$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: cQ0abThrLmrz5+QvJiFP22fFalUxHya4EvxjQ93DpQg= Subject key identifier: 16:9C:A2:5B:59:E8:9B:67:CF:6F:43:F3:00:B4:BB:1A:C9:AC:78:E5 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 0B5DBA7B3B7008AD5DA39BCA954E5DDBCA396A4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 06C4 Signing time: Tue 03 Nov 2026 07:18:56 +0000 Manifest this update: Tue 03 Nov 2026 07:13:56 +0000 Manifest next update: Wed 04 Nov 2026 09:32:56 +0000 Files and hashes: 1: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 2: 34362e3138332e33302e302f32332d3234203d3e20383334.roa (hash: zZEffSEUXFM6nGcMJFdjlCGja1LxLlxswXf5+FhwtD0=) 3: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: h3cbzb6IM0+LCDsMMqHv5LUyT0Va+Ums6gxq1LUB944=) 4: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 5: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: AcqwW6yTpxI3OmkBZD3ZuGJOrkDWhhktOLo+79kUNdA=) 6: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 7: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 8: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 9: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: gQUzts/Gnm6QyZJ+4Xi5zZMrYZRBsq1Uhu8/8ytdTwg=) 10: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 09:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5d:ba:7b:3b:70:08:ad:5d:a3:9b:ca:95:4e:5d:db:ca:39:6a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Nov 3 07:13:56 2026 GMT Not After : Nov 4 09:32:56 2026 GMT Subject: CN=169CA25B59E89B67CF6F43F300B4BB1AC9AC78E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:e3:9c:d3:74:f5:2f:08:24:e0:ee:c0:eb: 4b:f8:26:61:3d:1c:a1:aa:50:8f:70:79:c5:49:b1: 5d:9c:00:34:9d:19:4f:58:96:25:66:b2:66:82:25: e8:63:7b:76:73:15:68:f8:36:4a:c0:aa:ff:b9:f9: 23:d0:c5:e7:ec:63:0c:91:89:49:23:7a:5d:88:ab: 95:dc:61:b5:ab:67:49:1c:35:f6:28:a7:2a:78:4a: 15:fd:90:ee:59:f1:e7:8e:1d:b0:c0:9d:49:3d:40: 78:d4:88:5e:7a:9a:90:42:cc:0b:74:df:05:76:6a: b8:a8:eb:f5:68:20:38:98:29:c8:e2:8d:18:eb:2b: 2f:1f:e2:db:09:88:85:6b:bd:9f:b9:7a:8c:d4:a7: 25:07:34:f0:16:29:da:db:ef:3f:b5:c2:3a:e9:98: dc:e5:5b:08:e6:2e:f0:d1:c0:fa:53:21:fa:66:4e: 86:e6:d1:95:5b:5f:be:1a:8d:64:63:7c:bf:25:54: 4e:7c:5d:e8:d1:60:d9:de:d7:18:b7:a8:65:c9:69: 64:ac:13:d5:f1:59:d5:c5:49:c4:5c:38:52:5a:14: 1a:1a:82:85:24:3d:d1:f4:76:30:d8:69:07:91:65: a9:50:bb:89:6d:68:24:5a:eb:09:90:d5:61:09:fe: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:A2:5B:59:E8:9B:67:CF:6F:43:F3:00:B4:BB:1A:C9:AC:78:E5 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4b:97:85:5d:ba:9c:8f:87:4d:cf:4b:8c:7f:5e:e7:e8:c2: 05:b7:d8:b7:8a:bf:62:1f:ed:30:ba:cd:68:14:43:19:39:e4: c1:c2:a3:11:66:43:fc:b6:59:2b:40:86:b4:84:86:fa:b8:26: da:db:94:6d:4e:fe:e4:04:7b:d1:d6:dd:e2:0b:0a:54:72:9c: e8:44:e6:b1:33:9b:0f:2a:54:b3:a4:89:b5:7d:28:7f:6f:25: fd:f9:77:09:f7:7b:57:76:1b:b9:20:1f:af:62:c5:80:12:fa: 1e:43:ea:4f:df:54:af:d3:0e:81:fa:86:b1:48:69:da:08:94: 49:58:84:33:ea:49:28:ca:14:11:00:90:4c:ab:0b:cf:c5:1e: 46:fd:21:a9:fa:c5:d6:ef:ff:6e:8d:5a:af:ab:97:fb:17:01: 7e:98:05:2c:c3:95:7f:28:ea:57:c0:72:88:66:d4:8f:5a:7e: 40:75:ca:32:77:9f:9e:27:77:1d:15:be:0b:44:76:3b:69:6a: 24:fd:0c:eb:f8:a2:18:64:d9:c5:96:4f:6f:68:12:3b:a7:4b: 1e:1d:fe:76:5a:9f:fd:c3:58:83:17:45:ec:f0:e1:a7:0d:7f: 6e:62:1b:a5:5d:de:c4:7a:eb:aa:2b:78:f9:63:48:48:9c:01: 22:0e:bc:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC126eztwCK1do5vKlU5d28o5akowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjExMDMwNzEzNTZaFw0yNjExMDQwOTMyNTZaMDMxMTAvBgNV BAMTKDE2OUNBMjVCNTlFODlCNjdDRjZGNDNGMzAwQjRCQjFBQzlBQzc4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WOOc03T1Lwgk4O7A60v4JmE9 HKGqUI9wecVJsV2cADSdGU9YliVmsmaCJehje3ZzFWj4NkrAqv+5+SPQxefsYwyR iUkjel2Iq5XcYbWrZ0kcNfYopyp4ShX9kO5Z8eeOHbDAnUk9QHjUiF56mpBCzAt0 3wV2ario6/VoIDiYKcjijRjrKy8f4tsJiIVrvZ+5eozUpyUHNPAWKdrb7z+1wjrp mNzlWwjmLvDRwPpTIfpmTobm0ZVbX74ajWRjfL8lVE58XejRYNne1xi3qGXJaWSs E9XxWdXFScRcOFJaFBoagoUkPdH0djDYaQeRZalQu4ltaCRa6wmQ1WEJ/gaZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFpyiW1nom2fPb0PzALS7GsmseOUwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkuXhV26nI+HTc9LjH9e 5+jCBbfYt4q/Yh/tMLrNaBRDGTnkwcKjEWZD/LZZK0CGtISG+rgm2tuUbU7+5AR7 0dbd4gsKVHKc6ETmsTObDypUs6SJtX0of28l/fl3Cfd7V3YbuSAfr2LFgBL6HkPq T99Ur9MOgfqGsUhp2giUSViEM+pJKMoUEQCQTKsLz8UeRv0hqfrF1u//bo1ar6uX +xcBfpgFLMOVfyjqV8ByiGbUj1p+QHXKMnefnid3HRW+C0R2O2lqJP0M6/iiGGTZ xZZPb2gSO6dLHh3+dlqf/cNYgxdF7PDhpw1/bmIbpV3exHrrqit4+WNISJwBIg68 LQ== -----END CERTIFICATE-----Generated at Wed Nov 4 02:47:22 2026 by rpki-client