$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft File: 238A11AE245357E72FEB39785C7BC03A973A44E1.mft (raw, json) Hash identifier: 8jMC8VDps6iHZBy3I6xocwW0Cxo+PwffDVfbSzScY60= Subject key identifier: F5:0E:81:10:11:E4:01:BF:74:E2:F0:11:B1:86:3F:6F:B5:82:0F:5C Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 68C38EFCE708DB7A3F159C10A4B8763A25B753BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft Manifest number: 76 Signing time: Sun 15 Nov 2026 09:56:01 +0000 Manifest this update: Sun 15 Nov 2026 09:51:01 +0000 Manifest next update: Mon 16 Nov 2026 09:57:01 +0000 Files and hashes: 1: 238A11AE245357E72FEB39785C7BC03A973A44E1.crl (hash: 4Q6U/nqXJW0JwJndCduHINYFCfgIvWKo+aKgqqp39u0=) 2: BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer (hash: 7Db+GU6ZlFtEB8TVO/cH59mI4RjccbfX/uKVLg78Oqo=) 3: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: b1a3Jjh6OCqVQv3BFg0/BsI0AK5ATcpf4fi1Bo5nYzQ=) 4: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: XNORQmyv4cfPM5H0Kk051iHyUovOT9YKU3T8ljTmEOg=) 5: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: rD43mzOj6hk9wZ+wkrs+0gGyJTyKVoY8YSNdSNkT6ww=) 6: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: b5Idj5t7tuqn2ddvsBcRUBrXdLrx0alL1vLbTdmfpO0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:8e:fc:e7:08:db:7a:3f:15:9c:10:a4:b8:76:3a:25:b7:53:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Nov 15 09:51:01 2026 GMT Not After : Nov 16 09:57:01 2026 GMT Subject: CN=F50E811011E401BF74E2F011B1863F6FB5820F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:cb:e5:5c:03:bb:e7:88:6f:a4:8b:49:9e: 24:1c:60:ba:c3:d5:7a:3d:2c:c3:a8:c1:71:01:69: 6c:05:d1:a6:69:d4:36:d0:fb:7b:f3:4b:82:cc:98: 96:b1:51:a1:f8:d4:e0:83:ce:c3:e6:e9:62:a9:96: c1:b4:cb:af:64:15:e1:69:62:9f:dc:f6:ea:bb:df: 19:9f:2e:b0:a8:dc:58:ea:5b:f0:c7:d5:8e:e0:bd: a1:e8:d4:5b:13:89:c0:86:d9:a8:81:53:58:79:a5: 14:1e:72:21:88:7b:da:79:f6:0c:5c:86:8d:36:82: 96:d3:f2:04:20:9f:7a:ce:d7:c9:8d:ad:b0:41:1a: d5:4d:fa:27:c5:ad:46:62:17:ed:6d:4f:63:fc:5b: ad:f5:52:f5:9d:3b:2d:35:ef:05:80:d5:c9:67:83: 42:cc:63:95:e4:3c:85:03:7c:66:a5:4b:86:a1:5b: 00:85:f6:99:d5:49:b2:33:14:8e:d9:39:7f:e9:b0: 35:a1:ee:28:ec:fe:78:67:c4:a2:30:a4:c0:e4:f3: d5:66:8e:70:b8:de:e8:93:0b:1b:32:be:d4:fb:0d: f4:b4:45:32:e3:b4:20:57:57:2b:6e:14:96:f2:da: ec:94:2f:83:6f:b4:86:b6:b1:df:c1:ce:ea:68:bf: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:81:10:11:E4:01:BF:74:E2:F0:11:B1:86:3F:6F:B5:82:0F:5C X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f8:0a:ec:c9:10:e3:a1:5b:3c:0c:69:f4:b0:03:51:8e:90: cd:e3:d8:0a:52:c5:57:03:8f:07:ba:0c:75:43:45:8b:ce:94: da:eb:9e:5b:d2:2f:89:45:00:fb:1c:60:f0:ad:e7:fb:af:4f: b2:28:c3:b0:bf:0b:8f:92:ca:ba:ff:17:09:74:3c:a7:6f:d1: 0d:4b:fe:b8:aa:15:7c:df:67:e8:c1:f2:e2:f8:0e:bf:45:9f: f1:4e:64:9f:a0:31:b6:9c:ba:4e:23:72:79:db:c2:0b:7b:00: 2f:87:83:99:6a:b3:ed:95:9d:68:e4:87:89:58:26:70:46:e2: fe:07:8e:46:19:8a:40:1f:6c:3a:d0:ee:6a:2c:25:67:b0:9e: c1:3f:ad:58:fd:bd:3b:94:fd:29:37:dc:10:ff:f0:7c:2a:71: 32:8e:52:4d:f1:83:d8:3e:82:9e:24:67:b2:f1:e9:fb:24:19: f8:c2:37:60:69:df:fd:58:12:6a:cd:aa:83:17:75:0b:90:3f: 7c:ab:76:b1:bb:42:47:6a:93:86:52:a2:30:5c:ff:16:4d:fc: 38:2d:7f:cf:7f:3f:69:06:8f:b2:70:f9:bf:4a:e4:d3:15:79: 0f:22:de:cb:eb:31:db:55:83:dc:64:ab:18:fe:9a:89:60:30: ea:91:ab:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaMOO/OcI23o/FZwQpLh2OiW3U78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjExMTUwOTUxMDFaFw0yNjExMTYwOTU3MDFaMDMxMTAvBgNV BAMTKEY1MEU4MTEwMTFFNDAxQkY3NEUyRjAxMUIxODYzRjZGQjU4MjBGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigsvlXAO754hvpItJniQcYLrD 1Xo9LMOowXEBaWwF0aZp1DbQ+3vzS4LMmJaxUaH41OCDzsPm6WKplsG0y69kFeFp Yp/c9uq73xmfLrCo3FjqW/DH1Y7gvaHo1FsTicCG2aiBU1h5pRQeciGIe9p59gxc ho02gpbT8gQgn3rO18mNrbBBGtVN+ifFrUZiF+1tT2P8W631UvWdOy017wWA1cln g0LMY5XkPIUDfGalS4ahWwCF9pnVSbIzFI7ZOX/psDWh7ijs/nhnxKIwpMDk89Vm jnC43uiTCxsyvtT7DfS0RTLjtCBXVytuFJby2uyUL4NvtIa2sd/BzupovyiTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9Q6BEBHkAb904vARsYY/b7WCD1wwHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS81LzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj+Ars yRDjoVs8DGn0sANRjpDN49gKUsVXA48Hugx1Q0WLzpTa655b0i+JRQD7HGDwref7 r0+yKMOwvwuPksq6/xcJdDynb9ENS/64qhV832fowfLi+A6/RZ/xTmSfoDG2nLpO I3J528ILewAvh4OZarPtlZ1o5IeJWCZwRuL+B45GGYpAH2w60O5qLCVnsJ7BP61Y /b07lP0pN9wQ//B8KnEyjlJN8YPYPoKeJGey8en7JBn4wjdgad/9WBJqzaqDF3UL kD98q3axu0JHapOGUqIwXP8WTfw4LX/Pfz9pBo+ycPm/SuTTFXkPIt7L6zHbVYPc ZKsY/pqJYDDqkauk -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:42 2026 by rpki-client