$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: rYIhweQKzF147YA7/V2vR5nZm7l9YnIz+jK1ucc7h+0= Subject key identifier: 3C:0E:02:1B:30:C2:FD:29:0C:E0:18:BF:FB:A1:FA:0D:1D:6D:88:45 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 6021E18EF7D779C6A2840F142A39F500728776F3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 069E Signing time: Sun 04 Oct 2026 08:05:02 +0000 Manifest this update: Sun 04 Oct 2026 08:00:02 +0000 Manifest next update: Mon 05 Oct 2026 11:04:02 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: t9fEFYGE/c166SWA7ueUOBnIKWqH/T29OjmdyQiPuBo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 11:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:21:e1:8e:f7:d7:79:c6:a2:84:0f:14:2a:39:f5:00:72:87:76:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Oct 4 08:00:02 2026 GMT Not After : Oct 5 11:04:02 2026 GMT Subject: CN=3C0E021B30C2FD290CE018BFFBA1FA0D1D6D8845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:16:20:4c:97:65:66:5a:ba:3b:3f:9f:1c:87: 96:db:56:e4:87:8a:6a:7c:2f:df:c6:83:1c:49:1f: 92:7a:b9:3c:09:a6:fa:8e:18:54:36:1c:c0:33:b0: 25:aa:6b:d3:85:4f:fb:d9:5a:41:32:73:6b:17:29: b0:0c:da:8d:5b:c1:4d:4a:f7:8d:f2:68:1e:1a:16: 46:8d:86:f1:ec:a2:7a:f9:a0:3f:97:d7:8e:2c:12: ac:bd:61:3a:83:dc:dd:61:a3:4c:d4:cd:64:44:6b: 7d:b9:32:0f:11:44:14:22:92:c2:63:3b:70:45:00: 7d:aa:30:6b:83:6d:3e:8b:a0:7d:2f:da:94:07:ff: a5:22:97:6e:8e:25:e2:2e:4b:33:49:45:ce:a7:6f: 96:32:50:1a:35:d3:41:e8:cd:9d:2d:77:af:ab:ee: 76:ab:f0:76:a2:9f:a3:f2:46:4f:3e:90:56:a1:99: 0a:d2:da:7e:ad:2d:17:13:38:fc:d6:ac:e0:0f:93: b6:21:19:40:ec:9c:59:8e:61:3d:08:2a:29:c9:ba: 4f:24:22:c2:41:ee:be:6c:3a:2d:4b:dd:8d:45:ce: 9d:c9:26:aa:7c:70:d0:c8:7b:3b:a9:da:c6:51:07: 6c:99:97:a2:32:ad:7a:d8:1c:1e:10:a0:cc:91:d6: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:02:1B:30:C2:FD:29:0C:E0:18:BF:FB:A1:FA:0D:1D:6D:88:45 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:04:a8:b4:b3:54:8d:eb:27:a8:56:b7:47:ae:5e:e8:ef:71: ca:14:c5:26:37:63:e6:26:52:02:44:a0:ac:7a:66:3b:35:aa: 1f:da:cb:16:81:5c:8a:47:2d:4b:68:21:92:88:37:db:eb:84: 66:d7:24:3d:4c:7f:5a:d5:27:e9:07:c3:51:62:57:40:14:b6: b9:18:d3:8b:6a:e2:32:3d:f0:bf:1f:c8:70:4f:1f:c5:6f:38: 54:f5:93:1c:ad:47:a9:af:f8:ea:4a:33:91:0b:ee:b5:69:88: e5:fd:9d:73:45:c2:73:bc:de:f4:59:26:9f:43:92:23:63:dd: c5:90:79:0e:44:39:2c:4a:ce:42:cc:a4:76:f8:65:23:73:05: 7b:5c:13:0c:7f:1e:6c:10:7e:4c:22:54:dc:53:0b:9c:63:af: d5:22:4d:3e:1e:42:7c:7a:0d:68:0e:47:58:d9:00:7c:da:a6: 3f:b0:24:27:9b:a6:de:58:80:c5:ad:4c:50:89:f1:8d:48:39: 70:7a:90:f9:ef:d1:2e:c4:0e:fc:98:3f:24:b7:74:54:ee:9e: d3:ca:86:ba:b2:83:2a:55:de:75:c7:6c:d6:84:dc:06:be:1b: b2:d6:7e:5c:61:26:45:9f:65:a5:d0:80:21:c8:16:92:09:16: 45:08:34:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYCHhjvfXecaihA8UKjn1AHKHdvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjEwMDQwODAwMDJaFw0yNjEwMDUxMTA0MDJaMDMxMTAvBgNV BAMTKDNDMEUwMjFCMzBDMkZEMjkwQ0UwMThCRkZCQTFGQTBEMUQ2RDg4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFiBMl2VmWro7P58ch5bbVuSH imp8L9/GgxxJH5J6uTwJpvqOGFQ2HMAzsCWqa9OFT/vZWkEyc2sXKbAM2o1bwU1K 943yaB4aFkaNhvHsonr5oD+X144sEqy9YTqD3N1ho0zUzWREa325Mg8RRBQiksJj O3BFAH2qMGuDbT6LoH0v2pQH/6Uil26OJeIuSzNJRc6nb5YyUBo100HozZ0td6+r 7nar8Hain6PyRk8+kFahmQrS2n6tLRcTOPzWrOAPk7YhGUDsnFmOYT0IKinJuk8k IsJB7r5sOi1L3Y1Fzp3JJqp8cNDIezup2sZRB2yZl6IyrXrYHB4QoMyR1smHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPA4CGzDC/SkM4Bi/+6H6DR1tiEUwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdBKi0 s1SN6yeoVrdHrl7o73HKFMUmN2PmJlICRKCsemY7Naof2ssWgVyKRy1LaCGSiDfb 64Rm1yQ9TH9a1SfpB8NRYldAFLa5GNOLauIyPfC/H8hwTx/FbzhU9ZMcrUepr/jq SjORC+61aYjl/Z1zRcJzvN70WSafQ5IjY93FkHkORDksSs5CzKR2+GUjcwV7XBMM fx5sEH5MIlTcUwucY6/VIk0+HkJ8eg1oDkdY2QB82qY/sCQnm6beWIDFrUxQifGN SDlwepD579EuxA78mD8kt3RU7p7Tyoa6soMqVd51x2zWhNwGvhuy1n5cYSZFn2Wl 0IAhyBaSCRZFCDSU -----END CERTIFICATE-----Generated at Sun Oct 4 18:41:20 2026 by rpki-client