$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: RWk+WQWKK2Gk10zJLY8HJNgovovTyIdNcO+y3sg3+IA= Subject key identifier: A6:ED:D5:DF:80:3A:3E:C2:38:A1:8A:35:41:C0:28:DD:F3:D0:A3:7F Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 172FF1BBA6DB2D5EE793B5E1CCC7E151C7146018 Authority info access: rsync://rsync.rpki.as205941.org/repo/AS205941/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 0119 Signing time: Sun 15 Nov 2026 06:33:35 +0000 Manifest this update: Sun 15 Nov 2026 06:28:35 +0000 Manifest next update: Mon 16 Nov 2026 07:56:35 +0000 Files and hashes: 1: 326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa (hash: pe+b9f7vSgc+6Km3teAs1TmzzeEKzWB4WHRIERv2Vjo=) 2: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: iOWcJ5GopW4Ft17sa9KmZqFNefNxbdL67N8kbLKASWI=) 3: 326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa (hash: L3Uv7B+hE+Oyxs5R782Os6cl3p6QystB9KEXfmwlw58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.rpki.as205941.org/repo/AS205941/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 07:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2f:f1:bb:a6:db:2d:5e:e7:93:b5:e1:cc:c7:e1:51:c7:14:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Nov 15 06:28:35 2026 GMT Not After : Nov 16 07:56:35 2026 GMT Subject: CN=A6EDD5DF803A3EC238A18A3541C028DDF3D0A37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:04:fd:08:92:8f:94:01:13:08:5f:5e:07: 23:b2:b9:c9:0a:9c:f6:3e:f6:e1:9a:d0:e5:91:5f: 55:cb:9f:0d:18:2f:b7:b6:bb:6d:aa:1f:a5:d4:a2: eb:8f:71:e2:bb:ee:55:9f:41:24:10:f2:f7:53:4c: 5d:6a:d9:aa:86:fd:19:4b:09:cf:45:2f:ac:3c:94: d7:aa:16:e0:f6:52:be:87:3f:97:ab:c1:6d:2c:e1: 5c:51:f0:b6:e0:3e:b1:34:fc:79:5e:93:f4:3f:b7: 98:ec:29:bf:5a:08:ca:0c:90:ca:c9:80:cb:a3:bd: 59:78:0e:cf:77:d8:7c:66:80:b8:fc:b1:7a:b6:fe: 5d:e7:5e:56:7f:a5:1e:fd:e5:eb:ca:56:af:e4:99: cd:08:e0:8d:88:75:d2:be:a6:f9:20:da:86:65:1a: bf:2c:42:33:4f:1a:86:d8:0d:04:98:7b:85:8b:ef: b7:7c:f8:bb:3f:26:10:8c:f3:c6:bc:13:0b:90:b7: 1a:49:b0:c9:5d:7d:3d:9a:f7:ea:14:41:e0:26:7c: 4c:ae:1a:a2:be:b2:64:21:e1:88:43:b2:3a:41:c9: 5a:d9:af:cd:4d:11:ca:73:1a:38:70:c2:d8:15:0b: cf:9f:f0:43:cb:52:ac:2e:b1:5f:93:c0:27:50:a4: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:D5:DF:80:3A:3E:C2:38:A1:8A:35:41:C0:28:DD:F3:D0:A3:7F X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d0:50:8e:83:52:04:8a:ff:e5:2c:b6:1c:92:a9:47:10:41: d6:bc:f6:06:8c:9a:08:90:9e:53:ba:4a:fa:d3:3c:6d:54:24: d6:89:a9:02:2a:b8:02:f3:9a:75:ab:64:43:07:82:3c:5a:dd: 12:48:d1:62:24:1f:a1:62:0b:73:be:08:a3:6c:dd:20:21:0f: 22:81:66:50:6c:99:7a:a3:06:b1:94:d8:6e:b1:f5:8d:2a:b6: 5d:68:7b:5f:6f:47:7e:11:6e:65:bf:8e:1b:c1:50:ce:c9:53: 7d:cd:4a:56:a6:37:a9:f5:ee:46:19:c0:82:fa:b2:8e:84:f0: c7:c4:b6:05:2e:35:30:ba:57:55:fc:b4:98:ed:3e:42:b7:12: 3a:a7:ab:72:db:76:10:e2:82:3b:ef:96:dc:88:9b:d6:37:90: 33:26:9e:95:65:c3:1c:c5:4d:79:e5:7b:a0:93:a9:6d:0c:85: f4:68:66:aa:aa:ec:cd:d9:62:53:88:95:69:64:1a:e5:27:9e: 43:ce:a1:80:82:be:f0:ff:10:de:3f:12:b2:8e:01:47:b5:6a: d2:35:f7:1b:9e:1f:26:9f:a7:fd:bb:1d:61:5f:88:38:19:9a: cb:2e:eb:2d:f9:ef:47:af:c5:c0:d3:c3:f6:d5:85:44:09:ee: e6:6d:81:ee -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUFy/xu6bbLV7nk7XhzMfhUccUYBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjExMTUwNjI4MzVaFw0yNjExMTYwNzU2MzVaMDMxMTAvBgNV BAMTKEE2RURENURGODAzQTNFQzIzOEExOEEzNTQxQzAyOERERjNEMEEzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokQT9CJKPlAETCF9eByOyuckK nPY+9uGa0OWRX1XLnw0YL7e2u22qH6XUouuPceK77lWfQSQQ8vdTTF1q2aqG/RlL Cc9FL6w8lNeqFuD2Ur6HP5erwW0s4VxR8LbgPrE0/Hlek/Q/t5jsKb9aCMoMkMrJ gMujvVl4Ds932HxmgLj8sXq2/l3nXlZ/pR795evKVq/kmc0I4I2IddK+pvkg2oZl Gr8sQjNPGobYDQSYe4WL77d8+Ls/JhCM88a8EwuQtxpJsMldfT2a9+oUQeAmfEyu GqK+smQh4YhDsjpByVrZr81NEcpzGjhwwtgVC8+f8EPLUqwusV+TwCdQpFOFAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUpu3V34A6PsI4oYo1QcAo3fPQo38wHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3JzeW5jLnJw a2kuYXMyMDU5NDEub3JnL3JlcG8vQVMyMDU5NDEvMS9CMEE1QThBQkIxOEFBQThE QkQ0NzgzMjM0NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4w gYsGCCsGAQUFBzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8x L0IwQTVBOEFCQjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAa0FCOg1IEiv/lLLYckqlHEEHWvPYGjJoIkJ5Tukr60zxtVCTWiakCKrgC 85p1q2RDB4I8Wt0SSNFiJB+hYgtzvgijbN0gIQ8igWZQbJl6owaxlNhusfWNKrZd aHtfb0d+EW5lv44bwVDOyVN9zUpWpjep9e5GGcCC+rKOhPDHxLYFLjUwuldV/LSY 7T5CtxI6p6ty23YQ4oI775bciJvWN5AzJp6VZcMcxU155Xugk6ltDIX0aGaqquzN 2WJTiJVpZBrlJ55DzqGAgr7w/xDePxKyjgFHtWrSNfcbnh8mn6f9ux1hX4g4GZrL Lust+e9Hr8XA08P21YVECe7mbYHu -----END CERTIFICATE-----Generated at Sun Nov 15 18:41:18 2026 by rpki-client