$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: q3dA2FEMs7yKmffY5jc8dtfWMk3t/22TUVFPCQEmI+Y= Subject key identifier: E5:8B:D4:6D:D9:B9:3B:75:CB:FD:48:91:1A:12:BB:D5:5C:CA:71:B5 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 12F71654A0C27F9844BD7E830E5515475A412ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0658 Signing time: Thu 10 Sep 2026 06:24:31 +0000 Manifest this update: Thu 10 Sep 2026 06:19:31 +0000 Manifest next update: Fri 11 Sep 2026 07:55:31 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 2: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 3: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: JDrD00Bmj+42NfFofUDtwpOXw61Zhl9EFWkr7rr11Z8=) 4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 6: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 7: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 8: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 9: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 10: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 11: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f7:16:54:a0:c2:7f:98:44:bd:7e:83:0e:55:15:47:5a:41:2e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Sep 10 06:19:31 2026 GMT Not After : Sep 11 07:55:31 2026 GMT Subject: CN=E58BD46DD9B93B75CBFD48911A12BBD55CCA71B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:43:c2:72:b8:09:35:55:ed:1d:80:19:a9: 0f:ec:b6:61:67:11:a9:3e:d8:98:76:0b:16:f3:2f: 01:51:c3:37:e7:89:38:03:9b:35:3e:22:84:e5:4b: db:d3:41:a0:df:25:5a:c2:9b:05:6a:82:53:bd:ec: 9a:5c:4b:88:b1:cd:b8:72:ac:f5:eb:4c:7b:f4:d2: e8:7c:0d:b3:b4:e7:a9:ef:8c:cb:06:6e:1e:c4:60: b3:29:b7:0b:56:1c:d3:e4:48:50:d8:c4:25:9b:6e: 90:d3:86:3b:1b:3c:9c:a7:c3:67:d3:91:e6:e1:48: 42:0f:a5:eb:51:50:c3:68:d7:a5:42:ef:43:4c:50: d5:5e:fa:0c:cd:b6:15:49:05:79:47:a3:e8:7c:51: cd:c6:61:4f:10:57:4c:25:0b:f1:1a:72:97:19:2f: bf:00:41:24:61:e4:42:17:21:b9:08:61:cc:ce:56: 26:00:3a:16:41:a8:81:7d:1f:c7:48:a6:09:67:9c: 96:08:87:63:f2:9d:e3:bc:42:df:e5:3c:eb:ab:ef: 71:2e:2b:d7:90:93:49:9b:bd:8f:8f:32:0d:dd:1d: fc:58:12:50:f8:19:76:f6:b9:e4:b4:39:c7:be:ba: 25:d2:09:19:df:e4:bb:0c:79:3b:da:8f:07:50:e9: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8B:D4:6D:D9:B9:3B:75:CB:FD:48:91:1A:12:BB:D5:5C:CA:71:B5 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f0:b8:ae:2b:03:60:f5:3a:3a:6b:fe:ca:5e:8f:9d:d9:59: c0:5e:1d:db:87:26:8a:5e:a9:04:0d:46:6a:1d:13:2c:5e:61: 6f:11:67:c0:69:6c:96:7c:ab:a0:8b:70:f3:2c:c0:83:21:1a: 00:4f:a1:74:9d:69:0b:71:b5:0f:da:8f:18:c9:56:cb:86:c0: fd:21:e7:03:8d:12:12:66:47:99:40:90:a6:32:f0:eb:8b:1f: e7:7c:f8:27:32:0b:d1:db:da:cc:1d:a7:5b:33:02:c0:af:91: df:ef:90:ea:83:17:7e:32:81:ad:a4:02:b9:78:68:23:e5:51: a8:b5:d0:6d:ea:18:12:73:e0:41:62:4b:77:45:1f:8d:93:40: 2e:36:5f:26:8f:6c:9e:68:16:6e:b8:8f:a0:f6:83:99:11:0e: 25:15:00:70:b9:bd:1e:74:eb:00:2a:d0:86:7e:72:03:c4:3c: 67:b4:c2:b4:63:c7:a5:09:66:61:1a:df:ca:1e:cd:3b:4d:41: 0a:68:08:5f:16:2c:30:ff:03:b9:21:89:c6:4d:c7:3a:be:e0: e1:5a:65:97:6c:06:aa:bb:4c:59:ce:e6:e4:f5:3b:34:46:99: 4f:7c:e3:f8:18:4d:c0:b4:04:aa:01:dc:42:f4:73:b6:4b:c0: 34:81:44:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEvcWVKDCf5hEvX6DDlUVR1pBLtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA5MTAwNjE5MzFaFw0yNjA5MTEwNzU1MzFaMDMxMTAvBgNV BAMTKEU1OEJENDZERDlCOTNCNzVDQkZENDg5MTFBMTJCQkQ1NUNDQTcxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgUPCcrgJNVXtHYAZqQ/stmFn Eak+2Jh2CxbzLwFRwzfniTgDmzU+IoTlS9vTQaDfJVrCmwVqglO97JpcS4ixzbhy rPXrTHv00uh8DbO056nvjMsGbh7EYLMptwtWHNPkSFDYxCWbbpDThjsbPJynw2fT kebhSEIPpetRUMNo16VC70NMUNVe+gzNthVJBXlHo+h8Uc3GYU8QV0wlC/EacpcZ L78AQSRh5EIXIbkIYczOViYAOhZBqIF9H8dIpglnnJYIh2PyneO8Qt/lPOur73Eu K9eQk0mbvY+PMg3dHfxYElD4GXb2ueS0Oce+uiXSCRnf5LsMeTvajwdQ6cxXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5YvUbdm5O3XL/UiRGhK71VzKcbUwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvC4risDYPU6Omv+yl6P ndlZwF4d24cmil6pBA1Gah0TLF5hbxFnwGlslnyroItw8yzAgyEaAE+hdJ1pC3G1 D9qPGMlWy4bA/SHnA40SEmZHmUCQpjLw64sf53z4JzIL0dvazB2nWzMCwK+R3++Q 6oMXfjKBraQCuXhoI+VRqLXQbeoYEnPgQWJLd0UfjZNALjZfJo9snmgWbriPoPaD mREOJRUAcLm9HnTrACrQhn5yA8Q8Z7TCtGPHpQlmYRrfyh7NO01BCmgIXxYsMP8D uSGJxk3HOr7g4Vpll2wGqrtMWc7m5PU7NEaZT3zj+BhNwLQEqgHcQvRztkvANIFE Jg== -----END CERTIFICATE-----Generated at Thu Sep 10 10:13:26 2026 by rpki-client