$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft File: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft (raw, json) Hash identifier: qMv/fj1me8qQI7z0PFrmZpIeuGUI5fFnlr4tvRHikdA= Subject key identifier: 58:D6:FF:47:1C:FE:A7:49:0A:68:97:D8:5A:9E:CA:D2:0D:0E:14:90 Authority key identifier: DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 Certificate issuer: /CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Certificate serial: 6EDD03DB63C9DFCA69491BF08CFD55377ACF483D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft Manifest number: 1C Signing time: Sun 04 Oct 2026 01:44:10 +0000 Manifest this update: Sun 04 Oct 2026 01:39:10 +0000 Manifest next update: Mon 05 Oct 2026 02:13:10 +0000 Files and hashes: 1: 326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa (hash: Gbowl8vsy50/ah5uPyffPGlJE1BZVfw0DnfMCMuMiD8=) 2: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl (hash: tSTqX4KjGA9EBlqN3Z924N0KyySdsPMuoF01vLF6fuk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 00:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:dd:03:db:63:c9:df:ca:69:49:1b:f0:8c:fd:55:37:7a:cf:48:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Validity Not Before: Oct 4 01:39:10 2026 GMT Not After : Oct 5 02:13:10 2026 GMT Subject: CN=58D6FF471CFEA7490A6897D85A9ECAD20D0E1490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:ed:8f:9a:d8:f9:3c:8c:1d:fc:da:af:30: fd:28:05:cf:9c:0c:51:d7:90:7a:e9:a4:c1:b4:c2: fe:f8:0f:05:f1:94:9a:31:d5:a9:e4:70:00:4a:c7: 8b:40:36:c5:80:25:22:af:f5:b4:93:2a:ea:9c:14: 0d:9f:4f:3e:44:1f:0f:90:0a:bf:9a:de:12:e9:79: 05:c6:6e:5e:33:80:9e:c9:fe:0f:72:1f:37:ac:89: 5d:61:aa:bf:de:aa:92:ed:2c:73:d5:f0:f4:52:09: ec:3d:bc:97:73:86:66:76:bf:4e:56:79:a2:20:eb: 3f:6d:f5:f1:95:7d:f4:70:79:70:0b:b7:aa:a4:47: c6:a1:09:57:8d:91:fc:33:a2:ff:28:e9:06:69:01: 93:73:80:a8:d1:55:6c:10:85:bd:1f:12:c7:82:dc: 9f:02:72:d4:12:d2:e6:ff:ac:e4:a8:61:c2:22:94: 2d:11:bf:31:ea:fe:9b:ca:52:89:b6:b7:15:76:89: fe:84:d2:ad:66:b2:a3:8b:2c:2d:5f:57:0b:3c:a8: b8:62:5f:6f:ba:f5:3c:6c:fe:83:c7:50:01:45:21: d2:91:e4:ae:80:5f:96:21:5e:74:16:7d:15:3f:dd: af:16:00:09:be:ca:6a:71:14:df:5f:e7:7a:83:9c: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:FF:47:1C:FE:A7:49:0A:68:97:D8:5A:9E:CA:D2:0D:0E:14:90 X509v3 Authority Key Identifier: keyid:DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:35:ea:ba:16:7c:c1:c3:23:a6:dd:55:1a:6a:5a:af:47:7c: b7:42:2e:a0:94:4b:d9:da:b0:78:72:95:dd:56:bf:c3:d6:9e: 73:2b:65:e6:84:52:cb:de:f3:3b:bc:d5:4f:62:ae:53:fb:ab: 60:b1:d4:76:84:26:73:f5:d6:f8:43:47:94:cd:4c:cb:b0:94: d4:2c:44:e6:c3:19:f8:6f:64:eb:43:7d:9b:6b:a2:c8:0b:e3: 09:0e:e5:0a:a3:9c:99:eb:7e:99:e8:5d:5e:1b:e8:ce:62:c3: 01:ad:e7:c6:ab:e5:0f:02:7b:96:43:3c:e3:b2:6f:2d:2f:a6: f9:b4:39:a1:f2:ac:bc:ae:e3:a1:b8:50:5a:e6:bf:ff:5f:ce: 73:35:f6:92:25:0a:36:ec:51:1c:3f:ee:42:bc:a4:48:8c:11: 08:66:be:f6:52:88:28:13:c9:e3:ba:d5:94:ec:5a:a4:7b:6f: 45:7e:ee:ae:39:e1:69:c0:3a:38:2c:bf:56:99:2b:41:a8:68: 52:e4:a4:ce:0a:ea:d7:bf:f6:a5:fc:92:cc:f5:50:65:b5:2c: 7f:de:d9:8c:f9:d2:7f:66:30:9c:60:0e:96:2a:93:13:ba:c3: d6:3b:cc:8c:0f:76:f3:0b:39:27:80:a0:d4:d5:f8:fb:80:be: bd:0d:fe:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbt0D22PJ38ppSRvwjP1VN3rPSD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1 RkRCNjdDMTAeFw0yNjEwMDQwMTM5MTBaFw0yNjEwMDUwMjEzMTBaMDMxMTAvBgNV BAMTKDU4RDZGRjQ3MUNGRUE3NDkwQTY4OTdEODVBOUVDQUQyMEQwRTE0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqO2Pmtj5PIwd/NqvMP0oBc+c DFHXkHrppMG0wv74DwXxlJox1ankcABKx4tANsWAJSKv9bSTKuqcFA2fTz5EHw+Q Cr+a3hLpeQXGbl4zgJ7J/g9yHzesiV1hqr/eqpLtLHPV8PRSCew9vJdzhmZ2v05W eaIg6z9t9fGVffRweXALt6qkR8ahCVeNkfwzov8o6QZpAZNzgKjRVWwQhb0fEseC 3J8CctQS0ub/rOSoYcIilC0RvzHq/pvKUom2txV2if6E0q1msqOLLC1fVws8qLhi X2+69Txs/oPHUAFFIdKR5K6AX5YhXnQWfRU/3a8WAAm+ympxFN9f53qDnFMpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWNb/Rxz+p0kKaJfYWp7K0g0OFJAwHwYDVR0j BBgwFoAU3NI1KmmTYtCQvJ6c+doI3V/bZ8EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGNkMDNiZTItNmIwMi00YzU5LWE5MzctNDFlMjY0Y2Rl NjM2LzEvRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1RkRCNjdDMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9EQ0QyMzUyQTY5OTM2MkQwOTBCQzlFOUNG OURBMDhERDVGREI2N0MxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhjZDAzYmUyLTZiMDItNGM1OS1hOTM3LTQxZTI2NGNkZTYzNi8xL0RDRDIzNTJB Njk5MzYyRDA5MEJDOUU5Q0Y5REEwOERENUZEQjY3QzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYNeq6 FnzBwyOm3VUaalqvR3y3Qi6glEvZ2rB4cpXdVr/D1p5zK2XmhFLL3vM7vNVPYq5T +6tgsdR2hCZz9db4Q0eUzUzLsJTULETmwxn4b2TrQ32ba6LIC+MJDuUKo5yZ636Z 6F1eG+jOYsMBrefGq+UPAnuWQzzjsm8tL6b5tDmh8qy8ruOhuFBa5r//X85zNfaS JQo27FEcP+5CvKRIjBEIZr72UogoE8njutWU7Fqke29Ffu6uOeFpwDo4LL9WmStB qGhS5KTOCurXv/al/JLM9VBltSx/3tmM+dJ/ZjCcYA6WKpMTusPWO8yMD3bzCzkn gKDU1fj7gL69Df7/ -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:57 2026 by rpki-client