$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: bR2PrF5u694vCFiurHsqH5/B1BGjhYghei1oABPrOZ4= Subject key identifier: BD:4E:60:9E:01:78:65:76:F4:E6:73:65:BF:3D:44:5C:43:1E:29:39 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 7E3DD8B9AB823C18A5A512051F5CAF187659B67F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 0817 Signing time: Mon 02 Nov 2026 11:03:52 +0000 Manifest this update: Mon 02 Nov 2026 10:58:52 +0000 Manifest next update: Tue 03 Nov 2026 12:10:52 +0000 Files and hashes: 1: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=) 2: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=) 3: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=) 4: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=) 5: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=) 6: 38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa (hash: ZhP+zpXWUfzVW2D3Gh421wDniumfO+kc6/F7MRB7boU=) 7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=) 8: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=) 9: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=) 10: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: f/OTM1x4W2aG3HRQ5thhozmszFB5X7TAd7KDOm42E2M=) 11: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=) 12: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=) 13: 322e35392e36332e302f32342d3234203d3e203536363535.roa (hash: nG8puCpSNLbVRezQJ6NEb6pqiujF9Ii465n8Wl9qCgE=) 14: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=) 15: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=) 16: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=) 17: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=) 18: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=) 19: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=) 20: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=) 21: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=) 22: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=) 23: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=) 24: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=) 25: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=) 26: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=) 27: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=) 28: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=) 29: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=) 30: 3139342e33312e3139372e302f32342d3234203d3e20313532363938.roa (hash: ZNogajkk7b6SX1S+YZ1RLghPbX8A44D5Lwp6Lyc6luE=) 31: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=) 32: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: EK+XXjX9beuphvsOJqRkCLgksPeOmMaixGjse5a+gDs=) 33: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=) 34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=) 35: 322e35392e36322e302f32342d3234203d3e203536363535.roa (hash: 4EVwlY91Vkuy79loMlCVFMeATW2Zd/Dn57Gy1wS/GpY=) 36: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: jX4C5dkRnCIJowfhDMXYwrQg434yiv1EsWttrHB9oRM=) 37: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 1Ybn86/+4B4ldSCuwLgKrH9sgVRoDMfWgN92S/nlAHE=) 38: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=) 39: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=) 40: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=) 41: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: Xvqp6d2tCZnDciffj3hq6Qb1JaqBL/EwgvTbKq//+Ks=) 42: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 12:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3d:d8:b9:ab:82:3c:18:a5:a5:12:05:1f:5c:af:18:76:59:b6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Nov 2 10:58:52 2026 GMT Not After : Nov 3 12:10:52 2026 GMT Subject: CN=BD4E609E01786576F4E67365BF3D445C431E2939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:ac:2e:a1:5e:5d:cd:46:b0:28:16:38:f0: c8:ba:f9:f0:62:1b:75:bb:75:d1:74:3b:1c:28:28: c7:01:56:9d:f2:5e:a9:2e:0c:0b:ba:6e:31:4d:72: dc:7f:a3:17:2b:0b:5a:d3:f1:44:02:38:a5:21:b4: 10:e0:4b:81:53:85:78:85:e9:a8:e8:0b:e4:2d:f0: b3:8b:ef:02:5d:b6:d7:ab:69:44:24:e5:87:88:11: 8b:41:d1:a8:4a:88:39:4e:28:e1:80:8d:94:9b:c1: 05:fb:41:1c:c7:ca:e3:a5:24:ee:50:12:78:1d:95: 31:8f:3e:f2:cf:77:85:9f:5f:b2:60:84:61:58:50: 07:cb:71:26:ac:e3:13:df:55:d5:1f:4e:70:fb:27: 9a:79:15:89:82:19:38:53:35:52:87:19:56:71:9c: 91:20:64:30:6f:60:e8:71:67:14:94:ba:64:95:40: bd:8d:08:46:9d:1c:46:cb:04:33:c8:5a:49:aa:e0: d3:6d:2e:20:af:13:74:98:47:5d:3c:8b:06:34:ba: 73:1b:10:6c:e8:a6:3d:3c:6b:38:55:aa:7b:1f:4b: ab:87:74:cf:c3:16:06:83:5e:3e:c0:d1:be:04:4f: 4b:d1:60:19:37:20:51:07:22:00:d8:28:51:bb:79: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:60:9E:01:78:65:76:F4:E6:73:65:BF:3D:44:5C:43:1E:29:39 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:aa:3e:ff:23:d8:5a:0b:9d:0b:d0:b6:4f:03:05:78:dd:00: cd:33:25:e6:fd:e3:e3:92:bf:92:db:34:3c:46:43:5f:b0:dd: 35:90:3c:fb:0e:c8:cb:1d:cf:dc:c1:9e:7c:c7:28:ab:89:d0: 97:8f:4b:12:75:be:86:36:25:a7:9d:1b:f0:9b:d8:7f:7d:28: 62:58:3b:c2:ed:65:ae:d1:41:00:e9:4d:50:7d:71:42:17:c2: 49:f9:31:d4:76:91:08:da:c6:0e:0f:b2:60:2e:1f:68:d3:7b: 4e:b6:5e:e3:a8:2e:0a:ef:be:cc:0a:2f:f0:3b:b8:ea:d1:31: cc:7b:8d:14:03:28:7f:03:d6:06:bc:ce:c5:95:c1:3f:1b:87: 2d:ee:42:a4:e1:dc:cf:98:d8:4f:b1:c3:c7:15:40:b6:b9:da: 57:4d:51:18:7f:96:e7:70:c8:65:b7:5b:f1:2b:5a:ab:52:85: 45:f6:61:9c:ff:87:44:0d:12:71:58:54:2b:e2:a8:e4:91:96: d5:c4:a4:1d:25:94:6b:45:34:54:4c:97:9b:c3:cd:f8:a4:1a: 9f:9e:b5:8e:97:e9:ec:94:ef:0d:7f:38:b1:00:47:83:d9:9b: 1a:fd:53:f8:60:86:9a:af:d5:ba:37:a4:8a:1c:17:de:1d:fa: e5:49:a1:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfj3YuauCPBilpRIFH1yvGHZZtn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjExMDIxMDU4NTJaFw0yNjExMDMxMjEwNTJaMDMxMTAvBgNV BAMTKEJENEU2MDlFMDE3ODY1NzZGNEU2NzM2NUJGM0Q0NDVDNDMxRTI5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYa6wuoV5dzUawKBY48Mi6+fBi G3W7ddF0OxwoKMcBVp3yXqkuDAu6bjFNctx/oxcrC1rT8UQCOKUhtBDgS4FThXiF 6ajoC+Qt8LOL7wJdtteraUQk5YeIEYtB0ahKiDlOKOGAjZSbwQX7QRzHyuOlJO5Q EngdlTGPPvLPd4WfX7JghGFYUAfLcSas4xPfVdUfTnD7J5p5FYmCGThTNVKHGVZx nJEgZDBvYOhxZxSUumSVQL2NCEadHEbLBDPIWkmq4NNtLiCvE3SYR108iwY0unMb EGzopj08azhVqnsfS6uHdM/DFgaDXj7A0b4ET0vRYBk3IFEHIgDYKFG7eeeLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvU5gngF4ZXb05nNlvz1EXEMeKTkwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEao+/yPYWgudC9C2TwMF eN0AzTMl5v3j45K/kts0PEZDX7DdNZA8+w7Iyx3P3MGefMcoq4nQl49LEnW+hjYl p50b8JvYf30oYlg7wu1lrtFBAOlNUH1xQhfCSfkx1HaRCNrGDg+yYC4faNN7TrZe 46guCu++zAov8Du46tExzHuNFAMofwPWBrzOxZXBPxuHLe5CpOHcz5jYT7HDxxVA trnaV01RGH+W53DIZbdb8Staq1KFRfZhnP+HRA0ScVhUK+Ko5JGW1cSkHSWUa0U0 VEyXm8PN+KQan561jpfp7JTvDX84sQBHg9mbGv1T+GCGmq/VujekihwX3h365Umh +g== -----END CERTIFICATE-----Generated at Tue Nov 3 03:48:36 2026 by rpki-client