$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: UhJKiQ4ymvdhC0SOhCR2f9nTGvGSBg/HacXN2pr7CD0= Subject key identifier: 0F:51:75:71:2B:3D:82:3F:37:77:93:7F:F0:12:2A:DB:0A:C9:87:5A Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 7053BCB9BC755A1FADA83DD16A8581928815BDD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 075C Signing time: Sun 04 Oct 2026 17:05:37 +0000 Manifest this update: Sun 04 Oct 2026 17:00:37 +0000 Manifest next update: Mon 05 Oct 2026 17:11:37 +0000 Files and hashes: 1: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: O/XczvICtVW578H4pujJjG0NlrBlkBVw8ic6aTFH+JU=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 3: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: DwmvPjOrvOW1sdAtWUHnqGoXrgNH3ZRcHN163+0ly/A=) 4: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:53:bc:b9:bc:75:5a:1f:ad:a8:3d:d1:6a:85:81:92:88:15:bd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Oct 4 17:00:37 2026 GMT Not After : Oct 5 17:11:37 2026 GMT Subject: CN=0F5175712B3D823F3777937FF0122ADB0AC9875A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:79:49:dc:1c:de:14:61:72:4a:ee:ee:3c: 6a:39:27:50:b0:a2:ff:d3:5e:24:82:84:05:50:d1: a4:50:bd:7d:e6:1f:de:df:47:f3:c0:84:0b:18:f9: 31:df:3c:48:46:dd:a2:24:df:7a:58:1e:70:68:56: 72:6b:e7:7a:f8:a0:6b:40:6a:f1:2f:77:99:25:96: 2e:9d:98:5f:6b:29:c4:82:57:64:ed:28:10:9d:62: 2b:b2:d4:fb:11:06:5b:db:61:5f:94:89:65:fe:05: 91:e8:52:73:3c:eb:d5:21:aa:bb:7a:0b:ca:5c:03: 09:52:59:b5:7b:a8:d9:29:a3:c4:5c:c3:2b:d6:eb: 74:79:30:f8:71:0a:89:04:4f:ed:b8:f3:f7:3b:26: ff:59:33:16:b7:03:7d:f6:d5:2c:df:8e:60:42:4d: 80:30:8f:3a:d1:c2:09:10:86:a5:9e:d2:ed:0d:05: bf:82:56:da:5a:cc:5e:e8:cc:c8:5c:d0:91:92:22: 81:5b:1b:73:f2:90:d2:d8:a0:27:50:94:34:2b:51: 84:1e:e0:d6:e4:ce:02:14:ea:47:14:ca:ee:fe:d3: b3:3b:be:92:3b:a4:48:ef:e6:6d:02:67:97:49:d9: bd:61:a1:42:44:13:aa:e9:08:02:eb:55:09:de:2d: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:75:71:2B:3D:82:3F:37:77:93:7F:F0:12:2A:DB:0A:C9:87:5A X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d5:b6:2b:ae:e8:08:50:c5:5f:75:04:7f:7d:5f:ef:2c:ad: 86:2c:d2:0c:32:78:4e:23:97:b5:50:c9:9f:61:ba:89:98:05: 86:a8:0c:3b:66:d5:f0:ee:37:fb:2d:7f:83:73:da:ee:1b:7c: 7e:04:58:8f:4d:e2:5e:d5:82:86:85:e9:7b:ef:fc:fc:34:f3: ea:46:1c:75:aa:fc:07:4b:08:64:35:ce:81:5c:1a:b7:1b:2e: 0c:b0:fa:4b:54:9d:8c:5d:b3:f2:c6:04:07:f1:2a:c0:aa:cf: 92:11:e0:f7:b1:c2:e9:16:5b:da:b8:17:a2:72:b7:de:97:ff: 9c:c9:6e:37:9c:83:f9:e7:e4:4b:fa:d1:06:08:fc:43:42:11: a4:6d:38:10:01:ef:95:0e:e7:78:ba:fa:5f:0a:bc:0e:33:2b: 1f:14:ca:27:09:e0:54:5c:1d:3b:e3:68:0c:4f:be:3c:f3:79: d2:43:81:9f:0d:ee:b9:3a:d2:1a:00:76:bc:8b:f9:26:17:cf: d3:47:e3:2f:be:a7:9d:af:a1:ce:8c:49:63:26:cf:78:81:99: 6b:14:cc:03:9e:33:c4:cb:da:41:d6:68:33:c0:a7:d7:f3:9d: 99:e5:76:72:27:d7:af:30:69:ed:57:a4:94:4e:ef:6b:e4:b8: 0e:9c:80:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcFO8ubx1Wh+tqD3RaoWBkogVvdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjEwMDQxNzAwMzdaFw0yNjEwMDUxNzExMzdaMDMxMTAvBgNV BAMTKDBGNTE3NTcxMkIzRDgyM0YzNzc3OTM3RkYwMTIyQURCMEFDOTg3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvXlJ3BzeFGFySu7uPGo5J1Cw ov/TXiSChAVQ0aRQvX3mH97fR/PAhAsY+THfPEhG3aIk33pYHnBoVnJr53r4oGtA avEvd5klli6dmF9rKcSCV2TtKBCdYiuy1PsRBlvbYV+UiWX+BZHoUnM869Uhqrt6 C8pcAwlSWbV7qNkpo8RcwyvW63R5MPhxCokET+248/c7Jv9ZMxa3A3321SzfjmBC TYAwjzrRwgkQhqWe0u0NBb+CVtpazF7ozMhc0JGSIoFbG3PykNLYoCdQlDQrUYQe 4NbkzgIU6kcUyu7+07M7vpI7pEjv5m0CZ5dJ2b1hoUJEE6rpCALrVQneLQ0DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUD1F1cSs9gj83d5N/8BIq2wrJh1owHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtW2K67oCFDFX3UEf31f 7yythizSDDJ4TiOXtVDJn2G6iZgFhqgMO2bV8O43+y1/g3Pa7ht8fgRYj03iXtWC hoXpe+/8/DTz6kYcdar8B0sIZDXOgVwatxsuDLD6S1SdjF2z8sYEB/EqwKrPkhHg 97HC6RZb2rgXonK33pf/nMluN5yD+efkS/rRBgj8Q0IRpG04EAHvlQ7neLr6Xwq8 DjMrHxTKJwngVFwdO+NoDE++PPN50kOBnw3uuTrSGgB2vIv5JhfP00fjL76nna+h zoxJYybPeIGZaxTMA54zxMvaQdZoM8Cn1/OdmeV2cifXrzBp7VeklE7va+S4DpyA mQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:01 2026 by rpki-client