$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: G/m6wKV21CpKUHu53ulNvAYQPU4DTwrnhkuyEc2oiUc= Subject key identifier: 36:93:C4:80:ED:A2:56:8D:67:34:A2:76:88:9E:BB:42:28:6D:A3:1A Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 6DEA8DCFB622E05EAF59527926E61F01E0CB37EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 0607 Signing time: Fri 04 Sep 2026 08:46:27 +0000 Manifest this update: Fri 04 Sep 2026 08:41:27 +0000 Manifest next update: Sat 05 Sep 2026 10:43:27 +0000 Files and hashes: 1: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 2: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 3: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 4: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 5: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 6: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 7: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 8: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 9: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 10: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 11: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 12: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 13: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 14: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 15: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 16: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 17: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 18: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 19: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 20: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 21: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 22: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 23: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 24: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: 3IHwpw+ba2YFchGOy+yMybdoVtfhAjg6QPvi2AxEXI4=) 25: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 26: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 27: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 28: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ea:8d:cf:b6:22:e0:5e:af:59:52:79:26:e6:1f:01:e0:cb:37:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Sep 4 08:41:27 2026 GMT Not After : Sep 5 10:43:27 2026 GMT Subject: CN=3693C480EDA2568D6734A276889EBB42286DA31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:59:45:80:3f:f1:4c:e0:e9:db:09:cc:04: d4:32:3f:42:57:ec:6f:6b:83:91:50:44:44:e2:28: 41:48:29:f6:72:17:d2:3e:f6:00:80:01:ed:2a:a8: a1:6f:f3:bf:ec:da:80:d2:54:97:39:9b:75:2b:a2: 45:5e:10:15:33:66:ea:5a:b8:77:23:b2:47:0b:96: 1c:e0:46:b0:51:e2:cb:65:cb:05:7d:99:bc:0f:ab: f9:08:db:0b:2c:02:e3:ea:c0:67:f6:ac:73:7d:30: 12:22:da:eb:af:c4:8b:f3:2d:ff:3a:b8:b4:d7:d2: a3:35:7c:1f:9a:7d:59:53:e9:35:13:fe:96:de:aa: 46:34:10:10:89:06:2d:d1:04:cb:bb:c5:dd:f6:d7: 49:d9:ed:f8:80:cf:1c:b6:17:72:54:3d:ce:21:f2: d7:f1:3f:49:ea:24:c6:9d:9b:24:cd:66:12:2d:d3: 3b:35:7c:17:e9:41:21:15:ab:5b:f4:65:85:6a:54: 1b:44:7d:1c:40:a4:d2:82:68:ee:ac:cc:34:4f:26: d7:df:bb:4a:d6:38:5e:af:4e:fb:f6:f9:30:2a:ef: 2f:e1:53:7a:8b:01:6a:37:95:01:1b:c1:2b:b7:ae: e5:98:3d:9a:16:86:e2:3d:e3:35:8b:9c:d0:db:36: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:93:C4:80:ED:A2:56:8D:67:34:A2:76:88:9E:BB:42:28:6D:A3:1A X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:da:c1:99:ec:dd:4c:93:2e:df:59:58:ac:02:75:be:44:03: 1b:dc:8d:52:44:7a:55:17:13:17:08:d5:38:59:95:ee:67:c7: 57:26:66:69:2e:3f:73:b2:2a:c1:91:89:e6:1d:48:e1:bf:87: 8c:e2:30:79:23:e9:af:ce:99:80:1c:20:7e:66:87:b0:59:76: 32:c0:10:8e:1d:3d:2e:ec:ae:8f:54:94:fe:58:df:60:e9:2a: f3:39:3d:44:30:75:b8:cc:92:a2:92:b5:cd:71:84:a1:b6:b4: 8f:ab:cc:26:47:8f:0b:04:bc:84:12:a9:ea:91:71:35:3f:27: 4a:ab:ab:21:10:7d:8c:68:ec:4f:f6:43:5e:7a:c5:a9:13:1d: 96:1c:c0:6b:bc:ad:f5:a7:a6:89:e3:02:b6:f2:75:a7:fc:2e: b0:b9:59:ef:c4:b8:b5:96:9a:5b:82:60:43:67:51:e2:95:b7: 81:ba:9b:11:2c:a3:f5:61:9a:92:44:b7:c5:25:b4:22:a7:07: b4:20:0e:52:6d:81:b1:11:19:5a:1a:9f:6c:6c:77:a6:79:6d: 03:ec:2f:fe:76:b9:c8:c2:bc:2a:77:97:4d:93:19:80:95:7a: 19:07:33:7e:3c:86:fa:7b:97:07:1f:9e:4f:9f:c2:2f:31:03: 0e:8d:0c:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbeqNz7Yi4F6vWVJ5JuYfAeDLN+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA5MDQwODQxMjdaFw0yNjA5MDUxMDQzMjdaMDMxMTAvBgNV BAMTKDM2OTNDNDgwRURBMjU2OEQ2NzM0QTI3Njg4OUVCQjQyMjg2REEzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBx1lFgD/xTODp2wnMBNQyP0JX 7G9rg5FQRETiKEFIKfZyF9I+9gCAAe0qqKFv87/s2oDSVJc5m3UrokVeEBUzZupa uHcjskcLlhzgRrBR4stlywV9mbwPq/kI2wssAuPqwGf2rHN9MBIi2uuvxIvzLf86 uLTX0qM1fB+afVlT6TUT/pbeqkY0EBCJBi3RBMu7xd3210nZ7fiAzxy2F3JUPc4h 8tfxP0nqJMadmyTNZhIt0zs1fBfpQSEVq1v0ZYVqVBtEfRxApNKCaO6szDRPJtff u0rWOF6vTvv2+TAq7y/hU3qLAWo3lQEbwSu3ruWYPZoWhuI94zWLnNDbNuynAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNpPEgO2iVo1nNKJ2iJ67QihtoxowHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdrBmezdTJMu31lYrAJ1 vkQDG9yNUkR6VRcTFwjVOFmV7mfHVyZmaS4/c7IqwZGJ5h1I4b+HjOIweSPpr86Z gBwgfmaHsFl2MsAQjh09Luyuj1SU/ljfYOkq8zk9RDB1uMySopK1zXGEoba0j6vM JkePCwS8hBKp6pFxNT8nSqurIRB9jGjsT/ZDXnrFqRMdlhzAa7yt9aemieMCtvJ1 p/wusLlZ78S4tZaaW4JgQ2dR4pW3gbqbESyj9WGakkS3xSW0IqcHtCAOUm2BsREZ WhqfbGx3pnltA+wv/na5yMK8KneXTZMZgJV6GQczfjyG+nuXBx+eT5/CLzEDDo0M 7Q== -----END CERTIFICATE-----Generated at Fri Sep 4 18:57:13 2026 by rpki-client