$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: eFSPFOnyPycVaKqrNsTExCPCSvHao7u6acp9eqJIhwo= Subject key identifier: C1:90:4D:89:A4:14:D7:C6:00:1F:C8:C8:73:05:93:7D:3E:7E:D5:9F Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 6EE54309ED618EA0D3932CCAE75E4730DDDB3999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 035E Signing time: Mon 17 Aug 2026 17:03:26 +0000 Manifest this update: Mon 17 Aug 2026 16:58:26 +0000 Manifest next update: Tue 18 Aug 2026 18:44:26 +0000 Files and hashes: 1: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) 2: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: oJRHsnqKrI8jcqyw5eEGrdf1Oc/FLvhk+td7Jn9Eo/w=) 3: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 18:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e5:43:09:ed:61:8e:a0:d3:93:2c:ca:e7:5e:47:30:dd:db:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Aug 17 16:58:26 2026 GMT Not After : Aug 18 18:44:26 2026 GMT Subject: CN=C1904D89A414D7C6001FC8C87305937D3E7ED59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:7c:e6:a7:fb:10:0c:70:ee:d6:28:a2:78: c8:9b:0f:a9:11:79:3f:33:86:ba:d1:10:84:8d:35: db:8e:d0:91:ed:f9:d2:33:d3:71:3e:f4:f8:4e:4c: 18:4b:0d:a3:1a:db:62:78:a4:2e:b0:90:2d:49:df: 4b:0b:12:4b:cb:af:7c:89:ba:23:6a:6c:09:af:4e: f9:8b:e1:9c:ad:de:84:97:e7:5f:b2:a5:a0:c8:31: b9:b8:86:71:44:d9:36:98:5a:0d:fe:00:d5:da:a3: 06:b7:92:87:d4:79:d6:22:f8:af:21:5c:2c:26:91: a0:63:3f:42:e1:61:75:de:15:8e:2f:38:1e:e5:fd: 79:6a:89:a6:c1:8d:1f:b6:2d:bd:6e:38:4b:01:48: 7b:40:b2:63:49:e1:3d:d3:ad:ba:50:94:e1:05:7f: 09:8e:ac:4f:2b:3a:3a:af:c9:d0:1a:32:a8:8c:42: 97:53:67:75:60:31:46:b6:61:11:08:98:ce:0a:01: 13:27:7c:07:06:b7:8e:60:63:34:d0:d8:e1:af:0f: cc:a8:78:98:97:b2:49:52:e2:f9:0b:8e:45:41:b8: c2:51:86:6c:52:69:4d:96:2c:13:e0:0f:21:99:7e: cb:d4:82:58:76:95:ae:a5:57:d3:66:b7:ed:9b:73: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:4D:89:A4:14:D7:C6:00:1F:C8:C8:73:05:93:7D:3E:7E:D5:9F X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c2:ad:1b:d2:01:25:3d:53:6e:19:45:50:c3:7d:2f:c4:77: 1c:e3:9a:50:6f:9d:80:be:26:3d:57:53:9b:b8:c8:26:28:43: f0:15:14:3d:a5:33:d7:1f:fa:f8:e3:b2:39:5b:c4:f5:72:90: 24:b9:1e:da:a4:42:39:28:e0:40:bc:fc:bb:62:d2:6b:67:10: 80:1a:e5:1d:0f:fa:d5:14:e3:35:0e:5a:30:ef:2f:7d:63:06: dd:09:ce:2d:c8:15:c6:0f:27:5b:24:fe:5c:b3:32:05:c5:75: 02:82:e4:eb:29:c7:5c:85:00:6d:07:0a:1f:ba:95:a0:ec:4b: 8c:d0:5d:3e:b4:89:07:ab:37:cb:a0:ea:44:88:69:3a:d5:17: 99:c6:bc:1b:23:46:81:5a:c9:89:92:61:72:7a:c7:e0:5e:a8: 4b:91:53:cc:44:dc:e4:ef:1d:9d:b1:e9:6a:19:70:c9:d6:57: db:d6:c1:96:02:95:a7:03:a9:3c:0b:dc:4f:e3:37:42:70:ad: 4f:88:c4:4d:93:8e:d3:70:7b:fb:71:a7:05:0a:a2:dc:46:93: 69:9e:78:7d:b4:64:08:1b:d6:e2:62:a3:08:1b:da:8a:2e:7b: 87:7f:8d:1f:fe:ab:2b:ba:f3:90:97:47:19:4a:12:a9:0f:06: 7a:b0:90:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbuVDCe1hjqDTkyzK515HMN3bOZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA4MTcxNjU4MjZaFw0yNjA4MTgxODQ0MjZaMDMxMTAvBgNV BAMTKEMxOTA0RDg5QTQxNEQ3QzYwMDFGQzhDODczMDU5MzdEM0U3RUQ1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP33zmp/sQDHDu1iiieMibD6kR eT8zhrrREISNNduO0JHt+dIz03E+9PhOTBhLDaMa22J4pC6wkC1J30sLEkvLr3yJ uiNqbAmvTvmL4Zyt3oSX51+ypaDIMbm4hnFE2TaYWg3+ANXaowa3kofUedYi+K8h XCwmkaBjP0LhYXXeFY4vOB7l/XlqiabBjR+2Lb1uOEsBSHtAsmNJ4T3TrbpQlOEF fwmOrE8rOjqvydAaMqiMQpdTZ3VgMUa2YREImM4KARMnfAcGt45gYzTQ2OGvD8yo eJiXsklS4vkLjkVBuMJRhmxSaU2WLBPgDyGZfsvUglh2la6lV9Nmt+2bc1yBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwZBNiaQU18YAH8jIcwWTfT5+1Z8wHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcKtG9IBJT1TbhlFUMN9 L8R3HOOaUG+dgL4mPVdTm7jIJihD8BUUPaUz1x/6+OOyOVvE9XKQJLke2qRCOSjg QLz8u2LSa2cQgBrlHQ/61RTjNQ5aMO8vfWMG3QnOLcgVxg8nWyT+XLMyBcV1AoLk 6ynHXIUAbQcKH7qVoOxLjNBdPrSJB6s3y6DqRIhpOtUXmca8GyNGgVrJiZJhcnrH 4F6oS5FTzETc5O8dnbHpahlwydZX29bBlgKVpwOpPAvcT+M3QnCtT4jETZOO03B7 +3GnBQqi3EaTaZ54fbRkCBvW4mKjCBvaii57h3+NH/6rK7rzkJdHGUoSqQ8GerCQ /g== -----END CERTIFICATE-----Generated at Tue Aug 18 01:07:45 2026 by rpki-client