$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: +H0L8/OpY6RVsfRgq3FForsNUzfIZmXVP/C+sXH1gAU= Subject key identifier: 41:BC:B0:28:61:BB:16:50:1A:CC:D1:3E:E8:53:D8:55:74:3E:C4:96 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 4EF0FC08B8C979FBBE9D4B137E13447544245A05 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 024D Signing time: Mon 26 Oct 2026 17:30:33 +0000 Manifest this update: Mon 26 Oct 2026 17:25:33 +0000 Manifest next update: Tue 27 Oct 2026 17:55:33 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 2: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: ZL+oRyOj3sawy6MGOJApeNSdY4QIECaZOFP0Uxxxzx4=) 4: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 5: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: LjXLVKawHfjxwlnzEPj/O4eLJ/0ypP1ElNw9Bcg9ZBY=) 7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 8: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: jttxl3w5gtGvWvJGVtPuIaUM9EQsHbSyoOZ1w8vhwz4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 17:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f0:fc:08:b8:c9:79:fb:be:9d:4b:13:7e:13:44:75:44:24:5a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Oct 26 17:25:33 2026 GMT Not After : Oct 27 17:55:33 2026 GMT Subject: CN=41BCB02861BB16501ACCD13EE853D855743EC496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:19:94:3f:ad:ea:39:ea:02:76:da:de:93: 3f:e5:2a:ea:9e:9e:bb:71:7f:83:25:40:24:04:26: 8a:a5:b6:4c:ac:f9:84:47:64:d0:8b:51:07:9e:c5: 8e:86:bd:61:e5:46:55:77:92:ea:b3:3f:6d:2b:43: 74:0e:dd:68:bf:65:ff:67:b4:96:7f:a5:8a:ec:c6: 0f:7a:bc:04:38:ec:cd:48:73:da:9c:6a:8f:55:52: e2:2d:d1:57:c4:06:81:13:1b:d7:93:d0:3a:4e:15: df:3e:77:17:7f:73:97:92:d4:2b:a7:9e:fa:9c:db: 34:e1:30:90:a8:e0:2d:f8:21:7b:2b:79:b2:66:4a: 7d:e2:71:70:88:3a:9a:a1:28:cf:aa:51:cc:44:63: 80:95:e3:5f:3a:e2:b0:b9:af:18:56:c1:20:81:e3: c5:92:12:bd:cb:0b:de:72:c4:a6:f2:c5:90:6e:90: 60:06:ee:a9:53:87:1b:64:bb:ce:0c:ff:e0:6b:73: 98:de:98:ce:fa:6b:6f:bf:b9:bf:ea:b3:d0:4b:a6: 9c:84:a9:d5:69:f9:31:ec:14:dd:4b:ad:de:95:f7: ae:33:7a:d1:79:04:7e:32:7a:70:7c:88:2f:ec:9f: 0b:1f:b4:02:38:8d:54:ba:46:92:d3:c9:7e:0c:c5: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BC:B0:28:61:BB:16:50:1A:CC:D1:3E:E8:53:D8:55:74:3E:C4:96 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1e:f4:44:a1:f4:7e:03:dc:24:09:a8:f4:e3:d7:45:f1:30: 4a:06:f4:ea:7f:25:71:f7:9f:e1:5f:f0:07:5a:60:d5:81:5f: 26:98:cb:d3:4e:6f:e9:2f:9d:63:ea:d5:d7:d1:e1:f4:0a:e3: 6b:71:17:ff:af:d9:c4:5a:4f:e8:f1:11:23:d4:c4:e2:e0:96: a9:3e:cf:4c:58:bb:1f:82:12:d4:4b:b5:e5:51:df:d4:e0:c7: 9a:34:46:08:55:26:93:f8:4e:bb:0a:71:8e:c1:b4:db:8c:5b: 69:72:24:43:56:bf:8a:3e:0e:83:c4:88:eb:86:d1:5e:c0:4e: 46:7d:60:34:f3:82:49:82:22:a9:1c:50:9c:af:20:ca:39:13: 62:11:65:a4:7e:4d:cf:69:bc:b5:10:ca:f1:3a:99:7e:65:07: af:d2:96:d2:f0:02:18:e8:4a:35:f9:3e:dd:d4:b4:de:cc:ef: 57:fb:e6:80:68:5d:bc:ac:c3:8f:bc:d1:18:1d:3a:34:7b:72: 5f:e7:c5:11:c2:d0:4a:6d:f2:1f:9f:1e:18:f3:ee:f8:49:fa: 1c:05:3f:e6:98:a7:ce:bc:50:87:91:5e:85:e7:e4:e9:a5:85: bf:d1:21:51:c5:8e:bf:ca:cf:f1:a8:9c:4a:69:d7:63:48:bd: d4:43:2c:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTvD8CLjJefu+nUsTfhNEdUQkWgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjEwMjYxNzI1MzNaFw0yNjEwMjcxNzU1MzNaMDMxMTAvBgNV BAMTKDQxQkNCMDI4NjFCQjE2NTAxQUNDRDEzRUU4NTNEODU1NzQzRUM0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDxmUP63qOeoCdtrekz/lKuqe nrtxf4MlQCQEJoqltkys+YRHZNCLUQeexY6GvWHlRlV3kuqzP20rQ3QO3Wi/Zf9n tJZ/pYrsxg96vAQ47M1Ic9qcao9VUuIt0VfEBoETG9eT0DpOFd8+dxd/c5eS1Cun nvqc2zThMJCo4C34IXsrebJmSn3icXCIOpqhKM+qUcxEY4CV41864rC5rxhWwSCB 48WSEr3LC95yxKbyxZBukGAG7qlThxtku84M/+Brc5jemM76a2+/ub/qs9BLppyE qdVp+THsFN1Lrd6V964zetF5BH4yenB8iC/snwsftAI4jVS6RpLTyX4MxeJXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQbywKGG7FlAazNE+6FPYVXQ+xJYwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/HvRE ofR+A9wkCaj049dF8TBKBvTqfyVx95/hX/AHWmDVgV8mmMvTTm/pL51j6tXX0eH0 CuNrcRf/r9nEWk/o8REj1MTi4JapPs9MWLsfghLUS7XlUd/U4MeaNEYIVSaT+E67 CnGOwbTbjFtpciRDVr+KPg6DxIjrhtFewE5GfWA084JJgiKpHFCcryDKORNiEWWk fk3Paby1EMrxOpl+ZQev0pbS8AIY6Eo1+T7d1LTezO9X++aAaF28rMOPvNEYHTo0 e3Jf58URwtBKbfIfnx4Y8+74SfocBT/mmKfOvFCHkV6F5+TppYW/0SFRxY6/ys/x qJxKaddjSL3UQywk -----END CERTIFICATE-----Generated at Tue Oct 27 02:52:17 2026 by rpki-client