$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft File: 0D059F10D18D00052C808EB8069F90D47E30564A.mft (raw, json) Hash identifier: fqXwiv7DZLhEoF/6SYmWDnm3xS8eAcg15acPyLHcicw= Subject key identifier: F1:7A:80:0A:46:A8:85:E4:2B:36:E4:A1:27:E1:1E:99:9F:AE:49:64 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 6F58B7AA0B425220D0D579A2C9F118624C6D313E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft Manifest number: 072D Signing time: Fri 25 Sep 2026 09:17:08 +0000 Manifest this update: Fri 25 Sep 2026 09:12:08 +0000 Manifest next update: Sat 26 Sep 2026 12:38:08 +0000 Files and hashes: 1: 38322e3131382e33312e302f32342d3234203d3e20313431313538.roa (hash: OTAxxu80qZiAdbkhEohivnmoAej12d8cy3FA1djbGTU=) 2: 34352e38302e362e302f32342d3234203d3e20313337343039.roa (hash: mQ6YzssFE/nFARpdXzey7q80X9EpUm3gxUnbZxsMHUo=) 3: 38322e3131382e33302e302f32342d3234203d3e20323036313530.roa (hash: kMPtJcjG9tfatTfMeU7MeMrJk9DMb6WVWPy6p9Bto5Q=) 4: 3231322e322e3233392e302f32342d3234203d3e203631333137.roa (hash: 88ZqPS4KLL3VUrzEGEoOTIi444han9774YJzqSj1Xig=) 5: 34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa (hash: V9x7UhaM0q29T8H8XPtdaeU7ryeW8HoO7AB5EWt3qxM=) 6: 3231322e322e3233362e302f32342d3234203d3e203632313634.roa (hash: hYVDhA7clFCFhyHx8qb8eGJJtW1LMi+8HW6eGQBn2Ks=) 7: 34352e38302e352e302f32342d3234203d3e20323132333335.roa (hash: AoDhowE+YGOAv8rmnVNKqk2h8xBFpo8Ka230oN6XBbc=) 8: 3134312e39382e37352e302f32342d3234203d3e203531383437.roa (hash: mmqCGRZJYHvpVg45WvFtGLJd+4UTpkk7nfaHn0CIReI=) 9: 3231332e3232352e3233372e302f32342d3234203d3e20313436383133.roa (hash: DRJtjVwPiySu9t6me4WQ1vdKo6aNEDdd8gJ1QJzgaC4=) 10: 34352e3134362e3130362e302f32342d3234203d3e203535323031.roa (hash: uQC20MmSjy1Cc5RYjKHMaAo4fj5NpzuBkQBiuImfQRw=) 11: 38322e3131382e32352e302f32342d3234203d3e20323030303137.roa (hash: sViFIZ6OozSjA5pHbhyv+L6dE4R+g28oMJzVvvg6Z8A=) 12: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (hash: xEbHzWDrK9qb49s7Sh7bzbMji3lX1NO1D6/xKNr3tPo=) 13: 34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa (hash: 01Vb2KSNzkh/GGzFrCIjs5tLsppA7mVVMUUDmrHzNok=) 14: 38322e3131382e33302e302f32342d3234203d3e20323036303932.roa (hash: wL/aEFW/10+Xf1wWCXVTzJ5EPb98oEAIceQ47oaOw4Q=) 15: 38322e3131382e32342e302f32342d3234203d3e203537323338.roa (hash: bmsf/k40eGdN++deEP9l4aJt3nVGJ9evXaZOAbsRiUU=) 16: 3134312e39382e37332e302f32342d3234203d3e20323132323338.roa (hash: Kl5wKgri9tWHoaRrmYc5Eeesb7M6//3ZHxX0e7a/BYc=) 17: 34352e38302e342e302f32342d3234203d3e20323132323338.roa (hash: npswCjhZwGUKkzdggvkjMlGfXXw2LDR0r8SW9RnhBIc=) 18: 3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa (hash: zFyfaAeGc+XO9Mu+E75sAGLZwtFhRY8m3MVz5vHV9YA=) 19: 34352e38302e372e302f32342d3234203d3e203239383032.roa (hash: uf7MkTsmUmcfwWZlwmONFUR+MG54zC454PvItoE4C3I=) 20: 3134312e39382e37352e302f32342d3234203d3e20313437323933.roa (hash: o5LuDMZypsd22aAoxdJpiH2NjLEUg+uICc0EHPajqH4=) 21: 3231322e322e3233372e302f32342d3234203d3e20323038393035.roa (hash: k8j6EQsdE7kJaniOHXaXF7xlodb4Gvv5zOwJY5HoIqk=) 22: 3231322e322e3233382e302f32342d3234203d3e203432383331.roa (hash: tf49q1rk4Zhil8rfNPBeN/HXxcZJ+bN4j9DGsJwb1yg=) 23: 34352e38302e372e302f32342d3234203d3e203631333137.roa (hash: BWTAt9eN5lq1XIWTYmYop12am0B+QaBbtHGUC//h6CQ=) 24: 34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa (hash: MMdb5hdxzSDftqblycIDCKP70I+p+jFdwcOY1SSaT3g=) 25: 34352e3133322e39382e302f32342d3234203d3e20383334.roa (hash: qKLXyFXVOyKPSM1BCoZrA/5SiwO8dEsP+ZpRhRBKDas=) 26: 3231322e322e3233382e302f32342d3234203d3e20313939373431.roa (hash: +UiGMHT186FK7evbSGM3wae0Kc1lpwUZf19W7GWwyD4=) 27: 3134312e39382e37322e302f32342d3234203d3e20333935333734.roa (hash: Bb/YPzT6C6PXEhchJ8yqU7Zf2PpTo+alRj8FvooO2/8=) 28: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (hash: O7QMeYzn5CU54U41dRj25GyQDZmXVewrr09DSGAvfjQ=) 29: 34352e3134362e3130372e302f32342d3234203d3e20323135343539.roa (hash: cP7E9KfKLXE7g7L6YPDQWlCWa5uBJAoDUgTE1nR6oDg=) 30: 38322e3131382e32392e302f32342d3234203d3e20323036313530.roa (hash: g5RZ2zBNk+trtkyb9Rf7BXLU9n0Q1hk7LEirQx9bPLk=) 31: 38322e3131382e32362e302f32332d3234203d3e20383334.roa (hash: 6ep030vAA4Kiyf38IIR1lcRQ0IupGb4MuJmgMh7m36M=) 32: 38322e3131382e33312e302f32342d3234203d3e203136353039.roa (hash: VEoo3CL9NzqZNAIdwihXM68+oDB2NsRHzlmj9zV4IGI=) 33: 38322e3131382e32392e302f32342d3234203d3e20323036303932.roa (hash: wVyOrO0P1oozn0Q2ajYhvKJnhXudTg7Oa3BgjMasSeY=) 34: 38322e3131382e32382e302f32342d3234203d3e203633343733.roa (hash: CdtOTgxP4OrfIEkbxRgbahqDTs6nqrut0ZuHjgn3oL8=) 35: 38322e3131382e33312e302f32342d3234203d3e203134363138.roa (hash: M8A4pv7Ga3lILjGKJMYzZ7C0KqHQjVqHGnt7ZKgmIHQ=) 36: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (hash: Z/f6e8Rau3EGgtTxd7qltXWmXln+q6Zo5F9lst2q60c=) 37: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (hash: tzVyCbi/1s2sAONAoNlHgjzWVTtlSGS7jXqFeBq7bKc=) 38: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (hash: R5UKbrult62Xuj1AnmXZm1Tgj84EbOaPR6wItJF1C0E=) 39: 39322e3131342e342e302f32342d3234203d3e20323136313832.roa (hash: iZcvzrTApwMe/mgD5dwZ8ER2vxVuWX1nP07r98rondE=) 40: 3134312e39382e37352e302f32342d3234203d3e20313439353032.roa (hash: lbd7+tkFet96dqBbAJbAIS+ZvcIfxp2hUTAspPLz4uc=) 41: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (hash: fwz/d7S5BIVi9KVNnGw2k82c/snsFesvd7vNCeAko8c=) 42: 34352e3133322e39392e302f32342d3234203d3e20323030303137.roa (hash: AkycLMen/C53QyfnsQOF3nBP0k0MoRMPas28bzlyZ+c=) 43: 39322e3131342e352e302f32342d3234203d3e203239383032.roa (hash: rd0Okun09SrmxDlwt39WDyG8IjHWTRiQb15ihRsza7c=) 44: 3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa (hash: /lE504/n5MHV61y4OXy6umkppSIjj02+bYfLKI4SboQ=) 45: 0D059F10D18D00052C808EB8069F90D47E30564A.crl (hash: AjUKfv1JvJuxJE7iaL+LQXpAWQ+u29BKoxqOMR+FBIk=) 46: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (hash: zTkx6ethJk5GNvgY58qt1j+71GYO+nVWeXjRY2w4pio=) 47: 34352e3134362e3130342e302f32342d3234203d3e20323132333335.roa (hash: CerYnLSFvPtX+27jHb2+I/pCU1zqCD4NO8Ik3yBPOxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:b7:aa:0b:42:52:20:d0:d5:79:a2:c9:f1:18:62:4c:6d:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Sep 25 09:12:08 2026 GMT Not After : Sep 26 12:38:08 2026 GMT Subject: CN=F17A800A46A885E42B36E4A127E11E999FAE4964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:3e:9b:54:fc:f1:71:27:9e:51:a1:e1:0a: 4b:15:af:3d:0f:8f:2b:2f:c8:8f:84:75:97:7f:7c: 09:cb:bc:db:5d:97:b1:7f:02:cd:47:9c:ac:2d:7c: 32:8f:32:87:42:7a:2f:a6:10:09:3b:4b:0c:52:b6: a4:ea:c0:35:b8:88:fe:e1:f9:74:c5:51:2f:d4:eb: 51:be:69:fd:39:28:2d:9a:c6:68:88:18:5b:05:eb: 45:f2:ff:98:e2:01:3d:da:20:ef:a2:a0:d4:6b:95: 5f:a4:08:e0:66:69:a5:ae:53:cc:dd:54:21:88:e3: b4:a4:17:99:1b:1d:5e:d0:cd:e1:3b:b1:0b:1e:cd: 93:8f:69:5a:4b:97:43:dc:06:2d:5d:86:ee:3b:8d: a3:11:a9:74:a3:8c:df:d8:0b:64:a1:f5:5a:72:61: 86:e9:2f:6e:c3:cc:e0:53:43:b8:bf:93:92:e7:7a: ac:1e:09:71:3a:de:a1:07:bd:65:dd:b2:ec:d2:25: f7:49:6c:78:dc:53:22:b5:7a:25:c1:c1:fe:b7:1c: f1:91:d3:94:08:9e:77:e9:a6:17:c5:88:ad:3d:ae: ec:19:f1:da:1a:4b:96:06:53:d0:9d:d3:60:52:23: 9a:23:97:7d:35:e5:ef:bb:3a:0b:ef:f2:10:8f:d1: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:80:0A:46:A8:85:E4:2B:36:E4:A1:27:E1:1E:99:9F:AE:49:64 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:18:ce:9a:ee:fe:fa:4f:18:6d:1a:cc:78:a2:44:56:e7:84: 49:e5:05:ed:ae:31:77:f0:16:8f:de:11:55:70:b1:bc:e7:cf: dd:ce:e8:0e:e9:bf:75:78:83:c8:49:6c:bf:79:34:0e:3b:bc: e1:2f:da:de:ff:6b:80:c8:9d:5d:1a:82:53:31:2f:f9:60:3a: 73:7c:6f:63:1c:9c:a5:d3:2c:4b:d3:f8:5a:f1:9c:82:2f:41: 4a:fc:52:c0:05:ed:58:d8:18:53:43:e2:e3:d6:4f:ef:13:aa: 08:a6:76:bc:db:dd:42:6c:6e:b9:75:be:fc:10:61:50:81:14: b4:a4:fb:9d:92:27:f8:79:7b:8b:a0:20:23:59:05:ed:69:2b: b3:22:8c:cb:cf:68:87:bd:33:29:4e:8d:cb:47:98:d6:b9:ab: 8f:ff:1f:cd:d8:10:ac:72:e5:9b:fa:6c:e6:f5:e9:cc:9b:46: e7:9e:ba:cc:05:38:76:91:f4:2b:46:a5:8c:37:de:7f:a6:7b: 08:25:a6:d3:59:5d:e0:72:14:7a:24:45:a2:10:6f:97:ce:72: ce:a4:7e:a9:49:bb:58:d2:de:c5:eb:8e:d1:5a:2c:dc:a3:df: a6:40:78:84:91:c1:bf:24:57:ac:62:0d:ea:3c:01:17:7c:b7: 20:4f:01:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUb1i3qgtCUiDQ1XmiyfEYYkxtMT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNjA5MjUwOTEyMDhaFw0yNjA5MjYxMjM4MDhaMDMxMTAvBgNV BAMTKEYxN0E4MDBBNDZBODg1RTQyQjM2RTRBMTI3RTExRTk5OUZBRTQ5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+D6bVPzxcSeeUaHhCksVrz0P jysvyI+EdZd/fAnLvNtdl7F/As1HnKwtfDKPModCei+mEAk7SwxStqTqwDW4iP7h +XTFUS/U61G+af05KC2axmiIGFsF60Xy/5jiAT3aIO+ioNRrlV+kCOBmaaWuU8zd VCGI47SkF5kbHV7QzeE7sQsezZOPaVpLl0PcBi1dhu47jaMRqXSjjN/YC2Sh9Vpy YYbpL27DzOBTQ7i/k5LneqweCXE63qEHvWXdsuzSJfdJbHjcUyK1eiXBwf63HPGR 05QInnfpphfFiK09ruwZ8doaS5YGU9Cd02BSI5ojl3015e+7Ogvv8hCP0dnRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8XqACkaoheQrNuShJ+EemZ+uSWQwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYWYxNjcwNC0y ODU0LTQwODAtOWEwOS03MjYyMzI2YzllMjIvMS8wRDA1OUYxMEQxOEQwMDA1MkM4 MDhFQjgwNjlGOTBENDdFMzA1NjRBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhjOmu7++k8YbRrMeKJE VueESeUF7a4xd/AWj94RVXCxvOfP3c7oDum/dXiDyElsv3k0Dju84S/a3v9rgMid XRqCUzEv+WA6c3xvYxycpdMsS9P4WvGcgi9BSvxSwAXtWNgYU0Pi49ZP7xOqCKZ2 vNvdQmxuuXW+/BBhUIEUtKT7nZIn+Hl7i6AgI1kF7WkrsyKMy89oh70zKU6Ny0eY 1rmrj/8fzdgQrHLlm/ps5vXpzJtG5566zAU4dpH0K0aljDfef6Z7CCWm01ld4HIU eiRFohBvl85yzqR+qUm7WNLexeuO0Vos3KPfpkB4hJHBvyRXrGIN6jwBF3y3IE8B Bg== -----END CERTIFICATE-----Generated at Fri Sep 25 15:54:56 2026 by rpki-client