$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: Ajj9xfGPefUBE6/uTdip1cVfXqrxKeyEj16yz7I2R0M= Subject key identifier: 67:6C:A9:3B:93:AE:18:AA:95:4F:DB:0F:98:FD:B8:40:F5:72:6E:28 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 498A818C4128A5314F300A4C2AE55CBDE6F440FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: FC Signing time: Sun 25 Oct 2026 11:15:25 +0000 Manifest this update: Sun 25 Oct 2026 11:10:25 +0000 Manifest next update: Mon 26 Oct 2026 13:17:25 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: ZHTxGrhAGQUPYv7NbgdxFLUfGHK6FTP6c31miKa3/U8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 05:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8a:81:8c:41:28:a5:31:4f:30:0a:4c:2a:e5:5c:bd:e6:f4:40:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Oct 25 11:10:25 2026 GMT Not After : Oct 26 13:17:25 2026 GMT Subject: CN=676CA93B93AE18AA954FDB0F98FDB840F5726E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:d4:6c:fa:2f:0c:3b:84:09:01:8e:60:0b: c4:f7:4d:3d:04:54:c6:31:e5:11:f9:70:f1:ed:f1: 88:2c:21:b4:37:53:e9:c0:9b:1a:2a:66:ec:9a:18: f4:94:1f:b0:de:2c:6d:05:63:01:d3:99:e6:d4:40: a1:3c:b7:1d:06:b2:e7:4c:c1:c7:f7:6f:63:79:fa: e9:fa:f8:f3:aa:58:9b:89:c6:2d:54:d1:76:77:09: 12:4d:e4:99:02:6a:87:a0:fd:ec:1a:59:8e:1b:bc: dd:ef:e1:be:50:7e:3c:62:4a:a8:9f:22:4f:ca:eb: e0:43:d0:d5:d9:55:5e:61:c4:fe:24:a3:2f:d8:fd: 27:a2:96:5d:07:9f:49:4b:ef:b2:43:6b:0e:40:f9: 6e:f8:75:9a:c5:5c:c2:cb:59:db:d4:2d:3c:d1:a4: b4:75:bf:51:fc:6b:8a:cb:a3:49:31:64:93:e8:ec: 82:f8:15:91:ad:20:79:8c:8b:3d:f7:0d:08:73:8a: 29:ef:3f:b0:70:e4:6b:91:c6:27:db:d7:3d:df:43: f9:e7:f4:0a:3b:a0:25:f3:f2:80:d2:fd:47:06:7d: fe:11:d1:ba:77:b7:7c:09:73:2c:3d:91:a5:fa:18: 38:45:35:16:b5:4a:04:ca:8f:76:eb:74:13:2a:36: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:A9:3B:93:AE:18:AA:95:4F:DB:0F:98:FD:B8:40:F5:72:6E:28 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:82:d1:f2:9a:d5:9c:41:4f:8f:61:ce:58:72:af:fb:02:da: fd:7e:98:4f:31:25:53:94:27:95:08:f4:bc:af:c3:d4:81:f6: 5e:8f:b2:85:c7:7f:62:55:3f:ca:49:d0:fe:ac:48:b8:9c:5e: 55:fb:78:dd:49:5f:e3:ee:ca:77:af:bb:b4:91:85:98:19:63: ae:64:14:35:4d:08:ee:ec:85:e9:6a:18:63:7b:72:e0:9c:77: c3:9b:b5:5a:a8:5d:08:22:dd:cb:a5:2d:60:88:46:55:8d:48: 75:c9:2d:10:2e:35:42:f3:65:c9:ff:0f:f5:87:29:fd:18:e1: ae:3f:69:8d:10:46:21:ce:06:5f:d5:7f:1f:22:95:e7:22:57: 3e:3c:41:1e:cb:30:bb:98:3a:c3:c4:a0:53:cf:3d:28:ed:36: 4a:9f:5b:97:4a:5b:fb:e4:e6:16:92:05:4c:01:d9:58:dc:06: 55:b1:3a:ef:88:4a:51:e9:97:1d:5f:bb:ed:f5:f2:70:ba:53: 05:1a:0e:a1:0a:53:d0:50:9f:ef:31:a7:39:f5:8a:4d:90:0c: 09:26:78:6d:dd:36:fe:65:81:3c:c5:45:84:23:ce:04:53:6c: 20:a1:54:61:35:e3:67:8b:50:9c:fa:d0:3e:7e:80:52:50:57: 01:88:31:2e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSYqBjEEopTFPMApMKuVcveb0QP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjEwMjUxMTEwMjVaFw0yNjEwMjYxMzE3MjVaMDMxMTAvBgNV BAMTKDY3NkNBOTNCOTNBRTE4QUE5NTRGREIwRjk4RkRCODQwRjU3MjZFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCn9Rs+i8MO4QJAY5gC8T3TT0E VMYx5RH5cPHt8YgsIbQ3U+nAmxoqZuyaGPSUH7DeLG0FYwHTmebUQKE8tx0GsudM wcf3b2N5+un6+POqWJuJxi1U0XZ3CRJN5JkCaoeg/ewaWY4bvN3v4b5QfjxiSqif Ik/K6+BD0NXZVV5hxP4koy/Y/Seill0Hn0lL77JDaw5A+W74dZrFXMLLWdvULTzR pLR1v1H8a4rLo0kxZJPo7IL4FZGtIHmMiz33DQhziinvP7Bw5GuRxifb1z3fQ/nn 9Ao7oCXz8oDS/UcGff4R0bp3t3wJcyw9kaX6GDhFNRa1SgTKj3brdBMqNrE1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZ2ypO5OuGKqVT9sPmP24QPVybigwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9gtHy mtWcQU+PYc5Ycq/7Atr9fphPMSVTlCeVCPS8r8PUgfZej7KFx39iVT/KSdD+rEi4 nF5V+3jdSV/j7sp3r7u0kYWYGWOuZBQ1TQju7IXpahhje3LgnHfDm7VaqF0IIt3L pS1giEZVjUh1yS0QLjVC82XJ/w/1hyn9GOGuP2mNEEYhzgZf1X8fIpXnIlc+PEEe yzC7mDrDxKBTzz0o7TZKn1uXSlv75OYWkgVMAdlY3AZVsTrviEpR6ZcdX7vt9fJw ulMFGg6hClPQUJ/vMac59YpNkAwJJnht3Tb+ZYE8xUWEI84EU2wgoVRhNeNni1Cc +tA+foBSUFcBiDEu -----END CERTIFICATE-----Generated at Sun Oct 25 18:51:24 2026 by rpki-client