$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft File: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft (raw, json) Hash identifier: 2Ls20rwBAx2BMFGjPs3XFmTE0OeJqBybQw2Ar5V5fjg= Subject key identifier: E9:96:32:59:1A:5F:D8:BE:CD:8C:DA:A0:CD:E7:81:60:00:7D:43:DC Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Certificate serial: 507DA79F9E95B5133DC75AEC36394D4E7BF5E98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft Manifest number: B7 Signing time: Fri 25 Sep 2026 15:56:36 +0000 Manifest this update: Fri 25 Sep 2026 15:51:36 +0000 Manifest next update: Sat 26 Sep 2026 18:26:36 +0000 Files and hashes: 1: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl (hash: t0pXy5x6VoyBQM5o92Pz/m0GYKiZ5inRUGasiBzlzN4=) 2: 3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa (hash: 1ABPmYy3OMkXM6hUipNaZqxStdmGCObQYP+N6B1Qe1M=) 3: 3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa (hash: L5DhNHLrlxwctN9vqKE08S22O12JNR5Iz8LhoGk9LAI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7d:a7:9f:9e:95:b5:13:3d:c7:5a:ec:36:39:4d:4e:7b:f5:e9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Validity Not Before: Sep 25 15:51:36 2026 GMT Not After : Sep 26 18:26:36 2026 GMT Subject: CN=E99632591A5FD8BECD8CDAA0CDE78160007D43DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:bc:88:46:15:b2:b1:7d:45:a1:94:4f:e5: bc:8c:37:28:2c:8c:c4:c2:8c:52:ee:e9:5f:50:54: da:97:ac:ae:3a:66:90:9b:1e:f3:0a:a8:85:6f:51: 2e:0c:c6:98:6c:1c:a3:38:64:c0:ac:19:8e:c3:c9: 13:33:56:e1:30:36:6f:13:cb:64:d5:60:94:4e:43: df:bb:6d:6e:b0:a0:4d:27:7b:6c:13:72:19:fb:a7: 93:f0:15:1e:1e:3b:ab:99:eb:83:f0:79:86:47:9e: c8:14:f8:0b:a5:dc:19:7a:af:98:ba:db:22:21:93: fc:bc:98:99:3f:39:af:c7:37:0a:06:16:b6:61:af: 93:62:ee:fd:ea:e6:3b:38:47:5e:fb:15:ea:e6:37: 18:d7:9d:53:1f:b6:09:bb:bf:66:93:7d:2a:69:be: 1d:a6:68:9b:b5:0a:84:4b:f0:e0:93:58:8c:da:52: 61:74:b8:02:7b:cf:c1:1e:24:82:86:fe:29:9c:45: 9c:69:9b:97:0f:e5:5e:27:db:c3:de:31:5d:65:79: 65:b4:88:4e:2e:1b:c5:8c:1d:5d:8b:3f:1b:d8:7d: b2:ca:21:ff:39:6e:b6:54:4b:eb:26:04:c7:89:86: 92:e6:46:1e:7a:18:c7:e8:5a:0f:16:05:46:20:cb: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:96:32:59:1A:5F:D8:BE:CD:8C:DA:A0:CD:E7:81:60:00:7D:43:DC X509v3 Authority Key Identifier: keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:28:9b:f2:1c:a5:6a:d7:ad:e3:96:ea:6e:20:b2:92:fd:38: c1:c5:ad:c1:c1:90:c5:75:e9:0d:b7:ef:71:16:8e:56:8d:90: f3:3f:75:57:ba:c7:89:a0:2e:6d:e9:96:dd:e4:97:b1:9d:b0: ea:00:78:82:d9:73:e3:09:90:50:61:92:4b:05:c6:61:d1:f5: 9a:fa:b1:0f:ab:83:62:fc:f8:19:9f:b5:59:55:0d:4c:aa:3a: 7a:d1:af:9d:97:c2:71:dd:1a:b1:14:09:ed:de:fe:86:29:31: 4a:e1:03:ef:0c:1c:7b:c4:91:6b:a3:7c:60:9c:45:44:69:74: 60:6c:ed:b6:36:fa:48:50:1a:20:45:f2:f5:15:ad:28:92:13: 39:32:e2:1e:3d:67:fc:62:f2:39:99:01:85:b8:aa:a8:00:d1: 23:f1:08:b4:39:7e:d5:b6:d2:80:57:b4:41:1c:df:b3:b8:9a: 15:b6:bd:b0:35:19:0e:b0:ec:d7:c3:82:be:bf:36:73:3f:d5: 63:1f:e6:2e:ae:9b:18:b2:23:ee:6f:de:6c:62:35:2a:94:78: 61:ae:fa:b9:3e:ba:7a:74:f4:5d:ac:f6:8f:16:af:f7:47:a3: 9f:6f:27:cf:f4:f1:9b:23:5d:2d:c2:d6:c2:9f:4a:e8:a7:2f: 85:d8:95:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUH2nn56VtRM9x1rsNjlNTnv16YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGQ1OWY2NjVhNjY3MGRmNWYxZWFkNmFlYjAxZTVmODBk NTBmMGNhMDAeFw0yNjA5MjUxNTUxMzZaFw0yNjA5MjYxODI2MzZaMDMxMTAvBgNV BAMTKEU5OTYzMjU5MUE1RkQ4QkVDRDhDREFBMENERTc4MTYwMDA3RDQzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHryIRhWysX1FoZRP5byMNygs jMTCjFLu6V9QVNqXrK46ZpCbHvMKqIVvUS4MxphsHKM4ZMCsGY7DyRMzVuEwNm8T y2TVYJROQ9+7bW6woE0ne2wTchn7p5PwFR4eO6uZ64PweYZHnsgU+Aul3Bl6r5i6 2yIhk/y8mJk/Oa/HNwoGFrZhr5Ni7v3q5js4R177FermNxjXnVMftgm7v2aTfSpp vh2maJu1CoRL8OCTWIzaUmF0uAJ7z8EeJIKG/imcRZxpm5cP5V4n28PeMV1leWW0 iE4uG8WMHV2LPxvYfbLKIf85brZUS+smBMeJhpLmRh56GMfoWg8WBUYgy7aHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6ZYyWRpf2L7NjNqgzeeBYAB9Q9wwHwYDVR0j BBgwFoAUTVn2ZaZnDfXx6tausB5fgNUPDKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGVjZDNiMmMtMmYxMi00YjNiLWE3NzktOTg5Yzg3NGU1 M2Y0LzAvNEQ1OUY2NjVBNjY3MERGNUYxRUFENkFFQjAxRTVGODBENTBGMENBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RWbjJaYVpuRGZYeDZ0YXVzQjVmZ05V UERLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWNkM2IyYy0y ZjEyLTRiM2ItYTc3OS05ODljODc0ZTUzZjQvMC80RDU5RjY2NUE2NjcwREY1RjFF QUQ2QUVCMDFFNUY4MEQ1MEYwQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSib8hylatet45bqbiCy kv04wcWtwcGQxXXpDbfvcRaOVo2Q8z91V7rHiaAubemW3eSXsZ2w6gB4gtlz4wmQ UGGSSwXGYdH1mvqxD6uDYvz4GZ+1WVUNTKo6etGvnZfCcd0asRQJ7d7+hikxSuED 7wwce8SRa6N8YJxFRGl0YGzttjb6SFAaIEXy9RWtKJITOTLiHj1n/GLyOZkBhbiq qADRI/EItDl+1bbSgFe0QRzfs7iaFba9sDUZDrDs18OCvr82cz/VYx/mLq6bGLIj 7m/ebGI1KpR4Ya76uT66enT0Xaz2jxav90ejn28nz/TxmyNdLcLWwp9K6KcvhdiV CA== -----END CERTIFICATE-----Generated at Fri Sep 25 23:03:52 2026 by rpki-client