$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json) Hash identifier: 6BmzGK3W2aEHOoR47i/UVoqbWOvhOBdoe3iUVcLevDI= Subject key identifier: 68:CE:9E:0F:BB:5E:B4:4B:C3:71:B9:62:22:C0:AB:85:B9:72:1F:10 Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Certificate serial: 1F90E5294B3BB7F99DA77BF6394D6E161BA7B86C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft Manifest number: 0128 Signing time: Mon 28 Sep 2026 07:58:34 +0000 Manifest this update: Mon 28 Sep 2026 07:53:34 +0000 Manifest next update: Tue 29 Sep 2026 09:54:34 +0000 Files and hashes: 1: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=) 2: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=) 3: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=) 4: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: IP3GiY4SBdtlUk5fjCFLHCe8M2ViC/BX5l4Ojd31vy8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 09:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:90:e5:29:4b:3b:b7:f9:9d:a7:7b:f6:39:4d:6e:16:1b:a7:b8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Validity Not Before: Sep 28 07:53:34 2026 GMT Not After : Sep 29 09:54:34 2026 GMT Subject: CN=68CE9E0FBB5EB44BC371B96222C0AB85B9721F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:12:2d:5b:f8:04:42:68:74:50:45:1a:cf: f6:29:50:aa:5f:57:ac:40:6b:97:97:a6:1a:56:37: ba:9b:56:66:62:9d:4a:7a:5b:d5:33:41:ed:30:52: 09:e1:06:4e:50:fd:b4:48:69:32:53:4b:aa:fd:af: 70:13:4f:95:e8:ba:e5:37:dd:1e:31:03:ee:94:d8: 2f:f6:11:5f:cf:79:64:90:8f:08:c5:54:09:61:81: ce:a9:96:3f:3e:9f:b6:e4:bd:71:3f:fe:0e:1e:aa: 42:df:db:72:d3:49:90:a4:3e:38:bc:66:bd:dd:d0: 38:93:a7:f5:e1:2a:4c:7d:dd:41:4d:aa:23:a8:9d: 6e:4f:f7:b7:77:32:0b:6e:35:69:4f:e0:f7:ff:8f: 22:0e:f0:29:4c:67:58:32:8f:a7:c8:05:ae:8c:19: 2e:cf:81:37:72:02:0c:23:da:f2:85:0a:c7:84:d5: 5b:39:11:e3:49:7b:6d:66:f9:2b:3b:51:61:d3:1f: 4b:f5:7d:28:d3:08:5e:3c:60:c7:07:86:9c:65:43: 45:ae:1e:c5:5b:83:41:9a:19:df:b5:01:47:93:39: 75:74:67:7b:c3:4a:70:a9:e2:93:85:56:1b:da:c0: 02:aa:34:ce:c7:03:a1:0c:47:29:71:27:08:f6:52: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CE:9E:0F:BB:5E:B4:4B:C3:71:B9:62:22:C0:AB:85:B9:72:1F:10 X509v3 Authority Key Identifier: keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1f:b3:49:35:0b:37:68:f5:3c:f9:93:99:b4:62:0e:74:2e: 6b:44:27:8f:35:31:ce:6f:72:25:ac:65:7d:2f:df:75:3b:b2: e7:68:dd:c6:5b:af:d0:8b:aa:7d:8a:eb:9c:68:be:24:db:05: 06:e8:91:18:a7:16:25:0b:1b:08:ad:ce:fb:5d:8a:aa:a5:8f: 4c:21:b1:15:2c:a3:01:fc:17:cd:57:e5:b1:c0:a2:17:80:9a: 01:31:33:f9:fa:dc:19:17:10:90:3a:b2:88:98:4e:00:11:69: f3:22:e5:92:e3:99:c5:a6:aa:fa:c6:04:17:a6:aa:6f:a8:23: f3:a1:df:9d:83:7d:11:1b:bd:ef:15:7f:f9:9d:82:a6:be:5f: 2f:24:b0:b1:ca:aa:9e:e8:04:e4:19:40:cb:6d:7e:71:b6:95: b3:ff:7e:25:f4:a2:b1:96:61:a2:7a:9e:04:85:ef:8d:79:0c: 54:15:0c:eb:cb:0b:04:a1:a1:51:88:c2:dd:3f:6f:92:f3:94: fc:ea:79:2b:0b:ff:24:29:ea:9d:67:30:f7:ae:48:64:0d:67: 50:e6:42:56:ef:1c:6a:cf:d6:1a:ea:bf:15:fc:d2:15:f6:5b: a9:b0:80:51:9e:49:7f:c4:40:66:29:86:48:1d:0b:a0:f8:d7: 8a:58:62:e5 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUH5DlKUs7t/mdp3v2OU1uFhunuGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVG MUJCQTFEODAeFw0yNjA5MjgwNzUzMzRaFw0yNjA5MjkwOTU0MzRaMDMxMTAvBgNV BAMTKDY4Q0U5RTBGQkI1RUI0NEJDMzcxQjk2MjIyQzBBQjg1Qjk3MjFGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSRItW/gEQmh0UEUaz/YpUKpf V6xAa5eXphpWN7qbVmZinUp6W9UzQe0wUgnhBk5Q/bRIaTJTS6r9r3ATT5XouuU3 3R4xA+6U2C/2EV/PeWSQjwjFVAlhgc6plj8+n7bkvXE//g4eqkLf23LTSZCkPji8 Zr3d0DiTp/XhKkx93UFNqiOonW5P97d3MgtuNWlP4Pf/jyIO8ClMZ1gyj6fIBa6M GS7PgTdyAgwj2vKFCseE1Vs5EeNJe21m+Ss7UWHTH0v1fSjTCF48YMcHhpxlQ0Wu HsVbg0GaGd+1AUeTOXV0Z3vDSnCp4pOFVhvawAKqNM7HA6EMRylxJwj2UkRjAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUaM6eD7tetEvDcbliIsCrhblyHxAwHwYDVR0j BBgwFoAUVEvVoZocsalOGkt2sN9FVfG7odgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjIyZjY3YTQtZjA4NS00ZDY4LTk2ZWUtYzFiZjQ5OTI2 MjQxLzAvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJCQTFEOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJC QTFEOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMjJmNjdhNC1m MDg1LTRkNjgtOTZlZS1jMWJmNDk5MjYyNDEvMC81NDRCRDVBMTlBMUNCMUE5NEUx QTRCNzZCMERGNDU1NUYxQkJBMUQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR+zSTULN2j1PPmTmbRi DnQua0QnjzUxzm9yJaxlfS/fdTuy52jdxluv0IuqfYrrnGi+JNsFBuiRGKcWJQsb CK3O+12KqqWPTCGxFSyjAfwXzVflscCiF4CaATEz+frcGRcQkDqyiJhOABFp8yLl kuOZxaaq+sYEF6aqb6gj86HfnYN9ERu97xV/+Z2Cpr5fLySwscqqnugE5BlAy21+ cbaVs/9+JfSisZZhonqeBIXvjXkMVBUM68sLBKGhUYjC3T9vkvOU/Op5Kwv/JCnq nWcw965IZA1nUOZCVu8cas/WGuq/FfzSFfZbqbCAUZ5Jf8RAZimGSB0LoPjXilhi 5Q== -----END CERTIFICATE-----Generated at Mon Sep 28 18:13:11 2026 by rpki-client