$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: c4rtwM64+xk/isG/KYEji2ndgGPN9cUELrgA450NurU= Subject key identifier: 6E:46:AD:03:1F:80:7D:CD:12:B9:6A:22:92:58:07:8F:6E:55:49:2E Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 7B20BCF71EB7AB31D109E114C010F0220040B083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 04CC Signing time: Wed 21 Oct 2026 05:43:05 +0000 Manifest this update: Wed 21 Oct 2026 05:38:05 +0000 Manifest next update: Thu 22 Oct 2026 07:15:05 +0000 Files and hashes: 1: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) 2: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: sw42KYxqguFEJdClbU88nKaAoYwa+N6W8RJb3bVM/ZA=) 3: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 07:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:20:bc:f7:1e:b7:ab:31:d1:09:e1:14:c0:10:f0:22:00:40:b0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Oct 21 05:38:05 2026 GMT Not After : Oct 22 07:15:05 2026 GMT Subject: CN=6E46AD031F807DCD12B96A229258078F6E55492E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:66:a0:dc:1d:2c:20:e4:a6:e8:84:03:41: fa:19:a8:a6:8f:d3:63:95:a9:c0:2d:40:c8:bb:f0: a8:bb:1b:ae:18:cc:93:5a:7b:7c:24:44:da:24:52: 8c:e3:e8:7b:a8:f8:b4:b3:59:3f:cb:57:07:d7:56: 65:5a:52:9b:ad:9d:c4:a6:58:bb:92:c3:77:4d:ae: ae:b7:63:4e:28:8e:2d:4f:4b:65:0c:01:56:64:22: 36:41:3b:e9:80:5a:8f:1c:b5:a6:77:53:b8:a3:73: 8c:73:74:9e:94:72:cd:8c:5d:4e:1d:ef:d8:60:cb: c3:59:37:11:3f:c9:33:cc:fe:1c:08:c5:8a:1d:fb: ce:c1:e4:f2:3e:5d:3e:5d:8b:e8:75:e2:4d:e7:21: 21:b9:15:9c:0d:54:68:67:3f:bf:ef:1d:0f:a9:2c: 76:b2:75:8a:66:61:7f:20:22:35:f9:c7:44:e9:9e: 20:30:59:ce:e1:60:c1:73:b8:48:76:43:47:20:a2: 66:c7:73:3f:e0:32:6e:93:e1:7e:e8:e0:89:b0:13: 3a:2b:2b:67:c0:28:1b:cd:cd:45:ea:6e:29:c8:bf: b3:d5:f8:e7:ed:cd:5a:4e:99:50:2f:6e:29:b6:41: b1:48:c1:49:df:6c:cb:7e:07:41:e4:75:f5:d7:58: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:AD:03:1F:80:7D:CD:12:B9:6A:22:92:58:07:8F:6E:55:49:2E X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6a:59:64:81:07:a6:b3:92:44:24:2b:d9:f0:7b:f6:af:ff: 17:f0:62:bf:6e:97:88:89:6f:a9:a5:77:c4:a8:a5:e2:dd:06: 76:0d:52:fb:f0:8d:88:d5:19:10:34:7c:66:8a:43:2a:e3:a0: 75:40:ac:15:b9:4c:a6:05:d6:c6:4e:7c:f4:25:47:10:2b:24: ff:74:f7:7f:b8:3a:47:2a:3f:7f:4c:79:2b:0e:b0:7a:53:27: 75:1a:84:8f:42:e2:ce:6a:be:a5:b0:39:25:ad:04:59:26:49: e8:fb:35:0c:1c:a0:8d:13:ab:0f:a2:23:70:4e:f4:83:e6:74: 76:3b:b8:35:c5:fc:ba:97:e1:fd:e3:a9:3e:c7:1b:19:a6:43: e2:35:5f:d6:5b:3a:19:e5:aa:ac:85:d8:11:4e:14:a7:7e:34: 7d:5e:5e:df:55:ff:e9:ac:a9:5b:ba:99:e6:6d:83:be:54:23: 4e:ba:ed:f0:0a:41:2d:d1:ca:d2:df:60:d7:22:91:b2:ec:a6: c5:2f:fc:0f:b3:21:84:88:59:90:33:76:fa:b1:f4:8c:5c:4d: 6f:6a:84:bb:a2:4e:0a:f7:73:26:12:d6:ad:25:93:b4:63:ec: 93:ee:0a:40:07:6f:72:29:d4:b7:eb:13:48:4e:ab:cf:f6:51: 3c:80:3b:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeyC89x63qzHRCeEUwBDwIgBAsIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjEwMjEwNTM4MDVaFw0yNjEwMjIwNzE1MDVaMDMxMTAvBgNV BAMTKDZFNDZBRDAzMUY4MDdEQ0QxMkI5NkEyMjkyNTgwNzhGNkU1NTQ5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpGag3B0sIOSm6IQDQfoZqKaP 02OVqcAtQMi78Ki7G64YzJNae3wkRNokUozj6Huo+LSzWT/LVwfXVmVaUputncSm WLuSw3dNrq63Y04oji1PS2UMAVZkIjZBO+mAWo8ctaZ3U7ijc4xzdJ6Ucs2MXU4d 79hgy8NZNxE/yTPM/hwIxYod+87B5PI+XT5di+h14k3nISG5FZwNVGhnP7/vHQ+p LHaydYpmYX8gIjX5x0TpniAwWc7hYMFzuEh2Q0cgombHcz/gMm6T4X7o4ImwEzor K2fAKBvNzUXqbinIv7PV+OftzVpOmVAvbim2QbFIwUnfbMt+B0HkdfXXWLKBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbkatAx+Afc0SuWoiklgHj25VSS4wHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWpZZIEHprOSRCQr2fB7 9q//F/Biv26XiIlvqaV3xKil4t0Gdg1S+/CNiNUZEDR8ZopDKuOgdUCsFblMpgXW xk589CVHECsk/3T3f7g6Ryo/f0x5Kw6welMndRqEj0Lizmq+pbA5Ja0EWSZJ6Ps1 DBygjROrD6IjcE70g+Z0dju4NcX8upfh/eOpPscbGaZD4jVf1ls6GeWqrIXYEU4U p340fV5e31X/6aypW7qZ5m2DvlQjTrrt8ApBLdHK0t9g1yKRsuymxS/8D7MhhIhZ kDN2+rH0jFxNb2qEu6JOCvdzJhLWrSWTtGPsk+4KQAdvcinUt+sTSE6rz/ZRPIA7 Xg== -----END CERTIFICATE-----Generated at Wed Oct 21 22:50:15 2026 by rpki-client