$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json) Hash identifier: UN8/1ilUsUTmE74NzrI4uZmzMrGA/STLWHdNQfpICY4= Subject key identifier: 2E:96:85:0E:F2:DB:DE:1A:7F:75:15:CD:E2:DE:41:8E:CE:8E:8C:84 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 452C769893D538502633045D82CFD193F9B6F6A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft Manifest number: 05F9 Signing time: Fri 23 Oct 2026 02:49:37 +0000 Manifest this update: Fri 23 Oct 2026 02:44:37 +0000 Manifest next update: Sat 24 Oct 2026 04:47:37 +0000 Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: OuoOs+CiTdcvRVHayOp+V7mOKFOQPeJ0ssfFASQNrL4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2c:76:98:93:d5:38:50:26:33:04:5d:82:cf:d1:93:f9:b6:f6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Oct 23 02:44:37 2026 GMT Not After : Oct 24 04:47:37 2026 GMT Subject: CN=2E96850EF2DBDE1A7F7515CDE2DE418ECE8E8C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:52:3f:f0:61:cd:62:be:8a:e2:16:df:d0: ba:e2:ad:c4:0c:46:72:3f:35:89:a9:e0:b1:77:8e: a9:ca:5c:f0:10:30:16:96:2c:48:61:e2:47:60:0a: c7:8e:8f:3d:4c:f4:4c:a8:f3:d6:d1:9c:01:92:7c: 07:23:e2:bf:7e:64:ff:0a:10:46:f0:1c:f3:f5:86: cf:f9:54:3f:d6:f7:3a:fd:2e:ae:47:b0:34:7b:2e: e8:6e:04:cb:ad:2d:c0:75:01:a2:6e:bd:4e:dd:04: 9e:11:8d:83:2e:81:0c:40:da:db:5c:73:aa:24:92: 54:53:02:14:19:a8:45:b1:c8:21:85:a5:6d:23:ad: 56:67:d6:7b:ef:89:ea:d9:31:5b:45:1a:4f:a9:49: 9a:97:13:3e:06:40:61:80:0c:2f:01:b9:36:ec:91: ea:a3:90:7d:34:75:f7:46:40:06:e0:bc:ad:86:ca: 82:06:98:6c:76:de:44:1a:35:5d:eb:32:fa:75:03: 49:5c:99:14:48:9b:9d:ee:4e:1f:4c:84:29:cf:7f: 09:db:40:02:33:61:7e:e9:89:7a:38:7f:f2:d5:42: 02:34:2e:fc:e5:e9:c7:3e:3e:96:72:c3:c6:c6:7c: 34:87:c2:2c:74:2b:bc:13:ee:68:e9:f7:83:e4:9f: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:85:0E:F2:DB:DE:1A:7F:75:15:CD:E2:DE:41:8E:CE:8E:8C:84 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:0a:65:ed:c2:e0:a9:9e:12:7c:11:2d:ad:b1:4b:18:8b: d3:01:3c:25:a8:4a:62:52:d2:78:39:c2:99:f5:ab:81:ef:d8: 79:00:eb:aa:55:62:7f:6e:04:1b:0e:d8:14:a2:ae:be:00:94: 94:a9:45:16:2b:46:62:62:21:00:2f:18:b2:22:d8:ac:d7:08: 6d:be:4e:de:5a:3c:ae:ee:59:ec:fb:2f:eb:0e:c5:89:ef:33: 4d:66:ce:1a:28:3b:52:8d:77:cf:c9:f8:4e:69:54:83:6c:bf: 43:c1:e4:c7:2a:06:c3:90:ce:26:5b:23:41:91:cd:6a:91:ac: 6c:ba:13:69:ad:17:0f:31:4f:91:b7:64:5b:b8:6b:94:01:d7: 6e:e3:97:b3:b5:a1:5c:cb:80:73:61:2d:0a:ce:6b:bc:4f:d5: ee:5c:a9:fb:8a:22:2d:57:27:e5:2d:60:7e:44:26:3e:d5:c7: 1b:4b:e1:f7:10:b9:fe:76:ad:4c:0b:cd:37:93:6f:ab:98:53: e8:1b:27:95:f6:fa:f8:8f:d3:ff:05:eb:ae:15:e6:39:19:76: 75:11:f3:99:e1:db:d5:94:35:ab:5f:33:70:60:e9:1b:de:68: aa:a8:01:f9:ae:6a:1a:23:47:4f:29:60:63:cd:5e:c3:d2:ca: 73:f6:20:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURSx2mJPVOFAmMwRdgs/Rk/m29qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjEwMjMwMjQ0MzdaFw0yNjEwMjQwNDQ3MzdaMDMxMTAvBgNV BAMTKDJFOTY4NTBFRjJEQkRFMUE3Rjc1MTVDREUyREU0MThFQ0U4RThDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfFI/8GHNYr6K4hbf0LrircQM RnI/NYmp4LF3jqnKXPAQMBaWLEhh4kdgCseOjz1M9Eyo89bRnAGSfAcj4r9+ZP8K EEbwHPP1hs/5VD/W9zr9Lq5HsDR7LuhuBMutLcB1AaJuvU7dBJ4RjYMugQxA2ttc c6okklRTAhQZqEWxyCGFpW0jrVZn1nvvierZMVtFGk+pSZqXEz4GQGGADC8BuTbs keqjkH00dfdGQAbgvK2GyoIGmGx23kQaNV3rMvp1A0lcmRRIm53uTh9MhCnPfwnb QAIzYX7piXo4f/LVQgI0Lvzl6cc+PpZyw8bGfDSHwix0K7wT7mjp94Pkn5A7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULpaFDvLb3hp/dRXN4t5Bjs6OjIQwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8xLzMwRUMzNDFD QzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADUQpl 7cLgqZ4SfBEtrbFLGIvTATwlqEpiUtJ4OcKZ9auB79h5AOuqVWJ/bgQbDtgUoq6+ AJSUqUUWK0ZiYiEALxiyItis1whtvk7eWjyu7lns+y/rDsWJ7zNNZs4aKDtSjXfP yfhOaVSDbL9DweTHKgbDkM4mWyNBkc1qkaxsuhNprRcPMU+Rt2RbuGuUAddu45ez taFcy4BzYS0Kzmu8T9XuXKn7iiItVyflLWB+RCY+1ccbS+H3ELn+dq1MC803k2+r mFPoGyeV9vr4j9P/BeuuFeY5GXZ1EfOZ4dvVlDWrXzNwYOkb3miqqAH5rmoaI0dP KWBjzV7D0spz9iBY -----END CERTIFICATE-----Generated at Fri Oct 23 07:20:00 2026 by rpki-client