$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: bL9Pqwyjxk7JMdLAdy869pF7/vw2i3RTNH1TNDKgRR4= Subject key identifier: C8:72:55:1A:3D:25:D4:72:10:4E:2B:07:CE:0D:69:F3:8D:CB:BD:DF Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 0C680D1A4361B99B7958754DC012687AEFEFDFF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 04C6 Signing time: Sat 24 Oct 2026 17:35:24 +0000 Manifest this update: Sat 24 Oct 2026 17:30:24 +0000 Manifest next update: Sun 25 Oct 2026 19:29:24 +0000 Files and hashes: 1: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 2: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 3: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 4: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: xB7iASDzPHktcmBK6wrTjGxhWAAcxEGgHMW0TBC9Q9Y=) 5: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:68:0d:1a:43:61:b9:9b:79:58:75:4d:c0:12:68:7a:ef:ef:df:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Oct 24 17:30:24 2026 GMT Not After : Oct 25 19:29:24 2026 GMT Subject: CN=C872551A3D25D472104E2B07CE0D69F38DCBBDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b8:39:0d:51:6a:60:cb:29:d6:f7:8b:8f:f3: b8:17:91:9d:d4:ad:ae:2d:e3:6e:74:1f:8c:27:ec: 59:18:91:ca:9c:10:8d:b7:04:55:06:39:2f:0f:0a: 0e:41:c4:f6:68:e2:68:59:65:66:97:01:4d:8a:0c: df:4b:5f:6f:2e:2b:34:34:12:a2:6e:c0:ef:04:f0: 52:b2:72:dc:70:ac:85:4d:dc:0a:f9:86:4c:ff:09: 94:b4:89:fb:62:6d:90:6b:87:f1:d9:6b:88:ad:68: c8:ca:57:30:d1:eb:74:fc:c0:ff:c8:63:96:76:ff: ee:78:d1:d3:5d:a4:b2:8b:d7:a7:48:a5:c5:0c:6c: c3:29:e3:9a:80:bb:1e:8e:61:db:97:fe:86:39:51: 12:f0:81:85:19:76:12:e3:53:4d:64:bf:e9:0d:29: 2d:05:ec:33:e4:f2:f8:6f:e0:81:50:c4:e9:f4:d3: 3c:9b:a6:1b:ea:cd:1a:50:a9:95:15:99:b8:ee:fa: 3a:30:26:cf:54:fc:56:44:a6:c5:8e:cd:a4:75:ef: f4:0f:54:66:32:2b:a8:5d:f1:3b:96:d8:f4:fd:f3: 99:74:fe:f8:9a:1e:63:5c:ca:17:68:1a:ba:43:c3: c5:28:c5:45:77:90:a2:4f:86:45:b3:f3:04:4a:ec: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:55:1A:3D:25:D4:72:10:4E:2B:07:CE:0D:69:F3:8D:CB:BD:DF X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:b7:3e:d1:a2:6e:97:b2:67:9f:e8:57:47:06:61:9b:65: 1f:fd:e4:81:cf:55:7a:17:7b:c0:8a:98:ff:11:cd:b6:04:8e: e4:0b:6b:82:7b:b9:7c:e7:27:6a:c3:44:69:ec:eb:53:89:18: 06:3d:9d:c2:35:1e:30:79:69:40:34:50:94:44:51:85:91:3b: 89:3a:82:c8:0e:0a:83:a0:46:f8:07:36:94:f1:6d:fe:c8:69: 37:c5:69:94:be:25:0f:19:1f:2d:e5:3a:66:63:0b:e4:d2:6f: 65:f4:c9:40:10:e9:6b:05:9a:fc:9e:30:90:eb:6e:b3:9c:da: 1a:ba:f1:bc:65:1b:0b:1c:7f:3a:37:9c:96:65:17:db:d9:02: 54:c4:ab:62:d7:56:95:c9:0b:21:ed:bb:05:1a:60:5f:43:21: a9:3c:f8:88:e1:0b:88:58:7a:a5:7f:c6:a4:90:99:78:3f:81: 67:06:1a:a9:2b:f1:ab:f7:64:71:fd:5e:2f:d7:d0:91:e1:fd: a7:64:74:39:03:e4:e6:cd:da:c2:40:6c:e5:94:51:b4:2b:f4: 51:49:27:a3:e7:a0:25:92:66:e7:87:8c:fa:c1:a9:ea:24:e5: a9:59:d0:2a:93:9d:47:f1:22:10:cf:a7:8f:6b:af:57:80:13: e5:13:8c:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDGgNGkNhuZt5WHVNwBJoeu/v3/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjEwMjQxNzMwMjRaFw0yNjEwMjUxOTI5MjRaMDMxMTAvBgNV BAMTKEM4NzI1NTFBM0QyNUQ0NzIxMDRFMkIwN0NFMEQ2OUYzOERDQkJEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5uDkNUWpgyynW94uP87gXkZ3U ra4t4250H4wn7FkYkcqcEI23BFUGOS8PCg5BxPZo4mhZZWaXAU2KDN9LX28uKzQ0 EqJuwO8E8FKyctxwrIVN3Ar5hkz/CZS0iftibZBrh/HZa4itaMjKVzDR63T8wP/I Y5Z2/+540dNdpLKL16dIpcUMbMMp45qAux6OYduX/oY5URLwgYUZdhLjU01kv+kN KS0F7DPk8vhv4IFQxOn00zybphvqzRpQqZUVmbju+jowJs9U/FZEpsWOzaR17/QP VGYyK6hd8TuW2PT985l0/viaHmNcyhdoGrpDw8UoxUV3kKJPhkWz8wRK7CnlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyHJVGj0l1HIQTisHzg1p843Lvd8wHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9C3PtGibpeyZ5/oV0cG YZtlH/3kgc9Vehd7wIqY/xHNtgSO5Atrgnu5fOcnasNEaezrU4kYBj2dwjUeMHlp QDRQlERRhZE7iTqCyA4Kg6BG+Ac2lPFt/shpN8VplL4lDxkfLeU6ZmML5NJvZfTJ QBDpawWa/J4wkOtus5zaGrrxvGUbCxx/OjeclmUX29kCVMSrYtdWlckLIe27BRpg X0MhqTz4iOELiFh6pX/GpJCZeD+BZwYaqSvxq/dkcf1eL9fQkeH9p2R0OQPk5s3a wkBs5ZRRtCv0UUkno+egJZJm54eM+sGp6iTlqVnQKpOdR/EiEM+nj2uvV4AT5ROM Zg== -----END CERTIFICATE-----Generated at Sun Oct 25 01:29:54 2026 by rpki-client