$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json) Hash identifier: fiBQi9p6wzn1fjqB05qWK+9o8lgnTJW9D1MuzVxJpEQ= Subject key identifier: C6:99:48:BE:DC:12:34:47:FE:91:83:16:7F:B7:6B:0E:27:74:87:5E Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 173B76525ABC6E1B5BED9D14EC4F3976E3CF9467 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft Manifest number: 05B8 Signing time: Fri 04 Sep 2026 09:58:22 +0000 Manifest this update: Fri 04 Sep 2026 09:53:22 +0000 Manifest next update: Sat 05 Sep 2026 11:15:22 +0000 Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: hnwnF15cIcngpnkE1XKa4UiP/G8QKJQUEr3gk13tbfg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3b:76:52:5a:bc:6e:1b:5b:ed:9d:14:ec:4f:39:76:e3:cf:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Sep 4 09:53:22 2026 GMT Not After : Sep 5 11:15:22 2026 GMT Subject: CN=C69948BEDC123447FE9183167FB76B0E2774875E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:0e:0c:3f:24:de:8f:44:4d:5a:e2:dc:62: 8b:80:45:b8:94:11:dd:d8:b6:71:15:a8:62:24:8f: ba:18:7a:ad:6f:7a:dd:50:25:78:81:30:e9:cf:eb: 29:e6:98:6c:fe:e5:b7:22:d0:0b:6f:94:34:cf:78: d1:ab:10:08:36:98:8e:f1:54:c8:94:d9:4c:8f:0d: 68:12:42:48:fa:70:ec:3e:c8:8b:48:d3:c5:06:82: f2:ac:b6:75:08:d3:63:60:13:79:3a:38:b3:c4:45: 7e:e9:2c:50:46:dc:a8:d5:85:fe:ba:82:d8:1f:96: e1:b4:17:b1:02:9f:4e:71:db:7a:57:36:8e:31:98: ee:10:0b:94:65:01:74:c4:87:62:a5:fe:8c:ed:d4: 2a:14:6e:e7:b4:04:98:10:ae:0a:e8:b7:b3:30:1f: b1:ab:68:9c:dc:f6:5d:e1:3d:81:76:c0:31:bf:1e: 4f:1c:6c:dc:30:40:dd:c3:f6:55:8b:06:d6:db:43: a7:34:d4:b5:89:c6:5d:89:f5:1a:35:f9:79:8e:85: 3c:55:38:74:1d:ad:f4:3d:c6:2e:b8:25:d4:a6:6a: 34:4a:10:13:af:ed:0f:e6:59:79:93:f1:3d:35:a7: 3b:32:99:fc:fe:08:44:b1:33:41:f1:ff:ea:d9:37: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:48:BE:DC:12:34:47:FE:91:83:16:7F:B7:6B:0E:27:74:87:5E X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:54:32:14:6f:54:98:09:5b:b5:2f:f0:08:b1:d2:52:36:3c: d4:93:f4:08:14:36:71:5d:24:2a:96:ed:66:e9:88:0b:a4:e0: 7e:62:dd:d9:ff:68:b8:fc:c0:ce:34:9e:bf:f8:1b:2b:a2:fc: ad:b7:67:a8:dc:73:53:e0:22:54:82:9a:06:d6:2c:79:4a:85: c3:4f:e1:bc:73:e7:c2:4a:9b:89:8c:26:05:e2:a3:7e:6c:48: e6:24:cd:3f:69:15:7a:c8:84:cb:8c:18:b6:8e:83:69:10:75: 8f:60:13:bc:39:35:8a:68:3c:ac:7b:18:f3:8f:38:14:d0:9b: a8:d8:24:31:38:53:2c:70:96:cd:43:c6:bb:d8:02:b3:ec:83: aa:0f:18:df:10:f3:42:01:78:32:84:60:99:c5:72:60:95:dd: d6:df:50:76:d5:23:d4:f9:39:a9:2c:9e:4b:c9:ab:b3:ff:9f: 75:f6:9e:b2:1c:2b:f6:36:ad:2c:79:a1:da:c2:7a:7b:4c:3d: 22:7c:7d:a7:26:a8:48:9a:5e:f8:2c:02:09:f7:31:b7:80:23: 04:42:d5:f7:3a:93:99:45:aa:a5:7d:1d:b8:04:9e:cc:bb:e7: c3:26:ba:6b:62:71:04:56:de:fb:d3:2c:dc:73:88:40:0c:a0: c6:af:72:92 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFzt2Ulq8bhtb7Z0U7E85duPPlGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjA5MDQwOTUzMjJaFw0yNjA5MDUxMTE1MjJaMDMxMTAvBgNV BAMTKEM2OTk0OEJFREMxMjM0NDdGRTkxODMxNjdGQjc2QjBFMjc3NDg3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFg4MPyTej0RNWuLcYouARbiU Ed3YtnEVqGIkj7oYeq1vet1QJXiBMOnP6ynmmGz+5bci0AtvlDTPeNGrEAg2mI7x VMiU2UyPDWgSQkj6cOw+yItI08UGgvKstnUI02NgE3k6OLPERX7pLFBG3KjVhf66 gtgfluG0F7ECn05x23pXNo4xmO4QC5RlAXTEh2Kl/ozt1CoUbue0BJgQrgrot7Mw H7GraJzc9l3hPYF2wDG/Hk8cbNwwQN3D9lWLBtbbQ6c01LWJxl2J9Ro1+XmOhTxV OHQdrfQ9xi64JdSmajRKEBOv7Q/mWXmT8T01pzsymfz+CESxM0Hx/+rZN6fjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxplIvtwSNEf+kYMWf7drDid0h14wHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8xLzMwRUMzNDFD QzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsVDIU b1SYCVu1L/AIsdJSNjzUk/QIFDZxXSQqlu1m6YgLpOB+Yt3Z/2i4/MDONJ6/+Bsr ovytt2eo3HNT4CJUgpoG1ix5SoXDT+G8c+fCSpuJjCYF4qN+bEjmJM0/aRV6yITL jBi2joNpEHWPYBO8OTWKaDysexjzjzgU0Juo2CQxOFMscJbNQ8a72AKz7IOqDxjf EPNCAXgyhGCZxXJgld3W31B21SPU+TmpLJ5Lyauz/5919p6yHCv2Nq0seaHawnp7 TD0ifH2nJqhIml74LAIJ9zG3gCMEQtX3OpOZRaqlfR24BJ7Mu+fDJrprYnEEVt77 0yzcc4hADKDGr3KS -----END CERTIFICATE-----Generated at Fri Sep 4 23:22:25 2026 by rpki-client