$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft File: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft (raw, json) Hash identifier: KhhaebUwVde4rxiUKuFDroKEkUzXF8ucaLXzGFAiyU0= Subject key identifier: DE:5D:05:70:8D:F8:83:B6:E3:7C:23:56:64:CC:75:56:98:AE:ED:9F Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Certificate serial: 41AAF3A69AD66A20BAEBBB884592C111A4BDCF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft Manifest number: 23 Signing time: Wed 09 Sep 2026 21:01:29 +0000 Manifest this update: Wed 09 Sep 2026 20:56:29 +0000 Manifest next update: Fri 11 Sep 2026 00:10:29 +0000 Files and hashes: 1: 3231372e37332e31372e302f32342d3234203d3e203239343035.roa (hash: DDST7kks9q2ds1FaT+50IBJBBJX55AtusDnbq0N98fU=) 2: 326130313a3339303a3a2f33322d3634203d3e203239343035.roa (hash: EkahyzLSm2/v6AdCA2RLCahqupgwq6ocXbGbYPrCVpQ=) 3: 39322e3234302e3233302e302f32342d3234203d3e203239343035.roa (hash: fDWL1gciinjC0IXRqT2Q3PtDEb5nlNuoXJzFK/hcNV4=) 4: 39322e3234302e3234322e302f32342d3234203d3e203239343035.roa (hash: kM+gDjZiEvVCID7wvcbCRUgVsT4ajdEwlZgKFdVmvR8=) 5: 38362e3131302e3234312e302f32342d3234203d3e203239343035.roa (hash: psnZte3+Q299US8D2WamKfH/o+Xxqk26yh9SNQ4KUJw=) 6: 38312e38392e34382e302f32302d3234203d3e203239343035.roa (hash: oOFdsTbMdYmh54V2UagrZUE6rX1OAnUs3P4bv6a/jzs=) 7: 326130303a313064383a3a2f33322d3634203d3e203239343035.roa (hash: SjPp4clvAHy+KAtZ7R25YFosiP+RM2Ku5fULo9nmZMA=) 8: 38362e3131302e3234382e302f32342d3234203d3e203239343035.roa (hash: jkNhjwzhqphtd387aGK5KWwfcNq8xmY5Fe084eh7yWY=) 9: 39332e3138342e36342e302f32302d3234203d3e203239343035.roa (hash: qJyJZHLgF+VN+ii9OlFgksvK1ICSHqOEqlSg1DkmbiU=) 10: 39322e3234302e3234342e302f32342d3234203d3e203239343035.roa (hash: IqjGqo5bykodH/rQX0Yyj0vB/XG7K+vBGQ1VS0dufJA=) 11: 39322e3234302e3234392e302f32342d3234203d3e203239343035.roa (hash: OWddMU2lVARc4e0qTNNk2twrubMUNkpdn9k9PUQykHc=) 12: 39322e3234302e3232382e302f32342d3234203d3e203239343035.roa (hash: LxIsT0Z72nxO3Y284vPXgs9ScSm6Vj2A4oz7LMKnhVo=) 13: 38362e3131302e3234332e302f32342d3234203d3e203239343035.roa (hash: +f51ZZBf9NkOVMQhrwv8QxlQbFeYhMSfw/1KOCVjv/M=) 14: 3231372e37332e31362e302f32302d3234203d3e203239343035.roa (hash: iWR6okAvKqyu5oJU5+aD9MzJfwy1JD9sl+Akz3xHcFU=) 15: 39322e3234302e3232382e302f32342d3234203d3e203432303035.roa (hash: Nr549lUMnLpN1HEp8LJdbOoN53ZSlUaUINP6G5zL7j8=) 16: 326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa (hash: OaS/OQQXkjX3sJOmUl5zc9tQy3jz0o+bUQUBhd2ZQH0=) 17: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl (hash: gmomX43aG28XciCl8WWtfXfjlybhUxY6btC/1M6KQnY=) 18: 39322e3234302e3233342e302f32342d3234203d3e203239343035.roa (hash: ZbrO3s1/sE3VB3YBwEq8N4l7+Zh6Aj9FReUoQ3Dbpi0=) 19: 39322e3234302e3233372e302f32342d3234203d3e203239343035.roa (hash: 8TUKR6ccLxStHiY46OibIeVHKIYrsgaU4259nUYDI0Q=) 20: 39322e3234302e3235332e302f32342d3234203d3e203239343035.roa (hash: 3TcyJn0Vba3SdYkAgBupE2RJSi7wt6IrY6almrGdDwA=) 21: 39322e3234302e3233312e302f32342d3234203d3e203239343035.roa (hash: 8jlFwwnDnJiuu6OA5YfbHOJwmtTLw6Nop9J7C0sLtPc=) 22: 39322e3234302e3234352e302f32342d3234203d3e203239343035.roa (hash: zjSSSsKGGZnm7k5LvFSb2guDmXTBkSv+ePAfP6MlUDg=) 23: 39322e3234302e3232392e302f32342d3234203d3e203239343035.roa (hash: DiT3qyppfKnihj39C/OG8uNu1BGSOnEXplU91nLYAfM=) 24: 3130392e37342e3134342e302f32302d3234203d3e203239343035.roa (hash: xohX/Ehc0bh3gDMEqDdvV2NRcW4FHqeBZZSuJrMdXQI=) 25: 34362e3232392e3232342e302f32302d3234203d3e203239343035.roa (hash: 4IIdVeDc8Q4j/hlnrmDiN32JvOe5YxgT+shULM0apQE=) 26: 39322e3234302e3233362e302f32342d3234203d3e203239343035.roa (hash: 5oyqw+KhylpUHglogsy7/I4LpBle8Q3qWBoa/BrHLEw=) 27: 39322e3234302e3235342e302f32342d3234203d3e203239343035.roa (hash: 7VdxSCKZcsd3qAeViATvYYCpFD+a1fGjlJWlaJPO0iQ=) 28: 39322e3234302e3233352e302f32342d3234203d3e203239343035.roa (hash: EGBbBNCVgZA7RRgb1ikg8DLO4hYxR8hBfm0EuF5QV+s=) 29: 3231372e37332e31362e302f32342d3234203d3e203239343035.roa (hash: LL3P7lvswxfOA25czv9v+WkF3C0D0KnWO5P9MOkColw=) 30: 38362e3131302e3232342e302f31392d3234203d3e203239343035.roa (hash: b0zChgdz1vIMVhWdR5HGNfcD59h2BRuUdpFR8SjQgf4=) 31: 39322e3234302e3234312e302f32342d3234203d3e203239343035.roa (hash: Opg5YCuZVpoZQMqVkdc7dq3/iqNbHLYh5wpFHjBXqwM=) 32: 39332e3138342e37372e302f32342d3234203d3e203239343035.roa (hash: KNROAqPfXENphQBzyfVk59v5Hvqlnlhj1Iqa4/Wrvfw=) 33: 3138352e3137362e37322e302f32322d3234203d3e203239343035.roa (hash: o4JrISAeOko/D99D7KNeLjlvTZIPY3wcIRzxxDIeJsA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 00:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:f3:a6:9a:d6:6a:20:ba:eb:bb:88:45:92:c1:11:a4:bd:cf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Validity Not Before: Sep 9 20:56:29 2026 GMT Not After : Sep 11 00:10:29 2026 GMT Subject: CN=DE5D05708DF883B6E37C235664CC755698AEED9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:e8:ea:1d:ee:cf:76:3b:85:e3:fa:db:43: 79:e2:3a:06:5c:58:78:19:36:3b:fe:cb:56:39:cf: 5c:2f:d4:3f:d3:56:58:b0:e8:e6:d4:b5:f7:a4:95: 09:88:ec:2f:9e:a2:51:5e:82:fc:7e:cc:f9:19:a5: 54:9d:34:ed:01:c2:b9:ba:24:0b:20:48:dd:9d:1e: 41:0c:c5:b7:5b:59:9c:ac:22:f1:60:68:0d:77:b1: 67:ac:85:38:07:eb:a6:4a:fd:55:bd:c5:8d:1c:c9: 29:a6:24:7c:4a:d5:ff:2a:d0:76:29:39:a7:1f:87: e0:87:7c:b6:99:9d:33:f1:e0:79:55:d2:e2:e9:09: d4:a3:66:79:33:c5:76:f8:43:db:15:5d:a7:88:cc: d6:04:f7:c8:32:ce:db:1b:b9:1b:7c:e2:20:4f:9f: d6:43:cd:c2:99:e8:e9:60:03:18:81:d1:78:ec:18: 58:eb:1d:32:c1:e1:0f:34:55:bd:96:df:d5:0b:26: ab:45:56:f3:ed:b2:4e:2f:a5:ce:2d:df:a9:aa:82: 1d:1f:1c:04:2c:0a:f9:3b:a9:87:68:9c:24:b5:ec: ef:af:d2:98:ca:64:79:04:d6:18:71:d9:9d:45:ab: 5d:e9:47:39:83:ec:b1:5d:8c:5a:e8:92:44:f3:8e: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:05:70:8D:F8:83:B6:E3:7C:23:56:64:CC:75:56:98:AE:ED:9F X509v3 Authority Key Identifier: keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:76:7b:cb:fb:b5:b2:87:30:5f:a5:df:ce:77:b8:ee:9b:42: 83:ec:cc:c8:b0:89:54:e2:b4:14:30:4f:36:65:5e:e5:76:b0: fc:b6:ab:cc:55:90:38:a8:24:74:89:52:24:95:0d:79:80:b8: bc:4e:3d:21:63:04:9a:70:8a:e9:7c:65:33:14:61:33:86:c5: 3a:e6:3f:9f:67:2a:75:27:9b:f5:62:64:44:f9:bb:d0:62:9e: 82:72:0b:7a:3f:6f:04:47:d2:d4:e5:43:e3:7e:a9:82:8e:eb: ed:68:c4:2d:fa:81:7d:a6:03:46:35:7e:ac:06:1d:24:21:5a: 5c:cd:bb:a6:51:63:1c:59:7a:b3:b4:9f:da:7f:08:44:c4:fd: 68:d8:0b:68:16:a7:cb:a2:4c:3b:19:50:a8:23:d4:7c:dc:6f: 66:79:e4:6d:eb:fc:a5:d0:63:76:23:85:9d:7b:8a:6b:df:ef: 96:71:5d:9c:b1:c1:7d:04:ad:d8:13:02:1a:0c:6e:ad:5a:1f: 9c:a7:ce:67:48:d3:ae:65:e9:fd:15:83:d7:78:6b:e6:26:2e: bb:10:14:3a:8f:6b:e2:4a:8f:cb:fd:e4:e8:d3:b4:2d:10:ae: 60:47:6f:c8:97:d0:b4:fd:d6:fb:a7:e7:49:b4:fd:b0:11:ad: 2c:18:63:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQarzpprWaiC667uIRZLBEaS9z3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj YjA1Yjg2NjAeFw0yNjA5MDkyMDU2MjlaFw0yNjA5MTEwMDEwMjlaMDMxMTAvBgNV BAMTKERFNUQwNTcwOERGODgzQjZFMzdDMjM1NjY0Q0M3NTU2OThBRUVEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+OjqHe7PdjuF4/rbQ3niOgZc WHgZNjv+y1Y5z1wv1D/TVliw6ObUtfeklQmI7C+eolFegvx+zPkZpVSdNO0Bwrm6 JAsgSN2dHkEMxbdbWZysIvFgaA13sWeshTgH66ZK/VW9xY0cySmmJHxK1f8q0HYp Oacfh+CHfLaZnTPx4HlV0uLpCdSjZnkzxXb4Q9sVXaeIzNYE98gyztsbuRt84iBP n9ZDzcKZ6OlgAxiB0XjsGFjrHTLB4Q80Vb2W39ULJqtFVvPtsk4vpc4t36mqgh0f HAQsCvk7qYdonCS17O+v0pjKZHkE1hhx2Z1Fq13pRzmD7LFdjFrokkTzjnNnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3l0FcI34g7bjfCNWZMx1Vpiu7Z8wHwYDVR0j BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2 M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz RnVHWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNWEwZWZmMi1i NDVjLTQyOWYtOTAwMS0yMzQxZDQ2YjYzZTAvMC9BQzBDRTNFNkE5REJDRkEyNTFF NTZFNTAwMkVDNEJCQkNCMDVCODY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnZ7y/u1socwX6Xfzne4 7ptCg+zMyLCJVOK0FDBPNmVe5Xaw/LarzFWQOKgkdIlSJJUNeYC4vE49IWMEmnCK 6XxlMxRhM4bFOuY/n2cqdSeb9WJkRPm70GKegnILej9vBEfS1OVD436pgo7r7WjE LfqBfaYDRjV+rAYdJCFaXM27plFjHFl6s7Sf2n8IRMT9aNgLaBany6JMOxlQqCPU fNxvZnnkbev8pdBjdiOFnXuKa9/vlnFdnLHBfQSt2BMCGgxurVofnKfOZ0jTrmXp /RWD13hr5iYuuxAUOo9r4kqPy/3k6NO0LRCuYEdvyJfQtP3W+6fnSbT9sBGtLBhj fw== -----END CERTIFICATE-----Generated at Thu Sep 10 13:02:49 2026 by rpki-client