$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: B2bvG7C1rBjqTljxQAq0FhW4PADCcehVb/kdkmZOymI= Subject key identifier: 43:9B:B4:B8:CB:62:B0:90:0E:98:DC:78:D2:89:D8:68:2B:F0:AA:DD Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 2BFFF72CE5862D3677072BF11857C4F880083540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 013B Signing time: Tue 13 Oct 2026 08:40:27 +0000 Manifest this update: Tue 13 Oct 2026 08:35:27 +0000 Manifest next update: Wed 14 Oct 2026 10:06:27 +0000 Files and hashes: 1: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) 2: 3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa (hash: dUWRnvNQrG03cFGRKewLSEVSnqrlP2WFLU1i5zJtdMs=) 3: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: 09MVyFeTOSMEWllPtEmWvv6rTsfA5aftWmSfQJCd8Ng=) 4: 3137362e3130322e3136392e302f32342d3234203d3e20383334.roa (hash: htqBX5xVmv8z6xUgxiiwHmJV6C5oPjjeGMryMjNnWZs=) 5: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 6: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 7: 3137362e3130322e3137302e302f32342d3234203d3e20323138383932.roa (hash: vmUE36uirVg+qyVeYyyIT35k13krsMMnmBR1nuw3RCE=) 8: 3137362e3130322e3137342e302f32332d3234203d3e20383334.roa (hash: RmN4cNx31bXOGetCOStOom4ckknXKE2ENPnyt6BkNKk=) 9: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (hash: KjqXi8WutHoDtcfgWO4eIZXy4bfZUhDCfps5/YiZVQw=) 10: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 11: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 12: 3137362e3130322e3137322e302f32342d3234203d3e20383334.roa (hash: lR0P/b2pLESvfEtW69Jl1aeQ0nMgaZVWJylK7oc6PxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 07:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ff:f7:2c:e5:86:2d:36:77:07:2b:f1:18:57:c4:f8:80:08:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Oct 13 08:35:27 2026 GMT Not After : Oct 14 10:06:27 2026 GMT Subject: CN=439BB4B8CB62B0900E98DC78D289D8682BF0AADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:09:da:d0:7e:87:ad:4c:02:2c:ff:c8:b0: c7:dc:19:70:47:37:f8:f0:1b:fb:21:c5:30:38:0b: 30:10:83:62:0f:d5:36:dc:74:c3:f4:ac:ee:2a:16: 74:01:e4:69:1d:0b:20:8a:3c:f3:b9:cd:fe:d0:68: a1:ba:82:28:fb:85:9c:6a:61:a3:7b:0b:13:31:22: d9:d8:93:06:fb:63:5d:48:0b:b0:a7:bc:86:7b:ff: 6f:d1:6e:67:7b:dd:cc:e7:52:b0:b4:17:67:af:4e: a4:d6:a3:50:f9:7d:0d:78:4a:c3:a1:89:b8:26:54: 56:fc:6f:52:c9:a5:a2:5d:78:38:f6:38:7d:c4:0c: fc:c1:9c:78:c6:a5:58:c8:73:aa:21:7d:25:36:4b: 42:54:f0:d1:b0:54:00:bf:79:3f:b8:3e:5f:9d:b6: 74:12:d5:ec:dc:03:08:ea:de:f4:b9:a0:1e:a7:5f: 72:1b:c9:d8:b5:37:e2:b7:32:0b:7e:3c:a8:6a:6d: 66:d6:4a:92:1a:53:a8:85:89:59:04:22:c6:90:1a: 80:f1:27:bf:f0:f4:1e:26:63:5d:48:94:fc:ea:98: c9:92:37:74:3e:49:34:25:8b:d1:9c:84:35:ee:00: bd:0f:61:ba:64:d0:7e:c5:ca:7b:6f:df:a9:38:f9: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9B:B4:B8:CB:62:B0:90:0E:98:DC:78:D2:89:D8:68:2B:F0:AA:DD X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:b5:55:11:69:54:2f:42:96:f6:6c:f4:f3:a4:a1:f6:10: db:6d:7f:38:28:46:b7:7f:6e:a4:e6:55:9b:3e:ba:d1:b3:1f: 89:8d:e9:d8:c3:f5:1a:79:e9:be:06:87:7a:ac:25:30:19:db: 2b:8e:29:73:3b:6d:e3:06:83:3b:fc:59:06:c9:53:74:d2:8c: ab:c7:35:6a:f5:66:4b:63:71:ea:3a:60:37:51:93:8b:f4:12: f9:b3:72:36:ee:b1:bb:8d:0f:53:5b:e6:e6:cb:45:b6:09:0a: 4a:6e:bc:c0:8d:21:1a:05:97:8a:d5:61:c1:9f:a4:5a:ac:e2: 9b:37:fc:15:de:5f:d0:a2:27:05:ce:29:87:4d:98:a0:06:ae: fc:3d:5c:22:8f:2e:5e:88:e8:31:b6:b4:47:f4:f9:fa:a0:5a: c1:82:20:e1:21:4f:31:f6:19:aa:78:d4:34:96:86:1e:25:46: c5:3e:b2:3d:54:e7:6e:ee:c8:75:0f:d0:3f:2e:dc:9b:21:31: 29:6e:23:cc:c9:49:14:e1:6d:34:52:0b:01:78:ed:44:1a:55: 5d:3a:e2:71:97:85:83:24:c6:6e:76:d2:1c:66:86:96:d6:6a: 2b:3c:fa:bf:2d:56:02:25:ec:4d:da:cf:d5:43:4e:ea:6d:5d: eb:45:94:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK//3LOWGLTZ3ByvxGFfE+IAINUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjEwMTMwODM1MjdaFw0yNjEwMTQxMDA2MjdaMDMxMTAvBgNV BAMTKDQzOUJCNEI4Q0I2MkIwOTAwRTk4REM3OEQyODlEODY4MkJGMEFBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/Ana0H6HrUwCLP/IsMfcGXBH N/jwG/shxTA4CzAQg2IP1TbcdMP0rO4qFnQB5GkdCyCKPPO5zf7QaKG6gij7hZxq YaN7CxMxItnYkwb7Y11IC7CnvIZ7/2/Rbmd73cznUrC0F2evTqTWo1D5fQ14SsOh ibgmVFb8b1LJpaJdeDj2OH3EDPzBnHjGpVjIc6ohfSU2S0JU8NGwVAC/eT+4Pl+d tnQS1ezcAwjq3vS5oB6nX3Ibydi1N+K3Mgt+PKhqbWbWSpIaU6iFiVkEIsaQGoDx J7/w9B4mY11IlPzqmMmSN3Q+STQli9GchDXuAL0PYbpk0H7Fyntv36k4+egHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ5u0uMtisJAOmNx40onYaCvwqt0wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbi1VRFpVC9ClvZs9POk ofYQ221/OChGt39upOZVmz660bMfiY3p2MP1GnnpvgaHeqwlMBnbK44pcztt4waD O/xZBslTdNKMq8c1avVmS2Nx6jpgN1GTi/QS+bNyNu6xu40PU1vm5stFtgkKSm68 wI0hGgWXitVhwZ+kWqzimzf8Fd5f0KInBc4ph02YoAau/D1cIo8uXojoMba0R/T5 +qBawYIg4SFPMfYZqnjUNJaGHiVGxT6yPVTnbu7IdQ/QPy7cmyExKW4jzMlJFOFt NFILAXjtRBpVXTricZeFgyTGbnbSHGaGltZqKzz6vy1WAiXsTdrP1UNO6m1d60WU xQ== -----END CERTIFICATE-----Generated at Tue Oct 13 12:47:34 2026 by rpki-client