$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: G5kfyKXS2QahUfOpnRVFTcs+uLok3GczvCsl0paWD0c= Subject key identifier: 57:54:10:CF:48:66:43:92:54:84:CF:2A:31:40:FD:ED:DC:3F:63:B2 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 4FB117BDF16C453E1C50260D0A488436BA9950EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 0107 Signing time: Sun 11 Oct 2026 04:01:43 +0000 Manifest this update: Sun 11 Oct 2026 03:56:43 +0000 Manifest next update: Mon 12 Oct 2026 06:05:43 +0000 Files and hashes: 1: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 2: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 3: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: gUYAB4RO9nRGed48zlGsJEj2UT52V08yIqyMOcL/EEQ=) 4: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 5: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 6: 326131333a633863333a636634343a3a2f34382d3438203d3e20323133393030.roa (hash: 3GXa+2XIK7stJdY1SqQiakywDCAlEMshv57Bp3q+wsA=) 7: 326131333a633863333a636634333a3a2f34382d3438203d3e20323133393030.roa (hash: Wb7V6a2gWKghvPXm+g51HScY4CWk014Mgj5mRtuKWWs=) 8: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 9: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 10: 326131333a633863333a636634313a3a2f34382d3438203d3e20323133393030.roa (hash: 5OYk9XuG5n0XPHmm6ASOMtybJfwu8B+Lomx1528IouI=) 11: 326131333a633863333a636634323a3a2f34382d3438203d3e20323133393030.roa (hash: d2Yg3Sq5yAX53PDute+UItFgOA8UemswTOjK3Fjeg24=) 12: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b1:17:bd:f1:6c:45:3e:1c:50:26:0d:0a:48:84:36:ba:99:50:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Oct 11 03:56:43 2026 GMT Not After : Oct 12 06:05:43 2026 GMT Subject: CN=575410CF486643925484CF2A3140FDEDDC3F63B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:a0:1a:0e:8c:b3:e1:16:bb:a5:7f:be:8c: 9b:f8:ab:e1:e6:8e:3d:c0:ff:51:0a:1e:d6:41:73: 29:f2:4c:a7:f5:36:c3:0e:a5:5d:32:b4:93:d8:dd: 5c:83:5c:e0:4c:1b:bd:d0:63:08:53:f0:b9:fe:5c: f0:69:3a:d3:c7:b6:a2:ab:9f:94:12:c1:fc:43:17: 76:c1:86:8c:0b:a0:f2:4c:9b:a9:e5:5b:7d:86:e5: 87:19:f4:43:c5:37:7d:1a:e5:eb:7c:a0:f3:0f:51: c0:85:0b:34:ab:e8:98:a2:eb:fd:2f:95:ba:44:9a: 88:69:56:eb:34:29:71:ab:2e:9a:08:aa:dc:6b:97: 4e:f8:f6:0f:75:64:50:dd:ae:f9:8b:f3:65:8c:f7: ca:0e:78:e2:aa:c6:01:ae:d3:d0:76:34:25:b6:46: 5e:f4:aa:66:83:40:6b:21:5b:aa:d3:4d:74:9d:c3: d2:9c:e4:03:b1:87:ed:8f:87:78:de:cf:62:f0:c4: c0:69:0f:b1:c0:4e:a5:db:3c:1c:ab:52:59:f3:13: 28:a2:f8:97:ae:5a:00:cc:f1:bf:73:8b:79:f6:9f: 2e:08:d7:27:25:4c:c9:81:82:c8:22:15:1c:4e:1b: 16:9f:38:c3:28:3f:8e:dd:a4:a6:f0:70:f4:a2:32: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:10:CF:48:66:43:92:54:84:CF:2A:31:40:FD:ED:DC:3F:63:B2 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8a:0f:3d:9d:db:24:50:94:f0:68:48:20:29:60:8e:60:13: 6d:6a:62:7b:3c:5b:80:70:9e:88:f8:61:73:8c:4e:32:8d:1b: 9d:5b:b5:9a:de:00:53:fd:82:fa:bd:78:6e:97:0a:a1:45:32: d7:f1:1e:b0:ea:e3:1b:8c:6b:b9:8e:54:6b:82:3b:30:44:e6: ea:58:f3:00:c8:20:a2:32:ef:f0:44:9c:64:26:b3:cf:bb:59: 38:35:fc:94:55:6a:ea:8c:6b:28:a8:07:52:e9:a8:77:6b:15: e8:15:66:59:c1:1b:4c:9f:6c:db:55:f5:aa:24:ee:23:b6:76: 39:51:f8:c8:78:68:45:7f:d4:d2:46:9f:a4:d1:56:60:bc:85: 95:45:91:9f:ab:35:f4:99:5d:05:dd:37:5d:b8:95:84:b7:a4: e5:4a:be:87:ec:b8:66:57:eb:1f:97:29:6d:d4:2b:44:ef:4d: 03:0e:27:5e:2d:4a:91:aa:6f:03:32:f3:d5:08:49:2c:38:ad: ef:64:de:ab:5b:22:2a:f3:77:26:8d:45:f9:ab:52:f4:e6:49: 8f:2d:bd:e9:25:8b:0b:40:9d:a1:63:5f:e0:7f:b7:95:d1:b9: 8e:f0:30:a5:66:3f:87:76:bc:d6:b2:c6:9c:2a:e0:ce:82:7b: 57:03:95:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT7EXvfFsRT4cUCYNCkiENrqZUO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjEwMTEwMzU2NDNaFw0yNjEwMTIwNjA1NDNaMDMxMTAvBgNV BAMTKDU3NTQxMENGNDg2NjQzOTI1NDg0Q0YyQTMxNDBGREVEREMzRjYzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oaAaDoyz4Ra7pX++jJv4q+Hm jj3A/1EKHtZBcynyTKf1NsMOpV0ytJPY3VyDXOBMG73QYwhT8Ln+XPBpOtPHtqKr n5QSwfxDF3bBhowLoPJMm6nlW32G5YcZ9EPFN30a5et8oPMPUcCFCzSr6Jii6/0v lbpEmohpVus0KXGrLpoIqtxrl0749g91ZFDdrvmL82WM98oOeOKqxgGu09B2NCW2 Rl70qmaDQGshW6rTTXSdw9Kc5AOxh+2Ph3jez2LwxMBpD7HATqXbPByrUlnzEyii +JeuWgDM8b9zi3n2ny4I1yclTMmBgsgiFRxOGxafOMMoP47dpKbwcPSiMhxzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV1QQz0hmQ5JUhM8qMUD97dw/Y7IwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIoPPZ3bJFCU8GhIIClg jmATbWpiezxbgHCeiPhhc4xOMo0bnVu1mt4AU/2C+r14bpcKoUUy1/EesOrjG4xr uY5Ua4I7METm6ljzAMggojLv8EScZCazz7tZODX8lFVq6oxrKKgHUumod2sV6BVm WcEbTJ9s21X1qiTuI7Z2OVH4yHhoRX/U0kafpNFWYLyFlUWRn6s19JldBd03XbiV hLek5Uq+h+y4ZlfrH5cpbdQrRO9NAw4nXi1KkapvAzLz1QhJLDit72Teq1siKvN3 Jo1F+atS9OZJjy296SWLC0CdoWNf4H+3ldG5jvAwpWY/h3a81rLGnCrgzoJ7VwOV 8Q== -----END CERTIFICATE-----Generated at Sun Oct 11 14:29:04 2026 by rpki-client