$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft File: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft (raw, json) Hash identifier: pbbDbiNNOoqMGi/EDIHrU7dmPzcmDAttjWtEbmvPtpw= Subject key identifier: 7F:A2:EE:77:84:08:50:59:8D:A8:14:B9:EA:36:14:76:13:B5:EA:7F Authority key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 Certificate issuer: /CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Certificate serial: 4F43F8D1E8D5E453111E23C4B6EE31F0A7EEFCD7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft Manifest number: 8F Signing time: Wed 28 Oct 2026 15:07:32 +0000 Manifest this update: Wed 28 Oct 2026 15:02:32 +0000 Manifest next update: Fri 30 Oct 2026 06:57:32 +0000 Files and hashes: 1: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl (hash: BOvpbDcJY8og5YaJ8EAWjwKk+bGpk/ILF6Oox/nVSVw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:43:f8:d1:e8:d5:e4:53:11:1e:23:c4:b6:ee:31:f0:a7:ee:fc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Validity Not Before: Oct 28 15:02:32 2026 GMT Not After : Oct 30 06:57:32 2026 GMT Subject: CN=7FA2EE77840850598DA814B9EA36147613B5EA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:84:5a:83:31:0c:08:22:41:6b:fa:1e:9b: e7:16:41:8c:89:c0:ac:57:b6:2e:dd:89:1b:38:a6: 37:2b:67:a9:a1:04:79:6e:ab:d2:17:7d:52:3e:46: 03:b7:84:32:18:bf:9f:5c:7b:ed:d5:11:8c:9f:6c: ab:9c:37:50:c9:cf:2b:c0:fe:21:a3:3a:50:9b:0b: 69:56:b1:68:45:35:d9:04:9d:bf:ca:89:81:5a:58: c6:06:07:ed:e9:6a:aa:f0:13:a4:d3:5d:64:92:bb: ba:35:27:34:90:19:34:6a:86:a1:75:a3:61:03:e7: 4b:25:b4:7e:23:51:17:1a:5e:ba:a3:dd:a1:2c:77: 05:bf:3b:d2:ea:48:bc:b4:aa:6f:b8:1b:82:9b:77: 60:c4:e5:81:b2:11:ca:3e:ba:a6:e4:19:2a:3b:b9: be:51:23:e5:bf:c9:a0:da:b3:d7:8f:b5:c2:3f:be: f9:94:e3:7a:05:c8:16:81:50:20:6f:27:e4:bf:91: e4:30:11:93:bb:6e:49:53:f6:32:0c:de:c9:ee:a5: d9:bf:f7:64:55:bf:bc:10:08:b3:d5:42:17:36:f0: 14:ad:a4:45:0c:f5:50:b0:e0:06:b1:41:f7:e1:b0: a8:ea:0a:74:ad:10:56:e1:a5:5d:25:96:4d:5d:ab: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A2:EE:77:84:08:50:59:8D:A8:14:B9:EA:36:14:76:13:B5:EA:7F X509v3 Authority Key Identifier: keyid:6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:d4:8b:dc:46:10:31:29:6e:d7:09:4e:30:a3:e5:6a:83: 31:35:ef:85:5b:a5:8e:0c:97:5b:ca:cc:73:7c:48:47:45:3b: 81:cb:dd:ac:54:44:6f:6b:5a:05:36:b7:fd:53:b1:d6:9e:04: 54:fd:ae:53:54:c0:e6:e4:d7:6c:73:a0:a7:22:4a:46:74:56: 70:fd:23:8e:6e:a2:d4:ba:ef:73:e5:1d:fa:a2:25:61:9d:1b: 96:92:b2:1d:20:9f:27:01:5c:c1:09:ad:b4:51:e9:f3:4d:9b: 56:23:98:e9:62:cc:eb:01:a3:67:23:11:0a:22:af:0d:3f:86: 87:84:5a:6a:8f:a2:58:8b:b4:c5:42:64:c6:14:3d:d1:63:b0: 7f:eb:75:1f:00:e2:32:83:c4:22:0c:7d:4f:14:2b:3f:c3:52: cd:6a:99:51:0c:1d:b2:7d:14:fa:f7:f2:ad:97:ab:87:0a:27: 7f:a4:14:28:4b:00:0a:8a:cc:0c:fe:4a:e1:be:cf:5c:43:73: 1a:94:4d:41:7d:c6:2e:00:8f:b4:cc:9b:7e:50:79:09:ba:9c: 41:10:f1:d8:11:34:b6:c2:79:1a:40:1f:50:76:c3:50:60:0e: 37:3b:96:77:81:d1:e3:68:db:8c:01:53:4c:47:b1:a3:d8:2e: d2:3c:65:e0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT0P40ejV5FMRHiPEtu4x8Kfu/NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJG NzMxNDI3OTAeFw0yNjEwMjgxNTAyMzJaFw0yNjEwMzAwNjU3MzJaMDMxMTAvBgNV BAMTKDdGQTJFRTc3ODQwODUwNTk4REE4MTRCOUVBMzYxNDc2MTNCNUVBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMoYRagzEMCCJBa/oem+cWQYyJ wKxXti7diRs4pjcrZ6mhBHluq9IXfVI+RgO3hDIYv59ce+3VEYyfbKucN1DJzyvA /iGjOlCbC2lWsWhFNdkEnb/KiYFaWMYGB+3paqrwE6TTXWSSu7o1JzSQGTRqhqF1 o2ED50sltH4jURcaXrqj3aEsdwW/O9LqSLy0qm+4G4Kbd2DE5YGyEco+uqbkGSo7 ub5RI+W/yaDas9ePtcI/vvmU43oFyBaBUCBvJ+S/keQwEZO7bklT9jIM3snupdm/ 92RVv7wQCLPVQhc28BStpEUM9VCw4AaxQffhsKjqCnStEFbhpV0llk1dqwI3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf6Lud4QIUFmNqBS56jYUdhO16n8wHwYDVR0j BBgwFoAUbRILbYUb04xp5dNZn9jA+/cxQnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzIvNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJGNzMxNDI3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RDEyMEI2RDg1MUJEMzhDNjlFNUQzNTk5 RkQ4QzBGQkY3MzE0Mjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2EyZTI1N2RmLTk5MzAtNDRlNi04NjZlLTQxYTQ4OTg2NTIzMi8yLzZEMTIwQjZE ODUxQkQzOEM2OUU1RDM1OTlGRDhDMEZCRjczMTQyNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAi5tSL 3EYQMSlu1wlOMKPlaoMxNe+FW6WODJdbysxzfEhHRTuBy92sVERva1oFNrf9U7HW ngRU/a5TVMDm5Ndsc6CnIkpGdFZw/SOObqLUuu9z5R36oiVhnRuWkrIdIJ8nAVzB Ca20UenzTZtWI5jpYszrAaNnIxEKIq8NP4aHhFpqj6JYi7TFQmTGFD3RY7B/63Uf AOIyg8QiDH1PFCs/w1LNaplRDB2yfRT69/Ktl6uHCid/pBQoSwAKiswM/krhvs9c Q3MalE1BfcYuAI+0zJt+UHkJupxBEPHYETS2wnkaQB9QdsNQYA43O5Z3gdHjaNuM AVNMR7Gj2C7SPGXg -----END CERTIFICATE-----Generated at Thu Oct 29 05:50:48 2026 by rpki-client