$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: CX8ZTXbyFduUGPivZkXhPwGBZTAro23bAcztGXbIg2Y= Subject key identifier: 04:1F:F8:50:A9:98:65:6F:B3:50:69:53:E2:2C:4E:16:4E:DE:DA:78 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 3C6238344A706F9116284E34E74D4EBCC6C3CBB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0713 Signing time: Sat 26 Sep 2026 11:16:57 +0000 Manifest this update: Sat 26 Sep 2026 11:11:57 +0000 Manifest next update: Sun 27 Sep 2026 11:49:57 +0000 Files and hashes: 1: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 3: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: YkectCN3PwHXIUFvI6rErHB+GqYj62wKkXppDp93mWA=) 4: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: y0wXpV0FK7p0gj289yuBKhdBMbU7WqcUSNT/1+hV8BA=) 5: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 6: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 9hMYUrSVzPHClCw6B+qWozMqKtJbq+lXBoe24nfC4N8=) 7: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 72O3M08TYSpTDlojnTt+mRlscbLgVOXQCHXBZP39kmI=) 8: 3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa (hash: cAakJn9uvoUMXZcUb5f3QeJYFtOG/tvLTFzKc+z86q8=) 9: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:62:38:34:4a:70:6f:91:16:28:4e:34:e7:4d:4e:bc:c6:c3:cb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Sep 26 11:11:57 2026 GMT Not After : Sep 27 11:49:57 2026 GMT Subject: CN=041FF850A998656FB3506953E22C4E164EDEDA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:53:eb:cc:8f:b8:1d:52:2b:1c:9d:89:53: 95:75:08:1d:e6:8a:b2:c9:36:45:cc:43:76:50:49: f9:04:8e:1f:6c:45:5c:44:35:b3:a7:d9:86:f2:a2: e1:f8:29:50:15:80:0a:fe:b6:ae:d2:7d:7c:9e:27: 7f:39:f7:4e:ad:0b:13:32:31:2c:dd:44:2c:c6:34: 2f:ed:b9:c3:11:bd:de:67:3b:2b:1e:73:84:68:af: 4e:4f:53:88:7b:30:10:a8:c7:1b:93:82:92:c0:91: 82:f8:7d:b4:ca:a9:61:e6:f2:c1:14:0e:60:2d:26: 22:6a:31:95:e6:fe:93:ee:0c:3e:a6:74:93:3d:ac: 9d:d6:5f:2f:61:cf:54:14:60:35:87:8b:00:4e:97: a5:d8:4f:26:51:b8:31:9a:0f:74:ba:c7:88:98:7c: b9:77:b2:51:8e:d2:8e:ef:08:64:27:78:70:2b:21: 9d:59:08:e0:2e:94:3d:27:8d:3d:47:72:75:3e:c0: 62:38:41:01:91:6b:fc:7f:97:a2:6b:9c:91:de:13: aa:2f:a5:48:d6:ea:ac:bb:a3:f9:ba:b2:c6:3f:20: 28:6f:27:6a:02:48:e8:1d:5d:05:da:69:5d:4d:5e: a1:ff:0f:7b:5c:6a:66:59:fb:e9:0a:db:da:d1:38: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:F8:50:A9:98:65:6F:B3:50:69:53:E2:2C:4E:16:4E:DE:DA:78 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:e2:48:08:0c:83:48:e9:d2:05:3d:6b:8c:bc:61:b4:49: f2:10:a4:99:d3:ab:11:43:6b:b8:ef:03:04:50:37:a6:47:d8: 9a:99:40:d0:b1:80:32:05:d7:aa:21:c6:aa:57:2e:8c:ec:11: 17:4b:9e:6a:e4:b6:67:2c:8c:ba:6e:f3:66:8c:90:12:b5:59: 23:bd:a2:c5:f0:3c:67:0a:48:3c:19:bc:b6:7c:18:2b:5d:6b: 0e:59:ae:a9:26:82:12:18:48:c8:7f:5d:00:11:58:55:30:af: 73:6d:93:7a:77:6c:27:67:82:bd:9d:4f:a4:ad:91:3a:f4:31: 0f:65:55:8d:6d:76:15:85:c7:ba:81:c9:df:4a:99:ed:65:37: 91:3a:3c:b9:8e:98:66:0b:e5:65:19:d6:67:84:1e:de:30:32: 9e:99:8d:b4:c8:20:77:68:2b:42:61:d7:d3:25:b4:4b:68:21: d7:49:ae:8c:dc:1c:ae:69:2a:a3:4f:4b:7c:2c:4b:4c:84:b4: 75:76:56:d8:08:b6:2c:13:38:0c:a0:3f:ec:b4:46:81:60:19: 61:f0:90:eb:70:b1:6d:b7:22:37:5c:bb:df:19:83:cc:e2:f3: ce:2d:89:0d:a8:2b:72:73:1a:1f:4e:17:70:31:de:87:16:60: d3:cb:f1:84 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPGI4NEpwb5EWKE40501OvMbDy7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA5MjYxMTExNTdaFw0yNjA5MjcxMTQ5NTdaMDMxMTAvBgNV BAMTKDA0MUZGODUwQTk5ODY1NkZCMzUwNjk1M0UyMkM0RTE2NEVERURBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3FPrzI+4HVIrHJ2JU5V1CB3m irLJNkXMQ3ZQSfkEjh9sRVxENbOn2YbyouH4KVAVgAr+tq7SfXyeJ385906tCxMy MSzdRCzGNC/tucMRvd5nOysec4Ror05PU4h7MBCoxxuTgpLAkYL4fbTKqWHm8sEU DmAtJiJqMZXm/pPuDD6mdJM9rJ3WXy9hz1QUYDWHiwBOl6XYTyZRuDGaD3S6x4iY fLl3slGO0o7vCGQneHArIZ1ZCOAulD0njT1HcnU+wGI4QQGRa/x/l6JrnJHeE6ov pUjW6qy7o/m6ssY/IChvJ2oCSOgdXQXaaV1NXqH/D3tcamZZ++kK29rROO4/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBB/4UKmYZW+zUGlT4ixOFk7e2ngwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKTiSAgMg0jp0gU9a4y8 YbRJ8hCkmdOrEUNruO8DBFA3pkfYmplA0LGAMgXXqiHGqlcujOwRF0ueauS2ZyyM um7zZoyQErVZI72ixfA8ZwpIPBm8tnwYK11rDlmuqSaCEhhIyH9dABFYVTCvc22T endsJ2eCvZ1PpK2ROvQxD2VVjW12FYXHuoHJ30qZ7WU3kTo8uY6YZgvlZRnWZ4Qe 3jAynpmNtMggd2grQmHX0yW0S2gh10mujNwcrmkqo09LfCxLTIS0dXZW2Ai2LBM4 DKA/7LRGgWAZYfCQ63CxbbciN1y73xmDzOLzzi2JDagrcnMaH04XcDHehxZg08vx hA== -----END CERTIFICATE-----Generated at Sat Sep 26 15:13:19 2026 by rpki-client