$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: +a/GFbFIxDTT19kVIIzh0pwjj9C1GYDcgXf7ojor/7Q= Subject key identifier: 09:ED:C5:BA:11:C6:89:F6:9A:59:EC:AA:77:83:95:37:1C:C1:5B:05 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 412913DDDE978FB521B84A898ADB8B316D1F8C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0697 Signing time: Sun 25 Oct 2026 23:57:12 +0000 Manifest this update: Sun 25 Oct 2026 23:52:12 +0000 Manifest next update: Tue 27 Oct 2026 02:38:12 +0000 Files and hashes: 1: 3138352e322e3136322e302f32332d3234203d3e2034373636.roa (hash: 6xIjLnCy0qhWyFEfLZh4dFeHr64CJ0o3uIQFz4O4Ksk=) 2: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 3: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 4: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: LbwqhXnNWHFBIQWvocWH//0uaXU4uy0NrbxF/utnKt8=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 6: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 7: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 9: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: BusrVHf+zY1JX+bmjDXcC3KVyArFYIN6eENeYlXoxOA=) 10: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 11: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 12: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 13: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:29:13:dd:de:97:8f:b5:21:b8:4a:89:8a:db:8b:31:6d:1f:8c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Oct 25 23:52:12 2026 GMT Not After : Oct 27 02:38:12 2026 GMT Subject: CN=09EDC5BA11C689F69A59ECAA778395371CC15B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:ba:f2:b6:5e:78:bd:24:2b:9c:0b:5d:45: 50:02:a5:f4:71:ea:dc:7f:ad:7f:4c:72:63:21:3c: df:bb:f0:1d:91:db:e7:00:e9:89:54:13:4a:8b:b2: 5a:db:a0:3f:f3:57:26:62:b6:86:26:68:60:2a:10: 89:e2:54:56:1f:4e:55:85:22:8c:04:ff:56:a8:27: e5:fa:9d:7e:40:c2:33:ae:41:09:1f:66:7e:24:c9: ca:f4:46:14:84:bd:8e:44:83:6b:55:a6:5f:83:d0: 18:10:27:87:40:ce:7b:d2:b7:91:b2:97:59:5e:a1: 26:2b:78:7c:17:37:64:c5:60:c0:cc:12:5e:56:16: 02:3c:6c:a2:94:7f:8b:b3:49:4c:cb:d5:ba:4a:ea: 8d:cc:4f:6d:f4:12:88:23:c5:a8:d3:0b:e3:d2:ae: 34:09:0a:d8:b6:9e:1a:31:1f:59:6f:71:a2:08:b4: 7f:58:b7:d4:ad:71:53:3d:aa:55:7d:9c:df:f5:68: be:57:d6:8a:45:47:e0:6f:b1:c8:9a:3f:6e:bd:35: 45:0f:eb:8d:29:03:80:ca:21:67:68:e8:85:91:b9: 53:ec:ee:a7:61:6b:6d:6b:d9:89:6c:06:87:3b:74: 13:39:74:87:ba:fb:bf:06:80:e6:d7:16:d5:8e:0e: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:C5:BA:11:C6:89:F6:9A:59:EC:AA:77:83:95:37:1C:C1:5B:05 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:26:72:62:85:00:0b:fb:ee:fc:2d:ac:e8:32:fa:46:9d:12: bd:24:da:be:7a:94:df:50:1b:69:92:93:f3:48:ef:92:88:25: c8:4f:c5:00:dc:76:05:3f:a5:1b:77:34:30:d2:29:01:62:80: f0:a6:8d:ff:02:4d:cb:e1:95:bb:38:f9:45:86:ec:1a:a2:9f: 0f:38:5c:05:c9:94:bb:2c:04:62:d9:48:f5:9f:b8:ae:ab:bd: a3:dd:e9:54:b3:fa:7e:e9:3c:2c:99:19:14:20:c9:8e:9a:84: a8:34:6a:4f:00:66:83:d5:11:c6:c5:9c:f9:34:48:e4:f3:8e: 4a:1b:32:be:32:09:e9:f6:c6:54:a1:74:8d:2c:65:0f:d9:d6: 5c:0f:3a:c8:c7:48:23:96:6a:bc:32:14:04:ed:d1:0b:35:9e: cb:5a:22:c6:e4:a9:15:ca:59:c4:8a:52:5f:78:ab:3e:9b:b8: a6:c3:03:88:7f:92:eb:26:c3:47:0c:f1:1d:43:c6:bd:78:8e: aa:f7:a0:0d:d3:19:ae:4c:8e:d2:ed:2e:a3:51:5e:fb:3c:bc: 18:4f:19:f7:23:38:60:aa:97:1d:34:22:48:e6:e6:9a:97:84: b9:8d:1a:7e:b3:80:04:7f:e5:36:1b:d4:59:a7:5d:00:e9:aa: 1e:ec:8e:2f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQSkT3d6Xj7UhuEqJituLMW0fjEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjEwMjUyMzUyMTJaFw0yNjEwMjcwMjM4MTJaMDMxMTAvBgNV BAMTKDA5RURDNUJBMTFDNjg5RjY5QTU5RUNBQTc3ODM5NTM3MUNDMTVCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCambrytl54vSQrnAtdRVACpfRx 6tx/rX9McmMhPN+78B2R2+cA6YlUE0qLslrboD/zVyZitoYmaGAqEIniVFYfTlWF IowE/1aoJ+X6nX5AwjOuQQkfZn4kycr0RhSEvY5Eg2tVpl+D0BgQJ4dAznvSt5Gy l1leoSYreHwXN2TFYMDMEl5WFgI8bKKUf4uzSUzL1bpK6o3MT230EogjxajTC+PS rjQJCti2nhoxH1lvcaIItH9Yt9StcVM9qlV9nN/1aL5X1opFR+BvsciaP269NUUP 640pA4DKIWdo6IWRuVPs7qdha21r2YlsBoc7dBM5dIe6+78GgObXFtWODoZDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCe3FuhHGifaaWeyqd4OVNxzBWwUwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyZyYoUAC/vu/C2s6DL6 Rp0SvSTavnqU31AbaZKT80jvkoglyE/FANx2BT+lG3c0MNIpAWKA8KaN/wJNy+GV uzj5RYbsGqKfDzhcBcmUuywEYtlI9Z+4rqu9o93pVLP6fuk8LJkZFCDJjpqEqDRq TwBmg9URxsWc+TRI5POOShsyvjIJ6fbGVKF0jSxlD9nWXA86yMdII5ZqvDIUBO3R CzWey1oixuSpFcpZxIpSX3irPpu4psMDiH+S6ybDRwzxHUPGvXiOqvegDdMZrkyO 0u0uo1Fe+zy8GE8Z9yM4YKqXHTQiSObmmpeEuY0afrOABH/lNhvUWaddAOmqHuyO Lw== -----END CERTIFICATE-----Generated at Mon Oct 26 03:48:01 2026 by rpki-client