$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: QhMo/K7jrmkVhdbcREgJrIX7T1Lj50sOwzU0BSrl+/4= Subject key identifier: C2:C1:C9:D1:44:46:B4:46:BD:70:F3:9F:91:E2:D7:50:7B:15:12:D4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 6A3B8E9DEE5EA9C65C97111D8F035B6803F9A4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0567 Signing time: Wed 23 Sep 2026 13:35:51 +0000 Manifest this update: Wed 23 Sep 2026 13:30:51 +0000 Manifest next update: Thu 24 Sep 2026 17:06:51 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 3: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) 4: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 5: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 6: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: ZGVPsGP6B0oTxVTnqE7tJoVSg4viB6EDmjUAXKZXteQ=) 7: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 8: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 9: 3135392e3235332e312e302f32342d3234203d3e20343031333632.roa (hash: QjYsR9MbUft7eF4N67W1ParO0QTKQ1t2pO8q+FvFFyk=) 10: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 11: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 12: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 13: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 17:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:8e:9d:ee:5e:a9:c6:5c:97:11:1d:8f:03:5b:68:03:f9:a4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Sep 23 13:30:51 2026 GMT Not After : Sep 24 17:06:51 2026 GMT Subject: CN=C2C1C9D14446B446BD70F39F91E2D7507B1512D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:34:cf:01:c7:38:a8:0b:ea:34:66:b0:35: cd:cc:15:d5:1e:ed:09:b0:ea:c3:07:91:a7:1a:5f: 89:02:ab:3c:0e:c0:72:48:b8:11:63:ea:64:0b:72: c1:a3:6d:3f:4c:f2:8e:73:c5:3d:28:08:86:a6:b8: 2e:09:91:47:1f:c9:ce:04:9a:6d:b5:e5:30:b7:8d: b9:e1:99:2e:38:de:63:ac:7e:38:f5:e0:6c:a4:12: a9:55:b5:aa:65:76:ab:aa:5f:55:5f:4a:ae:64:fd: 62:02:f5:97:4b:08:f3:32:0c:c2:88:fe:69:5c:ba: 81:7f:01:9f:7d:22:66:dc:d9:b2:fe:9c:b4:af:38: c2:97:47:26:9f:07:b5:8f:e8:1d:fa:f0:89:2f:fb: 08:a4:cd:d1:bc:7f:23:79:79:d8:29:95:7a:cd:a9: e4:5f:7c:97:d2:7f:76:5c:8c:ee:f3:84:4b:9d:2c: 97:4f:22:c5:a4:a8:4c:0a:45:52:b8:03:b6:7d:38: 9b:2f:55:c0:45:bf:ca:02:a4:6e:ed:7c:42:bc:a3: 8e:b8:e0:81:6b:88:a8:0d:00:a3:1b:24:a2:5d:69: 55:65:02:6b:98:18:cc:89:97:27:5d:a0:5f:b8:90: 1a:16:1c:6f:71:be:70:2e:9e:27:7b:ab:8d:89:c1: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:C9:D1:44:46:B4:46:BD:70:F3:9F:91:E2:D7:50:7B:15:12:D4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:69:86:d4:27:5f:3c:47:5c:a5:de:02:f3:e7:25:f9:c1:fb: 98:10:5e:59:70:54:78:00:10:1a:e8:09:44:23:6e:db:82:cf: 5c:ea:79:60:30:81:c1:f2:8d:fa:91:e2:4f:65:03:3a:eb:dd: d0:04:07:94:bb:c8:f9:04:b8:45:1f:b4:45:cb:3f:c5:16:aa: 7b:02:35:9b:d8:a3:21:5f:0b:f6:d1:21:e5:98:b3:b2:4e:44: 15:f0:01:9a:93:f7:0e:f4:ce:1d:81:06:0e:e4:79:d1:da:47: a0:e6:13:19:6e:38:8a:1f:eb:1a:de:8a:71:2d:ad:db:40:50: 12:6c:ca:a1:4d:b5:a9:26:c2:24:4f:3f:95:2b:e9:0c:e5:80: e4:d1:da:c6:91:bc:e3:05:15:24:c1:c7:75:7a:1e:0a:14:8c: a7:c1:0a:d0:28:a4:90:bf:9a:69:59:f8:65:fe:42:bd:8c:ea: a3:20:66:3c:35:de:3c:3f:38:05:ba:f8:57:14:83:7a:6d:46: 08:0f:c3:72:e8:be:29:5a:70:be:50:80:88:3f:0f:56:b1:f5: e3:63:e8:22:84:e1:19:a9:fc:e1:56:ce:90:bd:d9:38:06:ff: b6:24:a8:10:78:83:e2:82:61:15:ab:16:0f:e5:ec:d3:12:ee: b7:6d:1f:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUajuOne5eqcZclxEdjwNbaAP5pKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA5MjMxMzMwNTFaFw0yNjA5MjQxNzA2NTFaMDMxMTAvBgNV BAMTKEMyQzFDOUQxNDQ0NkI0NDZCRDcwRjM5RjkxRTJENzUwN0IxNTEyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOTTPAcc4qAvqNGawNc3MFdUe 7Qmw6sMHkacaX4kCqzwOwHJIuBFj6mQLcsGjbT9M8o5zxT0oCIamuC4JkUcfyc4E mm215TC3jbnhmS443mOsfjj14GykEqlVtapldquqX1VfSq5k/WIC9ZdLCPMyDMKI /mlcuoF/AZ99Imbc2bL+nLSvOMKXRyafB7WP6B368Ikv+wikzdG8fyN5edgplXrN qeRffJfSf3ZcjO7zhEudLJdPIsWkqEwKRVK4A7Z9OJsvVcBFv8oCpG7tfEK8o464 4IFriKgNAKMbJKJdaVVlAmuYGMyJlyddoF+4kBoWHG9xvnAunid7q42JwTDnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwsHJ0URGtEa9cPOfkeLXUHsVEtQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmmG1CdfPEdcpd4C8+cl +cH7mBBeWXBUeAAQGugJRCNu24LPXOp5YDCBwfKN+pHiT2UDOuvd0AQHlLvI+QS4 RR+0Rcs/xRaqewI1m9ijIV8L9tEh5Zizsk5EFfABmpP3DvTOHYEGDuR50dpHoOYT GW44ih/rGt6KcS2t20BQEmzKoU21qSbCJE8/lSvpDOWA5NHaxpG84wUVJMHHdXoe ChSMp8EK0CikkL+aaVn4Zf5CvYzqoyBmPDXePD84Bbr4VxSDem1GCA/Dcui+KVpw vlCAiD8PVrH142PoIoThGan84VbOkL3ZOAb/tiSoEHiD4oJhFasWD+Xs0xLut20f CA== -----END CERTIFICATE-----Generated at Thu Sep 24 03:45:44 2026 by rpki-client