$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: wz2bJ5Gj/OlzzRj/ZczZ/Xc4VjvX+B9+bcmUeFLlSnk= Subject key identifier: 2B:20:65:AC:AD:AE:D9:89:28:1F:D1:7B:5A:26:1C:A4:0E:95:CE:53 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 71143B075F40D81340DC5CCC02A18AA89CB9A1A6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0371 Signing time: Fri 04 Sep 2026 11:40:53 +0000 Manifest this update: Fri 04 Sep 2026 11:35:53 +0000 Manifest next update: Sun 06 Sep 2026 00:27:53 +0000 Files and hashes: 1: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 2: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 3: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 4: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: rz3On9l2SgYr+kIilbqnr2sPS54lI0XYmux6eXuv0cA=) 5: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 6: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:14:3b:07:5f:40:d8:13:40:dc:5c:cc:02:a1:8a:a8:9c:b9:a1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Sep 4 11:35:53 2026 GMT Not After : Sep 6 00:27:53 2026 GMT Subject: CN=2B2065ACADAED989281FD17B5A261CA40E95CE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:7e:04:e7:10:b7:a9:d1:3b:28:46:0e:0d: 9d:16:1e:df:0b:42:ca:63:58:3a:23:81:38:55:58: 4f:fa:cc:51:64:56:5b:2c:f1:85:66:65:80:36:70: e4:21:c3:14:13:ef:a4:e8:04:9e:d3:43:a5:9e:d1: 8c:a6:2a:ec:17:35:71:d2:ba:b5:3d:11:5a:b5:1f: a9:d9:05:8c:2c:62:a2:ba:0e:d5:ca:16:b4:b3:0d: 40:8d:f9:79:65:1b:29:24:79:24:36:94:13:ee:ef: 27:ce:95:81:db:f9:bf:3d:a1:d0:b3:6a:4f:d0:12: 33:3c:61:80:19:dd:28:cd:ba:69:87:1c:1d:c7:69: 67:5a:95:40:cb:85:c9:09:2b:db:d3:28:d4:5c:3b: b4:83:4e:e5:08:d3:1b:e0:ec:ce:6b:9e:27:13:0b: ca:69:8b:ab:d2:16:22:8b:5f:45:c9:3b:43:c3:0a: d0:77:df:78:ae:a6:24:0a:b5:1c:e9:22:6e:ed:82: e5:46:79:1e:a2:44:95:81:84:29:a5:12:c1:ee:1d: 06:56:8f:fa:c1:99:96:bf:f1:f7:97:87:b5:49:68: d0:a7:58:9b:fc:26:9c:26:cd:f9:9b:27:de:dd:18: fa:ca:ac:8b:c1:b7:0a:1c:c2:d9:d0:d4:a3:84:be: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:65:AC:AD:AE:D9:89:28:1F:D1:7B:5A:26:1C:A4:0E:95:CE:53 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:60:7d:ea:1e:8b:ce:fb:04:db:dd:ba:64:88:2b:2e:3c:dd: 76:52:0e:63:df:83:44:23:45:36:03:da:41:44:a5:53:ae:eb: 5d:a4:f4:29:19:8f:b0:b6:0a:6a:9e:a8:b4:7b:72:90:7b:8e: f2:62:3d:66:56:32:3f:45:4a:ce:67:d9:82:68:31:36:e4:eb: e2:dd:c1:e7:7a:dc:88:10:36:7f:88:0b:8b:da:4a:08:7d:01: 6b:a5:3a:88:11:1f:af:67:d3:82:36:41:f8:93:4e:d2:65:62: f3:ed:b6:36:44:94:9a:7a:a3:7f:ef:18:27:60:01:52:04:d6: 13:74:72:e9:e7:96:e7:d1:35:56:8e:15:24:0c:1f:9b:01:91: 33:8d:ce:7f:f2:f0:ec:c3:7f:9c:ae:d3:8d:0a:36:20:34:b3: 0c:f3:4d:ec:e1:c2:d6:b7:8a:04:11:9a:a0:74:a6:7a:6d:99: c1:8b:cf:0f:87:c5:c6:52:28:1c:6a:9e:57:f4:64:ce:ce:d2: 69:5f:a0:93:60:aa:96:a4:a2:45:10:de:a8:61:eb:23:39:78: 03:f1:b0:bc:b3:e0:d6:7b:3e:86:ff:0a:0d:50:1f:c8:0f:32: b0:5a:18:50:92:61:c4:ce:f2:88:eb:a1:6a:60:29:da:f3:d4: 95:68:db:ea -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcRQ7B19A2BNA3FzMAqGKqJy5oaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA5MDQxMTM1NTNaFw0yNjA5MDYwMDI3NTNaMDMxMTAvBgNV BAMTKDJCMjA2NUFDQURBRUQ5ODkyODFGRDE3QjVBMjYxQ0E0MEU5NUNFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWv34E5xC3qdE7KEYODZ0WHt8L QspjWDojgThVWE/6zFFkVlss8YVmZYA2cOQhwxQT76ToBJ7TQ6We0YymKuwXNXHS urU9EVq1H6nZBYwsYqK6DtXKFrSzDUCN+XllGykkeSQ2lBPu7yfOlYHb+b89odCz ak/QEjM8YYAZ3SjNummHHB3HaWdalUDLhckJK9vTKNRcO7SDTuUI0xvg7M5rnicT C8ppi6vSFiKLX0XJO0PDCtB333iupiQKtRzpIm7tguVGeR6iRJWBhCmlEsHuHQZW j/rBmZa/8feXh7VJaNCnWJv8JpwmzfmbJ97dGPrKrIvBtwocwtnQ1KOEvgPdAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKyBlrK2u2YkoH9F7WiYcpA6VzlMwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWB96h6LzvsE2926ZIgr LjzddlIOY9+DRCNFNgPaQUSlU67rXaT0KRmPsLYKap6otHtykHuO8mI9ZlYyP0VK zmfZgmgxNuTr4t3B53rciBA2f4gLi9pKCH0Ba6U6iBEfr2fTgjZB+JNO0mVi8+22 NkSUmnqjf+8YJ2ABUgTWE3Ry6eeW59E1Vo4VJAwfmwGRM43Of/Lw7MN/nK7TjQo2 IDSzDPNN7OHC1reKBBGaoHSmem2ZwYvPD4fFxlIoHGqeV/Rkzs7SaV+gk2CqlqSi RRDeqGHrIzl4A/GwvLPg1ns+hv8KDVAfyA8ysFoYUJJhxM7yiOuhamAp2vPUlWjb 6g== -----END CERTIFICATE-----Generated at Fri Sep 4 23:40:34 2026 by rpki-client