$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft File: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft (raw, json) Hash identifier: 2bf+xPGwXEFyqmVU4GXLX9oi8oOSufZklBqdldLdcbA= Subject key identifier: 89:CC:47:C9:54:74:CB:59:50:6C:29:2C:C7:82:1D:C3:DD:2C:CF:E8 Authority key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Certificate issuer: /CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Certificate serial: 583346A948EA5394B7E129EE93DE4D24A56A6BFF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft Manifest number: 24 Signing time: Fri 25 Sep 2026 17:38:55 +0000 Manifest this update: Fri 25 Sep 2026 17:33:55 +0000 Manifest next update: Sat 26 Sep 2026 21:12:55 +0000 Files and hashes: 1: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl (hash: PRttRy19fr4l4b/fdTjsVXvDSL5uiQkQWe/TpxeWx90=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: WbkLmPY7vquDS69dIt63nnAZsib0q7kTLNkqlvd3rPA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:33:46:a9:48:ea:53:94:b7:e1:29:ee:93:de:4d:24:a5:6a:6b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Validity Not Before: Sep 25 17:33:55 2026 GMT Not After : Sep 26 21:12:55 2026 GMT Subject: CN=89CC47C95474CB59506C292CC7821DC3DD2CCFE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:f8:6f:55:23:20:02:8e:b0:d7:63:9f:5d: 39:31:7c:c9:02:c4:4b:a9:b4:ad:78:91:9e:67:fa: b6:dc:58:db:23:67:36:40:38:83:44:7c:e0:d8:05: f2:50:08:41:68:0c:a2:68:1d:7a:5f:9d:42:b4:c1: f2:44:70:8b:07:50:8c:b7:a0:80:c5:ed:c1:51:b9: b4:2e:05:94:5e:2b:eb:ec:3e:49:d5:0b:92:63:4e: e9:15:7d:e4:17:2a:7c:4c:aa:ff:4c:ac:f4:33:a8: 10:da:17:02:a1:15:4d:5f:c6:de:6a:53:a0:41:14: a9:1a:91:2d:47:cb:ae:99:26:39:ec:e0:b4:fb:34: 62:5f:df:f5:d7:85:71:9c:3f:d0:f7:ee:8c:ce:76: 77:1e:1d:01:85:8b:69:2c:1a:82:d3:de:3f:34:c5: d9:60:31:13:3e:c4:69:73:63:ac:b5:f2:63:18:1a: b3:30:89:47:99:c7:67:c8:a4:a4:ca:44:18:db:21: 4e:f9:c9:d2:fd:1c:bb:ec:e3:21:94:61:e3:da:9e: 6d:80:6c:2e:8f:2a:73:d9:3a:ac:c5:5a:ea:ab:1e: 45:a9:55:12:85:85:3a:94:5c:ce:9e:ba:7f:9f:23: d9:18:ef:99:9a:c0:84:aa:e5:f7:c7:48:01:93:79: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:47:C9:54:74:CB:59:50:6C:29:2C:C7:82:1D:C3:DD:2C:CF:E8 X509v3 Authority Key Identifier: keyid:38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:24:bf:69:c7:c4:bb:7d:47:e0:06:bd:ce:a3:e2:dd:bf: f6:db:89:c2:93:a7:cd:a8:28:1e:f9:68:7b:d8:0a:52:a6:85: e4:a9:1d:13:9a:28:c2:63:c9:f1:87:7a:e8:a6:23:6c:4e:bc: 73:10:1e:b8:3a:38:a9:e2:84:5b:c8:40:7a:74:07:3c:96:9b: 34:6c:5b:84:11:80:5c:14:e3:f8:2b:76:c9:5d:47:38:5c:5b: a6:dd:d2:ef:48:19:af:26:ad:c9:ca:da:d3:c7:0e:1a:9c:61: cf:44:d4:38:1d:21:58:22:a0:43:8c:b2:47:19:07:39:af:d2: 0c:da:b5:14:7e:53:a8:b8:00:08:f3:d3:5b:0a:5d:ac:54:92: 62:49:e6:56:84:79:59:38:cd:5f:5a:62:0d:19:08:60:27:b4: 00:b8:c8:75:b1:2b:1e:f1:c7:75:d8:df:c3:3f:e6:ce:1a:1d: fe:e0:61:3a:d7:7c:0e:6e:f7:35:c1:0f:f9:14:51:2e:90:d7: fb:35:b9:02:90:35:da:68:4f:f6:15:7a:49:2e:57:8e:e4:46: 8b:0a:62:58:45:91:4c:31:62:c2:a4:0e:91:8c:42:79:fc:25: f1:43:67:2e:54:0e:6b:53:9d:e3:4d:f5:ff:8b:ec:93:0e:fa: 66:e2:a8:ea -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWDNGqUjqU5S34Snuk95NJKVqa/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1 QkIzNjBFOTAeFw0yNjA5MjUxNzMzNTVaFw0yNjA5MjYyMTEyNTVaMDMxMTAvBgNV BAMTKDg5Q0M0N0M5NTQ3NENCNTk1MDZDMjkyQ0M3ODIxREMzREQyQ0NGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VPhvVSMgAo6w12OfXTkxfMkC xEuptK14kZ5n+rbcWNsjZzZAOINEfODYBfJQCEFoDKJoHXpfnUK0wfJEcIsHUIy3 oIDF7cFRubQuBZReK+vsPknVC5JjTukVfeQXKnxMqv9MrPQzqBDaFwKhFU1fxt5q U6BBFKkakS1Hy66ZJjns4LT7NGJf3/XXhXGcP9D37ozOdnceHQGFi2ksGoLT3j80 xdlgMRM+xGlzY6y18mMYGrMwiUeZx2fIpKTKRBjbIU75ydL9HLvs4yGUYePanm2A bC6PKnPZOqzFWuqrHkWpVRKFhTqUXM6eun+fI9kY75mawISq5ffHSAGTeTA5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUicxHyVR0y1lQbCksx4Idw90sz+gwHwYDVR0j BBgwFoAUOJTZPYe6udCtmPKm/0PxRluzYOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzIvMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1QkIzNjBFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zODk0RDkzRDg3QkFCOUQwQUQ5OEYyQTZG RjQzRjE0NjVCQjM2MEU5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS8yLzM4OTREOTNE ODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJCMzYwRTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEMyS/ acfEu31H4Aa9zqPi3b/224nCk6fNqCge+Wh72ApSpoXkqR0TmijCY8nxh3ropiNs TrxzEB64Ojip4oRbyEB6dAc8lps0bFuEEYBcFOP4K3bJXUc4XFum3dLvSBmvJq3J ytrTxw4anGHPRNQ4HSFYIqBDjLJHGQc5r9IM2rUUflOouAAI89NbCl2sVJJiSeZW hHlZOM1fWmINGQhgJ7QAuMh1sSse8cd12N/DP+bOGh3+4GE613wObvc1wQ/5FFEu kNf7NbkCkDXaaE/2FXpJLleO5EaLCmJYRZFMMWLCpA6RjEJ5/CXxQ2cuVA5rU53j TfX/i+yTDvpm4qjq -----END CERTIFICATE-----Generated at Sat Sep 26 10:14:50 2026 by rpki-client