$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: ywNfUvz1tkHMFzXO5EFzvv+lE21nOUwzyqMdYZp7jFA= Subject key identifier: 50:ED:AA:B6:9F:4E:9E:1E:67:85:33:57:25:8E:AA:6E:60:67:8F:5B Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 3E50C2DA73B160A00DD7F4252678E7D35EA41B33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 0256 Signing time: Mon 12 Oct 2026 22:33:34 +0000 Manifest this update: Mon 12 Oct 2026 22:28:34 +0000 Manifest next update: Tue 13 Oct 2026 23:43:34 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: Q376rE3k1SmkOIH8TtEWts5FaVQEsUf8jQ9pmjw+7zQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:50:c2:da:73:b1:60:a0:0d:d7:f4:25:26:78:e7:d3:5e:a4:1b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Oct 12 22:28:34 2026 GMT Not After : Oct 13 23:43:34 2026 GMT Subject: CN=50EDAAB69F4E9E1E67853357258EAA6E60678F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:7e:c7:65:1b:81:b3:6e:d4:b2:75:9f:81: 86:37:df:aa:ec:9a:1c:46:21:82:b3:33:c2:7a:71: 43:aa:8a:ba:e2:e2:c6:8f:db:94:c4:73:53:81:1a: 8e:60:f1:4c:94:09:66:4e:8d:e6:70:6d:aa:10:0f: 7a:b9:99:85:4d:c4:6a:d3:39:31:66:48:43:91:b0: 8c:07:80:e1:b9:a4:40:78:ea:82:3c:7d:f1:ef:c2: 9e:37:a7:68:fc:b6:4e:03:f8:ce:ce:22:96:0b:5a: 84:b6:13:10:33:dd:51:53:55:f6:2e:de:bf:b0:57: 35:f8:b8:6a:2f:1c:c0:92:55:1a:3b:f6:1b:da:6b: bb:05:a6:8a:ba:c8:4a:ac:8b:83:0a:d6:a0:52:0b: 23:7b:92:d3:91:98:47:ce:2d:81:56:17:89:ef:ea: 9f:47:82:b4:05:d1:9d:3d:92:34:08:b1:db:72:e5: 3e:b0:12:4e:c2:f9:d5:e6:e3:a4:e7:fe:2d:64:76: f2:80:43:d0:82:fc:2b:50:7f:cf:13:6e:2f:b8:7f: 03:fe:c5:b1:10:77:91:41:8b:b7:17:27:a3:2e:21: b7:27:40:dd:f1:57:45:29:75:1c:3a:56:c6:34:45: 81:fa:b4:ec:83:8a:53:13:78:20:cf:12:ca:c7:a5: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:AA:B6:9F:4E:9E:1E:67:85:33:57:25:8E:AA:6E:60:67:8F:5B X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:eb:13:d0:31:cb:df:b6:9c:9c:f5:44:d6:f8:c8:fd:87:74: 8f:70:2b:7f:89:e0:5c:87:b3:1e:9b:35:bf:66:cb:c6:a8:51: 4c:fe:5a:10:56:76:b5:45:81:ad:c7:66:11:9f:b5:6a:3e:3d: 60:b5:e6:b2:14:2b:7c:f2:6e:f9:c1:ee:97:de:d5:ba:2b:1f: d9:43:85:2d:2a:3f:19:25:ee:d7:ce:94:b0:36:25:c2:05:ca: c5:05:77:1f:d8:a7:1a:e4:86:d9:5c:4f:a5:7e:bc:56:ac:a8: 3f:21:c5:e6:5b:79:4f:cb:1f:c6:36:77:4a:43:ac:22:fb:8b: dd:6a:e0:f9:98:b7:ac:3e:f7:d3:fc:89:a3:be:31:ba:17:de: fc:89:b9:bd:c4:2e:cf:c8:fd:e2:db:46:eb:ec:8a:6f:1b:09: 2a:68:e1:65:2a:7e:25:0c:28:04:1d:17:11:df:80:46:50:08: bb:68:df:9e:f7:31:14:f1:a4:ce:32:40:8a:bd:33:d5:93:23: d2:a4:ab:e3:3a:31:fb:d6:ee:d5:6a:6a:75:f8:d2:5c:e6:bd: ff:d9:b1:67:9f:f6:6d:a7:45:41:f3:05:26:23:c5:76:55:b3: db:94:03:42:52:38:c7:95:45:91:1f:91:9d:63:dd:c3:57:4e: 8c:76:1e:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPlDC2nOxYKAN1/QlJnjn016kGzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjEwMTIyMjI4MzRaFw0yNjEwMTMyMzQzMzRaMDMxMTAvBgNV BAMTKDUwRURBQUI2OUY0RTlFMUU2Nzg1MzM1NzI1OEVBQTZFNjA2NzhGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0F37HZRuBs27UsnWfgYY336rs mhxGIYKzM8J6cUOqirri4saP25TEc1OBGo5g8UyUCWZOjeZwbaoQD3q5mYVNxGrT OTFmSEORsIwHgOG5pEB46oI8ffHvwp43p2j8tk4D+M7OIpYLWoS2ExAz3VFTVfYu 3r+wVzX4uGovHMCSVRo79hvaa7sFpoq6yEqsi4MK1qBSCyN7ktORmEfOLYFWF4nv 6p9HgrQF0Z09kjQIsdty5T6wEk7C+dXm46Tn/i1kdvKAQ9CC/CtQf88Tbi+4fwP+ xbEQd5FBi7cXJ6MuIbcnQN3xV0UpdRw6VsY0RYH6tOyDilMTeCDPEsrHpdh/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUO2qtp9Onh5nhTNXJY6qbmBnj1swHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCi6xPQ Mcvftpyc9UTW+Mj9h3SPcCt/ieBch7MemzW/ZsvGqFFM/loQVna1RYGtx2YRn7Vq Pj1gteayFCt88m75we6X3tW6Kx/ZQ4UtKj8ZJe7XzpSwNiXCBcrFBXcf2Kca5IbZ XE+lfrxWrKg/IcXmW3lPyx/GNndKQ6wi+4vdauD5mLesPvfT/ImjvjG6F978ibm9 xC7PyP3i20br7IpvGwkqaOFlKn4lDCgEHRcR34BGUAi7aN+e9zEU8aTOMkCKvTPV kyPSpKvjOjH71u7Vamp1+NJc5r3/2bFnn/Ztp0VB8wUmI8V2VbPblANCUjjHlUWR H5GdY93DV06Mdh6U -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:44 2026 by rpki-client