$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: bZWCQwcHhG0F0D1rhTMcJ1n04bGvYuWVEomOTQKMs40= Subject key identifier: 8E:CB:A4:2E:17:CD:05:56:D8:65:1C:1B:6E:03:BE:F1:86:51:76:89 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 0F5682ABDD1BCB8E8C7ADD557B92AA2B5597C382 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 0131 Signing time: Thu 03 Sep 2026 12:12:37 +0000 Manifest this update: Thu 03 Sep 2026 12:07:37 +0000 Manifest next update: Fri 04 Sep 2026 12:20:37 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 3: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: YmVWSz5nnIxrOB39GAC9o39oRz8+Mr34wrKU3LW1evE=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Sep 2026 12:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:82:ab:dd:1b:cb:8e:8c:7a:dd:55:7b:92:aa:2b:55:97:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Sep 3 12:07:37 2026 GMT Not After : Sep 4 12:20:37 2026 GMT Subject: CN=8ECBA42E17CD0556D8651C1B6E03BEF186517689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:1d:2d:62:50:02:30:e9:cb:0d:68:78:f8: b4:de:72:c7:af:70:81:dc:da:4c:de:b7:4c:fa:af: 01:5d:e9:ee:a6:b9:40:d0:0e:f7:df:dc:87:2f:09: 47:35:7e:ee:3f:60:8c:3a:88:5b:8b:2b:a4:fa:4e: 43:6c:0f:8e:3f:15:2f:9e:8f:43:ef:49:28:47:e6: d8:1a:b1:b4:5b:50:11:ec:6a:28:06:b5:ff:64:f6: 90:f4:b6:0c:60:20:9c:32:73:dc:cb:b4:fd:79:d8: cb:fd:fc:f3:dc:82:ad:2c:7a:ed:e2:59:0a:86:f4: 0a:97:b8:78:f7:70:25:37:dc:47:3a:3a:26:c0:c6: 46:8a:42:51:6a:f0:cb:bb:91:06:23:41:07:93:2b: f5:10:f4:4f:e9:11:d6:16:07:6f:ac:52:40:0e:74: f4:62:cb:6d:d8:6a:aa:bc:21:ed:59:f3:99:6e:4c: ca:14:df:af:37:9d:02:ca:e9:30:45:b1:2d:a2:2b: a2:31:63:9d:fd:90:82:24:29:dc:c6:c9:5c:c2:fd: 46:48:66:2e:bd:ca:94:d9:81:c4:ab:c4:e3:50:b5: 41:66:8f:54:ae:c4:f0:5a:88:ab:15:6d:a2:7d:4a: f3:3c:ff:cc:7b:20:11:73:0e:ea:5c:0a:9b:26:56: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:A4:2E:17:CD:05:56:D8:65:1C:1B:6E:03:BE:F1:86:51:76:89 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:92:a2:09:61:50:9a:c2:b4:48:7a:5d:f2:87:71:ed:30:85: a6:e8:3b:45:df:d1:9b:2a:84:be:f7:3e:2e:ca:14:28:bf:04: 98:46:5d:6c:bc:d1:13:d9:46:c3:bd:7c:4c:5e:2f:21:f2:eb: 56:f6:42:6e:ef:68:ff:d7:73:44:46:c6:a1:d3:bc:55:16:7e: 94:1f:d9:52:46:9d:f4:82:14:b2:4f:96:a1:11:56:0d:44:f0: 10:8a:32:cf:2d:ba:b7:6d:52:35:81:ca:31:66:84:66:c4:9c: 09:d3:90:0a:46:30:49:31:d3:79:09:40:e9:d8:07:5a:26:5a: 86:88:b2:e8:c6:04:14:6b:a2:77:80:a6:e3:d9:f3:34:98:e6: 8c:be:0e:50:f3:b4:ed:6c:2b:df:42:d4:86:90:bc:cf:b5:fc: 40:65:41:e0:32:15:c8:a1:8f:50:ab:f5:62:d0:50:b0:69:86: 4b:c2:ea:d9:07:9c:d4:50:3b:e6:5c:30:da:ce:4d:a5:98:e5: 9e:40:2d:03:9b:9e:8c:e6:22:56:1e:5f:c2:a6:be:94:ab:7b: f5:7a:33:e3:f8:db:bb:0a:da:7f:33:1b:93:a5:31:a0:71:16: 6a:cf:10:4f:76:3f:5c:7d:2c:63:0b:9a:6b:18:80:42:87:73: 63:a6:5b:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD1aCq90by46Met1Ve5KqK1WXw4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA5MDMxMjA3MzdaFw0yNjA5MDQxMjIwMzdaMDMxMTAvBgNV BAMTKDhFQ0JBNDJFMTdDRDA1NTZEODY1MUMxQjZFMDNCRUYxODY1MTc2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCx0tYlACMOnLDWh4+LTecsev cIHc2kzet0z6rwFd6e6muUDQDvff3IcvCUc1fu4/YIw6iFuLK6T6TkNsD44/FS+e j0PvSShH5tgasbRbUBHsaigGtf9k9pD0tgxgIJwyc9zLtP152Mv9/PPcgq0seu3i WQqG9AqXuHj3cCU33Ec6OibAxkaKQlFq8Mu7kQYjQQeTK/UQ9E/pEdYWB2+sUkAO dPRiy23Yaqq8Ie1Z85luTMoU3683nQLK6TBFsS2iK6IxY539kIIkKdzGyVzC/UZI Zi69ypTZgcSrxONQtUFmj1SuxPBaiKsVbaJ9SvM8/8x7IBFzDupcCpsmVvW/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjsukLhfNBVbYZRwbbgO+8YZRdokwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzkqIJ YVCawrRIel3yh3HtMIWm6DtF39GbKoS+9z4uyhQovwSYRl1svNET2UbDvXxMXi8h 8utW9kJu72j/13NERsah07xVFn6UH9lSRp30ghSyT5ahEVYNRPAQijLPLbq3bVI1 gcoxZoRmxJwJ05AKRjBJMdN5CUDp2AdaJlqGiLLoxgQUa6J3gKbj2fM0mOaMvg5Q 87TtbCvfQtSGkLzPtfxAZUHgMhXIoY9Qq/Vi0FCwaYZLwurZB5zUUDvmXDDazk2l mOWeQC0Dm56M5iJWHl/Cpr6Uq3v1ejPj+Nu7Ctp/MxuTpTGgcRZqzxBPdj9cfSxj C5prGIBCh3NjplvS -----END CERTIFICATE-----Generated at Thu Sep 3 17:44:43 2026 by rpki-client