$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft File: 379234C5E71F2624C3A35F324BC6732473DEF7D4.mft (raw, json) Hash identifier: 8ii8wB4aADZrFzlATaq75n0Ohjfa91YYFaqGfMCnEQ0= Subject key identifier: C0:3B:64:20:3D:04:DC:24:11:58:CB:6A:E0:BE:3D:B3:26:C5:A6:F5 Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 7ED4FC3AAA7FE024D7F747266DF869CC08F3520C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft Manifest number: 27 Signing time: Sat 26 Sep 2026 09:22:54 +0000 Manifest this update: Sat 26 Sep 2026 09:17:54 +0000 Manifest next update: Sun 27 Sep 2026 10:14:54 +0000 Files and hashes: 1: 326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa (hash: loyhwL3pSNC/lKJ6tVn3vsv+juNVKmavfgHP3HNEMhE=) 2: 326130623a346530373a326232303a3a2f34342d3434203d3e20323139333331.roa (hash: XCdBR5A/zD17d/EtlBzMKZNZWUKvbnbyuzYMF7mStUg=) 3: 326130623a346530373a326230343a3a2f34362d3436203d3e20323139333331.roa (hash: rtzli0bQcjL2PMSSMMwxLqe/iYamFiYzGeUDhzFyMBw=) 4: 379234C5E71F2624C3A35F324BC6732473DEF7D4.crl (hash: 0wdz7w0v9uPi4fcFKz6xBRf/ixfE6QrHJIzC4cIBVUA=) 5: 326130623a346530373a326230383a3a2f34362d3436203d3e20323139333331.roa (hash: XiE0p3ZGZBfOdrVNgdrQdhGOiNzb9PIabGsrgos39tE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d4:fc:3a:aa:7f:e0:24:d7:f7:47:26:6d:f8:69:cc:08:f3:52:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 26 09:17:54 2026 GMT Not After : Sep 27 10:14:54 2026 GMT Subject: CN=C03B64203D04DC241158CB6AE0BE3DB326C5A6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:2e:36:d5:80:9f:9a:11:c4:ec:ce:2b:07: a2:f8:87:2b:58:7c:0c:5c:a3:65:01:b7:7a:9e:1f: fb:9c:76:37:e0:cb:1b:26:c3:fb:2d:58:14:ab:19: 15:5e:04:9f:60:a3:83:68:4e:76:4c:23:2f:20:5d: 15:87:42:a1:5f:5a:07:96:1e:a7:5e:87:ec:55:7e: a4:a1:b7:91:c1:1d:68:cb:c5:30:8a:38:61:c6:ee: 46:df:e3:50:49:01:04:0c:ba:85:1d:89:4e:53:52: e6:d2:57:02:4a:6b:d3:0e:37:d3:06:99:1a:b7:39: f2:14:ce:58:5e:0d:a4:53:6f:19:26:36:58:e7:56: d7:17:d0:19:24:59:18:8b:d3:6d:4e:79:47:4d:34: 9b:f4:16:bb:6a:e8:b0:b2:14:fa:21:ee:5e:9c:bd: 2e:f8:96:c0:aa:0c:b4:96:6a:7b:ae:06:fe:b9:4e: 0c:7f:46:3a:fb:46:26:67:bd:35:a6:93:86:9a:b4: 5d:d8:b1:76:a4:9e:c0:de:79:2a:b1:0d:31:14:5d: 09:f2:6c:1d:fd:58:7d:b5:12:43:57:b9:ce:2f:eb: cd:bf:10:57:e3:31:8d:bb:9a:d1:16:44:bf:d2:1f: 89:16:3f:57:b5:5b:90:47:39:c1:c1:f8:19:92:b9: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3B:64:20:3D:04:DC:24:11:58:CB:6A:E0:BE:3D:B3:26:C5:A6:F5 X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c3:ce:d8:95:eb:3b:c5:af:f8:ff:f3:f3:68:aa:9a:c8:42: 35:25:00:c6:96:d0:8e:e3:7f:41:b7:ae:b1:46:ee:3c:03:71: f1:63:f9:85:41:9a:f5:ca:58:3c:6c:78:a0:05:8f:b6:c3:96: d1:3f:a0:ae:14:c3:ca:86:b4:5b:e1:34:8c:57:77:94:5f:b7: bc:14:a9:26:03:e9:a9:e0:47:6c:be:2a:35:64:08:52:4f:c0: ac:07:3c:6c:e2:01:27:41:db:98:51:24:ce:01:d0:d4:bc:c5: 87:70:ac:56:26:0d:41:15:97:d8:bb:8c:17:92:3a:61:68:0e: f7:f3:92:15:1c:d4:67:c3:47:e8:54:91:2a:8f:29:d2:0c:b6: 85:71:c4:c8:2c:3f:38:9c:ed:03:d5:c8:c3:66:f1:06:d2:bd: 97:2f:10:21:61:23:6a:f4:ec:61:b0:46:3f:12:f1:ac:ef:a1: b3:77:b1:a9:5f:c0:fd:92:84:c2:87:e8:10:69:ac:6c:0c:da: 56:34:58:8f:12:8d:26:6b:35:d4:5f:c8:e1:67:9c:4e:5a:e7: ff:7c:63:a5:f1:38:d2:22:bf:8f:49:11:44:1f:44:19:19:6c: 92:f5:ce:22:0e:ef:64:ae:85:c6:d2:0c:8e:cf:51:20:2d:2c: b8:56:83:c8 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUftT8Oqp/4CTX90cmbfhpzAjzUgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MjYwOTE3NTRaFw0yNjA5MjcxMDE0NTRaMDMxMTAvBgNV BAMTKEMwM0I2NDIwM0QwNERDMjQxMTU4Q0I2QUUwQkUzREIzMjZDNUE2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBy421YCfmhHE7M4rB6L4hytY fAxco2UBt3qeH/ucdjfgyxsmw/stWBSrGRVeBJ9go4NoTnZMIy8gXRWHQqFfWgeW Hqdeh+xVfqSht5HBHWjLxTCKOGHG7kbf41BJAQQMuoUdiU5TUubSVwJKa9MON9MG mRq3OfIUzlheDaRTbxkmNljnVtcX0BkkWRiL021OeUdNNJv0Frtq6LCyFPoh7l6c vS74lsCqDLSWanuuBv65Tgx/Rjr7RiZnvTWmk4aatF3YsXaknsDeeSqxDTEUXQny bB39WH21EkNXuc4v682/EFfjMY27mtEWRL/SH4kWP1e1W5BHOcHB+BmSuRQZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUwDtkID0E3CQRWMtq4L49sybFpvUwHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjkwMDNlYy1m YTM1LTQ5NzktOWFjOC1lMzBiZTAwNTIxNjMvMS8zNzkyMzRDNUU3MUYyNjI0QzNB MzVGMzI0QkM2NzMyNDczREVGN0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsPO2JXrO8Wv+P/z82iq mshCNSUAxpbQjuN/QbeusUbuPANx8WP5hUGa9cpYPGx4oAWPtsOW0T+grhTDyoa0 W+E0jFd3lF+3vBSpJgPpqeBHbL4qNWQIUk/ArAc8bOIBJ0HbmFEkzgHQ1LzFh3Cs ViYNQRWX2LuMF5I6YWgO9/OSFRzUZ8NH6FSRKo8p0gy2hXHEyCw/OJztA9XIw2bx BtK9ly8QIWEjavTsYbBGPxLxrO+hs3exqV/A/ZKEwofoEGmsbAzaVjRYjxKNJms1 1F/I4WecTlrn/3xjpfE40iK/j0kRRB9EGRlskvXOIg7vZK6FxtIMjs9RIC0suFaD yA== -----END CERTIFICATE-----Generated at Sat Sep 26 15:11:48 2026 by rpki-client