$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: Yu+jCoWT3QwC/jgR985JKUkAPTsdyMFJbxNFBKFKNkY= Subject key identifier: BF:35:52:95:5B:CD:B4:8E:0A:AD:8F:1A:83:6A:2F:EE:40:2B:5B:B0 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 40E56075E2ABC02F24C8686755C0BAAE9CB3184D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 01A7 Signing time: Fri 30 Oct 2026 23:16:17 +0000 Manifest this update: Fri 30 Oct 2026 23:11:17 +0000 Manifest next update: Sun 01 Nov 2026 00:50:17 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: WGsNrAeXe8lbgjTzTqxb6m88+YUaYM7rzCu86rLmxS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 23:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:60:75:e2:ab:c0:2f:24:c8:68:67:55:c0:ba:ae:9c:b3:18:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Oct 30 23:11:17 2026 GMT Not After : Nov 1 00:50:17 2026 GMT Subject: CN=BF3552955BCDB48E0AAD8F1A836A2FEE402B5BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:e3:61:bc:1c:97:21:7b:0b:46:39:99:a3: 00:a0:72:33:ad:72:ba:20:45:58:45:ba:63:df:54: 51:84:a1:84:bb:24:ab:ad:83:53:b1:f3:0c:51:a1: 3a:be:1a:96:0b:07:a7:35:8c:f5:e7:77:3b:6f:66: ff:25:cb:86:e0:70:cd:dd:b6:da:1b:bf:f8:48:7a: 34:46:57:f7:8c:6d:74:67:7f:8f:d5:a0:f0:67:14: 15:34:99:bf:d8:17:8b:0d:49:82:f5:2c:95:e6:c1: 34:80:06:34:81:25:2d:19:7e:a6:bf:34:ec:20:18: 3b:a1:63:2c:f7:9a:b5:13:50:a5:09:eb:e5:a1:88: 50:68:30:34:25:2b:43:16:94:51:a8:44:15:78:e6: ff:05:7a:d9:e8:fb:e8:cc:05:d4:3d:a2:b5:6b:3d: 18:e1:91:bf:64:27:0e:a9:b4:da:e3:d9:65:c6:8d: 3d:ce:c3:0c:a0:83:00:55:3f:87:a6:7c:3b:c6:fc: 0b:53:9f:0d:41:ec:c3:dc:2d:84:7c:0b:c6:ad:aa: 5a:f4:01:12:4c:0d:28:f4:bf:58:14:48:e3:db:c9: 12:6c:1d:53:ac:d5:0c:12:90:37:ea:9c:ce:e0:60: ba:ab:4a:06:73:0b:d0:47:89:4b:1b:1e:97:c6:7d: 68:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:35:52:95:5B:CD:B4:8E:0A:AD:8F:1A:83:6A:2F:EE:40:2B:5B:B0 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d7:72:a8:2f:74:c5:e6:d0:7d:b0:a7:87:87:0a:2c:1a:44: bb:6a:b7:96:76:6f:42:3d:33:23:12:6f:7c:d9:c5:8d:c9:1f: 9a:32:87:f8:e1:e8:53:f1:fe:d2:1d:19:8c:4e:e2:43:74:8f: f1:79:65:38:ff:66:5b:67:ca:63:b1:5d:73:b0:8a:f1:e6:92: 39:32:ed:5b:6c:d5:d6:60:75:62:dc:e0:e4:c8:df:c4:4e:df: e4:c2:9e:02:f0:bd:8f:a8:e0:ef:68:2a:43:7b:17:d1:2d:4d: 92:0b:00:2c:3a:fb:2b:ee:d1:11:bd:df:ad:e7:55:a7:b6:eb: dd:08:75:db:97:53:da:49:25:c8:1f:4d:a6:0c:d4:ec:ab:1c: 34:df:c8:70:e4:73:26:e7:1c:f2:df:3a:92:b1:5f:77:a4:7d: 38:cc:e9:4f:7d:bc:bd:21:72:1b:14:c5:b6:6a:ed:0f:b1:82: 70:a5:20:13:88:bf:4a:cb:1a:7e:95:30:e9:49:d5:cb:82:12: de:44:ed:2f:7f:30:d9:72:21:d0:9a:95:40:1a:ce:3f:ee:ec: 4f:44:6c:7f:3c:85:20:6d:7a:06:66:92:e4:25:8a:4d:39:6a: e9:04:ed:a5:61:38:ea:89:95:47:66:d0:1a:71:29:84:d0:e6: 27:fc:15:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQOVgdeKrwC8kyGhnVcC6rpyzGE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjEwMzAyMzExMTdaFw0yNjExMDEwMDUwMTdaMDMxMTAvBgNV BAMTKEJGMzU1Mjk1NUJDREI0OEUwQUFEOEYxQTgzNkEyRkVFNDAyQjVCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkp+NhvByXIXsLRjmZowCgcjOt crogRVhFumPfVFGEoYS7JKutg1Ox8wxRoTq+GpYLB6c1jPXndztvZv8ly4bgcM3d ttobv/hIejRGV/eMbXRnf4/VoPBnFBU0mb/YF4sNSYL1LJXmwTSABjSBJS0Zfqa/ NOwgGDuhYyz3mrUTUKUJ6+WhiFBoMDQlK0MWlFGoRBV45v8Fetno++jMBdQ9orVr PRjhkb9kJw6ptNrj2WXGjT3OwwyggwBVP4emfDvG/AtTnw1B7MPcLYR8C8atqlr0 ARJMDSj0v1gUSOPbyRJsHVOs1QwSkDfqnM7gYLqrSgZzC9BHiUsbHpfGfWi1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvzVSlVvNtI4KrY8ag2ov7kArW7AwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW13Ko L3TF5tB9sKeHhwosGkS7areWdm9CPTMjEm982cWNyR+aMof44ehT8f7SHRmMTuJD dI/xeWU4/2ZbZ8pjsV1zsIrx5pI5Mu1bbNXWYHVi3ODkyN/ETt/kwp4C8L2PqODv aCpDexfRLU2SCwAsOvsr7tERvd+t51WntuvdCHXbl1PaSSXIH02mDNTsqxw038hw 5HMm5xzy3zqSsV93pH04zOlPfby9IXIbFMW2au0PsYJwpSATiL9Kyxp+lTDpSdXL ghLeRO0vfzDZciHQmpVAGs4/7uxPRGx/PIUgbXoGZpLkJYpNOWrpBO2lYTjqiZVH ZtAacSmE0OYn/BXS -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:45 2026 by rpki-client