$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: 5dq8OBjVkb6EA93eOB5IUzVQxMZJVOmVpFORtatOzI0= Subject key identifier: 23:A0:76:D7:BF:A6:BC:2E:56:F9:95:DE:4F:3E:BA:3A:C4:7F:7B:17 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 70F05FDE6B1882AFA5BFB9E5E618D4EFBC779824 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 0144 Signing time: Fri 25 Sep 2026 08:41:28 +0000 Manifest this update: Fri 25 Sep 2026 08:36:28 +0000 Manifest next update: Sat 26 Sep 2026 11:19:28 +0000 Files and hashes: 1: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 2: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 3: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 4: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: 7TzgnLpIEsVSOmh/n5MSEOsLe5JnVNEPSmBFPJXHUnc=) 5: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 6: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 7: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 8: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 9: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 10: 3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa (hash: c7rDwmaeg1ixtTlrBNd5rmSVyV1b9P8eB3zeUnPw2no=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 11:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f0:5f:de:6b:18:82:af:a5:bf:b9:e5:e6:18:d4:ef:bc:77:98:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Sep 25 08:36:28 2026 GMT Not After : Sep 26 11:19:28 2026 GMT Subject: CN=23A076D7BFA6BC2E56F995DE4F3EBA3AC47F7B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:81:f7:d2:1c:90:7e:42:6c:3f:11:1f:65: 73:68:26:f1:ea:f0:92:0f:2a:73:93:41:f3:3e:8e: f9:13:7d:24:9b:aa:00:ee:85:76:2a:43:66:e8:b4: 13:86:2f:21:0f:ac:3b:8e:39:a8:ac:16:15:0d:29: b7:05:8b:06:8f:bb:d6:53:db:11:c7:a8:80:ae:e7: af:9e:0c:30:22:1f:d7:5c:92:63:6f:84:16:b2:1c: 1e:0e:dc:d5:89:ef:c8:0c:6e:ec:05:ed:2a:d1:e1: 74:6b:ef:d5:aa:bc:f9:a7:a5:6e:db:db:0f:83:9e: 9e:fd:5e:0d:33:df:26:08:03:f6:40:d1:99:0e:48: 62:fc:26:54:e5:ad:23:ed:bf:ad:ed:8f:58:68:98: b0:95:0f:ad:ec:66:4c:d5:40:3e:40:df:8d:5c:07: 7b:ff:5d:90:42:7d:ec:04:e3:1b:6d:1d:d5:a6:c3: b8:42:24:62:18:61:b8:f1:45:79:46:3d:23:07:f7: d3:ae:7a:0f:5b:61:73:93:49:f6:30:59:ce:44:ad: 1c:c0:e6:d9:7e:e2:d3:a0:24:09:ea:37:23:02:08: 16:6a:52:ee:6c:57:b6:e4:ae:bb:71:f3:8e:d7:72: 7b:3e:ba:ec:3c:c2:69:a2:f4:51:5a:9e:57:a2:89: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A0:76:D7:BF:A6:BC:2E:56:F9:95:DE:4F:3E:BA:3A:C4:7F:7B:17 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:77:e5:61:7f:b6:24:33:eb:98:75:f6:eb:d4:df:eb:f9: 9a:2d:b1:81:99:78:b3:e0:02:9e:f6:ac:29:2b:01:b4:b6:a0: 17:cd:7d:0f:d5:65:3c:07:08:2b:56:69:d3:74:98:ef:4c:d6: 70:f5:20:90:be:ed:1e:3c:70:0f:e8:55:62:52:e7:8d:b1:90: 33:d7:31:be:2c:82:2b:05:2b:a4:20:93:b6:e6:45:96:37:b3: 69:55:c5:5e:ec:21:5e:02:48:72:fd:ff:27:ac:79:fc:44:9b: 1c:93:63:23:4a:b9:a7:55:43:9a:5b:87:85:8d:99:8e:d1:f5: ad:35:d4:f3:08:83:32:28:23:8b:05:d9:b3:e3:05:b5:d6:17: 80:7b:c2:e8:f7:c7:33:2f:f8:cb:1e:b3:f8:a7:e5:ed:69:8e: 0c:4b:58:b7:8f:0e:b0:46:ab:c3:b0:b0:31:ac:83:9a:9d:8a: de:a2:5c:fa:12:db:e1:c0:40:a6:97:c7:05:03:63:be:cb:63: 24:9b:43:a4:14:0d:51:83:b7:8d:7f:88:b5:72:d6:22:af:a0: db:05:4f:f5:b1:6b:1a:ce:e5:a3:10:35:65:43:9e:3e:35:58: 9c:fd:b2:f6:5d:29:a9:1a:33:01:9f:c9:3e:bd:73:7e:73:64: ce:05:7c:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcPBf3msYgq+lv7nl5hjU77x3mCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA5MjUwODM2MjhaFw0yNjA5MjYxMTE5MjhaMDMxMTAvBgNV BAMTKDIzQTA3NkQ3QkZBNkJDMkU1NkY5OTVERTRGM0VCQTNBQzQ3RjdCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrIH30hyQfkJsPxEfZXNoJvHq 8JIPKnOTQfM+jvkTfSSbqgDuhXYqQ2botBOGLyEPrDuOOaisFhUNKbcFiwaPu9ZT 2xHHqICu56+eDDAiH9dckmNvhBayHB4O3NWJ78gMbuwF7SrR4XRr79WqvPmnpW7b 2w+Dnp79Xg0z3yYIA/ZA0ZkOSGL8JlTlrSPtv63tj1homLCVD63sZkzVQD5A341c B3v/XZBCfewE4xttHdWmw7hCJGIYYbjxRXlGPSMH99Oueg9bYXOTSfYwWc5ErRzA 5tl+4tOgJAnqNyMCCBZqUu5sV7bkrrtx847Xcns+uuw8wmmi9FFanleiiW2XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUI6B217+mvC5W+ZXeTz66OsR/excwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAowHfl YX+2JDPrmHX269Tf6/maLbGBmXiz4AKe9qwpKwG0tqAXzX0P1WU8BwgrVmnTdJjv TNZw9SCQvu0ePHAP6FViUueNsZAz1zG+LIIrBSukIJO25kWWN7NpVcVe7CFeAkhy /f8nrHn8RJsck2MjSrmnVUOaW4eFjZmO0fWtNdTzCIMyKCOLBdmz4wW11heAe8Lo 98czL/jLHrP4p+XtaY4MS1i3jw6wRqvDsLAxrIOanYreolz6EtvhwECml8cFA2O+ y2Mkm0OkFA1Rg7eNf4i1ctYir6DbBU/1sWsazuWjEDVlQ54+NVic/bL2XSmpGjMB n8k+vXN+c2TOBXw1 -----END CERTIFICATE-----Generated at Fri Sep 25 23:32:53 2026 by rpki-client