$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: TzqNXC3LF0leZ1rL9JnI7vkhYpk6IBM/8MfQvPBAyaY= Subject key identifier: 02:69:7C:20:3B:38:C4:2F:76:45:CB:EA:CD:94:0E:65:4C:01:F8:9F Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 5685934085A416049320010477512C7CF3CEB421 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 023F Signing time: Sat 03 Oct 2026 17:16:24 +0000 Manifest this update: Sat 03 Oct 2026 17:11:24 +0000 Manifest next update: Sun 04 Oct 2026 18:25:24 +0000 Files and hashes: 1: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=) 2: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=) 3: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=) 4: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=) 5: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=) 6: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=) 7: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: T13Rj2UZzgOeemFVuWre9Q3j7msYcA/KfQ22H6ZY+gU=) 8: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=) 9: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: PWE5971C7QuLNwwp3st4YltR0tvfMKcd2CD25VQDDXc=) 10: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=) 11: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=) 12: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=) 13: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=) 14: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=) 15: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=) 16: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=) 17: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 56:85:93:40:85:a4:16:04:93:20:01:04:77:51:2c:7c:f3:ce:b4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Oct 3 17:11:24 2026 GMT Not After : Oct 4 18:25:24 2026 GMT Subject: CN=02697C203B38C42F7645CBEACD940E654C01F89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:03:69:d7:15:3f:4c:66:25:1b:a2:c6:b8:29: 7f:03:70:48:26:4f:6e:76:9f:34:6d:cf:84:1a:43: 13:6a:6a:67:35:d9:80:60:3d:2c:25:0f:ac:66:25: e2:60:16:47:20:ba:dd:94:54:a0:6c:e5:dc:4d:8d: 03:83:b1:ee:7e:f1:51:b3:45:19:c7:c5:f3:c4:d0: b0:da:b4:6a:36:0e:be:0b:da:2d:cd:96:e8:8c:30: 2d:c6:59:6f:f3:97:19:7c:a0:ba:d4:6b:b1:c6:10: 85:93:29:5e:17:a1:ef:5e:a8:07:e1:fc:e6:e8:e4: f9:60:d4:a8:95:71:c4:c7:42:47:32:29:29:4f:7a: c5:61:1c:a8:f2:06:d8:e4:42:c5:38:1e:c5:f6:9b: d7:d9:64:05:7c:58:fd:b2:4c:35:f8:fe:59:87:71: 8b:ea:07:5d:05:a3:4a:f0:45:9f:46:1a:b4:02:79: 4e:80:52:b2:b8:45:4f:96:d4:4a:4f:33:11:7d:78: bb:e3:bb:ea:cf:03:0c:ea:05:7d:ed:12:c2:0b:81: e5:4c:39:72:92:1c:4d:3a:07:2f:84:36:b8:21:ff: 47:97:33:4e:0c:8b:04:6c:7f:f7:a9:5b:fd:98:01: 91:bf:4e:99:f7:c1:47:79:6e:fb:eb:4e:09:4d:68: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:7C:20:3B:38:C4:2F:76:45:CB:EA:CD:94:0E:65:4C:01:F8:9F X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3a:1d:0a:e2:ba:c1:bf:1f:6b:35:6b:c1:6a:e4:fe:aa:8e: 9e:9e:1d:4e:5e:93:95:bf:ed:e1:47:3e:ab:fc:41:a9:f6:a3: 4d:b6:2f:ba:ce:e8:ea:a3:d5:b2:99:38:57:9c:9b:68:be:4e: 6c:ae:69:bf:13:a3:2d:58:a2:1b:14:2f:2d:d9:33:0a:dc:6c: d0:d2:da:2d:bc:6a:11:2c:00:e9:5b:c0:33:65:fd:d2:2e:3d: b1:78:8c:e1:70:76:83:4a:7c:0a:f9:40:61:54:8c:be:aa:7c: b9:29:a6:c4:78:19:35:c8:37:38:6d:cd:c3:50:d3:4d:6d:04: 90:6e:4e:fb:0d:f7:cb:6a:cd:f9:b1:42:8b:f1:4a:54:14:eb: b0:a1:48:cb:cf:02:dc:d3:ef:94:4f:a2:c2:09:eb:d2:99:7f: 7e:57:4f:70:99:3e:e3:0c:b6:1e:b8:0e:22:99:de:f9:c9:60: 00:c0:b1:0a:70:40:8c:92:ab:b8:0e:cc:8c:15:91:6d:c0:9c: 88:a0:40:92:4a:0b:6a:e2:41:d7:95:72:68:88:26:74:67:3c: 5f:7c:66:93:a2:4c:b6:88:4a:37:0b:40:a0:82:b3:64:3d:b4: 84:d1:14:c0:b0:01:ff:b3:8a:88:d5:de:1e:ef:9a:d8:39:78: ae:47:2e:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVoWTQIWkFgSTIAEEd1EsfPPOtCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjEwMDMxNzExMjRaFw0yNjEwMDQxODI1MjRaMDMxMTAvBgNV BAMTKDAyNjk3QzIwM0IzOEM0MkY3NjQ1Q0JFQUNEOTQwRTY1NEMwMUY4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrA2nXFT9MZiUbosa4KX8DcEgm T252nzRtz4QaQxNqamc12YBgPSwlD6xmJeJgFkcgut2UVKBs5dxNjQODse5+8VGz RRnHxfPE0LDatGo2Dr4L2i3NluiMMC3GWW/zlxl8oLrUa7HGEIWTKV4Xoe9eqAfh /Obo5Plg1KiVccTHQkcyKSlPesVhHKjyBtjkQsU4HsX2m9fZZAV8WP2yTDX4/lmH cYvqB10Fo0rwRZ9GGrQCeU6AUrK4RU+W1EpPMxF9eLvju+rPAwzqBX3tEsILgeVM OXKSHE06By+ENrgh/0eXM04MiwRsf/epW/2YAZG/Tpn3wUd5bvvrTglNaHjlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAml8IDs4xC92RcvqzZQOZUwB+J8wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMOh0K 4rrBvx9rNWvBauT+qo6enh1OXpOVv+3hRz6r/EGp9qNNti+6zujqo9WymThXnJto vk5srmm/E6MtWKIbFC8t2TMK3GzQ0totvGoRLADpW8AzZf3SLj2xeIzhcHaDSnwK +UBhVIy+qny5KabEeBk1yDc4bc3DUNNNbQSQbk77DffLas35sUKL8UpUFOuwoUjL zwLc0++UT6LCCevSmX9+V09wmT7jDLYeuA4imd75yWAAwLEKcECMkqu4DsyMFZFt wJyIoECSSgtq4kHXlXJoiCZ0ZzxffGaToky2iEo3C0CggrNkPbSE0RTAsAH/s4qI 1d4e75rYOXiuRy5g -----END CERTIFICATE-----Generated at Sat Oct 10 10:56:57 2026 by rpki-client