$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: LUuU/CNe5La/u6ELQzomXUX3b5MMv1pNOGmlyH4G8jQ= Subject key identifier: 01:2F:34:54:86:73:57:C5:E3:BE:8F:97:EE:3C:C6:38:C6:8E:EF:F3 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 143DD004993F372762082E8E6525407554C7101B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: CC Signing time: Wed 26 Aug 2026 21:28:20 +0000 Manifest this update: Wed 26 Aug 2026 21:23:20 +0000 Manifest next update: Thu 27 Aug 2026 22:20:20 +0000 Files and hashes: 1: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 2: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 3: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) 4: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 5: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 6: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: CwHtjvUdVLd/5dsAltpyeOnYRm23t8+SbOiJt93+6QU=) 7: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 8: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 9: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 10: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 11: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 12: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3d:d0:04:99:3f:37:27:62:08:2e:8e:65:25:40:75:54:c7:10:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Aug 26 21:23:20 2026 GMT Not After : Aug 27 22:20:20 2026 GMT Subject: CN=012F3454867357C5E3BE8F97EE3CC638C68EEFF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:4f:57:c1:df:a7:61:7f:1b:af:92:69:7c: af:25:e2:b9:f0:ff:3e:62:9a:fc:6f:1c:87:32:4a: 28:96:c1:d6:94:61:41:6f:62:20:48:a4:e9:32:82: ec:6a:7a:4a:ce:4f:f9:47:1b:09:48:c8:61:b3:e9: 4a:04:a6:ec:ed:f1:f4:97:a9:af:62:5a:01:51:a5: 76:c5:50:9f:9a:38:28:3c:9f:6e:19:04:5e:9a:5c: a0:73:a9:08:e4:d6:f4:1c:71:f5:e8:32:8c:0b:a1: 96:08:7d:1c:3a:77:13:07:a4:70:c8:17:18:6a:34: 8a:6b:fc:23:cf:72:10:32:94:00:ef:9a:61:85:e5: a1:72:b9:ce:e0:60:9b:ab:59:b9:2d:0f:78:61:72: f9:80:f4:04:f6:fa:21:5b:7e:97:6a:c9:eb:2e:39: 29:c0:af:44:6b:1c:0d:0c:72:fb:b5:13:88:9c:0d: 45:0b:23:9f:de:ae:94:cc:e1:12:50:dd:7f:8e:f9: 54:f8:52:26:d6:44:c7:4d:d7:36:f4:dd:ef:ad:aa: f5:a1:85:b6:98:92:29:7f:9e:58:52:45:9f:45:f7: 6b:d5:b4:20:cc:5b:5c:66:9f:d6:cd:3c:47:f8:d2: 54:07:16:31:34:b9:86:ef:1e:88:3a:f2:2f:7b:9a: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:34:54:86:73:57:C5:E3:BE:8F:97:EE:3C:C6:38:C6:8E:EF:F3 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:51:c1:da:9a:14:a4:65:cb:2e:87:33:7f:07:d9:61:af: 99:13:df:bb:8d:b1:70:2d:52:48:f5:db:31:46:36:92:5c:c6: 19:e3:d2:3b:c6:5e:62:35:e6:17:6e:a3:db:b6:ef:46:44:f1: 39:25:34:b6:29:b4:49:79:a6:09:6f:65:1e:f1:04:cb:a6:8a: 88:72:5d:98:3d:8a:87:13:dd:b9:c8:db:e1:3f:b6:ec:b8:96: 0a:8c:94:c9:af:7b:97:66:e7:31:8e:58:da:a9:c7:b9:6d:86: 25:98:8a:02:71:2b:e5:8e:b7:28:df:4b:b2:18:27:4f:cf:54: 56:ec:f3:7b:21:63:46:91:a8:0c:8c:cc:f5:93:88:df:88:e6: ba:db:0d:b4:19:2e:ec:2d:9e:70:98:a9:b6:6c:45:c5:f5:6b: 66:70:2f:e0:82:c4:9c:5e:14:c1:80:2b:92:b7:5f:85:7a:e4: e0:cc:95:22:1f:fd:11:e6:b5:80:4f:28:ac:ce:0d:51:b8:3e: b0:d0:6f:52:50:0f:8f:f1:3e:d6:b6:2b:65:8f:2a:fc:06:c1: 27:4b:76:e7:0a:81:a6:8e:2f:a0:b9:f5:83:a3:4f:cc:cd:65: 97:34:d3:8a:2d:3c:a7:94:fc:e1:2e:28:90:bd:6e:e9:a5:75: 03:6b:d3:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFD3QBJk/NydiCC6OZSVAdVTHEBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA4MjYyMTIzMjBaFw0yNjA4MjcyMjIwMjBaMDMxMTAvBgNV BAMTKDAxMkYzNDU0ODY3MzU3QzVFM0JFOEY5N0VFM0NDNjM4QzY4RUVGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ME9Xwd+nYX8br5JpfK8l4rnw /z5imvxvHIcySiiWwdaUYUFvYiBIpOkyguxqekrOT/lHGwlIyGGz6UoEpuzt8fSX qa9iWgFRpXbFUJ+aOCg8n24ZBF6aXKBzqQjk1vQccfXoMowLoZYIfRw6dxMHpHDI FxhqNIpr/CPPchAylADvmmGF5aFyuc7gYJurWbktD3hhcvmA9AT2+iFbfpdqyesu OSnAr0RrHA0Mcvu1E4icDUULI5/erpTM4RJQ3X+O+VT4UibWRMdN1zb03e+tqvWh hbaYkil/nlhSRZ9F92vVtCDMW1xmn9bNPEf40lQHFjE0uYbvHog68i97mvLNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAS80VIZzV8Xjvo+X7jzGOMaO7/MwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM79RwdqaFKRlyy6HM38H 2WGvmRPfu42xcC1SSPXbMUY2klzGGePSO8ZeYjXmF26j27bvRkTxOSU0tim0SXmm CW9lHvEEy6aKiHJdmD2KhxPducjb4T+27LiWCoyUya97l2bnMY5Y2qnHuW2GJZiK AnEr5Y63KN9LshgnT89UVuzzeyFjRpGoDIzM9ZOI34jmutsNtBku7C2ecJiptmxF xfVrZnAv4ILEnF4UwYArkrdfhXrk4MyVIh/9Eea1gE8orM4NUbg+sNBvUlAPj/E+ 1rYrZY8q/AbBJ0t25wqBpo4voLn1g6NPzM1llzTTii08p5T84S4okL1u6aV1A2vT EA== -----END CERTIFICATE-----Generated at Thu Aug 27 05:33:31 2026 by rpki-client