$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: llR7II+wjkJjmxtT57fo7Ikjqd1lF430AgAeoL4kLio= Subject key identifier: 13:B7:BE:2E:E2:26:BF:B7:0B:5E:9A:F3:BD:08:EE:8F:A3:93:98:EB Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 41DBB5CC5791C6D2CABA7329213A474A1D61C535 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 0143 Signing time: Thu 24 Sep 2026 16:31:11 +0000 Manifest this update: Thu 24 Sep 2026 16:26:11 +0000 Manifest next update: Fri 25 Sep 2026 16:38:11 +0000 Files and hashes: 1: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 2: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: WSq15U/GSGIw8AM70EHcr4QqFjB/jVAuFeWq1ajOah4=) 3: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 4: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 5: 3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa (hash: c7rDwmaeg1ixtTlrBNd5rmSVyV1b9P8eB3zeUnPw2no=) 6: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 7: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 8: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 9: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 10: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 11:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:db:b5:cc:57:91:c6:d2:ca:ba:73:29:21:3a:47:4a:1d:61:c5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Sep 24 16:26:11 2026 GMT Not After : Sep 25 16:38:11 2026 GMT Subject: CN=13B7BE2EE226BFB70B5E9AF3BD08EE8FA39398EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:68:b5:40:12:58:72:91:32:76:f3:b7:49: 6e:51:8d:cc:d9:8d:e9:1b:78:61:c3:3f:39:56:75: b8:67:37:19:b5:c0:25:df:a3:59:85:46:dd:a0:6b: 35:f7:2d:f9:5d:69:8c:c4:75:b3:7e:d6:ce:45:5e: 66:d3:02:83:13:24:4f:5e:be:30:ef:78:bb:fb:a1: 82:ac:7a:45:c4:65:34:47:26:9a:ea:30:c3:8f:d8: 83:17:09:33:2f:a3:31:27:18:96:44:5c:1a:04:0b: 69:5c:a6:79:57:13:a0:ba:13:4b:64:c4:3b:c6:d1: a9:7d:ae:9b:89:32:b0:1a:d1:7a:37:d1:01:c9:67: 93:4f:54:f4:41:b7:01:4d:aa:7d:e7:7b:ad:16:c1: c8:40:45:56:72:8b:a0:68:48:2d:47:71:28:80:77: 81:16:6d:3b:cc:69:42:24:3c:eb:da:b6:79:65:f2: db:ff:3b:46:cb:06:66:b6:20:6b:82:f1:98:54:ae: 26:84:d1:39:c7:18:16:90:6a:3f:2a:39:a5:7f:d2: 7d:e6:44:e1:2f:7a:13:dd:9a:95:70:1c:22:1c:15: 9e:5e:c9:31:84:18:cb:cc:c5:ab:32:1a:4c:b0:d8: 75:22:25:f3:d1:e9:ff:56:bd:4b:7e:bc:8a:70:44: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:BE:2E:E2:26:BF:B7:0B:5E:9A:F3:BD:08:EE:8F:A3:93:98:EB X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:a9:39:6d:24:39:de:eb:08:d8:2b:c8:33:f6:51:a0:57: 87:f9:14:86:6f:0d:f3:02:cc:72:18:47:92:05:5c:91:12:57: 0c:73:d3:2d:4b:a8:72:78:f8:fa:86:91:33:d9:dd:8b:7e:5d: 05:d7:84:f9:81:2b:75:01:95:de:6a:7b:24:87:a1:08:27:a4: 1b:f1:2a:9f:b4:68:9d:15:08:75:0f:53:95:2f:5f:bc:5d:c2: 0e:e8:17:d8:90:4b:e8:97:02:88:23:8b:6a:af:ee:23:8d:43: 12:19:92:04:32:c7:5a:cf:f1:de:52:4e:8f:86:5f:cb:74:7d: 03:60:d2:95:08:88:e3:78:ad:31:c1:98:9c:7d:00:4c:d6:27: 6b:97:97:44:bf:5f:a5:ca:08:a5:76:f1:ab:11:31:43:d2:b3: 0c:86:ba:93:a0:99:d4:87:7e:fb:c9:8f:77:27:72:84:89:bf: 5d:89:e3:fd:6e:47:d2:d5:74:11:26:94:21:09:bd:e5:9b:eb: e7:fb:3f:49:f9:54:00:b6:af:69:3c:e0:ef:f9:f8:14:33:9d: eb:05:e2:f3:86:58:5d:44:2b:9c:e3:45:7c:54:09:13:ee:1f: 6e:38:61:93:0d:95:7a:ec:92:7a:f7:09:27:2f:31:87:59:67: 5d:cc:17:de -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQdu1zFeRxtLKunMpITpHSh1hxTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA5MjQxNjI2MTFaFw0yNjA5MjUxNjM4MTFaMDMxMTAvBgNV BAMTKDEzQjdCRTJFRTIyNkJGQjcwQjVFOUFGM0JEMDhFRThGQTM5Mzk4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkGi1QBJYcpEydvO3SW5RjczZ jekbeGHDPzlWdbhnNxm1wCXfo1mFRt2gazX3LfldaYzEdbN+1s5FXmbTAoMTJE9e vjDveLv7oYKsekXEZTRHJprqMMOP2IMXCTMvozEnGJZEXBoEC2lcpnlXE6C6E0tk xDvG0al9rpuJMrAa0Xo30QHJZ5NPVPRBtwFNqn3ne60WwchARVZyi6BoSC1HcSiA d4EWbTvMaUIkPOvatnll8tv/O0bLBma2IGuC8ZhUriaE0TnHGBaQaj8qOaV/0n3m ROEvehPdmpVwHCIcFZ5eyTGEGMvMxasyGkyw2HUiJfPR6f9WvUt+vIpwRCyxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE7e+LuImv7cLXprzvQjuj6OTmOswHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGm6k5 bSQ53usI2CvIM/ZRoFeH+RSGbw3zAsxyGEeSBVyRElcMc9MtS6hyePj6hpEz2d2L fl0F14T5gSt1AZXeanskh6EIJ6Qb8SqftGidFQh1D1OVL1+8XcIO6BfYkEvolwKI I4tqr+4jjUMSGZIEMsdaz/HeUk6Phl/LdH0DYNKVCIjjeK0xwZicfQBM1idrl5dE v1+lygildvGrETFD0rMMhrqToJnUh377yY93J3KEib9dieP9bkfS1XQRJpQhCb3l m+vn+z9J+VQAtq9pPODv+fgUM53rBeLzhlhdRCuc40V8VAkT7h9uOGGTDZV67JJ6 9wknLzGHWWddzBfe -----END CERTIFICATE-----Generated at Thu Sep 24 20:57:25 2026 by rpki-client