$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft File: BA8265B3E7B7C69E093A2C17538206A387735430.mft (raw, json) Hash identifier: SeTXXEjo/8fmT55mMtLKgELknpfLsNL3exl0vUNLn9s= Subject key identifier: F3:95:39:8F:8C:00:C1:2E:54:E9:84:4F:A1:D9:D8:F4:B4:37:D9:F9 Authority key identifier: BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 Certificate issuer: /CN=BA8265B3E7B7C69E093A2C17538206A387735430 Certificate serial: 585F5A6B2F467F8386D24768B5AB702C0501C77C Authority info access: rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft Manifest number: 2A Signing time: Sat 14 Nov 2026 17:01:52 +0000 Manifest this update: Sat 14 Nov 2026 16:56:52 +0000 Manifest next update: Sun 15 Nov 2026 19:59:52 +0000 Files and hashes: 1: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: KWAJxLous/FJWMVgJmJnGgVitA2Dvpz0bBRnVwm5fg8=) 2: 326131333a633863343a373530303a3a2f34302d3430203d3e20323139343138.roa (hash: cCyLA9vauchZ/HYwN55ye1GSS197bn77EM67aAcuMdU=) 3: BA8265B3E7B7C69E093A2C17538206A387735430.crl (hash: dft/nWCC42lgs9ffEdtMx+55eXA2wXFVT/W7SuX7eaA=) 4: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: or7wCAMWjHZYCAGRq2C2X4rletz/gXy3rx8p8GG5MWc=) 5: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: H5Wr1psOU24iM5xEQpZOrGler3AwKDy3LxebwRPbQEs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.crl rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:5a:6b:2f:46:7f:83:86:d2:47:68:b5:ab:70:2c:05:01:c7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA8265B3E7B7C69E093A2C17538206A387735430 Validity Not Before: Nov 14 16:56:52 2026 GMT Not After : Nov 15 19:59:52 2026 GMT Subject: CN=F395398F8C00C12E54E9844FA1D9D8F4B437D9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:90:35:38:37:8d:cc:4e:6b:12:f7:37:49: 93:f0:4e:fa:56:8d:5d:b9:1b:04:ea:ad:19:18:e5: f6:22:fb:dc:dc:99:51:57:d3:11:13:9f:98:cf:57: cd:11:d2:d0:22:dc:6b:93:df:7b:76:d6:3e:8f:f8: f7:15:51:62:c8:66:a1:b7:1b:e3:40:0f:9e:4b:3e: cc:50:26:d7:92:38:ce:b6:71:36:c6:fd:76:c0:74: 5b:7e:3f:82:96:ff:3d:df:97:c5:14:bd:d0:8e:02: 52:bc:7e:75:0f:67:b4:34:d2:12:ef:24:0a:85:38: f2:7c:66:a6:0c:c5:2c:bd:0e:23:7e:27:32:a2:2f: e9:5b:10:49:68:9e:ba:4c:b0:3e:3c:69:f7:fc:47: fa:5e:01:d7:b5:60:ef:97:33:9c:41:4c:1b:6c:0e: a3:88:26:07:eb:7c:a7:57:0b:1f:82:29:e2:94:61: 99:2b:23:bf:34:9d:39:8b:49:68:f7:74:cf:a4:79: 1a:0c:c0:a0:8b:ea:3c:29:06:37:e8:e5:68:b1:84: 20:5c:25:be:76:d2:cb:e2:85:90:fd:68:f1:a5:2d: b5:25:d8:0b:4e:7b:df:db:90:f4:9d:35:95:35:40: 75:12:8f:9c:05:37:62:47:7a:3c:dd:ab:24:6c:66: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:95:39:8F:8C:00:C1:2E:54:E9:84:4F:A1:D9:D8:F4:B4:37:D9:F9 X509v3 Authority Key Identifier: keyid:BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.crl Authority Information Access: CA Issuers - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:b5:85:57:18:98:a9:96:60:79:09:4e:3c:4b:54:97:a8: ea:ca:8c:27:20:36:d4:cb:52:16:20:aa:96:53:8f:ca:26:b1: 7d:32:44:f0:57:fd:d2:c8:a1:2c:71:9c:c7:0b:f1:47:2e:37: e5:5a:a1:07:59:47:f5:4c:45:d1:e2:e1:a5:50:1b:51:ad:07: c4:7a:69:16:66:be:99:59:21:18:6f:13:ae:e6:41:ec:68:8c: 27:be:af:84:1f:21:09:e2:9a:7b:e8:43:a5:25:03:87:1e:fc: ff:44:49:d5:05:d3:40:2e:d9:08:f8:fa:f5:cb:0a:8f:82:39: bb:70:ab:d7:0b:e5:bb:ca:d7:8e:38:f8:bd:05:d3:08:5a:30: d3:86:df:e1:ba:17:ff:67:d1:53:d3:e0:f7:36:79:96:b0:ff: 2b:eb:93:85:ec:1b:6b:46:3c:e5:3b:61:ac:da:2b:9d:0d:ab: 94:76:35:d4:ad:28:03:19:96:77:33:15:20:e0:cc:62:ef:9a: f5:74:e9:65:d7:cf:bc:4b:ce:2d:0e:07:4e:19:14:21:80:20: 5b:81:44:54:5f:ac:83:03:6a:59:e7:f7:49:67:bc:05:61:d5: 20:a1:8f:de:54:01:7e:31:56:04:64:2d:35:7d:37:db:c5:8d: 7e:25:a2:32 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUWF9aay9Gf4OG0kdotatwLAUBx3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MjY1QjNFN0I3QzY5RTA5M0EyQzE3NTM4MjA2QTM4 NzczNTQzMDAeFw0yNjExMTQxNjU2NTJaFw0yNjExMTUxOTU5NTJaMDMxMTAvBgNV BAMTKEYzOTUzOThGOEMwMEMxMkU1NEU5ODQ0RkExRDlEOEY0QjQzN0Q5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf5A1ODeNzE5rEvc3SZPwTvpW jV25GwTqrRkY5fYi+9zcmVFX0xETn5jPV80R0tAi3GuT33t21j6P+PcVUWLIZqG3 G+NAD55LPsxQJteSOM62cTbG/XbAdFt+P4KW/z3fl8UUvdCOAlK8fnUPZ7Q00hLv JAqFOPJ8ZqYMxSy9DiN+JzKiL+lbEElonrpMsD48aff8R/peAde1YO+XM5xBTBts DqOIJgfrfKdXCx+CKeKUYZkrI780nTmLSWj3dM+keRoMwKCL6jwpBjfo5WixhCBc Jb520svihZD9aPGlLbUl2AtOe9/bkPSdNZU1QHUSj5wFN2JHejzdqyRsZtC5AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU85U5j4wAwS5U6YRPodnY9LQ32fkwHwYDVR0j BBgwFoAUuoJls+e3xp4JOiwXU4IGo4dzVDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWY4MWViYzEtMGFlOC00OWVlLTgzYWMtMjIwZDVjY2M5 YTJhLzEvQkE4MjY1QjNFN0I3QzY5RTA5M0EyQzE3NTM4MjA2QTM4NzczNTQzMC5j cmwweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3JzeW5jLnJw a2kuYXMyMDU5NDEub3JnL3JlcG8vQVMyMDU5NDEvMS9CQTgyNjVCM0U3QjdDNjlF MDkzQTJDMTc1MzgyMDZBMzg3NzM1NDMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4w gYsGCCsGAQUFBzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L2VmODFlYmMxLTBhZTgtNDllZS04M2FjLTIyMGQ1Y2NjOWEyYS8x L0JBODI2NUIzRTdCN0M2OUUwOTNBMkMxNzUzODIwNkEzODc3MzU0MzAubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBBebWFVxiYqZZgeQlOPEtUl6jqyownIDbUy1IWIKqWU4/KJrF9MkTwV/3S yKEscZzHC/FHLjflWqEHWUf1TEXR4uGlUBtRrQfEemkWZr6ZWSEYbxOu5kHsaIwn vq+EHyEJ4pp76EOlJQOHHvz/REnVBdNALtkI+Pr1ywqPgjm7cKvXC+W7yteOOPi9 BdMIWjDTht/huhf/Z9FT0+D3NnmWsP8r65OF7BtrRjzlO2Gs2iudDauUdjXUrSgD GZZ3MxUg4Mxi75r1dOll18+8S84tDgdOGRQhgCBbgURUX6yDA2pZ5/dJZ7wFYdUg oY/eVAF+MVYEZC01fTfbxY1+JaIy -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:10 2026 by rpki-client