$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: VvzgGKpNGEkAWdEkpe7sdRy5KWyMksAIx+LLi9QcD9k= Subject key identifier: AA:7F:98:91:DE:41:E2:20:B6:A9:80:35:91:A9:0C:91:C7:3A:48:DF Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 7863D360B52B2D18C359EEF05CABD6D9D7ED2B3D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: D9 Signing time: Tue 29 Sep 2026 01:19:21 +0000 Manifest this update: Tue 29 Sep 2026 01:14:21 +0000 Manifest next update: Wed 30 Sep 2026 03:05:21 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: EvbXHb/kpzBs0eJsx8J4cPSW/Ne+z772CS1auTD/e0I=) 2: 326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa (hash: pe+b9f7vSgc+6Km3teAs1TmzzeEKzWB4WHRIERv2Vjo=) 3: 326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa (hash: L3Uv7B+hE+Oyxs5R782Os6cl3p6QystB9KEXfmwlw58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:d3:60:b5:2b:2d:18:c3:59:ee:f0:5c:ab:d6:d9:d7:ed:2b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Sep 29 01:14:21 2026 GMT Not After : Sep 30 03:05:21 2026 GMT Subject: CN=AA7F9891DE41E220B6A9803591A90C91C73A48DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:63:03:01:c5:26:42:53:0b:95:7a:65:4c: 9a:1d:3e:20:9b:68:6e:8a:43:bb:22:0e:5f:84:6d: 3a:20:02:80:89:69:b7:ab:32:ef:a1:00:5d:ce:b6: fd:49:0a:02:9a:43:da:7d:ce:28:5f:11:13:a0:47: 33:26:21:79:39:26:b0:05:6d:46:03:02:ad:a4:1b: ef:f1:24:28:22:7a:7d:30:8e:16:c5:26:d8:e0:ec: 34:f5:d6:c4:62:3f:ca:ab:c9:b7:13:d0:f0:d3:a7: b9:4f:d3:ce:33:5d:54:c2:33:17:87:a6:97:4e:07: 3e:87:e2:bf:c1:fb:18:dc:ba:b1:b8:8c:09:33:d6: 7a:eb:4e:02:26:8d:76:04:3e:30:cc:1d:24:a3:c7: 7b:79:17:91:5f:85:3b:ee:4d:e6:9e:63:9a:d1:2d: 55:e7:47:be:c6:d7:0a:05:cd:3a:2e:33:30:91:12: 7b:3c:d0:c2:e0:4d:87:e1:0f:3c:cf:9b:e9:28:0b: 5a:5e:4b:9a:f9:3b:86:ec:54:11:87:bc:00:f5:a3: b8:2e:40:b8:72:0b:4e:63:75:79:36:7e:0b:02:2e: c2:a5:68:d9:b0:c3:e6:60:dd:d7:09:04:58:84:28: 37:2c:76:b2:b0:cd:c1:b5:43:47:db:69:3e:81:41: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7F:98:91:DE:41:E2:20:B6:A9:80:35:91:A9:0C:91:C7:3A:48:DF X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a4:f6:92:1e:34:1f:12:56:cf:92:43:3a:cb:33:bd:28:b8: bf:27:6c:4a:78:e1:98:e7:c3:ba:56:15:ff:03:49:5a:35:87: e2:9c:13:4c:04:d0:c7:9e:bd:14:e7:33:5b:61:b1:0f:fc:fd: 24:e8:ab:9c:03:52:81:17:28:91:20:e8:7d:51:43:e2:88:ed: 31:75:58:51:17:45:25:b1:1b:19:8a:6f:f4:67:58:d4:99:da: 4e:a9:81:3a:4c:53:00:95:10:7f:09:5b:bd:8d:d1:a9:34:3d: 57:31:44:83:0b:50:89:40:ab:2f:32:f3:16:9b:ae:af:64:56: 5c:b8:e5:f7:e9:35:2a:42:af:d0:71:e5:2b:80:43:a1:46:44: 8a:d8:e2:93:ff:3d:71:fb:cc:94:58:90:e1:8c:7e:21:22:89: 9c:cc:76:5e:b2:f7:d6:b8:1e:d7:70:b2:90:4e:05:95:6f:c5: d8:95:62:36:03:75:e0:ec:b6:d1:06:25:9a:20:1f:d0:92:18: 05:b6:46:f2:c7:e1:5c:9f:06:bf:69:8d:ee:f0:e8:0c:b0:aa: 51:1e:0c:3e:fd:d1:d4:8a:54:fd:44:ed:c5:f5:54:69:b3:9a: bd:75:86:6e:21:4e:2c:cd:d1:17:2c:a4:ec:25:80:4d:c5:30: 4c:1a:ca:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeGPTYLUrLRjDWe7wXKvW2dftKz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA5MjkwMTE0MjFaFw0yNjA5MzAwMzA1MjFaMDMxMTAvBgNV BAMTKEFBN0Y5ODkxREU0MUUyMjBCNkE5ODAzNTkxQTkwQzkxQzczQTQ4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsmMDAcUmQlMLlXplTJodPiCb aG6KQ7siDl+EbTogAoCJaberMu+hAF3Otv1JCgKaQ9p9zihfEROgRzMmIXk5JrAF bUYDAq2kG+/xJCgien0wjhbFJtjg7DT11sRiP8qrybcT0PDTp7lP084zXVTCMxeH ppdOBz6H4r/B+xjcurG4jAkz1nrrTgImjXYEPjDMHSSjx3t5F5FfhTvuTeaeY5rR LVXnR77G1woFzTouMzCREns80MLgTYfhDzzPm+koC1peS5r5O4bsVBGHvAD1o7gu QLhyC05jdXk2fgsCLsKlaNmww+Zg3dcJBFiEKDcsdrKwzcG1Q0fbaT6BQW3rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqn+Ykd5B4iC2qYA1kakMkcc6SN8wHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUpPaS HjQfElbPkkM6yzO9KLi/J2xKeOGY58O6VhX/A0laNYfinBNMBNDHnr0U5zNbYbEP /P0k6KucA1KBFyiRIOh9UUPiiO0xdVhRF0UlsRsZim/0Z1jUmdpOqYE6TFMAlRB/ CVu9jdGpND1XMUSDC1CJQKsvMvMWm66vZFZcuOX36TUqQq/QceUrgEOhRkSK2OKT /z1x+8yUWJDhjH4hIomczHZesvfWuB7XcLKQTgWVb8XYlWI2A3Xg7LbRBiWaIB/Q khgFtkbyx+Fcnwa/aY3u8OgMsKpRHgw+/dHUilT9RO3F9VRps5q9dYZuIU4szdEX LKTsJYBNxTBMGspv -----END CERTIFICATE-----Generated at Tue Sep 29 15:12:21 2026 by rpki-client