$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: pZHHvLpoPxljAcrtegQlgG+DgTQj3Qx2eyg9YSQTr7o= Subject key identifier: D7:58:72:6C:B0:33:7D:32:5A:31:C1:F5:D7:0C:C1:BE:9B:5D:0D:D1 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 4E2547805A23253101E1601D1971C238D7BEF8E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 0192 Signing time: Fri 04 Sep 2026 20:34:55 +0000 Manifest this update: Fri 04 Sep 2026 20:29:55 +0000 Manifest next update: Sat 05 Sep 2026 21:12:55 +0000 Files and hashes: 1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: aVe3xl5qLoDpA/zRWevPey0PrJzDfvYdW4HwQfA2JYw=) 2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) 3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:25:47:80:5a:23:25:31:01:e1:60:1d:19:71:c2:38:d7:be:f8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Sep 4 20:29:55 2026 GMT Not After : Sep 5 21:12:55 2026 GMT Subject: CN=D758726CB0337D325A31C1F5D70CC1BE9B5D0DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:c9:0d:09:85:56:09:79:0b:6e:16:0f:57: 4f:c5:e1:6f:43:f4:10:88:ec:c0:50:93:ef:13:d7: 6b:3c:75:00:c6:70:c9:02:9b:19:48:d1:f1:23:a3: 5a:3c:99:ac:4b:b6:59:2a:5b:5a:4a:10:c9:60:9d: 21:b8:09:f0:e0:a6:01:0f:7e:48:b5:bb:eb:ba:ff: 30:ae:f2:de:1e:48:a4:ce:9d:4d:13:42:99:4d:d1: ed:5b:21:b1:70:c3:c1:c4:5a:a5:ea:c2:5b:c0:32: e4:13:83:85:13:fb:04:5a:e7:e3:ef:55:29:2d:2c: 65:1f:e5:83:46:ca:55:a1:07:8b:4d:33:af:be:df: 68:94:21:26:da:f6:ba:84:16:17:54:4f:1a:fc:71: 59:e5:e3:1a:14:8c:af:d8:51:4c:ec:9a:6e:38:29: 6e:c2:3d:06:14:fd:e1:f4:b3:b3:a5:30:58:69:96: 07:d2:1c:ed:15:c2:dd:9b:73:c1:22:1d:9e:97:c3: eb:51:1b:16:a3:c3:a2:9f:34:e7:bc:c0:ac:0d:31: cb:11:af:65:08:91:41:91:f5:73:05:fb:ac:84:26: 10:75:d8:3f:00:0a:77:ec:87:d6:0a:22:92:c9:c2: c4:be:60:ca:ea:82:b5:c5:25:33:61:8e:b4:7c:a0: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:72:6C:B0:33:7D:32:5A:31:C1:F5:D7:0C:C1:BE:9B:5D:0D:D1 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:be:9c:e1:7a:98:9e:0f:b8:e4:7a:13:97:f2:dc:e1:9e:0d: 9f:5c:5c:94:03:d0:0a:70:85:34:15:52:3d:09:c3:17:f8:e3: 63:f7:4d:1e:59:12:90:6a:d4:0f:9f:07:74:7d:20:b1:8c:be: a0:04:b9:4b:2a:2b:e6:82:b1:19:90:9b:56:35:20:d2:19:4d: 11:af:28:8d:26:90:ae:a0:56:bb:cb:8b:6b:ee:d7:5c:70:0b: 76:4e:9c:63:a5:7c:df:69:27:38:da:68:d4:df:90:bb:66:d6: 42:f2:cf:bb:93:bc:54:70:47:57:35:69:19:5c:da:40:14:88: 9e:f0:a2:29:37:e3:a7:95:04:b7:f3:f9:c4:8f:22:a3:ec:11: 71:c6:cc:9f:93:f4:8f:08:e1:a1:45:07:6d:a9:42:1c:76:70: 4f:57:06:5a:4d:04:0e:38:fa:85:1f:d6:c1:c0:ee:a6:0c:b8: b5:b2:cb:2d:35:68:33:b2:31:c7:d6:61:a5:9d:19:ab:a2:e0: 48:bf:c4:42:e8:f0:05:f0:21:d2:73:12:51:da:0c:4a:94:c1: 50:81:93:33:8f:59:2e:ef:b6:d1:52:fb:4e:d9:a3:da:b8:61: 97:11:5b:93:cd:0e:31:73:85:72:d8:9a:47:a8:6c:c6:0d:43: 5d:8b:a9:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTiVHgFojJTEB4WAdGXHCONe++OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjA5MDQyMDI5NTVaFw0yNjA5MDUyMTEyNTVaMDMxMTAvBgNV BAMTKEQ3NTg3MjZDQjAzMzdEMzI1QTMxQzFGNUQ3MENDMUJFOUI1RDBERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLckNCYVWCXkLbhYPV0/F4W9D 9BCI7MBQk+8T12s8dQDGcMkCmxlI0fEjo1o8maxLtlkqW1pKEMlgnSG4CfDgpgEP fki1u+u6/zCu8t4eSKTOnU0TQplN0e1bIbFww8HEWqXqwlvAMuQTg4UT+wRa5+Pv VSktLGUf5YNGylWhB4tNM6++32iUISba9rqEFhdUTxr8cVnl4xoUjK/YUUzsmm44 KW7CPQYU/eH0s7OlMFhplgfSHO0Vwt2bc8EiHZ6Xw+tRGxajw6KfNOe8wKwNMcsR r2UIkUGR9XMF+6yEJhB12D8ACnfsh9YKIpLJwsS+YMrqgrXFJTNhjrR8oLFXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU11hybLAzfTJaMcH11wzBvptdDdEwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2vpzh epieD7jkehOX8tzhng2fXFyUA9AKcIU0FVI9CcMX+ONj900eWRKQatQPnwd0fSCx jL6gBLlLKivmgrEZkJtWNSDSGU0RryiNJpCuoFa7y4tr7tdccAt2TpxjpXzfaSc4 2mjU35C7ZtZC8s+7k7xUcEdXNWkZXNpAFIie8KIpN+OnlQS38/nEjyKj7BFxxsyf k/SPCOGhRQdtqUIcdnBPVwZaTQQOOPqFH9bBwO6mDLi1ssstNWgzsjHH1mGlnRmr ouBIv8RC6PAF8CHScxJR2gxKlMFQgZMzj1ku77bRUvtO2aPauGGXEVuTzQ4xc4Vy 2JpHqGzGDUNdi6lK -----END CERTIFICATE-----Generated at Sat Sep 5 03:14:59 2026 by rpki-client