$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: sF771qM9kANfrZ9ZDxhR6NFy0ctYZfEYuepj7grz6ag= Subject key identifier: 22:3E:9E:04:3E:AD:22:07:1F:33:96:F6:61:47:8C:B3:82:CD:59:51 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 58CF4DC360C4C57248AC1B825097C19DA87096D0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0308 Signing time: Thu 24 Sep 2026 12:46:24 +0000 Manifest this update: Thu 24 Sep 2026 12:41:24 +0000 Manifest next update: Fri 25 Sep 2026 14:50:24 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: VRtd5MeKyugYR5elStYatIa/vCmEQhwNy4pPFRAUT0A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:cf:4d:c3:60:c4:c5:72:48:ac:1b:82:50:97:c1:9d:a8:70:96:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Sep 24 12:41:24 2026 GMT Not After : Sep 25 14:50:24 2026 GMT Subject: CN=223E9E043EAD22071F3396F661478CB382CD5951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:53:d0:65:b4:ab:ce:35:83:3a:5b:92:ae: 22:24:08:03:a7:48:87:e5:c6:f4:e3:99:58:30:e1: d9:7e:1d:4f:93:dd:06:51:10:8d:ae:e3:a4:41:39: c8:cf:fc:57:81:43:87:3f:3f:ee:68:a1:b2:74:20: eb:54:5e:2f:f1:6a:b7:aa:74:be:f1:63:45:bc:ff: 83:90:6d:59:c4:cf:66:3d:73:cc:df:cd:98:a1:bf: e2:76:08:76:97:65:86:1d:ef:f8:f3:1b:50:60:3b: 2c:90:a5:63:c2:fb:50:40:e1:3c:e6:b4:63:7f:91: 8f:4e:74:71:94:7c:7c:fb:f3:cc:df:4e:f5:3e:d1: ba:ca:fb:0c:23:18:68:8e:be:59:8d:7c:6d:50:d6: 0c:50:22:93:ea:f2:00:57:1b:a3:f4:55:d5:c4:ea: c6:65:6c:94:67:bb:27:da:6e:c3:47:e6:ca:73:bc: fd:6a:c0:e1:e4:33:58:bd:6c:cf:7a:b6:a2:03:37: 28:a1:90:14:7c:45:cd:e3:f1:04:8c:d3:d3:4a:eb: f5:07:fd:65:24:7a:fe:d2:4f:40:38:1f:a3:5d:aa: 79:56:c2:63:0b:cd:54:b4:49:0e:8e:d6:98:1c:af: ea:7d:17:56:e3:9b:70:6b:55:8d:b5:b4:37:fe:08: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:9E:04:3E:AD:22:07:1F:33:96:F6:61:47:8C:B3:82:CD:59:51 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:68:d3:d3:35:48:32:b1:7f:7f:74:76:40:6a:df:e2:d0: db:27:30:34:4a:8e:a5:f0:1b:90:89:e4:02:e8:3f:62:86:6a: 53:89:8c:b0:29:48:eb:80:f8:f3:aa:38:c6:23:e2:8c:ff:8c: 90:1a:05:74:a4:eb:9d:cd:9a:29:6b:24:6d:87:3b:1a:ad:7c: e9:f5:79:00:6c:37:76:19:d1:b4:1e:f4:b1:d0:14:ec:f0:cd: ca:07:5f:82:58:68:d1:41:a9:1f:c8:88:46:b4:3c:46:05:e0: c8:39:cd:6d:cd:fc:0b:05:11:42:bd:db:f2:9b:4c:90:0a:eb: 21:df:a6:42:ba:7c:48:b8:c6:1c:a1:62:f9:d7:ad:0c:ee:19: 6d:f1:fc:c1:44:00:4d:91:08:98:83:76:4d:d5:45:a0:5f:57: 42:24:e3:1b:f0:e9:d9:17:a3:95:08:fa:53:44:cc:db:26:7d: 33:37:42:bd:41:a1:05:17:2c:39:c7:b4:37:9a:5b:c2:21:f6: cd:b1:7d:38:10:bf:36:e3:11:f8:87:cf:d1:bd:99:05:f9:e3: 8b:4d:8d:b0:5f:ed:eb:26:c8:a2:e8:04:75:ad:1a:3b:ca:a1: de:1b:b2:09:d8:22:d8:de:54:03:34:04:bf:fe:ba:44:fd:b1: f4:11:93:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWM9Nw2DExXJIrBuCUJfBnahwltAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA5MjQxMjQxMjRaFw0yNjA5MjUxNDUwMjRaMDMxMTAvBgNV BAMTKDIyM0U5RTA0M0VBRDIyMDcxRjMzOTZGNjYxNDc4Q0IzODJDRDU5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytFPQZbSrzjWDOluSriIkCAOn SIflxvTjmVgw4dl+HU+T3QZREI2u46RBOcjP/FeBQ4c/P+5oobJ0IOtUXi/xareq dL7xY0W8/4OQbVnEz2Y9c8zfzZihv+J2CHaXZYYd7/jzG1BgOyyQpWPC+1BA4Tzm tGN/kY9OdHGUfHz788zfTvU+0brK+wwjGGiOvlmNfG1Q1gxQIpPq8gBXG6P0VdXE 6sZlbJRnuyfabsNH5spzvP1qwOHkM1i9bM96tqIDNyihkBR8Rc3j8QSM09NK6/UH /WUkev7ST0A4H6NdqnlWwmMLzVS0SQ6O1pgcr+p9F1bjm3BrVY21tDf+CK/XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIj6eBD6tIgcfM5b2YUeMs4LNWVEwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGEWjT 0zVIMrF/f3R2QGrf4tDbJzA0So6l8BuQieQC6D9ihmpTiYywKUjrgPjzqjjGI+KM /4yQGgV0pOudzZopayRthzsarXzp9XkAbDd2GdG0HvSx0BTs8M3KB1+CWGjRQakf yIhGtDxGBeDIOc1tzfwLBRFCvdvym0yQCush36ZCunxIuMYcoWL5160M7hlt8fzB RABNkQiYg3ZN1UWgX1dCJOMb8OnZF6OVCPpTRMzbJn0zN0K9QaEFFyw5x7Q3mlvC IfbNsX04EL824xH4h8/RvZkF+eOLTY2wX+3rJsii6AR1rRo7yqHeG7IJ2CLY3lQD NAS//rpE/bH0EZO3 -----END CERTIFICATE-----Generated at Thu Sep 24 20:35:06 2026 by rpki-client