$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft (raw, json) Hash identifier: vKoFMrziciSNf6duRWslIRaUTNO3FaYb65EmDltrono= Subject key identifier: 4C:51:63:C7:37:81:2B:D5:23:DE:7A:D0:15:18:44:C5:EB:13:3F:A3 Authority key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 Certificate issuer: /CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Certificate serial: 65B4BB202E748446EA1568D1091FA1773DE89FDE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft Manifest number: 7A Signing time: Wed 30 Sep 2026 00:09:53 +0000 Manifest this update: Wed 30 Sep 2026 00:04:53 +0000 Manifest next update: Thu 01 Oct 2026 00:25:53 +0000 Files and hashes: 1: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl (hash: bGzseTNhNnUMz8Mu9D5w1kni8fFkAPFRckbbAEgZTxo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 00:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:bb:20:2e:74:84:46:ea:15:68:d1:09:1f:a1:77:3d:e8:9f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Validity Not Before: Sep 30 00:04:53 2026 GMT Not After : Oct 1 00:25:53 2026 GMT Subject: CN=4C5163C737812BD523DE7AD0151844C5EB133FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:58:cb:d5:16:92:cc:9b:8e:9d:9c:03:df:d0: 65:2a:29:94:ed:08:ec:8e:4e:5b:49:4b:d4:7d:22: e7:c8:90:c8:0b:82:57:e4:2d:8d:ce:6d:9d:aa:66: 1e:aa:23:ba:5e:71:9c:9d:f7:f8:71:e8:c1:7f:c0: eb:27:d9:81:51:04:37:65:45:cd:44:38:9f:52:59: dd:a5:7d:df:78:03:87:a2:24:94:a3:dd:ff:1c:85: 55:25:e9:33:1a:cb:74:90:52:02:47:10:76:06:a6: 3a:51:60:67:d0:f6:a8:58:6a:d4:7e:7b:f2:c0:16: 62:b0:f8:a6:09:b0:00:a1:b4:9a:33:50:fb:11:63: 47:5e:39:d0:17:d1:0d:24:e1:2f:05:f8:9c:8a:56: 57:ef:a3:28:3e:bf:b8:d1:f4:a5:b1:e0:f5:a8:30: 83:32:75:fa:b4:a5:4c:da:59:26:8b:0d:d0:b6:ee: 48:7d:a0:5b:ec:eb:11:06:28:a1:85:ae:1a:39:72: 6d:e8:9a:d0:7f:3e:41:bf:30:5e:51:3d:b3:67:df: 51:81:5f:35:9a:27:23:58:58:54:41:a8:fe:5d:28: 14:f9:65:fc:84:39:1e:8a:27:c7:34:24:36:9c:c7: e5:c6:e5:29:da:6d:7c:8d:a4:f5:3d:55:4e:9a:55: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:51:63:C7:37:81:2B:D5:23:DE:7A:D0:15:18:44:C5:EB:13:3F:A3 X509v3 Authority Key Identifier: keyid:57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:68:b6:13:93:7a:37:48:9e:bb:e3:b2:5b:66:f4:14:b5:48: 98:aa:c9:e6:ff:22:e9:82:73:5d:80:5f:76:b7:d6:8e:06:e7: 7c:e0:ec:99:53:d0:42:a2:37:e5:91:8e:47:5a:94:93:a1:67: a3:75:93:5b:03:af:83:5e:6b:d2:d6:00:35:f3:02:db:2c:e7: 8e:94:e0:dd:19:51:ae:90:f9:bd:a6:0b:18:ac:5d:e1:86:57: 5a:80:a7:4c:09:20:07:3d:07:fe:d5:03:b8:0c:37:10:56:1e: 18:a3:69:7a:59:d2:98:fd:85:9c:57:28:76:9a:7b:2c:6b:51: 88:76:20:fb:95:03:39:e5:70:f7:06:12:47:89:38:ed:48:ba: d7:37:95:8c:2b:49:12:dd:25:ae:30:50:75:08:1c:bb:66:97: 41:90:7e:15:7a:4c:12:cc:3d:70:65:9d:51:7c:31:3c:01:f7: 3b:47:35:29:df:72:59:f3:df:6e:27:45:4e:ba:f3:48:a4:bf: 54:0a:0f:e8:7c:3a:52:3c:9f:b4:a3:50:0a:94:7b:9f:df:e7: 4d:e6:07:ae:19:87:59:07:fe:31:81:bc:1a:61:18:94:c7:7a: 84:36:95:4e:ed:4f:ce:35:94:b5:3b:3d:eb:89:89:52:f3:e5: b5:18:85:bb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZbS7IC50hEbqFWjRCR+hdz3on94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0 MTYzMUVBMjAeFw0yNjA5MzAwMDA0NTNaFw0yNjEwMDEwMDI1NTNaMDMxMTAvBgNV BAMTKDRDNTE2M0M3Mzc4MTJCRDUyM0RFN0FEMDE1MTg0NEM1RUIxMzNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzWMvVFpLMm46dnAPf0GUqKZTt COyOTltJS9R9IufIkMgLglfkLY3ObZ2qZh6qI7pecZyd9/hx6MF/wOsn2YFRBDdl Rc1EOJ9SWd2lfd94A4eiJJSj3f8chVUl6TMay3SQUgJHEHYGpjpRYGfQ9qhYatR+ e/LAFmKw+KYJsAChtJozUPsRY0deOdAX0Q0k4S8F+JyKVlfvoyg+v7jR9KWx4PWo MIMydfq0pUzaWSaLDdC27kh9oFvs6xEGKKGFrho5cm3omtB/PkG/MF5RPbNn31GB XzWaJyNYWFRBqP5dKBT5ZfyEOR6KJ8c0JDacx+XG5SnabXyNpPU9VU6aVfFXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTFFjxzeBK9Uj3nrQFRhExesTP6MwHwYDVR0j BBgwFoAUVw54SKMoRYLNbw8MA199m0FjHqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQz NjIyLzEvNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0MTYzMUVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMw MzVGN0Q5QjQxNjMxRUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBiNjU0NWZjLTllYWMtNGZkYy1hMmVjLWM3MDJkNzRkMzYyMi8xLzU3MEU3ODQ4 QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaaLYT k3o3SJ6747JbZvQUtUiYqsnm/yLpgnNdgF92t9aOBud84OyZU9BCojflkY5HWpST oWejdZNbA6+DXmvS1gA18wLbLOeOlODdGVGukPm9pgsYrF3hhldagKdMCSAHPQf+ 1QO4DDcQVh4Yo2l6WdKY/YWcVyh2mnssa1GIdiD7lQM55XD3BhJHiTjtSLrXN5WM K0kS3SWuMFB1CBy7ZpdBkH4VekwSzD1wZZ1RfDE8Afc7RzUp33JZ899uJ0VOuvNI pL9UCg/ofDpSPJ+0o1AKlHuf3+dN5geuGYdZB/4xgbwaYRiUx3qENpVO7U/ONZS1 Oz3riYlS8+W1GIW7 -----END CERTIFICATE-----Generated at Wed Sep 30 15:09:45 2026 by rpki-client