$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: iC9t7+K4bkLIaNl3MG2a1lcnBaxCHtn4Owb6OK8D9+A= Subject key identifier: B2:78:6A:D7:DD:E4:E0:0E:44:A8:14:63:64:99:D0:85:A3:F7:E2:42 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 5F2F30BF0AE1389034A62CFB5146E916AA5F87F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0437 Signing time: Wed 23 Sep 2026 04:36:57 +0000 Manifest this update: Wed 23 Sep 2026 04:31:57 +0000 Manifest next update: Thu 24 Sep 2026 07:17:57 +0000 Files and hashes: 1: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 2: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 3: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=) 4: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 5: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 6: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 7: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 8: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: U+K6FOMKATcSG35eqifaZmdbj8MooMj5e8App/Lagn4=) 9: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 10: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 11: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 12: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 13: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2f:30:bf:0a:e1:38:90:34:a6:2c:fb:51:46:e9:16:aa:5f:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Sep 23 04:31:57 2026 GMT Not After : Sep 24 07:17:57 2026 GMT Subject: CN=B2786AD7DDE4E00E44A814636499D085A3F7E242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:eb:c0:a7:e2:8d:1d:d6:5b:95:12:83:51: 71:5b:e9:80:22:39:16:fa:79:3e:ab:5e:4b:2c:6e: de:63:c7:de:31:4e:f3:31:5b:8e:eb:8f:8c:db:67: f4:c0:59:7d:a9:91:cc:4c:d9:e8:f4:07:1a:3a:3a: fc:a2:05:fd:db:89:58:ed:c0:ee:88:83:62:64:04: a0:77:ec:eb:e5:d0:67:52:75:b9:6c:77:aa:cc:52: 7d:e7:71:84:73:0d:84:4f:8d:37:51:95:ad:a7:8a: fa:fb:33:42:dd:d8:89:b9:78:b0:96:c5:42:48:10: 96:da:31:31:07:21:ff:ee:dc:a5:68:1f:6b:1c:48: b4:bb:5f:ed:67:3e:4c:a8:9c:dd:2b:17:8c:af:f5: df:cf:a9:74:46:41:fc:dd:fc:d6:4f:13:04:41:a4: 11:f7:61:99:fb:19:0a:2d:b4:11:97:03:66:86:cc: f4:12:a7:70:45:82:c0:4c:ba:34:04:70:ee:59:6b: f5:cd:79:d9:77:af:9e:7f:df:ac:52:b2:0e:46:33: 9f:f7:16:df:49:91:95:67:7d:b2:6a:e1:38:34:1b: 6b:cf:49:30:49:87:f8:0b:cb:c1:9c:1a:b0:f4:46: 74:95:5f:a9:9f:df:39:4e:55:7e:e7:f4:2f:a4:97: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:6A:D7:DD:E4:E0:0E:44:A8:14:63:64:99:D0:85:A3:F7:E2:42 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:fc:1d:3e:5a:cf:a2:83:7a:b8:4f:d6:d8:49:54:c7:07:73: af:44:49:2b:fb:13:c8:b2:b5:81:b2:9e:24:48:af:8e:a9:4c: 8d:29:4c:67:28:6d:71:cb:b9:08:bb:6d:e5:3b:40:2a:7d:0f: 66:a4:40:96:96:a6:d9:ec:45:4d:c4:ab:ce:7e:c1:7c:6e:95: 16:25:01:46:99:54:17:34:f0:83:23:ae:7e:51:7f:d2:11:a1: d0:26:96:11:d9:74:38:70:6d:7f:2f:79:25:64:3c:f6:25:f1: ad:88:0c:96:c5:86:3c:a6:19:09:61:c8:2f:d7:a7:63:75:e5: 75:73:ba:ac:74:83:0c:87:f5:0e:af:fb:a5:80:11:27:3d:05: 78:c5:8e:a8:42:6f:3b:b2:bc:93:62:ec:06:43:bc:9b:ae:31: 06:9b:05:80:9c:fa:ae:a3:ea:e3:0a:d8:e5:1c:23:45:66:d4: 69:a5:2c:0a:f4:e2:04:a8:c4:4b:2a:8a:49:92:a4:77:8c:ea: e4:21:2d:18:27:f9:9c:d7:84:43:29:5b:fb:0a:b6:11:4f:7b: 9f:68:3e:78:8b:34:dd:74:27:85:eb:65:c2:15:db:71:3f:10: 82:2e:6f:56:f2:fa:39:e0:f2:2e:54:b0:8d:e7:aa:09:81:1a: 16:7d:98:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXy8wvwrhOJA0piz7UUbpFqpfh/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjA5MjMwNDMxNTdaFw0yNjA5MjQwNzE3NTdaMDMxMTAvBgNV BAMTKEIyNzg2QUQ3RERFNEUwMEU0NEE4MTQ2MzY0OTlEMDg1QTNGN0UyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2evAp+KNHdZblRKDUXFb6YAi ORb6eT6rXkssbt5jx94xTvMxW47rj4zbZ/TAWX2pkcxM2ej0Bxo6OvyiBf3biVjt wO6Ig2JkBKB37Ovl0GdSdblsd6rMUn3ncYRzDYRPjTdRla2nivr7M0Ld2Im5eLCW xUJIEJbaMTEHIf/u3KVoH2scSLS7X+1nPkyonN0rF4yv9d/PqXRGQfzd/NZPEwRB pBH3YZn7GQottBGXA2aGzPQSp3BFgsBMujQEcO5Za/XNedl3r55/36xSsg5GM5/3 Ft9JkZVnfbJq4Tg0G2vPSTBJh/gLy8GcGrD0RnSVX6mf3zlOVX7n9C+kl70zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsnhq193k4A5EqBRjZJnQhaP34kIwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfwdPlrPooN6uE/W2ElU xwdzr0RJK/sTyLK1gbKeJEivjqlMjSlMZyhtccu5CLtt5TtAKn0PZqRAlpam2exF TcSrzn7BfG6VFiUBRplUFzTwgyOuflF/0hGh0CaWEdl0OHBtfy95JWQ89iXxrYgM lsWGPKYZCWHIL9enY3XldXO6rHSDDIf1Dq/7pYARJz0FeMWOqEJvO7K8k2LsBkO8 m64xBpsFgJz6rqPq4wrY5RwjRWbUaaUsCvTiBKjESyqKSZKkd4zq5CEtGCf5nNeE Qylb+wq2EU97n2g+eIs03XQnhetlwhXbcT8Qgi5vVvL6OeDyLlSwjeeqCYEaFn2Y SA== -----END CERTIFICATE-----Generated at Wed Sep 23 13:07:06 2026 by rpki-client