$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: pJsSlDK189wVSJxxVS59N1V0xLZiAqnhZkCaOHnilpo= Subject key identifier: 9E:10:11:A1:0E:6B:3A:10:E0:92:C7:95:2A:11:72:47:E9:01:5B:92 Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 27A82FF8307EF7B5CEF829E469AB6BFF8CA75242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 05A2 Signing time: Sat 14 Nov 2026 10:48:40 +0000 Manifest this update: Sat 14 Nov 2026 10:43:40 +0000 Manifest next update: Sun 15 Nov 2026 14:31:40 +0000 Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) 2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) 4: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: RGKTTqjAueB0mKFbE7a5SPu7OlvY9g8KcKcm58OwG/A=) 5: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 6: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 7: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 14:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a8:2f:f8:30:7e:f7:b5:ce:f8:29:e4:69:ab:6b:ff:8c:a7:52:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Nov 14 10:43:40 2026 GMT Not After : Nov 15 14:31:40 2026 GMT Subject: CN=9E1011A10E6B3A10E092C7952A117247E9015B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:7a:70:07:e0:21:c9:d8:ec:93:f6:fa:15: 3f:c4:29:3e:bb:19:5b:5f:6d:fa:40:1e:57:b3:ff: f4:d8:68:6d:6a:39:60:32:2a:18:af:ca:be:cc:06: 1f:52:61:8d:3e:10:f6:d7:3b:86:a4:4b:85:8d:5a: a7:9f:3d:dc:68:4e:71:9c:31:56:f9:70:07:2c:0c: 00:a7:aa:db:29:d9:2a:6c:c2:57:68:5f:5e:ec:56: da:4f:46:9a:1d:73:ce:73:cb:fc:fc:41:7e:15:8d: 53:2e:1e:06:18:5d:c6:f4:11:6a:f3:ed:07:cc:0e: 23:89:0a:09:71:28:fa:b4:69:1d:03:35:36:6d:c4: 34:16:83:e9:ea:8b:44:52:d1:a4:10:c0:b2:bb:1f: 5a:c2:9a:e6:52:64:1e:36:1d:3b:ca:6a:a0:78:69: ee:56:c5:0e:33:5a:9e:43:e5:73:bf:bc:66:70:eb: 55:0e:9b:cc:18:c9:90:2b:11:b1:8c:16:c3:9d:25: 01:ae:d6:b9:62:c3:0b:b0:43:a0:88:07:65:fb:f1: 3d:b1:52:0a:0a:f3:30:1c:8b:34:e6:10:38:7a:ce: e8:0d:ee:95:ae:73:ed:0d:9f:5c:4c:1d:5d:1b:db: 0f:c9:c2:90:8d:18:8a:17:df:74:51:33:d4:7f:b0: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:11:A1:0E:6B:3A:10:E0:92:C7:95:2A:11:72:47:E9:01:5B:92 X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:26:c4:54:57:6a:63:ac:11:af:44:2b:d3:9a:8f:32:2c:7a: 97:fc:95:ab:b2:f4:aa:15:be:05:aa:38:a1:87:d2:9d:6c:f7: e4:20:a5:b2:64:36:7f:3c:96:16:fe:bb:51:38:ba:a1:4b:9b: 42:5d:95:5f:78:fe:ad:bc:29:2f:e1:c5:1e:c7:5e:fa:1c:12: c4:6c:8a:5d:9e:93:f3:f5:8c:27:d4:75:c0:d5:30:f0:45:de: 29:fe:5a:d4:32:f3:a0:98:48:bd:23:90:1b:f5:0a:58:95:9b: 10:f0:45:98:68:ad:36:d7:fc:8d:6a:06:ba:21:6f:5e:09:0e: fc:a5:91:d1:98:82:fa:73:a6:b3:66:27:f6:54:b6:16:f2:74: 86:9b:60:96:e3:d8:45:10:a3:a6:10:32:69:93:8f:1d:4d:22: 69:44:03:e9:55:2f:41:29:d2:a5:03:f3:30:39:a5:bb:5d:21: c3:cf:f6:cd:6a:85:70:26:10:9f:5d:9e:d5:5b:bb:5f:87:6d: 03:0a:9b:77:d6:9f:95:af:62:27:86:ec:15:45:54:97:ad:3a: 32:3f:92:5f:d1:7b:1b:f9:30:94:f0:1c:38:7b:92:b7:80:50: a5:84:2a:8b:a4:fe:a5:61:16:dd:c5:0b:88:b9:30:39:8b:ee: 60:d4:67:72 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUJ6gv+DB+97XO+Cnkaatr/4ynUkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjExMTQxMDQzNDBaFw0yNjExMTUxNDMxNDBaMDMxMTAvBgNV BAMTKDlFMTAxMUExMEU2QjNBMTBFMDkyQzc5NTJBMTE3MjQ3RTkwMTVCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTHpwB+Ahydjsk/b6FT/EKT67 GVtfbfpAHlez//TYaG1qOWAyKhivyr7MBh9SYY0+EPbXO4akS4WNWqefPdxoTnGc MVb5cAcsDACnqtsp2SpswldoX17sVtpPRpodc85zy/z8QX4VjVMuHgYYXcb0EWrz 7QfMDiOJCglxKPq0aR0DNTZtxDQWg+nqi0RS0aQQwLK7H1rCmuZSZB42HTvKaqB4 ae5WxQ4zWp5D5XO/vGZw61UOm8wYyZArEbGMFsOdJQGu1rliwwuwQ6CIB2X78T2x UgoK8zAcizTmEDh6zugN7pWuc+0Nn1xMHV0b2w/JwpCNGIoX33RRM9R/sDqRAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUnhARoQ5rOhDgkseVKhFyR+kBW5IwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYJsRUV2pjrBGvRCvTmo8yLHqX/JWrsvSq Fb4Fqjihh9KdbPfkIKWyZDZ/PJYW/rtROLqhS5tCXZVfeP6tvCkv4cUex176HBLE bIpdnpPz9Ywn1HXA1TDwRd4p/lrUMvOgmEi9I5Ab9QpYlZsQ8EWYaK021/yNaga6 IW9eCQ78pZHRmIL6c6azZif2VLYW8nSGm2CW49hFEKOmEDJpk48dTSJpRAPpVS9B KdKlA/MwOaW7XSHDz/bNaoVwJhCfXZ7VW7tfh20DCpt31p+Vr2InhuwVRVSXrToy P5Jf0Xsb+TCU8Bw4e5K3gFClhCqLpP6lYRbdxQuIuTA5i+5g1Gdy -----END CERTIFICATE-----Generated at Sun Nov 15 00:35:58 2026 by rpki-client