$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: YVU7xdQg57iuFLZQsxCOLCd9bMS7mB8u+FjK4g5Nouk= Subject key identifier: 67:57:89:1B:8C:B3:9F:D1:F8:FD:5D:C6:33:26:96:EE:5D:C2:BE:04 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 02DFF4DCDC08A681314BC28A43179ED8E9A81A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0568 Signing time: Thu 24 Sep 2026 09:11:01 +0000 Manifest this update: Thu 24 Sep 2026 09:06:01 +0000 Manifest next update: Fri 25 Sep 2026 10:34:01 +0000 Files and hashes: 1: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 2: 3135392e3235332e312e302f32342d3234203d3e20343031333632.roa (hash: QjYsR9MbUft7eF4N67W1ParO0QTKQ1t2pO8q+FvFFyk=) 3: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 4: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 5: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 6: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: K+ZUqlimw0vukSYspXUve23mc+g1BzQkbz0dZXxhVhg=) 7: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 8: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 9: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) 10: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 11: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 12: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 13: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 10:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:df:f4:dc:dc:08:a6:81:31:4b:c2:8a:43:17:9e:d8:e9:a8:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Sep 24 09:06:01 2026 GMT Not After : Sep 25 10:34:01 2026 GMT Subject: CN=6757891B8CB39FD1F8FD5DC6332696EE5DC2BE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:68:17:67:1a:c4:ed:8a:e5:d3:2d:b7:b5: dc:8f:d6:d5:ce:78:8c:60:ef:3a:23:04:2a:44:8f: 64:06:50:fb:5b:75:32:c6:b3:99:b2:22:d6:00:f3: 0a:5d:67:50:86:04:fc:1a:d7:6a:bc:61:ef:a6:75: 22:b1:f9:ef:7a:d0:13:88:90:db:41:51:da:35:99: 76:26:ce:72:f1:40:b1:c2:ca:e9:b8:cc:64:52:15: d9:56:65:7b:8f:b3:75:f8:f4:08:b0:c7:aa:b1:51: e3:64:dc:c6:47:06:17:5c:72:c7:65:41:50:81:dc: e9:26:10:5f:bf:83:0b:f0:25:05:24:16:a6:ba:98: 30:11:a4:34:ef:a0:65:79:93:3a:96:c1:18:3a:ae: 21:29:4f:9f:b9:11:00:2e:74:58:e2:e9:d1:2b:12: ed:c1:a5:00:3e:b6:16:c0:e3:62:31:9f:eb:5c:c3: 11:cc:5d:59:bf:a0:c1:24:2c:19:55:9c:48:37:41: d2:b5:8f:75:55:a4:3b:66:62:7c:a5:f6:18:e6:ff: c3:9f:9d:a5:4f:e5:44:2f:6c:15:f6:ea:7d:34:f8: 2f:66:15:ba:ba:20:0f:9d:97:62:c0:59:82:64:3f: 5c:79:3a:c5:97:d4:27:f4:51:2a:76:8a:a4:6b:93: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:89:1B:8C:B3:9F:D1:F8:FD:5D:C6:33:26:96:EE:5D:C2:BE:04 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:77:01:09:b2:72:4b:4e:61:42:a6:92:0d:be:d9:01:7d:c7: bd:30:c9:3e:81:08:03:3a:07:ec:1a:b1:e6:24:00:6b:5a:46: ec:e6:cd:9b:6b:d5:1a:6b:30:3a:c4:ed:64:10:4a:73:f2:b8: f5:63:bb:81:97:86:3e:19:57:16:db:07:72:d4:1f:a9:dc:0d: 6c:fc:f7:93:46:0c:40:f7:83:58:63:4b:e0:ae:13:a8:a7:94: 40:8f:ae:77:2f:2d:5e:33:ad:19:4a:ab:57:44:37:ef:00:56: 2e:21:cf:9d:f1:94:41:42:e7:de:cd:8c:2a:26:47:e2:d3:aa: ce:a6:6b:7d:05:59:68:42:e3:1d:1c:54:64:b7:85:12:6d:63: 13:fe:4c:3a:e0:cf:d4:ec:71:2d:8e:4a:7f:af:48:7c:b9:46: 2f:0f:75:29:59:d5:ef:81:e7:3b:94:82:a3:47:31:a7:a2:d1: 80:4b:54:85:8c:fc:fd:16:18:95:7e:db:f7:a9:e1:45:a6:dd: 71:40:38:b7:c4:d7:8c:1b:68:0c:11:10:49:8f:15:82:e4:f2: bf:02:19:f8:a3:a6:38:76:e9:bf:0f:a6:40:40:38:ae:a8:0f: bc:49:b7:43:41:60:9f:b9:70:c2:27:77:7b:b7:9b:20:a6:82: 8d:d8:d8:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAt/03NwIpoExS8KKQxee2OmoGoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA5MjQwOTA2MDFaFw0yNjA5MjUxMDM0MDFaMDMxMTAvBgNV BAMTKDY3NTc4OTFCOENCMzlGRDFGOEZENURDNjMzMjY5NkVFNURDMkJFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrWgXZxrE7Yrl0y23tdyP1tXO eIxg7zojBCpEj2QGUPtbdTLGs5myItYA8wpdZ1CGBPwa12q8Ye+mdSKx+e960BOI kNtBUdo1mXYmznLxQLHCyum4zGRSFdlWZXuPs3X49Aiwx6qxUeNk3MZHBhdccsdl QVCB3OkmEF+/gwvwJQUkFqa6mDARpDTvoGV5kzqWwRg6riEpT5+5EQAudFji6dEr Eu3BpQA+thbA42Ixn+tcwxHMXVm/oMEkLBlVnEg3QdK1j3VVpDtmYnyl9hjm/8Of naVP5UQvbBX26n00+C9mFbq6IA+dl2LAWYJkP1x5OsWX1Cf0USp2iqRrk/SJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZ1eJG4yzn9H4/V3GMyaW7l3CvgQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXcBCbJyS05hQqaSDb7Z AX3HvTDJPoEIAzoH7Bqx5iQAa1pG7ObNm2vVGmswOsTtZBBKc/K49WO7gZeGPhlX FtsHctQfqdwNbPz3k0YMQPeDWGNL4K4TqKeUQI+udy8tXjOtGUqrV0Q37wBWLiHP nfGUQULn3s2MKiZH4tOqzqZrfQVZaELjHRxUZLeFEm1jE/5MOuDP1OxxLY5Kf69I fLlGLw91KVnV74HnO5SCo0cxp6LRgEtUhYz8/RYYlX7b96nhRabdcUA4t8TXjBto DBEQSY8VguTyvwIZ+KOmOHbpvw+mQEA4rqgPvEm3Q0Fgn7lwwid3e7ebIKaCjdjY zA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:53:02 2026 by rpki-client