$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: 3NQFQvjgF7CyRNQX+yFU5w7MNdbT47dUgBKod1Oi1T0= Subject key identifier: 41:89:37:DB:5B:3A:CB:63:C9:D7:C0:9D:79:3F:65:07:B6:DD:3F:AA Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 0EFAD7F980124E288CD8B62A1508FE517D55290B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 0500 Signing time: Wed 23 Sep 2026 16:18:32 +0000 Manifest this update: Wed 23 Sep 2026 16:13:32 +0000 Manifest next update: Thu 24 Sep 2026 18:03:32 +0000 Files and hashes: 1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: 84zlJxkCKjWrnbxAaardgQCmgR5Vmx46rH4qLex7ndg=) 2: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=) 3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fa:d7:f9:80:12:4e:28:8c:d8:b6:2a:15:08:fe:51:7d:55:29:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Sep 23 16:13:32 2026 GMT Not After : Sep 24 18:03:32 2026 GMT Subject: CN=418937DB5B3ACB63C9D7C09D793F6507B6DD3FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:01:c8:ef:8f:37:79:2b:8b:26:d2:84:53: 48:c5:65:b3:2d:bb:db:43:0d:e4:c7:08:cb:a7:d9: 07:4c:1f:3f:65:a7:3e:fe:f1:c5:d2:a8:86:49:ef: 3e:6a:73:69:ec:ca:22:b0:cb:a0:b0:c2:93:e9:65: 1a:7d:54:27:4d:73:ab:39:44:79:92:ed:24:7c:52: c3:32:fa:1d:a2:e3:d1:86:74:40:8c:2b:98:46:ba: 5e:29:e4:81:5c:9c:e8:5d:4a:cd:d0:2b:5e:dc:54: 1f:30:d6:28:9f:47:1b:d8:84:a1:3c:42:70:fd:31: 00:e1:4d:b2:4f:94:6a:8b:d8:de:d9:bd:db:7c:ca: ac:40:fd:6c:d6:42:97:21:aa:e3:78:59:19:41:87: e0:cd:68:e8:0e:2a:4c:6a:c6:76:82:8e:2e:0f:9c: 5f:f8:14:18:10:12:08:e0:a4:bd:86:d6:20:9f:ac: de:d3:5f:2f:67:91:3a:e8:e0:15:b3:a8:74:cc:5e: d6:73:08:66:b7:1e:ed:bb:c6:e6:9e:07:12:81:4b: 8a:ed:27:72:72:68:a1:7b:79:27:c1:1c:f7:c5:da: 46:ac:3e:28:ec:0c:8e:77:84:be:04:fd:c5:d9:ce: 6e:a6:11:76:0f:44:09:b1:bd:27:6a:b7:95:a7:92: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:37:DB:5B:3A:CB:63:C9:D7:C0:9D:79:3F:65:07:B6:DD:3F:AA X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:79:a2:af:86:59:8f:64:65:83:9a:77:49:5a:50:9a:8c:ed: f8:1f:a6:ad:44:0e:36:f6:a8:72:c2:3f:bd:46:c4:68:9e:fc: a8:e7:38:26:68:67:24:44:bb:48:87:a4:df:17:d5:4b:3e:c4: d3:ae:0c:e3:94:20:b4:66:84:ca:1b:e1:bf:64:ab:bd:2c:e3: c0:ba:6f:6c:ef:0f:ec:df:05:a9:0d:90:be:9c:b5:ba:99:8b: eb:ae:d3:4e:f4:07:e9:e5:00:e1:f3:22:bb:15:a1:92:13:bd: f4:ed:b0:63:0b:93:25:1d:a1:bc:5a:32:55:c6:7e:2b:22:80: 97:d0:98:66:a2:fe:60:94:5c:dd:0c:e3:03:a0:3e:ac:2a:da: 04:08:a6:d8:81:be:f1:2f:a1:92:b4:09:89:d4:1c:85:1b:4f: 79:08:1e:d3:05:87:b9:9a:ff:2f:8a:6c:c0:86:1e:7d:ab:32: 92:f6:12:06:3c:56:50:66:a4:ad:28:1c:67:42:24:05:5e:22: 28:50:7f:63:21:59:2f:6e:f8:3d:9e:1d:5d:dd:97:e5:f9:48: 6b:74:d7:00:a0:03:0c:5a:d3:c9:55:d0:09:c0:09:d5:e8:88: cb:9d:be:be:e3:e8:6a:de:6f:a3:30:e5:16:8e:d5:34:69:5a: 1c:7f:0e:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDvrX+YASTiiM2LYqFQj+UX1VKQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNjA5MjMxNjEzMzJaFw0yNjA5MjQxODAzMzJaMDMxMTAvBgNV BAMTKDQxODkzN0RCNUIzQUNCNjNDOUQ3QzA5RDc5M0Y2NTA3QjZERDNGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0AHI7483eSuLJtKEU0jFZbMt u9tDDeTHCMun2QdMHz9lpz7+8cXSqIZJ7z5qc2nsyiKwy6CwwpPpZRp9VCdNc6s5 RHmS7SR8UsMy+h2i49GGdECMK5hGul4p5IFcnOhdSs3QK17cVB8w1iifRxvYhKE8 QnD9MQDhTbJPlGqL2N7Zvdt8yqxA/WzWQpchquN4WRlBh+DNaOgOKkxqxnaCji4P nF/4FBgQEgjgpL2G1iCfrN7TXy9nkTro4BWzqHTMXtZzCGa3Hu27xuaeBxKBS4rt J3JyaKF7eSfBHPfF2kasPijsDI53hL4E/cXZzm6mEXYPRAmxvSdqt5WnklpNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQYk321s6y2PJ18CdeT9lB7bdP6owHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHmir4ZZj2Rlg5p3SVpQ mozt+B+mrUQONvaocsI/vUbEaJ78qOc4JmhnJES7SIek3xfVSz7E064M45QgtGaE yhvhv2SrvSzjwLpvbO8P7N8FqQ2Qvpy1upmL667TTvQH6eUA4fMiuxWhkhO99O2w YwuTJR2hvFoyVcZ+KyKAl9CYZqL+YJRc3QzjA6A+rCraBAim2IG+8S+hkrQJidQc hRtPeQge0wWHuZr/L4pswIYefasykvYSBjxWUGakrSgcZ0IkBV4iKFB/YyFZL274 PZ4dXd2X5flIa3TXAKADDFrTyVXQCcAJ1eiIy52+vuPoat5vozDlFo7VNGlaHH8O IQ== -----END CERTIFICATE-----Generated at Thu Sep 24 03:46:03 2026 by rpki-client