$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: SsWNsStSXHouaGMsY6F9OG+6HmfVQkWmJud/ugcYdjM= Subject key identifier: 15:D9:13:B0:98:7F:38:21:63:8E:3E:3B:BB:03:BD:51:47:79:E8:C9 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 6C1DEC2AAA03B22A7379D7831825416456A881D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 0174 Signing time: Thu 22 Oct 2026 03:25:24 +0000 Manifest this update: Thu 22 Oct 2026 03:20:24 +0000 Manifest next update: Fri 23 Oct 2026 03:31:24 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: AjqTtlt9BjSrp7xEZKOKzvAsyjnmzxIBDNiT2zY+v3U=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1d:ec:2a:aa:03:b2:2a:73:79:d7:83:18:25:41:64:56:a8:81:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Oct 22 03:20:24 2026 GMT Not After : Oct 23 03:31:24 2026 GMT Subject: CN=15D913B0987F3821638E3E3BBB03BD514779E8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:94:97:0a:8c:43:79:f6:13:13:8d:d3:74: 09:8a:c0:34:54:37:bd:85:79:bd:34:c9:69:77:5b: 05:3d:5f:40:5f:aa:bd:76:da:31:e6:d4:fe:3f:48: 0f:a0:64:1d:0a:85:c5:27:5b:f0:40:c5:66:29:da: 2a:c6:55:b8:60:92:7e:b1:d3:26:1e:50:d7:e6:9f: 87:c8:4c:96:ba:92:32:ab:7e:39:fa:b4:ff:ea:e8: d7:1b:ea:bc:3c:d8:13:a9:0f:d5:34:31:16:6b:6d: 47:b7:7e:a5:5d:48:56:87:a5:37:8e:1c:ce:88:45: a9:2b:fc:bd:82:03:2b:af:00:91:55:f8:d6:d4:87: 29:bd:00:ab:9c:33:48:81:10:86:87:58:58:9d:ac: af:33:10:c8:74:f3:cf:3c:48:96:10:22:a8:77:c0: 59:10:76:81:64:71:ef:38:14:34:0a:b5:22:97:6c: 15:31:4e:c0:38:e0:c7:17:69:b7:93:3c:51:7f:c2: 2c:cb:39:35:e3:19:fe:7c:3a:98:8a:d8:0d:92:20: 96:e7:28:21:97:0c:c3:9a:1c:7c:47:ca:4e:07:1e: 99:0c:28:61:11:51:0f:d0:59:fe:be:90:cb:5d:fa: ae:33:c9:31:ff:bb:b6:8d:24:20:48:e4:73:ac:dc: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D9:13:B0:98:7F:38:21:63:8E:3E:3B:BB:03:BD:51:47:79:E8:C9 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9e:26:e5:3b:b6:88:2b:d3:c3:85:b1:18:66:a6:75:65:00: ea:75:88:d8:b5:05:58:3f:70:36:6d:db:48:ae:c8:ec:86:ca: 20:62:49:1c:38:15:60:48:32:0a:43:7f:7e:1c:3a:26:ab:b1: 0b:79:dd:d4:9a:2a:f9:9f:4e:8f:28:64:72:5f:6d:0b:d7:fc: 93:8e:09:bb:02:6c:4d:0a:02:88:fc:25:1a:3e:9d:ef:32:c3: ed:2f:18:e9:72:9b:e2:45:59:b7:7f:3b:4c:ac:c5:30:fc:bd: fb:17:57:86:29:40:b0:28:ec:16:c0:03:31:cc:c1:64:7c:b1: 6d:a2:6a:9e:f3:89:64:e8:6e:7e:0f:c3:3f:af:61:b6:b8:f6: ff:8a:2f:e4:d6:ac:46:0d:3d:de:2c:32:c9:9a:ae:ef:12:7f: 7d:18:1d:f1:be:e7:98:e7:d6:56:c3:c8:f9:2c:81:db:bc:06: b1:8d:3f:5c:d5:36:29:95:51:a7:58:d1:38:ab:1b:f8:0a:1a: c0:cd:60:b6:9d:2f:97:da:76:f7:04:5d:f6:93:fd:c2:e1:7f: a3:bd:da:50:32:fd:19:49:a3:9a:fa:11:b4:ff:e7:cd:7b:7d: 4d:3b:eb:f7:25:27:39:ee:76:8b:ae:cd:47:95:ce:af:9f:9e: 63:85:99:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbB3sKqoDsipzedeDGCVBZFaogdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjEwMjIwMzIwMjRaFw0yNjEwMjMwMzMxMjRaMDMxMTAvBgNV BAMTKDE1RDkxM0IwOTg3RjM4MjE2MzhFM0UzQkJCMDNCRDUxNDc3OUU4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdZSXCoxDefYTE43TdAmKwDRU N72Feb00yWl3WwU9X0Bfqr122jHm1P4/SA+gZB0KhcUnW/BAxWYp2irGVbhgkn6x 0yYeUNfmn4fITJa6kjKrfjn6tP/q6Ncb6rw82BOpD9U0MRZrbUe3fqVdSFaHpTeO HM6IRakr/L2CAyuvAJFV+NbUhym9AKucM0iBEIaHWFidrK8zEMh08888SJYQIqh3 wFkQdoFkce84FDQKtSKXbBUxTsA44McXabeTPFF/wizLOTXjGf58OpiK2A2SIJbn KCGXDMOaHHxHyk4HHpkMKGERUQ/QWf6+kMtd+q4zyTH/u7aNJCBI5HOs3HL7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFdkTsJh/OCFjjj47uwO9UUd56MkwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACnibl O7aIK9PDhbEYZqZ1ZQDqdYjYtQVYP3A2bdtIrsjshsogYkkcOBVgSDIKQ39+HDom q7ELed3Umir5n06PKGRyX20L1/yTjgm7AmxNCgKI/CUaPp3vMsPtLxjpcpviRVm3 fztMrMUw/L37F1eGKUCwKOwWwAMxzMFkfLFtomqe84lk6G5+D8M/r2G2uPb/ii/k 1qxGDT3eLDLJmq7vEn99GB3xvueY59ZWw8j5LIHbvAaxjT9c1TYplVGnWNE4qxv4 ChrAzWC2nS+X2nb3BF32k/3C4X+jvdpQMv0ZSaOa+hG0/+fNe31NO+v3JSc57naL rs1Hlc6vn55jhZk6 -----END CERTIFICATE-----Generated at Thu Oct 22 09:28:49 2026 by rpki-client