$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft File: 54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft (raw, json) Hash identifier: r2JH1TD60yqrVfEUhbE9S1lDSjzTLcO5t2GH5fPk8RE= Subject key identifier: 7B:8D:29:47:C6:A7:AB:9B:B8:49:76:51:A3:E4:D5:A6:24:67:D5:6F Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d Certificate serial: 3DD722D73939CF207B39370E5ACE7A5BC4970603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft Manifest number: 12 Signing time: Sat 12 Sep 2026 14:50:14 +0000 Manifest this update: Sat 12 Sep 2026 14:45:14 +0000 Manifest next update: Sun 13 Sep 2026 16:40:14 +0000 Files and hashes: 1: 3136302e32312e37342e302f32332d3234203d3e20393739.roa (hash: dg6G1ncYqhTPnnTRMPS6sK8jnRk6ZV8PtID37brs7HE=) 2: 3136302e32312e37322e302f32342d3234203d3e20343032383636.roa (hash: pTxwMQS36/iP7ThnnhIwAjirIH3e7bKzkPK+JopdpaA=) 3: 3136302e32312e37332e302f32342d3234203d3e20323138393535.roa (hash: qBo0xQc9No11go2nd/ogwHN4MvK9hJV0nAjiDX+dfpk=) 4: 3136302e32312e3134362e302f32332d3234203d3e20383334.roa (hash: RndFPdLvL0P9IjHnsIOA1HNI8RqLoZ0DD0AcQILGOR0=) 5: 3136302e32312e37342e302f32332d3234203d3e20323036333030.roa (hash: /hzxpBoMqDd2L0nPB4K0iySZ6VibEAmrFOdwOXZrRtw=) 6: 3136302e32312e3134382e302f32322d3234203d3e20383334.roa (hash: CbGtu8WmTGSH7iWvOXbsTkUrZypMnq+2eknWjrEuFHU=) 7: 3136302e32312e37332e302f32342d3234203d3e20323138393130.roa (hash: mQ3HaYBRClTauCVFosrFc5Fs3rgMh47mBTGslQvJdCg=) 8: 3136302e32312e3134352e302f32342d3234203d3e20383334.roa (hash: zpDu7lA9oEn6BnoGfxi3xceBrSu4W9s0wGagdfBs2zw=) 9: 3136302e32312e3134342e302f32342d3234203d3e20323138373339.roa (hash: AFrvcyWZdwCwv+FZnD2msjCW9Y3bvuPnv13pRz+mCks=) 10: 3136302e32312e37362e302f32322d3234203d3e203538333235.roa (hash: pBcRAWhdKXgxnP4VpTYqhD3KkhkkboFXgO72pOVpjIU=) 11: 54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl (hash: 7nY0z0Vopy+0382g55SYxLA5HFJGpK2kklqc+e0rF1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Sep 2026 16:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d7:22:d7:39:39:cf:20:7b:39:37:0e:5a:ce:7a:5b:c4:97:06:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d Validity Not Before: Sep 12 14:45:14 2026 GMT Not After : Sep 13 16:40:14 2026 GMT Subject: CN=7B8D2947C6A7AB9BB8497651A3E4D5A62467D56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:40:d1:4f:e4:e9:98:9a:b4:88:8e:44:51: b7:55:35:da:81:41:66:b6:64:cf:3f:2a:99:e6:1f: 12:59:bd:7d:b3:6f:53:e7:04:33:af:f0:e2:76:19: 88:dc:93:22:d5:58:ec:ed:6a:e1:1e:28:b1:dc:8a: 54:84:f0:c8:5f:dd:7c:d9:0c:43:2c:68:8c:d7:44: ef:3e:3f:8f:71:04:b1:17:66:66:b2:0d:ad:1c:d2: d2:2e:6c:a0:be:a4:de:69:39:ff:bd:24:10:7d:54: 15:02:9d:8d:90:a8:61:66:c5:6e:b9:3c:ca:b6:a5: 10:e5:f1:38:2f:7e:4b:3d:b9:c4:a9:f1:54:2b:6a: b1:66:83:5d:17:69:08:b2:ea:b5:a9:7a:a8:f5:2a: cf:79:bf:93:64:e5:9f:4c:02:a2:a4:bb:e9:b8:ec: 56:3d:bf:d3:69:93:a9:c4:fa:76:82:0a:a9:a2:fb: a1:56:f1:5b:6f:16:0c:c2:fd:a4:4d:12:b6:47:cc: 88:fc:3f:33:8b:49:5a:59:3e:4a:2a:73:4b:f0:b4: 04:da:25:22:49:8b:de:8d:6a:80:83:cd:b8:4c:ca: e1:20:38:ac:18:b6:33:eb:48:af:c9:31:ad:69:da: 1b:6e:ec:8b:ae:99:e3:11:98:9f:c0:10:c8:d9:a9: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8D:29:47:C6:A7:AB:9B:B8:49:76:51:A3:E4:D5:A6:24:67:D5:6F X509v3 Authority Key Identifier: keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0f:e2:20:e3:22:6e:f1:6e:b5:0d:c8:ea:07:f8:2b:39:d1: 49:61:0b:a1:3b:16:8e:9f:f7:4f:9e:03:35:7e:a3:5d:f2:6e: e3:ba:73:1f:e5:6a:f1:b1:ce:90:cd:e6:4f:73:38:98:46:07: 29:e4:c7:4b:87:67:36:b5:b9:29:73:e1:19:23:f5:48:78:b2: 2d:e4:b2:f3:4e:7f:a8:e4:bb:3c:6f:df:71:12:06:80:f2:08: 27:b8:ee:f3:2e:5c:fb:ea:cf:ba:8d:f5:65:bb:20:9f:bd:2d: d5:0d:2c:d3:03:68:a4:a6:5d:ae:dd:f6:e5:e9:88:f6:e8:56: 16:78:b6:00:12:1c:f0:2e:46:b5:96:2c:95:09:5b:aa:f4:94: e3:24:9a:64:c9:03:c1:91:39:57:ed:0c:cd:1d:b0:e6:cf:fe: 34:aa:fc:75:f8:a5:75:34:38:a1:63:95:83:88:29:8b:4b:c3: 9b:2a:95:31:20:8f:2e:ee:39:3d:16:f8:11:59:5b:ef:1c:18: 6c:93:2b:df:3c:79:8a:8c:08:bb:c6:07:0f:39:bc:0b:00:97: 70:e8:17:90:4d:fe:1c:31:35:41:76:48:66:d1:ef:a7:83:21: 24:fa:63:11:c5:02:d1:92:00:a2:ee:3b:e9:1d:f4:96:c3:01: e8:92:3a:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPdci1zk5zyB7OTcOWs56W8SXBgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi ZmNmMGU1ZDAeFw0yNjA5MTIxNDQ1MTRaFw0yNjA5MTMxNjQwMTRaMDMxMTAvBgNV BAMTKDdCOEQyOTQ3QzZBN0FCOUJCODQ5NzY1MUEzRTRENUE2MjQ2N0Q1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEkDRT+TpmJq0iI5EUbdVNdqB QWa2ZM8/KpnmHxJZvX2zb1PnBDOv8OJ2GYjckyLVWOztauEeKLHcilSE8Mhf3XzZ DEMsaIzXRO8+P49xBLEXZmayDa0c0tIubKC+pN5pOf+9JBB9VBUCnY2QqGFmxW65 PMq2pRDl8Tgvfks9ucSp8VQrarFmg10XaQiy6rWpeqj1Ks95v5Nk5Z9MAqKku+m4 7FY9v9Npk6nE+naCCqmi+6FW8VtvFgzC/aRNErZHzIj8PzOLSVpZPkoqc0vwtATa JSJJi96NaoCDzbhMyuEgOKwYtjPrSK/JMa1p2htu7IuumeMRmJ/AEMjZqZpXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUe40pR8anq5u4SXZRo+TVpiRn1W8wHwYDVR0j BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf UERsMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81Nzc1NTY2Ny1i ODRiLTQ1N2EtYTU4Yy1iNWVkYzFmNWU4ZTAvMC81NEJFNEQ4N0ZDQkU2Q0NBN0ND RTVCMzI1NEY2OTZEQkJGQ0YwRTVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg/iIOMibvFutQ3I6gf4 KznRSWELoTsWjp/3T54DNX6jXfJu47pzH+Vq8bHOkM3mT3M4mEYHKeTHS4dnNrW5 KXPhGSP1SHiyLeSy805/qOS7PG/fcRIGgPIIJ7ju8y5c++rPuo31Zbsgn70t1Q0s 0wNopKZdrt325emI9uhWFni2ABIc8C5GtZYslQlbqvSU4ySaZMkDwZE5V+0MzR2w 5s/+NKr8dfildTQ4oWOVg4gpi0vDmyqVMSCPLu45PRb4EVlb7xwYbJMr3zx5iowI u8YHDzm8CwCXcOgXkE3+HDE1QXZIZtHvp4MhJPpjEcUC0ZIAou476R30lsMB6JI6 cw== -----END CERTIFICATE-----Generated at Sun Sep 13 09:32:31 2026 by rpki-client