$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: D/NsHZc6WaAPbPLYUwuT2AxoFuLgBPb4HXomoizrn54= Subject key identifier: A7:9F:9B:FA:E6:80:84:0B:85:25:00:B0:8D:98:06:FD:F4:F2:15:E8 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 52E0BAE1CDF525423967550C9855DFFDD50E44BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 02CC Signing time: Fri 04 Sep 2026 10:39:55 +0000 Manifest this update: Fri 04 Sep 2026 10:34:55 +0000 Manifest next update: Sat 05 Sep 2026 12:53:55 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: 8YGWW5htsXcMsDDZgPxObU4JkwUUmKaB4Oc9re0DCoY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 12:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e0:ba:e1:cd:f5:25:42:39:67:55:0c:98:55:df:fd:d5:0e:44:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Sep 4 10:34:55 2026 GMT Not After : Sep 5 12:53:55 2026 GMT Subject: CN=A79F9BFAE680840B852500B08D9806FDF4F215E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:e5:dc:2e:37:3a:a7:40:46:c7:b1:06:17: ae:ce:3c:3f:4f:8c:7e:c1:4d:ef:9f:4d:66:34:81: f0:72:ee:a0:16:09:02:40:7f:15:23:25:db:93:73: 6d:65:fb:54:43:e8:54:ed:3e:27:e0:ae:83:22:0a: e1:c5:5d:ae:50:5a:14:75:61:2d:22:1f:4c:17:2e: 70:3a:f8:e8:fa:e0:b3:b3:82:40:d3:2f:5d:73:c6: 3c:fe:65:fd:14:0e:da:23:66:19:26:70:e1:b5:07: a0:4e:f6:d2:78:cc:15:8b:cf:7b:a0:45:83:45:73: ab:2e:7c:c8:f8:bd:76:db:0f:46:eb:ac:c4:13:2a: b6:8a:cb:ae:38:a7:65:4a:e6:93:e5:db:30:a7:80: 96:19:49:e0:d2:a0:23:47:af:3b:00:ee:88:b3:7f: d3:9f:21:58:53:89:7a:28:c5:f3:b8:86:db:fb:8f: e4:26:89:01:6d:5c:93:47:e4:ed:3a:45:be:86:b4: b4:ef:4d:87:e2:1a:de:76:03:51:f0:cc:86:bd:82: b4:aa:90:0e:e3:b4:0d:cd:6b:55:16:a3:13:00:e2: a9:0f:ec:b4:9b:36:42:e8:a6:1a:78:3a:26:f2:73: 59:c6:81:6d:8e:27:45:0b:ff:6b:75:64:f8:a2:6a: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:9B:FA:E6:80:84:0B:85:25:00:B0:8D:98:06:FD:F4:F2:15:E8 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:96:02:d5:03:24:5e:3a:1e:ec:07:fb:50:48:77:1b:5b: 32:db:21:47:67:ab:d9:3d:49:97:a9:ed:2a:91:55:45:19:c2: df:42:07:73:94:99:d2:2a:dd:b9:4a:83:84:ac:ac:0a:1e:1c: 8d:24:51:97:d6:d0:8b:57:a2:93:7d:39:5e:32:14:20:5f:b4: 66:0b:67:07:36:c7:da:2d:07:96:66:97:42:54:d3:51:fe:f5: 03:0f:f3:21:4b:53:ca:90:7c:2b:e8:e3:03:f8:01:49:f1:af: 88:70:ae:13:79:c3:57:0f:34:9d:07:78:c7:64:34:b3:21:d2: cb:58:7d:d7:06:e8:2b:c7:52:ea:25:01:4b:19:19:99:85:a6: c1:b7:47:0d:06:a1:b2:30:a8:45:75:11:a8:a0:e6:55:6f:15: b9:96:60:d7:ce:ea:be:39:ac:e8:c4:22:a1:a7:a7:69:f1:c5: 78:9d:c2:13:87:4b:7e:8e:2f:8a:c5:a8:68:ac:a3:c8:39:2c: 42:83:9c:77:2e:65:26:45:6d:99:29:47:25:86:37:5d:a3:05: 62:a1:e5:9b:8c:6d:23:99:9b:ac:c0:ec:f3:4f:49:af:74:a8: 18:36:58:a7:d8:0f:80:69:12:c0:0f:9d:8b:23:41:ac:ad:c6: 7b:9b:4a:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUuC64c31JUI5Z1UMmFXf/dUORL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjA5MDQxMDM0NTVaFw0yNjA5MDUxMjUzNTVaMDMxMTAvBgNV BAMTKEE3OUY5QkZBRTY4MDg0MEI4NTI1MDBCMDhEOTgwNkZERjRGMjE1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL+XcLjc6p0BGx7EGF67OPD9P jH7BTe+fTWY0gfBy7qAWCQJAfxUjJduTc21l+1RD6FTtPifgroMiCuHFXa5QWhR1 YS0iH0wXLnA6+Oj64LOzgkDTL11zxjz+Zf0UDtojZhkmcOG1B6BO9tJ4zBWLz3ug RYNFc6sufMj4vXbbD0brrMQTKraKy644p2VK5pPl2zCngJYZSeDSoCNHrzsA7oiz f9OfIVhTiXooxfO4htv7j+QmiQFtXJNH5O06Rb6GtLTvTYfiGt52A1HwzIa9grSq kA7jtA3Na1UWoxMA4qkP7LSbNkLophp4Oibyc1nGgW2OJ0UL/2t1ZPiiavnBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUp5+b+uaAhAuFJQCwjZgG/fTyFegwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCO0ZYC 1QMkXjoe7Af7UEh3G1sy2yFHZ6vZPUmXqe0qkVVFGcLfQgdzlJnSKt25SoOErKwK HhyNJFGX1tCLV6KTfTleMhQgX7RmC2cHNsfaLQeWZpdCVNNR/vUDD/MhS1PKkHwr 6OMD+AFJ8a+IcK4TecNXDzSdB3jHZDSzIdLLWH3XBugrx1LqJQFLGRmZhabBt0cN BqGyMKhFdRGooOZVbxW5lmDXzuq+OazoxCKhp6dp8cV4ncITh0t+ji+KxahorKPI OSxCg5x3LmUmRW2ZKUclhjddowVioeWbjG0jmZuswOzzT0mvdKgYNlin2A+AaRLA D52LI0GsrcZ7m0qx -----END CERTIFICATE-----Generated at Sat Sep 5 00:37:19 2026 by rpki-client