$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: RsSqnt7mBuywsfENgfuvzBDUTADbBE8M8685INjYg+k= Subject key identifier: 29:2B:EF:4F:C1:9D:D2:D2:1A:A0:C0:B3:70:FA:0B:9F:22:AA:92:B1 Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 2AEBA15CB713313AC04E1D3935055B4C33635EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: 99 Signing time: Fri 21 Aug 2026 17:29:44 +0000 Manifest this update: Fri 21 Aug 2026 17:24:44 +0000 Manifest next update: Sat 22 Aug 2026 19:58:44 +0000 Files and hashes: 1: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: X/oq8WXawdGkX3IkOG8qrVrJHpx7A0o++QNBQETOtN8=) 2: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 3: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 4: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 5: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:eb:a1:5c:b7:13:31:3a:c0:4e:1d:39:35:05:5b:4c:33:63:5e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Aug 21 17:24:44 2026 GMT Not After : Aug 22 19:58:44 2026 GMT Subject: CN=292BEF4FC19DD2D21AA0C0B370FA0B9F22AA92B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:1e:34:e9:a8:8d:17:f8:3b:59:ae:e9:34: fe:69:6a:86:de:b1:20:1f:19:1f:7c:58:39:f3:fe: e4:70:8c:94:56:2b:2c:5e:26:16:e9:68:54:18:16: 55:e7:75:98:ee:61:81:13:11:f0:21:bb:c0:65:55: ed:d2:67:0a:b7:f3:56:26:11:63:a9:ea:ff:e3:3b: a3:99:ad:ed:dd:14:7e:9a:94:29:04:e0:68:a3:a5: e2:8f:ea:bf:3b:ae:4e:7d:a0:f2:9a:44:18:9c:6e: 2a:bf:e6:69:fb:e5:2a:bb:b7:37:df:40:39:ea:fb: ae:5d:8a:39:c2:60:59:3d:69:4d:d3:ef:71:b9:7e: 34:17:f8:12:93:1f:07:5f:b1:40:d2:e6:3e:e2:69: 4b:2b:20:ce:78:70:64:5e:aa:e8:2c:82:c9:6e:05: 15:f2:6b:a3:5a:ea:3f:14:42:10:c8:15:72:ed:57: e7:b5:d8:b0:60:5f:42:5b:13:57:04:1c:62:01:d3: 25:04:66:1d:d1:af:d0:4e:76:cd:c3:df:d2:6e:03: b2:92:3c:fc:bc:93:95:67:84:85:b3:7b:e2:f7:0f: b2:ef:ee:1a:ba:f8:fe:08:ba:f2:6e:cf:77:9c:6a: 56:d1:2f:c2:65:ff:17:45:0c:61:b3:18:d5:97:81: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:EF:4F:C1:9D:D2:D2:1A:A0:C0:B3:70:FA:0B:9F:22:AA:92:B1 X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:17:22:0d:51:2b:51:9c:ba:bf:60:35:31:25:5e:bc:19:b1: 89:0c:3a:09:8f:5f:ac:84:2a:9d:b9:b6:33:e9:ad:bc:e0:b0: 44:51:87:d0:9b:ff:83:16:8d:aa:04:ea:39:ab:58:25:ec:fd: d1:8a:eb:92:89:05:12:b3:db:76:c6:e6:76:e7:fb:ff:5b:42: c7:77:f2:65:f4:1f:f4:a3:14:22:5f:0d:a1:a2:50:62:94:dd: 6d:7d:40:a1:3b:e7:4d:4e:95:6e:f0:e7:55:7f:b7:ef:de:69: 10:bf:47:84:83:32:77:d8:9a:2c:d9:73:9c:80:06:a4:d5:4d: 79:f1:d9:f7:f4:f1:0e:c6:31:0e:97:ec:70:99:d7:3e:6a:c3: b2:5b:1a:51:38:66:d2:bd:07:cf:14:2a:2f:85:8f:04:a0:e2: a6:02:f9:8a:54:0b:82:0f:11:c6:89:20:45:24:68:3e:20:62: cb:1c:17:f2:cc:39:b6:ff:4e:3f:85:38:61:26:6b:d5:a2:be: 4b:4f:fc:90:63:43:53:e5:b6:b1:07:8b:28:5f:f0:ba:96:ba: 6b:c1:e2:d8:f2:3c:70:f6:96:36:62:9b:ec:a3:b6:25:08:a1: 2a:17:ca:66:4a:bc:74:18:6c:51:18:61:df:6d:0b:f2:91:c3: 25:9f:ad:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKuuhXLcTMTrATh05NQVbTDNjXvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjA4MjExNzI0NDRaFw0yNjA4MjIxOTU4NDRaMDMxMTAvBgNV BAMTKDI5MkJFRjRGQzE5REQyRDIxQUEwQzBCMzcwRkEwQjlGMjJBQTkyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOh406aiNF/g7Wa7pNP5paobe sSAfGR98WDnz/uRwjJRWKyxeJhbpaFQYFlXndZjuYYETEfAhu8BlVe3SZwq381Ym EWOp6v/jO6OZre3dFH6alCkE4GijpeKP6r87rk59oPKaRBicbiq/5mn75Sq7tzff QDnq+65dijnCYFk9aU3T73G5fjQX+BKTHwdfsUDS5j7iaUsrIM54cGRequgsgslu BRXya6Na6j8UQhDIFXLtV+e12LBgX0JbE1cEHGIB0yUEZh3Rr9BOds3D39JuA7KS PPy8k5VnhIWze+L3D7Lv7hq6+P4IuvJuz3ecalbRL8Jl/xdFDGGzGNWXgflVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKSvvT8Gd0tIaoMCzcPoLnyKqkrEwHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBciDVErUZy6v2A1MSVe vBmxiQw6CY9frIQqnbm2M+mtvOCwRFGH0Jv/gxaNqgTqOatYJez90YrrkokFErPb dsbmduf7/1tCx3fyZfQf9KMUIl8NoaJQYpTdbX1AoTvnTU6VbvDnVX+3795pEL9H hIMyd9iaLNlznIAGpNVNefHZ9/TxDsYxDpfscJnXPmrDslsaUThm0r0HzxQqL4WP BKDipgL5ilQLgg8RxokgRSRoPiBiyxwX8sw5tv9OP4U4YSZr1aK+S0/8kGNDU+W2 sQeLKF/wupa6a8Hi2PI8cPaWNmKb7KO2JQihKhfKZkq8dBhsURhh320L8pHDJZ+t qA== -----END CERTIFICATE-----Generated at Fri Aug 21 22:34:16 2026 by rpki-client