$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: i09k9QeNk22KCPln/XkUsj5GOj/J5jZvBEb+7uurZCk= Subject key identifier: 8B:D3:B4:11:BC:B5:8B:83:EC:97:8D:93:FC:C5:35:D9:98:BB:D9:B3 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 531616143A1D4A5FF9FAE1A76F5D1B1B0A6D10F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 01AA Signing time: Mon 02 Nov 2026 05:08:41 +0000 Manifest this update: Mon 02 Nov 2026 05:03:41 +0000 Manifest next update: Tue 03 Nov 2026 08:18:41 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 7y2Y/Bh5b5op39iP67NrZ/SPnSkZPneVbLQkqY8QHXo=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 02:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:16:14:3a:1d:4a:5f:f9:fa:e1:a7:6f:5d:1b:1b:0a:6d:10:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Nov 2 05:03:41 2026 GMT Not After : Nov 3 08:18:41 2026 GMT Subject: CN=8BD3B411BCB58B83EC978D93FCC535D998BBD9B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:e7:5d:61:ee:63:fe:12:52:13:38:cb:40: fb:fe:0a:d6:9b:86:3f:01:8f:be:bc:1b:3d:b8:21: 10:61:32:20:fd:98:6b:8c:15:56:a0:86:ef:07:25: 59:e6:cb:c5:00:45:eb:6f:15:d2:ae:9a:34:49:ed: a5:6b:92:02:cf:b3:58:57:58:b1:51:5b:13:fc:9e: 39:7f:8a:3b:ad:29:c6:2a:e5:2c:1e:02:90:fc:27: e5:1b:a9:21:d7:6f:92:54:2f:aa:7b:0a:e5:76:10: d0:15:39:11:14:ab:62:5e:5c:27:ba:3c:a7:01:48: 5c:73:e8:89:bb:a3:18:f1:fd:05:68:2f:4e:d7:dd: ab:ac:ed:49:40:a7:e8:61:d8:66:9e:15:a1:b1:17: 4c:92:e8:7c:76:bf:7c:88:7f:90:3b:09:d4:b8:ce: f7:1d:f4:80:51:46:53:ea:0d:58:b6:5c:ed:3e:11: 1d:87:d4:74:e7:2f:de:4f:44:69:3a:13:90:82:1e: 6e:ab:8d:0a:69:a3:d7:cc:e8:7a:d0:e2:6f:d5:f7: f0:e1:32:a5:29:3e:d2:eb:df:3c:06:09:15:fc:8c: 2b:56:fb:93:18:e0:22:b7:49:1b:9c:13:4a:7b:a5: 71:bd:76:f4:99:b4:2d:b8:99:cd:5f:2b:18:e9:6f: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:B4:11:BC:B5:8B:83:EC:97:8D:93:FC:C5:35:D9:98:BB:D9:B3 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:70:93:8e:2c:67:eb:b6:c9:42:03:db:70:41:c4:30:d5:9d: 2d:9c:1a:1b:b8:12:5a:da:68:48:9d:1c:7b:be:0c:36:26:c1: fc:6b:5b:cf:ca:51:3e:94:db:9d:67:17:db:66:7c:ee:1b:57: f1:7c:6a:33:ee:d8:ef:8d:21:eb:3a:b1:ec:97:b7:99:f5:30: 79:7b:46:11:f0:58:6e:2a:44:75:50:bc:13:33:99:21:4e:35: 39:60:d3:f9:82:57:85:22:fa:5c:cc:a3:d3:24:b3:ed:e7:3b: 4d:b6:c9:5f:12:28:e7:7a:47:ce:89:ba:b6:eb:41:fa:67:2d: 16:97:f6:06:88:85:16:3c:ac:d7:c1:33:41:bf:62:0e:8a:98: 76:6b:a2:ce:5d:3a:33:74:b7:f6:5d:eb:76:62:91:86:23:5e: 79:b1:44:b8:8e:cf:ae:2b:34:8d:27:57:3e:61:0e:f2:4c:a0: 6d:4f:e7:1e:ad:b4:d9:a1:32:89:ba:5e:c5:9d:5d:7a:f0:85: c1:fb:29:a9:2c:93:5e:3c:5b:d5:5b:4a:17:67:da:76:0d:b5: 07:d0:65:e1:76:4f:31:c3:d4:a5:11:5d:c4:b2:60:46:fe:52: ac:bd:03:57:3d:f7:c3:22:83:80:3b:a4:de:58:07:3c:cc:45: 13:af:c1:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUxYWFDodSl/5+uGnb10bGwptEPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjExMDIwNTAzNDFaFw0yNjExMDMwODE4NDFaMDMxMTAvBgNV BAMTKDhCRDNCNDExQkNCNThCODNFQzk3OEQ5M0ZDQzUzNUQ5OThCQkQ5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwguddYe5j/hJSEzjLQPv+Ctab hj8Bj768Gz24IRBhMiD9mGuMFVaghu8HJVnmy8UARetvFdKumjRJ7aVrkgLPs1hX WLFRWxP8njl/ijutKcYq5SweApD8J+UbqSHXb5JUL6p7CuV2ENAVOREUq2JeXCe6 PKcBSFxz6Im7oxjx/QVoL07X3aus7UlAp+hh2GaeFaGxF0yS6Hx2v3yIf5A7CdS4 zvcd9IBRRlPqDVi2XO0+ER2H1HTnL95PRGk6E5CCHm6rjQppo9fM6HrQ4m/V9/Dh MqUpPtLr3zwGCRX8jCtW+5MY4CK3SRucE0p7pXG9dvSZtC24mc1fKxjpbz/tAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi9O0Eby1i4Psl42T/MU12Zi72bMwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABcJOO LGfrtslCA9twQcQw1Z0tnBobuBJa2mhInRx7vgw2JsH8a1vPylE+lNudZxfbZnzu G1fxfGoz7tjvjSHrOrHsl7eZ9TB5e0YR8FhuKkR1ULwTM5khTjU5YNP5gleFIvpc zKPTJLPt5ztNtslfEijnekfOibq260H6Zy0Wl/YGiIUWPKzXwTNBv2IOiph2a6LO XTozdLf2Xet2YpGGI155sUS4js+uKzSNJ1c+YQ7yTKBtT+cerbTZoTKJul7FnV16 8IXB+ympLJNePFvVW0oXZ9p2DbUH0GXhdk8xw9SlEV3EsmBG/lKsvQNXPffDIoOA O6TeWAc8zEUTr8Fb -----END CERTIFICATE-----Generated at Mon Nov 2 11:55:21 2026 by rpki-client