$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: QX1E18b5BGOcshe3EhgQcbL37C9Kd0c2VjAVWgecxiw= Subject key identifier: 15:B6:EC:45:53:B1:99:43:7B:C0:8C:5E:F2:EB:F8:AF:C6:44:15:78 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 55BF814F0521F79047C03C56F1EC9AF941D371FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 04D4 Signing time: Fri 23 Oct 2026 17:18:39 +0000 Manifest this update: Fri 23 Oct 2026 17:13:39 +0000 Manifest next update: Sat 24 Oct 2026 20:57:39 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: oaOjsA/ea8mh2yvq3UO+jvNNoyPO/R0rHNTp+hGKo9A=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: HQEu8eYvjyP9zxw52if2ByZCKMBlvBou/QvJ8VXiID4=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 20:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bf:81:4f:05:21:f7:90:47:c0:3c:56:f1:ec:9a:f9:41:d3:71:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Oct 23 17:13:39 2026 GMT Not After : Oct 24 20:57:39 2026 GMT Subject: CN=15B6EC4553B199437BC08C5EF2EBF8AFC6441578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:bb:a4:3f:ac:27:ce:e5:73:77:2c:e8:8f: f2:0e:70:39:97:98:75:bd:65:1c:b2:9b:f5:3d:b3: 2d:37:8a:56:1c:37:03:5e:d1:03:b2:99:ff:1f:0b: 3b:00:71:85:66:df:18:a0:5d:be:eb:d0:5c:ef:d9: ec:05:2b:56:14:2c:2c:ad:5f:70:5f:0c:13:37:de: db:ec:68:c7:57:2f:bc:cf:eb:85:69:a2:50:99:b7: 00:32:b5:24:26:dd:25:63:c4:df:8e:56:5f:99:6d: a7:c8:41:7a:bb:ae:65:2f:02:34:8d:1f:df:33:b8: 8a:76:37:b7:1c:04:9a:86:57:20:f4:a0:74:72:25: 4e:ec:94:65:8d:bd:30:00:6b:a6:a5:17:21:68:c0: ac:e6:b5:08:30:54:35:2f:f6:03:dc:cd:67:5b:17: 57:fb:7c:dd:2f:f0:6c:79:2d:04:41:fd:2d:a8:ab: 68:22:dd:0b:38:82:7e:05:e9:69:cc:cf:5a:b2:7c: c7:57:46:68:ec:98:a4:40:3f:52:9b:72:76:59:09: 83:40:c7:1a:dc:66:14:0f:18:10:8c:70:c5:81:ad: 00:c2:60:49:95:11:ae:cb:df:fc:b0:5c:d8:23:2b: 0f:13:e6:de:36:4c:db:df:eb:ae:9c:2c:e4:59:0f: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:EC:45:53:B1:99:43:7B:C0:8C:5E:F2:EB:F8:AF:C6:44:15:78 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ae:0b:bc:ad:85:3f:5f:01:8d:05:83:e8:2a:f9:bc:5e:c2: 47:3f:39:95:ab:a7:16:a5:ad:a4:e4:75:7f:df:0b:ff:07:c2: 7e:d7:ec:92:cb:36:c3:9c:03:a9:23:7c:5b:65:fb:90:81:b7: dc:3a:40:02:dd:45:8a:0b:ae:42:31:c8:af:af:62:dd:aa:1d: 95:c1:c5:8d:d2:d7:b1:50:43:da:c6:78:2a:5f:15:75:4f:bf: 54:a9:40:f0:fb:dd:99:dc:3b:f6:16:be:85:f7:6e:bb:f6:55: 8a:8b:6e:d9:26:62:49:88:75:44:15:57:9c:53:bd:71:d1:f0: b4:9c:ad:34:c5:64:79:58:1e:b6:76:05:d3:2c:56:49:50:c0: 17:d9:84:18:05:4e:67:7c:da:e9:b6:a9:15:b5:23:f4:d2:b8: 60:c6:54:e3:90:44:1b:c6:90:13:78:b2:78:5b:1b:44:11:84: 97:f8:8e:81:3c:ae:be:51:97:c1:81:71:c9:de:d9:99:c5:6f: e2:9d:09:22:e3:df:ee:54:85:06:0e:d0:79:18:c3:ec:fa:68: bd:af:0f:37:a7:ab:16:06:3d:4c:33:a8:2c:f2:e0:16:85:69: 2b:a3:b7:af:11:29:bd:b4:b4:89:53:b6:c2:49:8c:e6:15:82: 3d:94:49:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVb+BTwUh95BHwDxW8eya+UHTcf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjEwMjMxNzEzMzlaFw0yNjEwMjQyMDU3MzlaMDMxMTAvBgNV BAMTKDE1QjZFQzQ1NTNCMTk5NDM3QkMwOEM1RUYyRUJGOEFGQzY0NDE1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKbukP6wnzuVzdyzoj/IOcDmX mHW9ZRyym/U9sy03ilYcNwNe0QOymf8fCzsAcYVm3xigXb7r0Fzv2ewFK1YULCyt X3BfDBM33tvsaMdXL7zP64VpolCZtwAytSQm3SVjxN+OVl+ZbafIQXq7rmUvAjSN H98zuIp2N7ccBJqGVyD0oHRyJU7slGWNvTAAa6alFyFowKzmtQgwVDUv9gPczWdb F1f7fN0v8Gx5LQRB/S2oq2gi3Qs4gn4F6WnMz1qyfMdXRmjsmKRAP1KbcnZZCYNA xxrcZhQPGBCMcMWBrQDCYEmVEa7L3/ywXNgjKw8T5t42TNvf666cLORZDx/TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFbbsRVOxmUN7wIxe8uv4r8ZEFXgwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDXrgu8 rYU/XwGNBYPoKvm8XsJHPzmVq6cWpa2k5HV/3wv/B8J+1+ySyzbDnAOpI3xbZfuQ gbfcOkAC3UWKC65CMcivr2Ldqh2VwcWN0texUEPaxngqXxV1T79UqUDw+92Z3Dv2 Fr6F92679lWKi27ZJmJJiHVEFVecU71x0fC0nK00xWR5WB62dgXTLFZJUMAX2YQY BU5nfNrptqkVtSP00rhgxlTjkEQbxpATeLJ4WxtEEYSX+I6BPK6+UZfBgXHJ3tmZ xW/inQki49/uVIUGDtB5GMPs+mi9rw83p6sWBj1MM6gs8uAWhWkro7evESm9tLSJ U7bCSYzmFYI9lEmh -----END CERTIFICATE-----Generated at Sat Oct 24 10:14:52 2026 by rpki-client