$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: jJp2522dSs1EUcIseqaqs+2SbJPTPSfN5dT+u6zbzLQ= Subject key identifier: F0:61:D9:48:9B:4F:4B:C5:3F:51:FF:19:FF:EF:8F:06:4C:99:37:40 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 766E4714225D66DA4C826034AC9DD8295502031D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 06A0 Signing time: Thu 08 Oct 2026 00:05:47 +0000 Manifest this update: Thu 08 Oct 2026 00:00:47 +0000 Manifest next update: Fri 09 Oct 2026 03:11:47 +0000 Files and hashes: 1: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: ne7GRpNUlv5Hk9czm2eR6D6oolsDGiHezP4DzMVsmT0=) 3: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 18:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6e:47:14:22:5d:66:da:4c:82:60:34:ac:9d:d8:29:55:02:03:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Oct 8 00:00:47 2026 GMT Not After : Oct 9 03:11:47 2026 GMT Subject: CN=F061D9489B4F4BC53F51FF19FFEF8F064C993740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:e6:ad:6b:59:2a:53:d9:06:16:a7:f1:13: b2:5e:ee:ff:75:1e:08:ba:56:5f:61:1b:2e:12:a8: 34:9c:d2:f7:14:65:74:5c:02:96:f5:57:9b:7d:0c: 9b:bc:45:0b:c5:4b:5f:31:fb:95:5e:6e:df:23:e2: 82:e3:01:f6:47:01:eb:13:b4:01:7f:09:f9:93:7c: f1:67:72:f9:22:e7:73:6b:63:94:e0:6f:ef:57:83: 2e:e5:50:c5:d5:9d:ca:59:ea:e8:3d:98:4a:1e:4f: e8:eb:52:3e:10:f5:41:60:ad:19:f3:8c:38:ca:f4: 78:3f:3c:4a:e7:03:43:1a:a1:c6:63:d9:db:17:fb: 33:ca:11:fd:92:55:7e:87:d8:e6:ad:f4:8c:c3:7f: 25:7a:03:63:ec:39:ea:4c:0b:c3:83:13:1b:2e:95: 4a:2c:ac:21:72:9c:ff:60:fd:80:56:9e:ff:8a:67: b2:e9:4a:5d:6a:0b:2e:a1:d9:0d:3f:9a:ab:bf:50: 72:d0:c4:56:58:73:73:36:63:3b:dc:ed:7c:d4:5c: cc:df:b4:f9:c4:2f:81:58:f5:28:ba:ec:ac:fd:66: 5b:24:88:54:09:77:00:26:2c:f6:47:92:88:0d:cb: 74:f7:83:db:61:e2:44:a5:33:6a:52:df:70:85:19: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:61:D9:48:9B:4F:4B:C5:3F:51:FF:19:FF:EF:8F:06:4C:99:37:40 X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4a:a9:ef:69:a8:54:f6:db:3a:1a:e0:a8:72:86:40:76:3e: 60:87:55:9a:26:4a:9f:58:ab:4a:8b:5e:06:43:ed:b2:fa:17: c1:1b:49:98:c3:c9:f4:22:40:2c:b4:d8:e8:73:97:de:1e:e0: fb:a2:cf:f0:79:41:f7:a5:e0:09:f0:6d:f5:66:a6:3b:18:4f: 9b:3f:54:02:43:95:a0:45:01:16:86:60:4b:07:37:1d:ae:d5: 91:28:2a:56:cb:c1:9c:b4:8f:e5:b8:f7:d3:66:15:75:96:91: c6:cb:bf:65:bb:32:2f:6f:c3:1d:dd:05:0f:b8:b6:a8:2b:08: 17:93:ab:0d:cd:87:4d:a1:41:e6:15:6e:92:45:9c:01:73:ee: fd:4a:58:cf:da:13:01:ed:44:77:5b:cf:32:66:a0:d8:2c:79: 4a:97:68:f5:4e:8d:63:11:21:56:12:cf:c9:6d:c1:2a:9e:48: fc:d8:59:3d:ec:c6:b6:74:43:7f:1a:d1:99:6d:fb:ad:ec:76: 59:50:b0:45:47:6c:9e:94:d4:50:28:b7:e8:fc:f4:ba:6a:af: 95:36:3f:f8:5e:5e:8a:32:eb:b9:09:c0:8d:79:56:f6:ab:c2: ce:b7:f2:48:8d:3a:65:1b:08:a3:aa:9d:e0:76:b2:fb:6b:2e: c3:93:c7:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdm5HFCJdZtpMgmA0rJ3YKVUCAx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjEwMDgwMDAwNDdaFw0yNjEwMDkwMzExNDdaMDMxMTAvBgNV BAMTKEYwNjFEOTQ4OUI0RjRCQzUzRjUxRkYxOUZGRUY4RjA2NEM5OTM3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9deata1kqU9kGFqfxE7Je7v91 Hgi6Vl9hGy4SqDSc0vcUZXRcApb1V5t9DJu8RQvFS18x+5Vebt8j4oLjAfZHAesT tAF/CfmTfPFncvki53NrY5Tgb+9Xgy7lUMXVncpZ6ug9mEoeT+jrUj4Q9UFgrRnz jDjK9Hg/PErnA0MaocZj2dsX+zPKEf2SVX6H2Oat9IzDfyV6A2PsOepMC8ODExsu lUosrCFynP9g/YBWnv+KZ7LpSl1qCy6h2Q0/mqu/UHLQxFZYc3M2Yzvc7XzUXMzf tPnEL4FY9Si67Kz9ZlskiFQJdwAmLPZHkogNy3T3g9th4kSlM2pS33CFGX13AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8GHZSJtPS8U/Uf8Z/++PBkyZN0AwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0qp72moVPbbOhrgqHKG QHY+YIdVmiZKn1irSoteBkPtsvoXwRtJmMPJ9CJALLTY6HOX3h7g+6LP8HlB96Xg CfBt9WamOxhPmz9UAkOVoEUBFoZgSwc3Ha7VkSgqVsvBnLSP5bj302YVdZaRxsu/ ZbsyL2/DHd0FD7i2qCsIF5OrDc2HTaFB5hVukkWcAXPu/UpYz9oTAe1Ed1vPMmag 2Cx5Spdo9U6NYxEhVhLPyW3BKp5I/NhZPezGtnRDfxrRmW37rex2WVCwRUdsnpTU UCi36Pz0umqvlTY/+F5eijLruQnAjXlW9qvCzrfySI06ZRsIo6qd4Hay+2suw5PH AQ== -----END CERTIFICATE-----Generated at Thu Oct 8 04:57:45 2026 by rpki-client