$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: 6smLAqpbXEWL3/t9w5PSTxaQVQf3fqYBHEHCRFmTTm4= Subject key identifier: 60:38:9E:0E:1F:22:FE:24:DA:13:19:FA:75:B5:EF:71:D8:AF:BE:95 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 3849D0A69B92149C0D070C2ABA9D017467B6C277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 05B5 Signing time: Sun 15 Nov 2026 02:50:14 +0000 Manifest this update: Sun 15 Nov 2026 02:45:14 +0000 Manifest next update: Mon 16 Nov 2026 03:12:14 +0000 Files and hashes: 1: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: lo7hlYuNmGsmyZ0TpuTjHfqdW+Ue12VtKUyyLNYB5Vg=) 2: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 3: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 4: 3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa (hash: rZHA0UZyNZ5R7uvhzS0F/m2O4iaZav8bzKzxSw+K3e8=) 5: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 6: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) 7: 3135392e3235332e352e302f32342d3234203d3e20313336383039.roa (hash: PGSNBJZSgEZXHxWLsVpaBOMQuMv7Jf7lmre9ZMG017M=) 8: 3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa (hash: Slf2vGqQS/62E7ptDEE0+E4kft71NUs7UJMlpNExNI4=) 9: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 10: 3135392e3235332e352e302f32342d3234203d3e203134323933.roa (hash: cEWWq+vWvz0QGTuKyKpL/mU+zo1QSPHamrvnYlsxURw=) 11: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 12: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: CaXDOGgIurdmCZYqYQc0f2EZuaYMUeplqTDJnpRc1ZI=) 13: 3135392e3235332e302e302f32342d3234203d3e2039343537.roa (hash: gjVWVk+MK0eisl29bicQKjCUAPKT72ROxrCE52HBEH4=) 14: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:49:d0:a6:9b:92:14:9c:0d:07:0c:2a:ba:9d:01:74:67:b6:c2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Nov 15 02:45:14 2026 GMT Not After : Nov 16 03:12:14 2026 GMT Subject: CN=60389E0E1F22FE24DA1319FA75B5EF71D8AFBE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:22:6d:6c:03:2a:07:94:58:a2:51:b4:66: f5:26:de:ae:ab:66:69:8d:72:33:9e:ca:3f:ff:5b: 6b:96:f0:70:10:5e:29:b9:dc:ab:a1:39:79:43:0d: 2e:30:77:29:f5:9e:dd:99:37:d3:71:df:8c:81:1b: d0:41:ca:9c:bf:47:f4:cb:86:64:5a:d3:00:3b:88: e2:68:ce:a5:79:8b:73:97:25:a6:ec:ad:03:39:b2: 9a:4b:49:3d:0d:9d:af:48:05:55:05:d1:d3:60:7c: aa:43:a9:28:3d:18:23:86:2f:92:06:1e:95:f7:b4: 3b:b0:c8:7d:ff:ed:c1:01:d7:65:05:26:f5:4a:fa: bc:a2:4b:08:a2:bd:ee:ff:7a:a4:41:ee:95:81:be: 6e:46:c8:b5:02:66:95:a2:73:bb:3b:8f:08:4e:f6: d6:1a:52:ca:79:d1:3b:a1:bb:9d:37:c9:4c:ed:c5: 8e:61:6e:c5:a8:a2:62:8a:08:63:6b:39:75:c6:0b: 9c:93:2a:ea:d2:c6:3e:13:1a:a9:5b:ef:fb:17:69: f7:23:e9:c7:26:cd:80:77:bb:a5:79:c7:33:c2:9f: 9a:c4:9b:5b:b5:e5:8b:fe:a4:1d:4f:60:aa:54:bd: db:cb:f9:2e:a0:30:05:e5:ce:cc:74:9a:ac:10:0c: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:9E:0E:1F:22:FE:24:DA:13:19:FA:75:B5:EF:71:D8:AF:BE:95 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:20:92:8d:82:a1:22:71:81:9c:80:44:9b:b6:ab:be:59:97: 68:e6:95:16:a1:17:de:a1:b2:47:78:85:2e:fa:53:9f:a0:f4: 62:f8:fc:b2:d4:c3:14:6f:1a:18:91:38:ca:72:c0:57:fc:cc: 0e:3e:53:1b:86:ea:a7:c8:cb:1d:1d:4a:80:97:51:c8:b6:7f: 3e:97:91:6e:16:2f:0b:d8:fc:4b:0e:33:bc:e7:6e:20:a8:d8: 66:2d:3f:bf:b8:40:5a:80:19:5f:c4:84:11:6c:87:3c:6a:18: aa:8f:3e:46:b7:9a:b9:32:ac:9e:5d:d9:99:c0:b2:b1:45:84: e6:94:e0:2f:d1:12:0f:b3:5a:7f:b6:da:04:e2:f5:3e:65:29: eb:d6:cb:3e:31:d7:69:19:4d:6f:8e:d3:c2:ea:94:dc:fb:38: 53:a1:8c:c2:e4:87:46:c3:c2:ab:98:78:34:bc:4b:a3:2e:9c: 44:6c:92:1a:ba:11:ef:23:d4:46:5a:f7:f1:c9:eb:f0:06:16: 21:8e:b7:4b:fb:8d:a6:b4:99:a2:95:1f:47:26:b2:91:55:94: c6:22:e5:79:3c:9d:c8:5f:60:52:b4:91:eb:c5:b3:08:17:11: 2d:41:86:31:41:3a:73:07:ed:a3:8c:2c:46:d7:b3:db:b1:9d: 6a:5a:44:60 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOEnQppuSFJwNBwwqup0BdGe2wncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjExMTUwMjQ1MTRaFw0yNjExMTYwMzEyMTRaMDMxMTAvBgNV BAMTKDYwMzg5RTBFMUYyMkZFMjREQTEzMTlGQTc1QjVFRjcxRDhBRkJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoiJtbAMqB5RYolG0ZvUm3q6r ZmmNcjOeyj//W2uW8HAQXim53KuhOXlDDS4wdyn1nt2ZN9Nx34yBG9BBypy/R/TL hmRa0wA7iOJozqV5i3OXJabsrQM5sppLST0Nna9IBVUF0dNgfKpDqSg9GCOGL5IG HpX3tDuwyH3/7cEB12UFJvVK+ryiSwiive7/eqRB7pWBvm5GyLUCZpWic7s7jwhO 9tYaUsp50Tuhu503yUztxY5hbsWoomKKCGNrOXXGC5yTKurSxj4TGqlb7/sXafcj 6ccmzYB3u6V5xzPCn5rEm1u15Yv+pB1PYKpUvdvL+S6gMAXlzsx0mqwQDK4LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYDieDh8i/iTaExn6dbXvcdivvpUwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyCSjYKhInGBnIBEm7ar vlmXaOaVFqEX3qGyR3iFLvpTn6D0Yvj8stTDFG8aGJE4ynLAV/zMDj5TG4bqp8jL HR1KgJdRyLZ/PpeRbhYvC9j8Sw4zvOduIKjYZi0/v7hAWoAZX8SEEWyHPGoYqo8+ RreauTKsnl3ZmcCysUWE5pTgL9ESD7Naf7baBOL1PmUp69bLPjHXaRlNb47TwuqU 3Ps4U6GMwuSHRsPCq5h4NLxLoy6cRGySGroR7yPURlr38cnr8AYWIY63S/uNprSZ opUfRyaykVWUxiLleTydyF9gUrSR68WzCBcRLUGGMUE6cwfto4wsRtez27GdalpE YA== -----END CERTIFICATE-----Generated at Sun Nov 15 11:10:48 2026 by rpki-client