$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: WoA/wifH2wZZ1sqiP+U/0TuXCePhmgnT6vq3gTDw7jw= Subject key identifier: FE:4C:8A:84:AB:BE:A3:11:EF:C4:78:B2:1B:33:4D:1D:B0:1D:08:84 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 2EDC0189D4694C59800FBFDA89149F664446D60C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 0158 Signing time: Fri 04 Sep 2026 09:32:42 +0000 Manifest this update: Fri 04 Sep 2026 09:27:42 +0000 Manifest next update: Sat 05 Sep 2026 12:32:42 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: /ew5iXAeLo5DVTbYZ0JdpR35rE32ZL4QLtR1K0wzK6I=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:01:89:d4:69:4c:59:80:0f:bf:da:89:14:9f:66:44:46:d6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Sep 4 09:27:42 2026 GMT Not After : Sep 5 12:32:42 2026 GMT Subject: CN=FE4C8A84ABBEA311EFC478B21B334D1DB01D0884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:3a:d5:c7:14:1b:ca:1a:47:58:27:cf:13: 3b:54:1a:9d:22:ca:e4:6e:39:13:d3:f1:a2:49:4a: c8:1c:8d:b5:b9:9e:b1:46:8e:c7:4e:35:77:fa:86: 1c:44:b2:da:90:8d:87:b8:51:f3:ee:c9:08:3f:a5: 64:df:cb:ab:28:72:71:50:98:bf:c6:e1:ea:86:1d: 62:37:81:8e:ea:85:19:89:b2:b3:07:14:ee:a1:f4: 4a:40:5a:96:12:77:02:55:96:50:c9:a2:40:55:2b: 43:62:c9:a8:73:ff:84:8d:5c:fa:5e:ca:50:5c:8f: 5c:ac:82:0e:69:3f:cd:63:e7:48:90:77:54:d1:75: 46:25:31:a7:2f:0a:cf:49:62:6e:49:10:86:d0:47: a2:26:d4:07:ab:2f:53:27:f6:4c:59:d9:ca:17:bd: 88:48:19:db:75:d3:45:07:b8:f9:8a:5b:64:9f:61: 38:50:f4:d3:72:f1:3f:3a:db:e8:7d:38:bf:0d:59: 7d:ea:4c:92:dc:24:7f:21:53:cc:e8:16:4f:ac:eb: ce:9f:3b:62:1e:aa:8a:49:d9:44:44:8f:df:75:15: 46:ba:df:33:08:f1:95:4c:ee:70:25:e0:d9:d2:e1: ac:fb:f6:23:b9:f0:15:f3:ca:0a:cc:fb:f7:3e:08: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4C:8A:84:AB:BE:A3:11:EF:C4:78:B2:1B:33:4D:1D:B0:1D:08:84 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:54:2e:a6:10:fa:10:bf:c9:2e:62:28:0c:cc:3e:44:36:91: d0:d5:b7:5a:15:e4:1a:e1:13:05:e4:57:29:84:aa:a5:d0:48: 62:23:cf:69:3a:2a:c9:cd:fa:40:aa:cf:bd:e8:dc:ee:6b:b6: e5:2f:ff:f8:df:7d:78:3f:aa:02:d9:76:bb:ec:c3:71:e6:a1: 10:df:7d:c8:bc:68:fc:54:ce:e0:83:4f:ea:53:ac:d6:8e:c8: c6:cc:8e:34:95:34:8a:29:13:a8:3a:0a:cb:a9:03:0f:ca:bf: bc:b5:b6:ed:1f:eb:87:34:ce:5a:9b:87:64:e6:ae:5d:32:9a: 86:cb:d6:34:45:4d:1d:6e:bf:e9:86:90:93:68:02:44:6d:33: 0c:25:10:a8:3f:3b:dd:c6:84:81:a0:5d:a6:6c:6a:2e:92:60: 4e:de:3a:1c:6d:78:05:1d:f3:ac:a6:71:0a:12:38:df:05:3e: 60:43:58:bd:16:26:3b:12:82:0c:5b:e1:3f:e4:67:f4:63:1c: af:ef:cd:a8:a2:0f:6a:83:b5:93:b6:36:cd:05:f0:32:65:79: ea:88:bb:53:c6:d5:d7:55:26:30:e1:a6:5b:3a:e6:ed:1e:fb: 9d:2d:be:a5:1a:1f:a8:09:ae:ab:7b:a0:fd:be:f9:fa:6d:a5: fc:ea:a7:30 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULtwBidRpTFmAD7/aiRSfZkRG1gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA5MDQwOTI3NDJaFw0yNjA5MDUxMjMyNDJaMDMxMTAvBgNV BAMTKEZFNEM4QTg0QUJCRUEzMTFFRkM0NzhCMjFCMzM0RDFEQjAxRDA4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrzrVxxQbyhpHWCfPEztUGp0i yuRuORPT8aJJSsgcjbW5nrFGjsdONXf6hhxEstqQjYe4UfPuyQg/pWTfy6socnFQ mL/G4eqGHWI3gY7qhRmJsrMHFO6h9EpAWpYSdwJVllDJokBVK0Niyahz/4SNXPpe ylBcj1ysgg5pP81j50iQd1TRdUYlMacvCs9JYm5JEIbQR6Im1AerL1Mn9kxZ2coX vYhIGdt100UHuPmKW2SfYThQ9NNy8T862+h9OL8NWX3qTJLcJH8hU8zoFk+s686f O2IeqopJ2UREj991FUa63zMI8ZVM7nAl4NnS4az79iO58BXzygrM+/c+CNipAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/kyKhKu+oxHvxHiyGzNNHbAdCIQwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjVC6m EPoQv8kuYigMzD5ENpHQ1bdaFeQa4RMF5FcphKql0EhiI89pOirJzfpAqs+96Nzu a7blL//43314P6oC2Xa77MNx5qEQ333IvGj8VM7gg0/qU6zWjsjGzI40lTSKKROo OgrLqQMPyr+8tbbtH+uHNM5am4dk5q5dMpqGy9Y0RU0dbr/phpCTaAJEbTMMJRCo PzvdxoSBoF2mbGoukmBO3jocbXgFHfOspnEKEjjfBT5gQ1i9FiY7EoIMW+E/5Gf0 Yxyv782oog9qg7WTtjbNBfAyZXnqiLtTxtXXVSYw4aZbOubtHvudLb6lGh+oCa6r e6D9vvn6baX86qcw -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:43 2026 by rpki-client