$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: JNKn9Un5y6POk4PfSFVZBbqjoCPQqYGS1IuXRhsUJoY= Subject key identifier: 54:C3:91:29:2C:4B:AD:29:0E:B5:5F:58:12:2C:62:A1:71:4E:9E:1E Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 201BACA0CE184F23C14B438BDF4E8FC2F5292DAC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 031C Signing time: Wed 28 Oct 2026 15:00:25 +0000 Manifest this update: Wed 28 Oct 2026 14:55:25 +0000 Manifest next update: Thu 29 Oct 2026 16:30:25 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: U+akvxgC+rcOwbVyz5I+3G2oV3bRHZbcmh46S8lqzk4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1b:ac:a0:ce:18:4f:23:c1:4b:43:8b:df:4e:8f:c2:f5:29:2d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Oct 28 14:55:25 2026 GMT Not After : Oct 29 16:30:25 2026 GMT Subject: CN=54C391292C4BAD290EB55F58122C62A1714E9E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:36:d0:14:57:bd:16:f8:dc:aa:62:fb:bc: 40:cd:00:74:5c:63:a5:af:25:38:6c:32:a7:50:72: 4e:04:05:4e:45:53:30:a7:f1:f0:2f:96:33:29:71: a1:cf:af:9a:82:32:18:45:4c:8b:80:f3:ba:c4:21: db:fa:a7:d3:f5:44:15:30:a6:84:85:43:4a:82:6d: 52:e8:63:73:81:01:ac:7f:65:30:19:6e:80:95:ef: aa:92:96:ea:83:c0:f8:9f:f2:57:32:7b:ff:44:68: fa:b5:65:55:9c:bd:8d:ae:7f:a4:fc:66:69:31:20: 7d:fd:98:0d:e0:7e:52:2e:dd:1a:2d:eb:2e:25:d2: ef:7a:fa:b8:87:bb:7f:8e:33:e4:47:cd:bc:66:7a: 2f:23:bf:14:96:40:2a:e4:44:3e:64:79:ac:8d:32: 12:68:fd:75:a4:25:87:cd:86:09:c0:1f:18:7f:6f: a5:2a:34:e2:c3:9a:11:5f:bd:c8:1f:09:bb:b4:86: b2:bd:01:09:66:1a:c8:12:c4:3d:31:f2:3f:8c:dc: 43:aa:66:f4:6b:e7:70:f4:88:0f:f4:2f:64:7b:42: 9a:15:a7:1a:71:fc:eb:17:f3:9f:5a:50:2f:20:ef: e3:5e:b0:8b:77:a5:9e:e1:25:5c:f1:43:f8:2d:6b: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C3:91:29:2C:4B:AD:29:0E:B5:5F:58:12:2C:62:A1:71:4E:9E:1E X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:67:0b:48:42:8f:db:99:0b:6b:16:13:b5:7a:78:f9:70:b3: 92:c3:3f:73:a8:49:08:53:6d:57:95:1f:ae:6a:7f:a5:3b:6b: ad:f0:b7:7b:97:f7:f9:7f:24:76:b9:b4:bf:d5:6c:6a:d4:69: 44:cb:98:d1:73:d2:38:c1:0d:fe:c6:9f:67:98:b6:22:7d:f8: fe:ba:3f:cf:3d:88:48:fc:1b:56:67:d6:5b:4f:5b:17:d4:d3: 92:16:06:da:5d:04:e8:d3:cd:e6:cc:2e:ec:62:67:cd:e5:68: 6f:cb:a5:98:10:06:27:08:7d:46:c2:fa:20:d2:d1:2c:af:d5: 23:e2:61:8a:13:17:14:96:ec:68:3e:90:f1:20:b9:5d:3e:ef: 2b:b3:34:17:21:be:d1:9e:b8:64:1d:68:88:7b:17:f4:60:eb: c8:0e:d4:e8:3e:92:07:f7:7c:20:7f:7d:ac:64:32:6f:69:54: da:e2:2a:79:de:31:ea:02:e9:7c:dc:39:c3:57:ac:86:44:30: 86:a4:81:c2:45:66:3c:90:20:37:a7:be:49:e2:eb:09:d7:ca: 65:b5:5f:ae:a5:3d:fb:9b:38:d0:e7:a3:6a:9c:18:86:5d:b1: 4b:d2:a0:4b:0e:cc:16:32:76:ef:6b:fb:cc:65:7f:d6:64:44: 10:2a:4b:cf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIBusoM4YTyPBS0OL306PwvUpLawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjEwMjgxNDU1MjVaFw0yNjEwMjkxNjMwMjVaMDMxMTAvBgNV BAMTKDU0QzM5MTI5MkM0QkFEMjkwRUI1NUY1ODEyMkM2MkExNzE0RTlFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVKTbQFFe9FvjcqmL7vEDNAHRc Y6WvJThsMqdQck4EBU5FUzCn8fAvljMpcaHPr5qCMhhFTIuA87rEIdv6p9P1RBUw poSFQ0qCbVLoY3OBAax/ZTAZboCV76qSluqDwPif8lcye/9EaPq1ZVWcvY2uf6T8 ZmkxIH39mA3gflIu3Rot6y4l0u96+riHu3+OM+RHzbxmei8jvxSWQCrkRD5keayN MhJo/XWkJYfNhgnAHxh/b6UqNOLDmhFfvcgfCbu0hrK9AQlmGsgSxD0x8j+M3EOq ZvRr53D0iA/0L2R7QpoVpxpx/OsX859aUC8g7+NesIt3pZ7hJVzxQ/gta3TpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVMORKSxLrSkOtV9YEixioXFOnh4wHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUZwtI Qo/bmQtrFhO1enj5cLOSwz9zqEkIU21XlR+uan+lO2ut8Ld7l/f5fyR2ubS/1Wxq 1GlEy5jRc9I4wQ3+xp9nmLYiffj+uj/PPYhI/BtWZ9ZbT1sX1NOSFgbaXQTo083m zC7sYmfN5Whvy6WYEAYnCH1Gwvog0tEsr9Uj4mGKExcUluxoPpDxILldPu8rszQX Ib7RnrhkHWiIexf0YOvIDtToPpIH93wgf32sZDJvaVTa4ip53jHqAul83DnDV6yG RDCGpIHCRWY8kCA3p75J4usJ18pltV+upT37mzjQ56NqnBiGXbFL0qBLDswWMnbv a/vMZX/WZEQQKkvP -----END CERTIFICATE-----Generated at Thu Oct 29 01:32:35 2026 by rpki-client