$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft File: 238A11AE245357E72FEB39785C7BC03A973A44E1.mft (raw, json) Hash identifier: J/YqNd+PvRAkHnB3BCsnv/v2BIDNul2fNZfsfynmqv0= Subject key identifier: 14:EC:53:0B:D8:2C:BC:70:E6:02:44:FE:97:96:9C:46:F7:D3:6A:99 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 64BBA6F280AC55BF87C481CD15B80B039E4483A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft Manifest number: 21 Signing time: Wed 23 Sep 2026 21:08:48 +0000 Manifest this update: Wed 23 Sep 2026 21:03:48 +0000 Manifest next update: Thu 24 Sep 2026 21:21:48 +0000 Files and hashes: 1: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: b1a3Jjh6OCqVQv3BFg0/BsI0AK5ATcpf4fi1Bo5nYzQ=) 2: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: b5Idj5t7tuqn2ddvsBcRUBrXdLrx0alL1vLbTdmfpO0=) 3: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: XNORQmyv4cfPM5H0Kk051iHyUovOT9YKU3T8ljTmEOg=) 4: 238A11AE245357E72FEB39785C7BC03A973A44E1.crl (hash: SGLCwSVarNC97twoyekQxioUAaRyjO1fM5MZv27h+kU=) 5: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (hash: wLRhFi868Yq6U7aKu4r+Lg3ExFDFh+DUjWR9qvPNGKo=) 6: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: rD43mzOj6hk9wZ+wkrs+0gGyJTyKVoY8YSNdSNkT6ww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 11:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bb:a6:f2:80:ac:55:bf:87:c4:81:cd:15:b8:0b:03:9e:44:83:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 23 21:03:48 2026 GMT Not After : Sep 24 21:21:48 2026 GMT Subject: CN=14EC530BD82CBC70E60244FE97969C46F7D36A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:85:9d:89:7c:ad:65:3f:1a:ab:4d:c8:0b: 0f:14:67:8c:12:d6:82:fb:8c:7c:1e:2e:0d:f2:de: 02:77:25:52:2d:57:e4:6c:29:9f:52:80:67:b6:4a: 4b:f4:7b:32:7c:c0:4c:34:69:37:e0:60:d7:f0:8d: 12:d5:66:56:a7:c7:99:6c:2e:1e:4b:0e:1f:9e:1f: b8:9f:3b:92:9e:28:eb:f6:50:d3:eb:3b:66:08:74: 17:84:19:69:33:6e:85:09:43:71:50:58:b3:05:b8: 22:b4:24:3c:4a:7c:1e:dd:98:bd:b6:ab:42:a0:d6: d5:60:61:16:c3:75:6c:0e:79:46:25:ef:b2:45:32: ba:bd:0c:44:17:ef:e6:7d:65:9e:25:2a:7f:7d:db: 1a:57:cb:be:f4:19:a8:71:77:63:c1:0a:6b:b1:9c: d6:6c:40:63:a4:ef:15:3d:0f:60:83:8c:fa:da:59: a5:19:f2:16:bd:f9:dd:b7:27:22:54:f4:a0:10:df: eb:22:02:c3:82:48:6c:e9:56:55:20:1f:d2:b9:f0: 71:de:15:74:cb:b2:5d:7a:6f:fd:f0:d5:e8:3b:5e: fb:49:49:88:b5:83:9c:d3:41:c1:af:de:67:a5:1d: bf:93:4c:2b:47:af:ee:85:cb:b9:9a:86:22:42:a0: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:53:0B:D8:2C:BC:70:E6:02:44:FE:97:96:9C:46:F7:D3:6A:99 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:98:48:16:12:91:d7:fc:03:34:be:db:97:b3:55:0f:f6:11: 5d:ee:9f:a0:b3:4a:7c:31:ed:79:2a:c6:30:6e:1c:36:74:7e: 71:9d:63:27:0e:b7:ec:dd:c1:ff:01:bf:26:3c:d6:e8:b5:95: f1:d8:fc:14:e8:b7:6f:5c:cc:85:98:92:5b:ce:79:31:ba:8c: ea:f0:40:7e:e3:98:43:d2:bb:fe:bf:d3:fa:9d:8c:c7:0c:bf: 04:8b:77:8c:a6:3c:b1:81:85:63:34:6e:8a:52:e6:fe:67:8f: 49:0b:6f:ed:a6:d7:5a:54:e0:34:7d:b2:0c:65:82:b6:2d:f0: ac:94:99:6d:ee:ce:86:e7:7c:ac:6e:7e:75:ad:cd:d6:1a:48: ec:5d:e2:c5:c9:54:ff:69:22:93:4a:6e:cd:81:4c:f4:ce:61: c1:34:51:56:42:22:49:16:5a:26:bf:ff:84:d4:ed:a9:57:a2: 46:bd:96:df:73:92:49:94:92:80:3e:5e:42:84:b1:2e:b9:4b: 25:40:9d:3b:d6:6e:58:e4:09:f3:d5:70:01:30:3e:54:6c:d7: 39:20:00:d5:df:58:be:1b:5a:be:a8:03:10:cc:a0:dd:05:92: f7:c6:e5:87:df:8a:e1:b5:1d:0c:78:98:f7:78:88:b6:45:70: 18:e5:ae:40 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZLum8oCsVb+HxIHNFbgLA55Eg6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MjMyMTAzNDhaFw0yNjA5MjQyMTIxNDhaMDMxMTAvBgNV BAMTKDE0RUM1MzBCRDgyQ0JDNzBFNjAyNDRGRTk3OTY5QzQ2RjdEMzZBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesIWdiXytZT8aq03ICw8UZ4wS 1oL7jHweLg3y3gJ3JVItV+RsKZ9SgGe2Skv0ezJ8wEw0aTfgYNfwjRLVZlanx5ls Lh5LDh+eH7ifO5KeKOv2UNPrO2YIdBeEGWkzboUJQ3FQWLMFuCK0JDxKfB7dmL22 q0Kg1tVgYRbDdWwOeUYl77JFMrq9DEQX7+Z9ZZ4lKn992xpXy770Gahxd2PBCmux nNZsQGOk7xU9D2CDjPraWaUZ8ha9+d23JyJU9KAQ3+siAsOCSGzpVlUgH9K58HHe FXTLsl16b/3w1eg7XvtJSYi1g5zTQcGv3melHb+TTCtHr+6Fy7mahiJCoC5HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFOxTC9gsvHDmAkT+l5acRvfTapkwHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS81LzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0mEgW EpHX/AM0vtuXs1UP9hFd7p+gs0p8Me15KsYwbhw2dH5xnWMnDrfs3cH/Ab8mPNbo tZXx2PwU6LdvXMyFmJJbznkxuozq8EB+45hD0rv+v9P6nYzHDL8Ei3eMpjyxgYVj NG6KUub+Z49JC2/tptdaVOA0fbIMZYK2LfCslJlt7s6G53ysbn51rc3WGkjsXeLF yVT/aSKTSm7NgUz0zmHBNFFWQiJJFlomv/+E1O2pV6JGvZbfc5JJlJKAPl5ChLEu uUslQJ071m5Y5Anz1XABMD5UbNc5IADV31i+G1q+qAMQzKDdBZL3xuWH34rhtR0M eJj3eIi2RXAY5a5A -----END CERTIFICATE-----Generated at Thu Sep 24 00:44:37 2026 by rpki-client