$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: cWdyA8Vq5vhmvx5oh168e0ZdJ9Rm4jukTrGAr2UYOQY= Subject key identifier: F7:AD:B5:B8:BC:E2:E0:D2:A6:BE:6D:D1:88:2C:DA:B9:AA:B1:97:D4 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 42A2F52D2DFB83F744584D96C3B830613B4FFADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: EE Signing time: Wed 23 Sep 2026 02:30:48 +0000 Manifest this update: Wed 23 Sep 2026 02:25:48 +0000 Manifest next update: Thu 24 Sep 2026 04:09:48 +0000 Files and hashes: 1: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) 2: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) 3: 3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa (hash: A9qWfeTwCBhogli0VdJKmwQZ/I0kaj1HbDe6pPugx+s=) 4: 3138352e3131362e39302e302f32342d3234203d3e203235313938.roa (hash: 7mQW7H94fRqr8LtsWV8dOnF1L4/JFOSxrGXn/+VeEzY=) 5: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 6: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: 7ApPpNVlQLCidYqd/swyD4gFsYIXm7+bmlDesLfUVCI=) 7: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a2:f5:2d:2d:fb:83:f7:44:58:4d:96:c3:b8:30:61:3b:4f:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Sep 23 02:25:48 2026 GMT Not After : Sep 24 04:09:48 2026 GMT Subject: CN=F7ADB5B8BCE2E0D2A6BE6DD1882CDAB9AAB197D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:28:3e:28:60:b4:11:e1:1e:cc:ce:ed:07: b8:e6:9e:cf:86:65:8b:bd:4a:9c:40:af:ae:f7:fe: 75:83:97:03:d4:c2:a6:94:48:96:b7:3f:c6:99:87: 3a:2e:22:dd:12:86:8c:5f:80:52:70:e2:bc:29:d6: 1c:fe:34:9b:65:e2:af:0d:b0:b7:30:2b:bb:4e:a3: 4b:1c:74:2c:7e:88:a2:93:0c:71:d3:1d:22:63:7b: f7:70:fc:dc:95:c6:e8:8c:40:bb:5e:fc:74:c5:ed: 6c:1e:0f:24:27:6f:06:fa:2f:fe:a1:ad:f8:ac:62: cb:f3:e7:6c:a8:34:8d:fc:f5:83:70:13:fd:bc:d7: e9:20:73:ed:f2:ca:07:5f:2f:d6:9e:3f:bc:91:f3: 5a:bd:f8:41:8a:af:45:c4:1f:55:d5:72:6d:23:94: 5a:16:4c:49:f5:9a:94:c9:23:df:32:8e:61:34:b4: 1b:b3:94:c7:74:7b:c5:b5:91:ac:5f:12:4f:78:d5: b9:10:be:1c:91:c2:b9:ac:8a:72:8f:de:af:3b:6e: ba:27:dd:5a:7d:5c:80:79:aa:5c:5c:ff:ef:b1:1c: 5b:a5:9a:e9:99:21:1e:db:4e:d7:7d:76:17:b1:3c: 1b:dd:aa:1f:05:b4:01:25:36:0b:26:7e:72:79:4d: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AD:B5:B8:BC:E2:E0:D2:A6:BE:6D:D1:88:2C:DA:B9:AA:B1:97:D4 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e1:42:e9:43:17:e9:59:fb:5a:73:07:e0:97:6e:c9:44:f6: 51:6a:2d:90:42:ea:2c:be:84:52:39:b2:f0:80:a1:04:3a:7b: 84:e6:ee:50:8e:cd:24:da:92:d2:fe:1b:47:61:c1:82:96:9f: 1b:4b:7d:3f:ec:da:b1:61:67:7a:b3:de:29:e4:9d:c6:74:c7: 15:59:81:01:d5:27:7c:1e:a1:01:23:ed:be:5b:4d:c7:8e:cd: 85:ea:5a:6a:44:64:f1:0b:4c:c6:fb:d6:80:c7:b5:28:72:c2: b6:fb:80:95:d6:48:52:87:03:2d:bc:b6:e5:78:35:f4:cd:6b: 41:68:32:8e:48:7f:84:ad:cd:a4:d3:f9:74:41:1f:ec:87:d0: 19:a0:59:d1:07:c5:0c:91:3c:26:fc:3c:83:d5:d4:8a:da:57: 31:3f:d4:d3:d0:40:d3:11:b9:c9:6c:43:a4:8b:26:42:f1:ed: be:d5:fb:d0:1c:ed:d4:2c:f3:8b:f1:72:ef:3a:e3:d8:d7:da: 1b:5c:08:26:b1:13:b8:a1:82:42:b6:df:08:e3:26:bf:b1:d8: 30:dd:d0:6f:fc:52:52:33:0b:5e:b1:c6:8a:5d:13:b4:3e:76: 2d:38:cf:2f:6d:79:11:83:20:19:47:eb:c9:58:2b:b7:78:50: 13:9a:f0:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQqL1LS37g/dEWE2Ww7gwYTtP+t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA5MjMwMjI1NDhaFw0yNjA5MjQwNDA5NDhaMDMxMTAvBgNV BAMTKEY3QURCNUI4QkNFMkUwRDJBNkJFNkREMTg4MkNEQUI5QUFCMTk3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQig+KGC0EeEezM7tB7jmns+G ZYu9SpxAr673/nWDlwPUwqaUSJa3P8aZhzouIt0ShoxfgFJw4rwp1hz+NJtl4q8N sLcwK7tOo0scdCx+iKKTDHHTHSJje/dw/NyVxuiMQLte/HTF7WweDyQnbwb6L/6h rfisYsvz52yoNI389YNwE/281+kgc+3yygdfL9aeP7yR81q9+EGKr0XEH1XVcm0j lFoWTEn1mpTJI98yjmE0tBuzlMd0e8W1kaxfEk941bkQvhyRwrmsinKP3q87bron 3Vp9XIB5qlxc/++xHFulmumZIR7bTtd9dhexPBvdqh8FtAElNgsmfnJ5TeppAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9621uLzi4NKmvm3RiCzauaqxl9QwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReFC6UMX6Vn7WnMH4Jdu yUT2UWotkELqLL6EUjmy8IChBDp7hObuUI7NJNqS0v4bR2HBgpafG0t9P+zasWFn erPeKeSdxnTHFVmBAdUnfB6hASPtvltNx47NhepaakRk8QtMxvvWgMe1KHLCtvuA ldZIUocDLby25Xg19M1rQWgyjkh/hK3NpNP5dEEf7IfQGaBZ0QfFDJE8Jvw8g9XU itpXMT/U09BA0xG5yWxDpIsmQvHtvtX70Bzt1Czzi/Fy7zrj2NfaG1wIJrETuKGC QrbfCOMmv7HYMN3Qb/xSUjMLXrHGil0TtD52LTjPL215EYMgGUfryVgrt3hQE5rw 1w== -----END CERTIFICATE-----Generated at Wed Sep 23 07:12:58 2026 by rpki-client