$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft (raw, json) Hash identifier: whKPH4261Mggn6FnHtka5vgtZ9JLbWLLsGbUCZyFyu4= Subject key identifier: 9B:E1:87:CF:98:F8:76:8C:C4:C9:98:99:D7:8F:4D:2F:F6:01:36:D0 Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 09253ADD86241C2B61D2F86E746499CB64CF2D81 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft Manifest number: 91 Signing time: Tue 06 Oct 2026 16:04:55 +0000 Manifest this update: Tue 06 Oct 2026 15:59:55 +0000 Manifest next update: Wed 07 Oct 2026 18:43:55 +0000 Files and hashes: 1: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl (hash: 3CV6mnPrH2nNKEOeuC3qu81GPQNeioEhSo/R0No1ZrQ=) 2: 326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa (hash: 2ZmhaFBQ0V4dJSXyRSyc++rk/qANEJwxFFR6aJ/nMXQ=) 3: 326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa (hash: AfgwqGMO9CVHdwQKzdsRfhf5hmoXRPoKOMuiQAxIyuk=) 4: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer (hash: y71+RU9g54azV5dgw7DVE0zHxfVhDYGxNOf9szJbWnM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 16:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:25:3a:dd:86:24:1c:2b:61:d2:f8:6e:74:64:99:cb:64:cf:2d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Oct 6 15:59:55 2026 GMT Not After : Oct 7 18:43:55 2026 GMT Subject: CN=9BE187CF98F8768CC4C99899D78F4D2FF60136D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:de:fb:a2:08:a8:27:62:45:28:c9:ae:66: 70:85:ec:e4:35:85:9a:96:1e:48:e5:9f:84:47:e0: e6:d7:84:b9:b3:57:41:04:45:ea:c2:a3:ce:fe:81: f4:cd:80:8e:69:9c:49:3e:aa:92:80:36:9f:07:8f: f0:ca:10:2b:84:1a:30:af:5f:ec:d3:e0:75:ea:72: 02:1d:61:91:b1:f7:c8:a2:c2:2b:8b:7c:86:76:30: 40:ba:61:d0:a6:53:05:69:a4:30:8c:37:28:47:f5: f6:5e:41:54:0c:74:c0:ce:fe:c6:41:12:40:20:03: 92:4a:c2:8d:9d:1c:ab:07:6b:a0:71:26:22:5d:1d: 71:bb:cf:b6:e8:22:35:6c:c9:c8:f2:ea:53:f7:c0: 15:d2:9f:6a:45:11:95:7a:63:40:51:f8:7b:95:d7: 0c:6d:34:57:9c:90:5b:85:f9:28:88:a9:1c:fa:4b: 29:50:fa:fc:a4:90:39:d4:26:f8:b5:6f:e0:d6:a6: 11:be:4e:8e:3c:f4:cd:f1:70:95:f8:30:83:87:9b: 60:8f:a6:66:0f:70:e4:4b:3f:f1:b4:79:73:ac:c2: d6:7a:d0:78:97:37:f4:be:d2:0c:b0:8d:0f:11:fc: fa:2e:7f:7a:41:ba:8c:fd:b4:70:22:52:9d:48:0f: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E1:87:CF:98:F8:76:8C:C4:C9:98:99:D7:8F:4D:2F:F6:01:36:D0 X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8c:f8:63:ca:78:53:e4:63:ad:3f:bf:3a:22:57:73:74:38: d6:98:55:f4:c7:60:c5:bb:95:f9:bb:4a:13:e5:2a:3e:57:a7: 62:d6:ca:b5:64:1f:9d:33:1c:6e:67:dc:23:4c:71:77:22:8d: 73:91:46:33:b7:31:9d:74:e2:e0:ba:16:2a:8d:8f:0a:49:37: 51:ca:f4:e5:58:b4:92:f5:0c:f8:b9:8a:b9:79:01:67:e7:02: f3:63:00:ba:2a:5f:f3:9b:43:af:1b:51:7b:4b:0b:48:91:a6: 56:8a:05:c5:ae:3b:ae:ea:f5:b6:88:d6:c9:72:03:00:f1:14: 3f:64:21:08:f7:76:db:5d:91:bd:c1:76:f3:07:ac:5e:0b:18: 1f:f9:ac:c8:c6:e7:7d:2d:86:f7:1f:35:49:bb:e8:30:fc:8d: 3c:f2:22:97:a5:0f:b8:23:0a:42:62:b4:b1:94:db:33:11:1d: f1:77:14:d9:be:1f:92:82:75:f0:97:f0:0d:fc:0f:08:6d:a2: 5c:96:05:b9:67:f8:1c:85:fb:2d:b1:e3:5c:b7:ba:fe:34:14: b7:dc:75:9b:a7:9d:5a:24:44:2a:9e:1d:d7:bf:9e:6b:cc:0a: 31:42:6f:0e:7d:5d:49:5a:c0:27:c2:65:20:35:ed:74:d3:07: b6:f0:b0:92 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCSU63YYkHCth0vhudGSZy2TPLYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjEwMDYxNTU5NTVaFw0yNjEwMDcxODQzNTVaMDMxMTAvBgNV BAMTKDlCRTE4N0NGOThGODc2OENDNEM5OTg5OUQ3OEY0RDJGRjYwMTM2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7d77ogioJ2JFKMmuZnCF7OQ1 hZqWHkjln4RH4ObXhLmzV0EERerCo87+gfTNgI5pnEk+qpKANp8Hj/DKECuEGjCv X+zT4HXqcgIdYZGx98iiwiuLfIZ2MEC6YdCmUwVppDCMNyhH9fZeQVQMdMDO/sZB EkAgA5JKwo2dHKsHa6BxJiJdHXG7z7boIjVsycjy6lP3wBXSn2pFEZV6Y0BR+HuV 1wxtNFeckFuF+SiIqRz6SylQ+vykkDnUJvi1b+DWphG+To489M3xcJX4MIOHm2CP pmYPcORLP/G0eXOswtZ60HiXN/S+0gywjQ8R/Pouf3pBuoz9tHAiUp1IDwj9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUm+GHz5j4dozEyZiZ149NL/YBNtAwHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY3ODJkMzhiLTQwMTYtNDk2YS04Mjk4LWUzZTk3YmVlOTdiZC8xLzMwMEY4N0U0 NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJjPhj ynhT5GOtP786IldzdDjWmFX0x2DFu5X5u0oT5So+V6di1sq1ZB+dMxxuZ9wjTHF3 Io1zkUYztzGddOLguhYqjY8KSTdRyvTlWLSS9Qz4uYq5eQFn5wLzYwC6Kl/zm0Ov G1F7SwtIkaZWigXFrjuu6vW2iNbJcgMA8RQ/ZCEI93bbXZG9wXbzB6xeCxgf+azI xud9LYb3HzVJu+gw/I088iKXpQ+4IwpCYrSxlNszER3xdxTZvh+SgnXwl/AN/A8I baJclgW5Z/gchfstseNct7r+NBS33HWbp51aJEQqnh3Xv55rzAoxQm8OfV1JWsAn wmUgNe100we28LCS -----END CERTIFICATE-----Generated at Wed Oct 7 07:48:05 2026 by rpki-client