$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: 9mFxAcjtqTCvFQqOyKylg5p6sp/npgLbJKg2qKw+avg= Subject key identifier: 6F:B5:2F:35:37:0F:D5:C4:8B:8B:C6:CD:47:E1:D0:38:B6:3A:3C:49 Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 29C2517BAD4847FA53DA17A97AEAA692FB67DE67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: C9 Signing time: Sat 26 Sep 2026 11:35:02 +0000 Manifest this update: Sat 26 Sep 2026 11:30:02 +0000 Manifest next update: Sun 27 Sep 2026 13:19:02 +0000 Files and hashes: 1: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 2: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: yCTR9H/bRqAmN+LC8+SEIkucmz+evQRPl7FLyjHlQ/c=) 3: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 4: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 5: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c2:51:7b:ad:48:47:fa:53:da:17:a9:7a:ea:a6:92:fb:67:de:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Sep 26 11:30:02 2026 GMT Not After : Sep 27 13:19:02 2026 GMT Subject: CN=6FB52F35370FD5C48B8BC6CD47E1D038B63A3C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:af:b4:b7:bd:87:e4:2e:4a:16:82:91:a7: b8:3c:96:82:d0:7c:7c:ca:ef:a8:84:25:b3:9e:6c: c9:1d:7a:c6:45:a8:c3:ae:0f:52:de:e2:dc:18:32: 23:ed:60:3e:47:02:15:f3:ff:02:cc:7d:a0:ef:dc: 6e:fc:42:39:cb:c7:fd:9b:ef:d2:b1:86:84:f9:0f: 56:cf:72:26:16:78:0a:96:66:7b:31:15:c5:b5:9d: ea:db:83:17:ca:cd:ed:39:a8:cf:20:19:24:03:2f: 76:78:69:d0:b0:55:ed:d4:a7:83:bf:4b:d2:16:d7: 5d:0b:72:a7:df:31:01:4a:51:6a:e4:01:89:4b:88: ec:99:d3:28:a9:f7:c5:61:30:93:89:ca:fb:73:29: b5:5d:4b:a1:5e:40:3b:d6:93:10:42:a1:53:77:bd: 81:28:33:65:95:8a:9e:53:d2:30:a9:b8:75:4f:d8: 82:51:98:14:5c:4e:fa:0d:00:6d:b6:cc:f3:ac:70: 82:aa:50:75:ec:00:11:89:53:4b:c4:29:d9:86:c2: 31:50:66:cf:28:74:b3:6a:e9:16:fe:3d:2b:02:23: cf:8d:59:3b:a0:a9:3f:43:40:13:27:ca:28:5c:9d: cf:f7:7a:2c:fe:fa:3c:60:81:7d:3c:fd:37:17:a8: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:2F:35:37:0F:D5:C4:8B:8B:C6:CD:47:E1:D0:38:B6:3A:3C:49 X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:7e:e7:4f:77:09:a6:9b:65:c8:3a:68:c9:c3:5a:77:68: 83:3a:4d:74:cb:db:a7:b2:18:18:0d:d6:aa:25:9f:a1:de:e3: 48:c0:e6:52:e3:62:97:26:7b:59:54:2a:fc:f4:23:c9:f3:af: 58:47:aa:04:d9:7b:98:56:78:d2:8b:45:ea:1b:aa:a8:c6:7b: 64:a7:28:30:ba:fe:60:df:e4:b8:e5:83:d2:fc:e7:bd:6c:6f: 5c:a4:5e:0d:ee:9a:a1:6d:7d:9a:cf:29:a4:7d:6c:59:db:1e: 6a:b7:cd:c4:e4:30:9b:a1:0b:1c:4c:74:3a:89:a9:81:82:96: f7:94:5d:69:61:92:ea:44:f5:65:2d:6e:f5:6b:99:b4:2e:bb: a2:e0:1b:fa:ce:e4:77:31:60:e6:9a:7b:46:bb:ba:ae:24:83: 29:51:0e:22:9c:fc:cf:35:c3:54:8c:c9:11:87:06:29:84:ef: 72:1c:2c:18:ca:e3:6c:e5:58:1c:23:df:2f:e3:b6:6a:75:fe: 52:76:91:f0:e5:33:b2:9c:e1:05:ad:ca:3c:64:b0:3c:a5:2a: f9:98:1f:b7:ea:31:39:2c:04:df:87:f6:0b:81:0f:d8:a7:1d: c5:c5:58:31:c6:66:da:64:23:1d:49:4b:96:be:92:51:3d:7f: 47:25:c2:93 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKcJRe61IR/pT2hepeuqmkvtn3mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA5MjYxMTMwMDJaFw0yNjA5MjcxMzE5MDJaMDMxMTAvBgNV BAMTKDZGQjUyRjM1MzcwRkQ1QzQ4QjhCQzZDRDQ3RTFEMDM4QjYzQTNDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEK+0t72H5C5KFoKRp7g8loLQ fHzK76iEJbOebMkdesZFqMOuD1Le4twYMiPtYD5HAhXz/wLMfaDv3G78QjnLx/2b 79KxhoT5D1bPciYWeAqWZnsxFcW1nerbgxfKze05qM8gGSQDL3Z4adCwVe3Up4O/ S9IW110LcqffMQFKUWrkAYlLiOyZ0yip98VhMJOJyvtzKbVdS6FeQDvWkxBCoVN3 vYEoM2WVip5T0jCpuHVP2IJRmBRcTvoNAG22zPOscIKqUHXsABGJU0vEKdmGwjFQ Zs8odLNq6Rb+PSsCI8+NWTugqT9DQBMnyihcnc/3eiz++jxggX08/TcXqEuzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUb7UvNTcP1cSLi8bNR+HQOLY6PEkwHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAB+5093CaabZcg6aMnD WndogzpNdMvbp7IYGA3WqiWfod7jSMDmUuNilyZ7WVQq/PQjyfOvWEeqBNl7mFZ4 0otF6huqqMZ7ZKcoMLr+YN/kuOWD0vznvWxvXKReDe6aoW19ms8ppH1sWdsearfN xOQwm6ELHEx0OompgYKW95RdaWGS6kT1ZS1u9WuZtC67ouAb+s7kdzFg5pp7Rru6 riSDKVEOIpz8zzXDVIzJEYcGKYTvchwsGMrjbOVYHCPfL+O2anX+UnaR8OUzspzh Ba3KPGSwPKUq+Zgft+oxOSwE34f2C4EP2KcdxcVYMcZm2mQjHUlLlr6SUT1/RyXC kw== -----END CERTIFICATE-----Generated at Sat Sep 26 14:47:59 2026 by rpki-client