$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: K+42sYxloMmgCXTUTWqb5BCeE9bY5ZhUkxW16aWUKC0= Subject key identifier: 3D:E4:77:90:18:D5:9A:DF:56:4F:8B:F7:24:BA:20:96:41:F0:D4:56 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 490BBDC5B3369AF64BC909462239BB679DC58471 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 0217 Signing time: Wed 26 Aug 2026 22:11:21 +0000 Manifest this update: Wed 26 Aug 2026 22:06:21 +0000 Manifest next update: Fri 28 Aug 2026 00:54:21 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: WDLb0ihNqC8ZU67UHUCZNzJWjqNsa86kaAswdmath58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 00:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0b:bd:c5:b3:36:9a:f6:4b:c9:09:46:22:39:bb:67:9d:c5:84:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Aug 26 22:06:21 2026 GMT Not After : Aug 28 00:54:21 2026 GMT Subject: CN=3DE4779018D59ADF564F8BF724BA209641F0D456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:d3:f4:c0:17:5a:4d:60:c1:ea:e1:f2:97: 01:89:0f:74:a5:67:06:3a:4c:32:86:85:11:28:37: 57:d2:7d:fd:81:51:c5:7b:1e:4a:78:2f:f3:ff:4b: 0a:c1:92:53:ac:78:26:e1:96:2b:8f:42:64:29:63: 12:65:a9:73:2b:83:b3:21:0c:23:a8:58:2d:51:05: 09:91:df:09:4b:5b:99:31:f5:ac:dd:f0:60:23:51: 5c:e1:00:e4:47:9d:26:37:7f:c2:ba:3a:23:e3:ba: 10:96:dc:fb:e0:a0:24:13:8d:5d:52:93:2c:cf:0e: 6c:7b:57:56:c8:4a:1c:dc:60:a4:a7:b5:e3:67:9c: 2f:95:28:04:65:5c:90:65:e3:69:d1:52:fe:5b:75: 58:77:d4:0d:c0:8d:ea:92:f5:f4:8a:f5:02:f3:6f: 7e:56:e4:50:2d:81:67:27:5a:09:a8:01:2e:92:60: d9:21:c5:20:91:18:24:1b:97:f6:2e:30:37:0d:21: c8:e8:1d:1b:e1:e5:c1:8e:20:f8:b4:56:a3:24:cc: 58:87:45:8c:9a:b4:60:47:9c:3a:c1:33:62:f9:73: f8:0d:48:6a:b8:25:7f:71:72:aa:13:8e:e0:54:dd: 27:d4:43:22:02:61:1b:43:0c:3f:c7:46:ff:b9:63: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:77:90:18:D5:9A:DF:56:4F:8B:F7:24:BA:20:96:41:F0:D4:56 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:db:5d:6e:0d:d3:6c:bc:bf:18:93:5e:2b:ab:55:43:e1:6d: 77:13:35:1f:fe:19:84:47:3a:33:55:8e:9b:0f:78:74:4f:d8: e7:cb:ce:24:d3:69:19:b5:f5:10:0c:17:45:fd:4f:3f:05:84: 23:cf:d1:19:80:f1:aa:6b:d6:b9:44:b6:c7:69:90:cf:2e:27: 9d:61:7f:e7:bf:34:df:f4:43:15:81:6b:72:c6:37:cb:33:c1: a1:08:38:f2:ca:ee:c4:02:41:98:06:8b:65:ba:40:f0:ca:12: 23:4d:af:ce:f8:6c:df:02:a1:36:29:08:81:d6:ec:f5:24:18: 91:39:89:61:9a:fa:28:81:f4:92:26:d8:f2:a2:da:df:87:b1: fa:1f:54:a6:9a:84:f1:00:d4:8b:3c:9e:a8:0c:99:53:e0:26: 2e:8e:db:7e:f3:36:15:b9:f9:82:c4:18:d6:9e:45:b9:8b:67: eb:18:c1:9d:48:30:72:f0:e1:23:eb:71:fe:98:84:29:0a:7f: a2:58:a3:b5:57:02:22:fc:d6:05:a3:2a:cb:c2:86:bd:60:40: 39:7c:d8:94:c3:fc:ab:87:1d:9e:00:4f:a7:c8:78:20:ec:0a: 49:17:db:64:72:8c:5a:5f:63:db:cd:48:c3:9c:69:14:30:8a: 6b:65:a9:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSQu9xbM2mvZLyQlGIjm7Z53FhHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA4MjYyMjA2MjFaFw0yNjA4MjgwMDU0MjFaMDMxMTAvBgNV BAMTKDNERTQ3NzkwMThENTlBREY1NjRGOEJGNzI0QkEyMDk2NDFGMEQ0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC589P0wBdaTWDB6uHylwGJD3Sl ZwY6TDKGhREoN1fSff2BUcV7Hkp4L/P/SwrBklOseCbhliuPQmQpYxJlqXMrg7Mh DCOoWC1RBQmR3wlLW5kx9azd8GAjUVzhAORHnSY3f8K6OiPjuhCW3PvgoCQTjV1S kyzPDmx7V1bIShzcYKSnteNnnC+VKARlXJBl42nRUv5bdVh31A3AjeqS9fSK9QLz b35W5FAtgWcnWgmoAS6SYNkhxSCRGCQbl/YuMDcNIcjoHRvh5cGOIPi0VqMkzFiH RYyatGBHnDrBM2L5c/gNSGq4JX9xcqoTjuBU3SfUQyICYRtDDD/HRv+5Y1FbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPeR3kBjVmt9WT4v3JLoglkHw1FYwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAR211u DdNsvL8Yk14rq1VD4W13EzUf/hmERzozVY6bD3h0T9jny84k02kZtfUQDBdF/U8/ BYQjz9EZgPGqa9a5RLbHaZDPLiedYX/nvzTf9EMVgWtyxjfLM8GhCDjyyu7EAkGY BotlukDwyhIjTa/O+GzfAqE2KQiB1uz1JBiROYlhmvoogfSSJtjyotrfh7H6H1Sm moTxANSLPJ6oDJlT4CYujtt+8zYVufmCxBjWnkW5i2frGMGdSDBy8OEj63H+mIQp Cn+iWKO1VwIi/NYFoyrLwoa9YEA5fNiUw/yrhx2eAE+nyHgg7ApJF9tkcoxaX2Pb zUjDnGkUMIprZamM -----END CERTIFICATE-----Generated at Thu Aug 27 16:00:34 2026 by rpki-client