$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: rF7YltmLXsafwZIPHVNe5ATE6tKdzVececA7VRkMS6A= Subject key identifier: 3E:24:7A:D4:E0:BF:38:10:8D:E1:40:22:B3:83:73:2A:4F:79:C7:57 Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 37A4F58120227F0CDCBB47F567AC074F7EA80DA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 0122 Signing time: Fri 25 Sep 2026 04:16:21 +0000 Manifest this update: Fri 25 Sep 2026 04:11:21 +0000 Manifest next update: Sat 26 Sep 2026 07:04:21 +0000 Files and hashes: 1: 3137362e3130322e3137322e302f32342d3234203d3e20383334.roa (hash: lR0P/b2pLESvfEtW69Jl1aeQ0nMgaZVWJylK7oc6PxU=) 2: 3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa (hash: K2Kgw6dfaKGLV4vvS+1P0LI6GcXhxz2mSPH8vu81cPY=) 3: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: 775b+btNy1Lc74VwxNy2/pkaQ+LM5/9dp5J+lasOB9E=) 4: 3137362e3130322e3137302e302f32342d3234203d3e20323138383932.roa (hash: vmUE36uirVg+qyVeYyyIT35k13krsMMnmBR1nuw3RCE=) 5: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) 6: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 7: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (hash: KjqXi8WutHoDtcfgWO4eIZXy4bfZUhDCfps5/YiZVQw=) 8: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 9: 3137362e3130322e3137342e302f32342d3234203d3e20383334.roa (hash: 65OmSL/XRblwi58rq1Ib5dzvN6lqu+6Iunx32cGOXWM=) 10: 3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa (hash: dUWRnvNQrG03cFGRKewLSEVSnqrlP2WFLU1i5zJtdMs=) 11: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 12: 3137362e3130322e3136392e302f32342d3234203d3e20383334.roa (hash: htqBX5xVmv8z6xUgxiiwHmJV6C5oPjjeGMryMjNnWZs=) 13: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 14: 3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa (hash: BEvg5hkdDxVU/wJ2R3nH/rRQwVSA5SzU4zAT1MeeHZ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 07:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a4:f5:81:20:22:7f:0c:dc:bb:47:f5:67:ac:07:4f:7e:a8:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Sep 25 04:11:21 2026 GMT Not After : Sep 26 07:04:21 2026 GMT Subject: CN=3E247AD4E0BF38108DE14022B383732A4F79C757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:4b:84:53:12:a1:02:d9:29:94:f4:0f:25: d4:17:38:7e:53:6b:4c:3c:82:ed:ec:9e:95:d1:46: 6e:c8:b5:e4:16:a5:7c:9a:aa:e9:0b:67:70:2c:53: 7a:85:87:c0:ff:17:68:30:2f:40:f2:0f:1a:37:c0: 8d:7a:32:fb:ce:86:4e:7b:63:9f:de:48:f9:4c:c8: 31:91:1d:96:eb:22:db:1a:51:1b:94:40:a6:08:c5: d8:00:e6:68:f3:3a:89:f9:92:ed:55:00:d8:d5:67: 9c:f6:6d:03:ab:2d:36:f7:14:22:b7:01:d4:03:ce: b0:ed:4a:76:e1:4c:67:9d:62:d5:32:7c:67:96:25: 21:7b:d1:47:9f:33:47:6f:f0:27:62:dd:7e:e2:39: b9:07:00:cf:aa:57:3e:6e:5b:91:88:59:69:9a:d1: a5:ad:89:ae:70:eb:6d:32:5a:d0:65:05:2a:a8:9b: e5:5f:3a:bb:dc:43:a6:ad:67:2c:32:ee:56:5e:3e: 0d:12:30:6d:8c:3e:c6:fe:f5:9e:f9:f8:83:56:f1: cb:2b:05:4a:8c:78:43:8a:e8:f6:9a:e4:54:cf:25: df:83:1f:9e:cf:18:f0:b8:08:77:b2:1e:ff:78:76: 29:19:42:e8:44:ed:e6:02:99:4a:10:8b:7e:ba:1d: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:24:7A:D4:E0:BF:38:10:8D:E1:40:22:B3:83:73:2A:4F:79:C7:57 X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:92:bc:65:cb:4c:6d:99:00:72:37:1c:58:e9:03:67:f8:09: e9:2e:9d:ce:87:f7:3d:7f:98:2f:55:59:0c:37:ac:18:82:93: 39:69:41:f0:ed:2a:da:d9:de:19:50:9a:95:80:e9:37:1c:53: 3d:53:e7:8f:8e:76:49:fc:b4:6e:af:74:ae:16:63:da:58:8f: 80:a7:e2:65:e9:42:2a:e4:dc:61:7a:d4:16:35:0b:92:fd:7d: 9d:ed:32:e8:96:59:8d:42:28:6f:19:09:4d:cd:21:e1:03:2b: 19:51:9c:c9:56:7e:00:e0:c6:73:b6:dd:a4:b1:2a:e8:f7:d4: d8:f2:f4:dc:a2:4b:4f:12:26:73:3b:83:3b:fb:16:eb:c6:ee: 8b:a9:84:53:14:82:ce:79:1e:b9:28:0a:d2:3f:a6:73:c4:88: de:6d:fc:3d:8d:42:51:8b:8e:c2:af:63:e2:cf:68:e7:82:0c: 19:21:90:c4:40:23:c9:7a:47:be:b6:52:fb:a0:a2:14:72:8f: 5a:92:1b:66:a7:a2:5a:65:de:80:0b:31:48:36:08:58:ea:61: b0:30:9f:b7:01:01:c1:6d:4e:fe:45:b2:00:2f:ed:f4:c0:22: 4a:16:ad:14:c0:f9:b9:4d:04:e8:22:55:14:15:0c:35:22:ce: 95:5a:da:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUN6T1gSAifwzcu0f1Z6wHT36oDaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA5MjUwNDExMjFaFw0yNjA5MjYwNzA0MjFaMDMxMTAvBgNV BAMTKDNFMjQ3QUQ0RTBCRjM4MTA4REUxNDAyMkIzODM3MzJBNEY3OUM3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2UuEUxKhAtkplPQPJdQXOH5T a0w8gu3snpXRRm7IteQWpXyaqukLZ3AsU3qFh8D/F2gwL0DyDxo3wI16MvvOhk57 Y5/eSPlMyDGRHZbrItsaURuUQKYIxdgA5mjzOon5ku1VANjVZ5z2bQOrLTb3FCK3 AdQDzrDtSnbhTGedYtUyfGeWJSF70UefM0dv8Cdi3X7iObkHAM+qVz5uW5GIWWma 0aWtia5w620yWtBlBSqom+VfOrvcQ6atZywy7lZePg0SMG2MPsb+9Z75+INW8csr BUqMeEOK6Paa5FTPJd+DH57PGPC4CHeyHv94dikZQuhE7eYCmUoQi366HXehAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPiR61OC/OBCN4UAis4NzKk95x1cwHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3JK8ZctMbZkAcjccWOkD Z/gJ6S6dzof3PX+YL1VZDDesGIKTOWlB8O0q2tneGVCalYDpNxxTPVPnj452Sfy0 bq90rhZj2liPgKfiZelCKuTcYXrUFjULkv19ne0y6JZZjUIobxkJTc0h4QMrGVGc yVZ+AODGc7bdpLEq6PfU2PL03KJLTxImczuDO/sW68bui6mEUxSCznkeuSgK0j+m c8SI3m38PY1CUYuOwq9j4s9o54IMGSGQxEAjyXpHvrZS+6CiFHKPWpIbZqeiWmXe gAsxSDYIWOphsDCftwEBwW1O/kWyAC/t9MAiShatFMD5uU0E6CJVFBUMNSLOlVra IQ== -----END CERTIFICATE-----Generated at Fri Sep 25 16:26:13 2026 by rpki-client