$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: ndIGty/3+frcBCJ0t2AwHQmszftT9Rn+pO/94yb2pXY= Subject key identifier: 90:42:5A:76:DA:97:15:C4:1D:D6:79:DB:21:06:48:4E:AE:3B:D1:0E Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 373FFB7CF29BB78E853E7C8D19E57B4ACF5E8063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 055C Signing time: Wed 23 Sep 2026 17:42:51 +0000 Manifest this update: Wed 23 Sep 2026 17:37:51 +0000 Manifest next update: Thu 24 Sep 2026 18:07:51 +0000 Files and hashes: 1: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) 2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 4: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) 5: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: zkghcZFA/lx0a7XA09PJDmpK3mVAXpEHNd3z7kK4wi0=) 6: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 7: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3f:fb:7c:f2:9b:b7:8e:85:3e:7c:8d:19:e5:7b:4a:cf:5e:80:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Sep 23 17:37:51 2026 GMT Not After : Sep 24 18:07:51 2026 GMT Subject: CN=90425A76DA9715C41DD679DB2106484EAE3BD10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:74:9e:da:86:eb:11:03:7e:f6:15:12:ec: bb:60:b3:66:fd:66:04:a9:0f:a4:a3:ed:f9:c5:28: 41:01:21:97:ec:7e:70:10:e1:90:b4:00:a2:44:75: df:e7:f0:d7:e0:e3:d6:09:3b:17:7a:d6:59:44:e0: b3:0d:73:00:4c:70:19:a6:88:45:7e:00:32:6f:1d: d3:74:0d:46:da:25:71:e9:ac:65:07:36:79:1a:43: ec:68:5d:21:9c:6f:54:c4:ee:08:99:d5:86:ec:0c: 85:e0:4e:1b:87:78:c6:40:08:4e:fa:c0:44:f8:b5: 88:bc:b0:6a:0d:5e:ab:51:f4:bf:c3:34:80:f6:5a: 9f:0d:04:9e:ec:a2:68:7d:e4:e4:b7:e6:33:ab:ce: 96:0b:fe:14:40:bb:b1:b3:6f:2f:40:c4:55:95:24: dd:9f:18:74:dd:43:35:be:0c:c9:84:6c:db:24:57: e7:87:47:d7:56:a6:e4:88:20:a0:ff:90:48:fc:1a: 53:0d:6d:86:4d:6c:8d:a8:68:d5:61:e7:d6:f1:16: 0b:7f:a9:65:13:5b:45:e0:ee:7e:0d:27:ed:47:c6: 34:7c:d4:d9:36:7c:71:e5:97:12:51:4a:9e:70:72: 90:0d:11:e5:40:9c:d2:c8:57:30:cc:31:66:30:fc: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:5A:76:DA:97:15:C4:1D:D6:79:DB:21:06:48:4E:AE:3B:D1:0E X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d0:7d:f9:b7:66:e0:cb:a0:4b:0b:2a:ee:d6:9c:17:60:06: db:85:a9:59:f7:49:0a:94:cc:f3:bd:ff:6b:65:d7:ed:73:e9: b3:1c:6a:16:b6:35:df:c0:20:7a:13:24:71:da:de:75:3e:7e: 7f:31:87:f3:7a:3a:3d:56:2f:f1:c3:ed:0b:29:f1:e0:8e:bd: 00:c0:38:7c:9c:c6:25:27:1e:b7:8f:d1:9d:bf:6b:b4:c4:3b: 8b:e9:23:28:62:e3:13:06:74:50:59:6c:53:03:aa:0c:38:06: 84:4f:7c:fb:ae:c3:b8:cf:64:c4:af:d7:80:49:30:2a:b1:03: f2:b3:5c:2f:4b:86:43:5a:f1:f3:e8:51:e8:b5:30:35:ff:86: ad:35:04:60:9c:68:fd:e8:8e:3e:4f:7d:af:5f:b7:b4:a9:13: 68:1b:e6:08:8e:58:c2:3b:e0:3f:a1:89:9b:92:5d:cb:b6:c8: 3c:47:93:26:c5:66:cf:1d:0b:aa:1b:62:04:6b:82:d4:59:da: 16:05:29:84:46:a9:50:76:63:97:5b:0b:68:b0:94:e6:06:da: 6f:77:ae:c9:c1:a9:ab:ad:3d:e7:a1:53:21:1c:d2:ad:2c:eb: f4:57:f7:c6:b0:0a:22:ef:a8:8e:16:03:a8:42:b4:72:86:c1: 01:02:a7:18 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUNz/7fPKbt46FPnyNGeV7Ss9egGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjA5MjMxNzM3NTFaFw0yNjA5MjQxODA3NTFaMDMxMTAvBgNV BAMTKDkwNDI1QTc2REE5NzE1QzQxREQ2NzlEQjIxMDY0ODRFQUUzQkQxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcanSe2obrEQN+9hUS7Ltgs2b9 ZgSpD6Sj7fnFKEEBIZfsfnAQ4ZC0AKJEdd/n8Nfg49YJOxd61llE4LMNcwBMcBmm iEV+ADJvHdN0DUbaJXHprGUHNnkaQ+xoXSGcb1TE7giZ1YbsDIXgThuHeMZACE76 wET4tYi8sGoNXqtR9L/DNID2Wp8NBJ7somh95OS35jOrzpYL/hRAu7Gzby9AxFWV JN2fGHTdQzW+DMmEbNskV+eHR9dWpuSIIKD/kEj8GlMNbYZNbI2oaNVh59bxFgt/ qWUTW0Xg7n4NJ+1HxjR81Nk2fHHllxJRSp5wcpANEeVAnNLIVzDMMWYw/PtdAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUkEJadtqXFcQd1nnbIQZITq470Q4wHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf0H35t2bgy6BLCyru1pwXYAbbhalZ90kK lMzzvf9rZdftc+mzHGoWtjXfwCB6EyRx2t51Pn5/MYfzejo9Vi/xw+0LKfHgjr0A wDh8nMYlJx63j9Gdv2u0xDuL6SMoYuMTBnRQWWxTA6oMOAaET3z7rsO4z2TEr9eA STAqsQPys1wvS4ZDWvHz6FHotTA1/4atNQRgnGj96I4+T32vX7e0qRNoG+YIjljC O+A/oYmbkl3Ltsg8R5MmxWbPHQuqG2IEa4LUWdoWBSmERqlQdmOXWwtosJTmBtpv d67JwamrrT3noVMhHNKtLOv0V/fGsAoi76iOFgOoQrRyhsEBAqcY -----END CERTIFICATE-----Generated at Wed Sep 23 23:00:31 2026 by rpki-client