4G/e3e5x2Q59+7kQIXQSdHrtOEpcDa4SJo+9i Aa85mrlrWvbNLjtDyPryhrw9JhaEdPOE0c39ctAdbvUgbHKgngGKfAlL0PooxadQ vhpfUnJbYUDtHfqfrmXiSmiRHwDsns17aUX8JrwzFU0Qke8Ib4qvPRot9fJKjeuP xIRvPGYnjyfxDOToyA9v2/juVnMkr3o+U+b/K2/KRDchNla8ufKthGkrnFFJQWiy Ap6zPGDQjbVDhn8/PLdi2vF8yvaDY/AUfPPEFc2ldPAw53S1cfseiaoCYn3VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC5aa6mSPiOgNydKH2eMadNnbHwEwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5QlKI5LJGkrTo0gLDgS G3UtLgofbFPPsTWNGVMKOg1nP/mZ7GNu8UwGJY+j6wjbXDuVdfn0bXcDp/GvBtnD LfzplxIhWqtdysgX5lQgpAlr1wAmmVHofSGvhem9clLV6+ChzSh8wp5C2zDROpAS pqeya2mC5f1koA83Mgjmlx7F+JH7vi+1fWlzEGzvPYaFABy8hUc1LKz903R2LnZk CQ/j3oKwCopGCPh+95ZU5qDEQSG8zGhgRZ1I4VZCqkNjeuYXVDwB3+Tj897X9vBh NlugSNqcMfquGhsj+RDTM2J3ZHZuh1ki6EKe8b5ImZKea4EE+1JIaVzGFYPpzN4r kQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:42:59 2026 by rpki-client