$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: HeW/MyvqJHnvEW5CijxpR09E3MjKSMGFKiW5zrpxCrQ= Subject key identifier: 5A:9C:75:E4:49:EC:60:D1:2B:B9:49:07:41:56:AA:16:EA:36:78:97 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 1C1ED45B3CDFC8F67E005E3B07BF37D7B5C9D789 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 01B8 Signing time: Sat 10 Oct 2026 09:27:01 +0000 Manifest this update: Sat 10 Oct 2026 09:22:01 +0000 Manifest next update: Sun 11 Oct 2026 13:15:01 +0000 Files and hashes: 1: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: ZMwVBLnqMueIU0tXrbxYV/kNBXq5UVNvzJjA5e839rM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 13:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1e:d4:5b:3c:df:c8:f6:7e:00:5e:3b:07:bf:37:d7:b5:c9:d7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Oct 10 09:22:01 2026 GMT Not After : Oct 11 13:15:01 2026 GMT Subject: CN=5A9C75E449EC60D12BB949074156AA16EA367897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:4d:ba:ca:79:e2:b2:21:be:47:a4:ed:96: e9:06:54:8e:5b:f5:af:a1:0c:c8:11:f6:bb:0d:49: bf:d1:a2:b7:db:f9:04:b2:cf:d6:cf:47:84:8e:db: b3:19:96:89:ab:c4:10:e5:05:1e:f8:3e:af:81:ea: 88:83:b0:7c:8f:63:7e:18:83:97:f6:7a:99:a7:5f: fb:86:8f:03:08:e6:4a:4d:e8:25:73:e6:f6:18:67: 11:d0:78:27:1a:69:10:44:88:d7:36:51:a4:ab:93: 7d:f5:9e:58:dd:3f:75:84:91:63:5a:c2:4b:6c:3a: 67:6b:32:0b:28:75:8b:47:e8:cd:34:01:ce:f3:04: 13:09:d4:c3:4d:3f:ce:b6:78:d1:34:63:7e:2c:d7: 88:42:6b:96:2c:8c:08:d4:c4:6b:1c:b3:3f:a3:ba: 6a:e3:35:d3:67:db:59:be:24:5b:5e:ce:93:93:bb: 58:74:c8:fe:6a:dc:c6:09:79:b7:00:f2:fe:41:8f: 1e:c0:5a:d7:6b:af:b3:f3:06:c6:43:22:00:fb:22: 11:cd:97:0b:cf:a8:b5:f1:4f:85:00:f0:55:2b:a9: 5e:fc:00:9e:8d:f8:e2:31:0c:d0:f1:d6:d1:4f:74: c3:94:10:33:60:60:c2:17:9d:4c:43:01:d9:f8:59: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:75:E4:49:EC:60:D1:2B:B9:49:07:41:56:AA:16:EA:36:78:97 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:92:79:93:ac:6d:93:02:4d:54:1b:d5:8d:c4:75:68:a0:3e: 76:73:73:2c:60:12:a7:b6:dc:04:2e:6c:8e:81:4c:1d:b8:33: cd:1a:8f:63:eb:91:c2:55:a6:99:df:f9:de:13:c5:c8:78:28: 33:9e:8e:7f:4d:d3:ff:d5:8f:90:68:2f:0c:6b:eb:06:ca:47: b7:5a:25:58:f8:18:6c:94:39:82:ab:4b:ee:04:66:12:96:38: 7d:63:c4:8e:e6:f6:f2:56:18:8e:87:b4:0a:be:41:e1:92:ef: e8:14:f2:85:27:22:f9:0d:8a:82:96:74:61:e8:f6:e4:c0:21: c5:a2:82:c8:44:ec:42:11:3b:bf:da:e4:4b:00:61:b4:f7:35: fa:76:9a:b2:dd:5b:00:8b:b1:9a:45:6f:20:53:ff:ab:4d:9d: 85:29:ab:3a:a8:8a:44:01:2f:c3:ff:c1:a9:1d:57:83:0d:05: 13:1b:7e:c7:dd:a7:78:2f:38:18:c8:bb:4a:a1:46:85:28:00: 30:4a:9e:6e:b9:40:80:ca:fd:c8:ea:45:d6:98:fd:7b:8a:5e: c5:43:52:7a:7e:b8:45:63:0d:74:06:93:a7:d6:f3:f0:fc:da: 3f:6f:91:fc:a3:de:b9:aa:6f:42:db:bf:30:b3:9d:a9:e0:64: 87:b8:64:33 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUHB7UWzzfyPZ+AF47B78317XJ14kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjEwMTAwOTIyMDFaFw0yNjEwMTExMzE1MDFaMDMxMTAvBgNV BAMTKDVBOUM3NUU0NDlFQzYwRDEyQkI5NDkwNzQxNTZBQTE2RUEzNjc4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0k26ynnisiG+R6TtlukGVI5b 9a+hDMgR9rsNSb/Rorfb+QSyz9bPR4SO27MZlomrxBDlBR74Pq+B6oiDsHyPY34Y g5f2epmnX/uGjwMI5kpN6CVz5vYYZxHQeCcaaRBEiNc2UaSrk331nljdP3WEkWNa wktsOmdrMgsodYtH6M00Ac7zBBMJ1MNNP862eNE0Y34s14hCa5YsjAjUxGscsz+j umrjNdNn21m+JFtezpOTu1h0yP5q3MYJebcA8v5Bjx7AWtdrr7PzBsZDIgD7IhHN lwvPqLXxT4UA8FUrqV78AJ6N+OIxDNDx1tFPdMOUEDNgYMIXnUxDAdn4Wb5XAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUWpx15EnsYNEruUkHQVaqFuo2eJcwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5J5k6xtkwJNVBvVjcR1 aKA+dnNzLGASp7bcBC5sjoFMHbgzzRqPY+uRwlWmmd/53hPFyHgoM56Of03T/9WP kGgvDGvrBspHt1olWPgYbJQ5gqtL7gRmEpY4fWPEjub28lYYjoe0Cr5B4ZLv6BTy hSci+Q2KgpZ0Yej25MAhxaKCyETsQhE7v9rkSwBhtPc1+naast1bAIuxmkVvIFP/ q02dhSmrOqiKRAEvw//BqR1Xgw0FExt+x92neC84GMi7SqFGhSgAMEqebrlAgMr9 yOpF1pj9e4pexUNSen64RWMNdAaTp9bz8PzaP2+R/KPeuapvQtu/MLOdqeBkh7hk Mw== -----END CERTIFICATE-----Generated at Sun Oct 11 06:31:10 2026 by rpki-client