$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: 9lyClMsstJaQpoGAZdGu3IZ62enqlPlWaUkvmMt4zds= Subject key identifier: 3F:EB:4B:9D:B2:4F:AB:0C:58:EA:A1:5C:D2:8C:9C:F8:4C:2D:F7:10 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 64E9973CF7898391B2071CD91B64658DC74BAC35 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 020F Signing time: Thu 10 Sep 2026 06:15:23 +0000 Manifest this update: Thu 10 Sep 2026 06:10:21 +0000 Manifest next update: Fri 11 Sep 2026 07:55:21 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 2: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 3: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 4: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: x9HYTzqU4uNXhT3z3cwkwPGc8wbT0aFAzlEdWSfmUho=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: jttxl3w5gtGvWvJGVtPuIaUM9EQsHbSyoOZ1w8vhwz4=) 6: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 8: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e9:97:3c:f7:89:83:91:b2:07:1c:d9:1b:64:65:8d:c7:4b:ac:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 10 06:10:21 2026 GMT Not After : Sep 11 07:55:21 2026 GMT Subject: CN=3FEB4B9DB24FAB0C58EAA15CD28C9CF84C2DF710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:2c:03:5f:d6:40:a5:66:18:05:ce:d9:95: b2:65:ef:e6:17:77:97:bb:94:7f:96:3e:9e:9f:ad: fb:4a:75:10:1a:38:c7:94:51:67:36:73:61:2e:90: f9:c0:62:c2:3d:ef:54:1e:d8:5b:b2:21:36:c7:35: dd:69:b4:5f:3c:15:b6:28:6a:b9:7d:fb:ca:06:7c: f7:65:f1:9a:df:a8:92:4d:e0:82:60:a5:7e:8d:11: d8:a9:0d:83:92:ed:97:3c:da:92:ca:86:97:71:9f: d1:62:04:ad:91:51:10:f8:63:a7:f3:81:c2:93:76: 5d:02:bc:3c:7c:db:3f:9b:b1:32:87:e9:66:35:bf: cf:c9:81:ea:4a:17:10:1e:51:10:73:5a:cd:41:85: a6:d3:d6:4f:ad:61:8e:1b:27:d5:e6:ea:c5:e7:70: 06:02:0b:97:20:f6:99:93:cc:fb:1c:d9:e7:e6:4d: 87:91:71:cf:f6:60:08:e4:96:4f:11:28:d5:8e:62: 4c:ae:56:c3:10:86:9a:a5:5e:7a:2f:3c:39:7c:55: 38:03:5d:33:1c:60:5f:d1:af:b2:2b:f0:09:28:3c: a3:de:60:71:ff:90:96:fb:15:bb:ba:4b:cb:e1:95: 58:10:16:af:98:b6:ec:3a:74:bb:0d:2d:35:db:54: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:4B:9D:B2:4F:AB:0C:58:EA:A1:5C:D2:8C:9C:F8:4C:2D:F7:10 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:71:a9:95:73:3c:4b:5b:e2:6a:e9:e6:de:44:5a:31:f9:a7: 3e:6e:ba:66:f7:ff:59:50:df:88:9d:9e:ac:bf:a7:5b:5f:ab: 4a:ed:ea:9d:c2:71:8b:b6:59:19:26:bd:70:25:d5:6f:9a:59: 8b:07:97:f5:29:e7:d9:cd:e4:99:56:e2:6e:3f:08:6e:e3:e1: ca:9e:a3:30:a7:d8:0e:ce:af:3e:e9:91:9a:25:42:6d:1e:b5: 58:18:13:2a:4c:b2:17:1e:60:68:3e:58:b0:f1:55:9e:f0:87: 74:33:19:dc:5f:6b:02:d5:8c:07:10:b0:45:20:de:da:49:47: 71:62:8e:ef:85:e5:a9:b1:59:22:7a:e0:53:b4:21:6b:9b:f1: 91:ae:ef:93:05:bd:06:75:d5:dc:51:04:27:3e:85:22:6d:fd: 89:84:3f:54:d7:7c:a1:6f:89:c3:be:ec:26:2c:c3:aa:d6:1b: 71:b5:9a:4c:a0:8e:21:47:61:89:aa:79:e5:ee:cd:5b:6b:35: 0b:f5:d5:84:6e:51:28:ea:08:85:28:12:8c:1e:ad:e6:af:1f: 03:db:96:33:96:f8:20:e0:b3:75:e9:87:33:32:3f:0e:62:32: 0c:f0:9e:12:9f:69:d8:cc:e2:f1:da:7b:79:68:a2:a2:4f:6c: 8b:aa:e7:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZOmXPPeJg5GyBxzZG2RljcdLrDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA5MTAwNjEwMjFaFw0yNjA5MTEwNzU1MjFaMDMxMTAvBgNV BAMTKDNGRUI0QjlEQjI0RkFCMEM1OEVBQTE1Q0QyOEM5Q0Y4NEMyREY3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5SwDX9ZApWYYBc7ZlbJl7+YX d5e7lH+WPp6frftKdRAaOMeUUWc2c2EukPnAYsI971Qe2FuyITbHNd1ptF88FbYo arl9+8oGfPdl8ZrfqJJN4IJgpX6NEdipDYOS7Zc82pLKhpdxn9FiBK2RURD4Y6fz gcKTdl0CvDx82z+bsTKH6WY1v8/JgepKFxAeURBzWs1BhabT1k+tYY4bJ9Xm6sXn cAYCC5cg9pmTzPsc2efmTYeRcc/2YAjklk8RKNWOYkyuVsMQhpqlXnovPDl8VTgD XTMcYF/Rr7Ir8AkoPKPeYHH/kJb7Fbu6S8vhlVgQFq+Ytuw6dLsNLTXbVHZpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUP+tLnbJPqwxY6qFc0oyc+Ewt9xAwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkcamV czxLW+Jq6ebeRFox+ac+brpm9/9ZUN+InZ6sv6dbX6tK7eqdwnGLtlkZJr1wJdVv mlmLB5f1KefZzeSZVuJuPwhu4+HKnqMwp9gOzq8+6ZGaJUJtHrVYGBMqTLIXHmBo Pliw8VWe8Id0MxncX2sC1YwHELBFIN7aSUdxYo7vheWpsVkieuBTtCFrm/GRru+T Bb0GddXcUQQnPoUibf2JhD9U13yhb4nDvuwmLMOq1htxtZpMoI4hR2GJqnnl7s1b azUL9dWEblEo6giFKBKMHq3mrx8D25Yzlvgg4LN16YczMj8OYjIM8J4Sn2nYzOLx 2nt5aKKiT2yLqudr -----END CERTIFICATE-----Generated at Thu Sep 10 09:18:35 2026 by rpki-client