$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft File: 87167C38252EE930526E913BD0F8B73561B56EE3.mft (raw, json) Hash identifier: sqowqzVVo2+FRSYzFsVqSEOiI+bsSSc5ML7bO9dMrbE= Subject key identifier: 6E:4C:F2:64:10:CA:FB:FA:95:75:2C:B2:A8:F4:59:9D:DE:3B:C0:9C Authority key identifier: 87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3 Certificate issuer: /CN=87167c38252ee930526e913bd0f8b73561b56ee3 Certificate serial: 2EF55EB27CCEBD1521BCA82C97322FA13909E6D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft Manifest number: 08 Signing time: Sun 25 Oct 2026 11:27:12 +0000 Manifest this update: Sun 25 Oct 2026 11:22:12 +0000 Manifest next update: Mon 26 Oct 2026 14:55:12 +0000 Files and hashes: 1: 3133392e3136352e39322e302f32342d3234203d3e20323139303735.roa (hash: e4SNlAD7nagllFSqRv6JdbJFUH3EdBhUiO7XdcaaHso=) 2: 3133392e3136352e302e302f31362d3136203d3e2032363131.roa (hash: 8j/atjnSlouEe573TxzummWiplMnVHKdJsv9BS2P9q8=) 3: 3133392e3136352e39322e302f32342d3234203d3e20323138393131.roa (hash: YkiFXlU5mCcaCQsjC89fz+PEjoMrv3IU+70ODsQdAIs=) 4: 87167C38252EE930526E913BD0F8B73561B56EE3.crl (hash: dPBHZQcld0QyEZTaF+YKvgE/FVO0XAdkPwWDns950rg=) 5: 3139332e35332e332e302f32342d3234203d3e2032363131.roa (hash: PucYIiZ0INsikg7fKEJMCy9+AZTBpKaZoHRbzLsjXDM=) 6: 326130343a623563303a3a2f32392d3239203d3e2032363131.roa (hash: g6fQ6U8AL1x2srkUduI+cy2ZPN9tO2YQFmWnMt20uDY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 14:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f5:5e:b2:7c:ce:bd:15:21:bc:a8:2c:97:32:2f:a1:39:09:e6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87167c38252ee930526e913bd0f8b73561b56ee3 Validity Not Before: Oct 25 11:22:12 2026 GMT Not After : Oct 26 14:55:12 2026 GMT Subject: CN=6E4CF26410CAFBFA95752CB2A8F4599DDE3BC09C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:ea:31:fc:13:85:6c:2b:58:f3:42:c1:92: 20:2e:80:4e:fd:d7:ac:ff:d2:a4:b3:08:40:d0:e6: 56:fe:df:0d:79:ad:1b:69:3d:57:a1:c8:eb:2f:c3: 2b:d4:71:d8:db:33:b0:d8:87:8f:2b:80:57:80:fe: c4:b8:e5:ef:27:d4:3a:8d:db:e0:4c:70:37:61:c3: 2c:83:e7:a1:2b:17:25:54:77:33:20:ab:c2:69:93: 74:04:82:fd:f3:a1:f2:1e:3f:49:07:f8:d1:ee:8e: c2:12:69:e0:b2:10:bb:49:2a:7b:60:c5:4c:24:1b: 12:64:66:d7:58:05:6e:6e:8c:fa:0a:f8:b8:04:f5: 5a:71:5a:bb:5e:11:6a:93:24:60:aa:28:4b:a0:f1: 74:63:ad:fb:dd:c9:90:e3:a4:31:41:44:00:4f:a2: ed:19:67:91:fd:56:ef:57:4d:c7:18:5a:83:d6:9b: 57:f0:e3:9c:59:78:35:f1:85:04:91:ed:54:86:6d: e5:d8:20:6f:54:60:95:31:78:a1:2e:eb:f8:e1:1b: f2:ba:1f:1d:f1:84:2a:35:61:9a:ea:50:56:40:1a: 33:94:91:6d:c3:4b:de:dc:7c:42:34:cc:09:80:32: 41:b9:91:ba:a0:f9:3b:e1:d0:81:42:d8:11:f3:44: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:F2:64:10:CA:FB:FA:95:75:2C:B2:A8:F4:59:9D:DE:3B:C0:9C X509v3 Authority Key Identifier: keyid:87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:6f:2f:a7:d9:ea:14:04:cc:30:0e:73:c8:46:ad:70:03: 08:bd:0a:56:ca:1a:a5:bd:54:61:71:88:f6:ba:52:34:5d:87: 69:12:84:b5:d4:16:ad:10:e7:1e:4b:34:f2:8a:a2:72:2a:90: d2:42:53:44:e1:39:20:d7:ee:73:8f:6f:71:a6:17:c6:a2:a3: 94:3a:51:a4:cc:06:de:33:cf:27:1f:b1:ff:aa:86:79:00:ac: 30:c4:f1:55:66:92:bf:e8:26:49:96:f3:38:79:c3:a6:d1:ab: 2d:22:bb:ec:3b:20:a6:97:8d:7f:3c:05:b1:2d:1f:e5:99:0e: ee:ba:cd:d3:0d:6f:1f:d8:aa:f1:9e:33:13:c5:dc:77:59:35: ef:51:3f:1a:a4:0d:87:f8:98:06:97:fc:40:27:dc:93:a3:e4: b4:e4:9f:c0:28:2f:44:ad:46:e2:37:a7:f2:25:1f:ab:bd:15: a5:09:4f:b1:76:2f:21:35:80:92:0b:c2:3d:a0:0f:d5:f6:33: fb:d9:f0:ac:8a:67:5d:0c:92:22:9e:96:2b:79:12:9e:13:70: 61:12:30:55:12:8b:d8:2d:ad:fd:c1:d0:88:d9:83:12:02:02: 20:68:7b:10:3a:83:dc:a2:ad:9e:ca:6c:0a:fd:39:41:b2:48: a8:51:16:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULvVesnzOvRUhvKgslzIvoTkJ5tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNjdjMzgyNTJlZTkzMDUyNmU5MTNiZDBmOGI3MzU2 MWI1NmVlMzAeFw0yNjEwMjUxMTIyMTJaFw0yNjEwMjYxNDU1MTJaMDMxMTAvBgNV BAMTKDZFNENGMjY0MTBDQUZCRkE5NTc1MkNCMkE4RjQ1OTlEREUzQkMwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJOox/BOFbCtY80LBkiAugE79 16z/0qSzCEDQ5lb+3w15rRtpPVehyOsvwyvUcdjbM7DYh48rgFeA/sS45e8n1DqN 2+BMcDdhwyyD56ErFyVUdzMgq8Jpk3QEgv3zofIeP0kH+NHujsISaeCyELtJKntg xUwkGxJkZtdYBW5ujPoK+LgE9VpxWrteEWqTJGCqKEug8XRjrfvdyZDjpDFBRABP ou0ZZ5H9Vu9XTccYWoPWm1fw45xZeDXxhQSR7VSGbeXYIG9UYJUxeKEu6/jhG/K6 Hx3xhCo1YZrqUFZAGjOUkW3DS97cfEI0zAmAMkG5kbqg+Tvh0IFC2BHzRMJFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbkzyZBDK+/qVdSyyqPRZnd47wJwwHwYDVR0j BBgwFoAUhxZ8OCUu6TBSbpE70Pi3NWG1buMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzQwYzM2ODQtOWI5OS00MGUwLTlmNzEtMzEwMjlhYTdi MjI4LzAvODcxNjdDMzgyNTJFRTkzMDUyNkU5MTNCRDBGOEI3MzU2MUI1NkVFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2h4WjhPQ1V1NlRCU2JwRTcwUGkzTldH MWJ1TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83NDBjMzY4NC05 Yjk5LTQwZTAtOWY3MS0zMTAyOWFhN2IyMjgvMC84NzE2N0MzODI1MkVFOTMwNTI2 RTkxM0JEMEY4QjczNTYxQjU2RUUzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDtvL6fZ6hQEzDAOc8hG rXADCL0KVsoapb1UYXGI9rpSNF2HaRKEtdQWrRDnHks08oqiciqQ0kJTROE5INfu c49vcaYXxqKjlDpRpMwG3jPPJx+x/6qGeQCsMMTxVWaSv+gmSZbzOHnDptGrLSK7 7DsgppeNfzwFsS0f5ZkO7rrN0w1vH9iq8Z4zE8Xcd1k171E/GqQNh/iYBpf8QCfc k6PktOSfwCgvRK1G4jen8iUfq70VpQlPsXYvITWAkgvCPaAP1fYz+9nwrIpnXQyS Ip6WK3kSnhNwYRIwVRKL2C2t/cHQiNmDEgICIGh7EDqD3KKtnspsCv05QbJIqFEW Ww== -----END CERTIFICATE-----Generated at Mon Oct 26 00:52:59 2026 by rpki-client