$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json) Hash identifier: qIJu0+q6TD9P4hKOZ4vhWRFktpPpzs5XyXYk5+y0p+o= Subject key identifier: BF:E8:79:D5:38:09:53:9F:D7:A8:41:26:90:21:B4:A0:78:3A:99:28 Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Certificate serial: 47B77F4BA04B9C44AC07C88FBCA9B31B84C70CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft Manifest number: D8 Signing time: Wed 07 Oct 2026 19:50:08 +0000 Manifest this update: Wed 07 Oct 2026 19:45:08 +0000 Manifest next update: Thu 08 Oct 2026 20:44:08 +0000 Files and hashes: 1: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=) 2: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=) 3: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=) 4: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=) 5: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=) 6: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: 8fqTjxATxZhgyylecI7pRON2gN8DayFIB5/gTBUXQO8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 20:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b7:7f:4b:a0:4b:9c:44:ac:07:c8:8f:bc:a9:b3:1b:84:c7:0c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694 Validity Not Before: Oct 7 19:45:08 2026 GMT Not After : Oct 8 20:44:08 2026 GMT Subject: CN=BFE879D53809539FD7A841269021B4A0783A9928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:9a:07:0c:db:49:cb:ac:af:cc:ec:c7:b6: 5d:70:bf:10:be:63:ae:09:3b:9e:aa:0e:ac:14:28: 35:e8:69:aa:8b:d5:5c:a5:45:26:8c:56:fb:1a:c5: 34:03:98:88:9a:7c:fd:ec:04:dd:5e:7b:2b:17:bd: 93:f0:24:56:53:63:6b:33:fd:75:4f:7f:29:41:9b: 53:80:cd:f2:47:87:6e:88:16:7f:85:3b:d1:ff:01: f4:36:84:e0:dd:77:42:a1:a4:de:15:97:7a:ae:c9: 60:ab:b3:d1:11:ec:7f:25:1e:96:c8:88:74:47:1b: aa:87:36:a6:1e:2e:fe:31:5c:c6:1f:6f:14:54:a1: 25:30:c5:fc:85:04:71:31:01:1f:ae:82:f2:a9:fd: 0e:5c:14:fa:a3:ac:ad:df:bc:91:3e:73:a4:49:48: 78:72:bb:dc:67:7c:f9:a7:0d:f4:18:8e:6f:27:ef: 72:42:a7:35:58:73:d6:92:ec:72:ef:bf:de:99:86: 6e:50:b0:78:d0:3a:c8:93:d7:d8:53:1a:93:e4:34: 26:41:88:19:ee:e7:6b:ca:27:ab:a3:b4:8e:4e:4e: 9a:6b:93:f0:c7:67:9a:ac:26:af:0f:33:0e:65:ae: 5a:bb:07:11:d7:60:88:19:ec:5a:87:0e:c7:b2:13: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:79:D5:38:09:53:9F:D7:A8:41:26:90:21:B4:A0:78:3A:99:28 X509v3 Authority Key Identifier: keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bf:05:e4:74:54:bd:95:68:f8:6c:8e:95:99:37:21:69:7a: 0f:12:74:95:96:9d:55:b2:c2:e2:2b:5d:a8:1f:f5:96:87:34: de:7e:86:49:ad:9e:2d:99:92:c1:25:2d:85:4e:58:28:23:28: 6a:0c:1e:93:e3:c0:7b:b6:f7:dd:6c:e6:87:2b:ec:82:7c:73: 70:ce:60:86:ae:b3:26:d5:0a:f7:d3:bf:d8:47:16:4f:fe:ad: 67:45:1a:75:a8:4d:5b:b0:8b:22:db:68:5c:d4:49:8f:b9:c6: 99:e1:a9:8c:0d:2b:71:5c:37:c9:9a:5a:b8:74:9e:50:7a:6d: 49:30:29:07:f8:72:06:cd:ef:b7:b4:6e:b3:9f:bc:85:dc:a0: 0e:75:de:46:5d:2f:4c:33:ea:a9:5e:b0:1f:ab:41:1c:16:e6: ed:8f:f0:84:25:2a:c1:4e:7d:fd:35:fd:b2:6a:1f:d9:ea:0c: a2:0c:9b:7a:07:c2:21:68:08:db:4d:37:53:7a:89:4c:a0:bc: 87:a5:b1:b4:43:fb:c3:26:76:ae:9c:6a:99:22:4e:5b:5d:14: 00:7b:ad:e5:ce:6c:f8:64:77:c0:59:f6:86:a1:8c:e1:40:20: 19:48:c6:12:ef:dd:63:4b:bd:6a:13:32:07:80:6b:d6:bf:fb: 65:c7:ab:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR7d/S6BLnESsB8iPvKmzG4THDL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4 MGU1ZjY5NDAeFw0yNjEwMDcxOTQ1MDhaFw0yNjEwMDgyMDQ0MDhaMDMxMTAvBgNV BAMTKEJGRTg3OUQ1MzgwOTUzOUZEN0E4NDEyNjkwMjFCNEEwNzgzQTk5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqpoHDNtJy6yvzOzHtl1wvxC+ Y64JO56qDqwUKDXoaaqL1VylRSaMVvsaxTQDmIiafP3sBN1eeysXvZPwJFZTY2sz /XVPfylBm1OAzfJHh26IFn+FO9H/AfQ2hODdd0KhpN4Vl3quyWCrs9ER7H8lHpbI iHRHG6qHNqYeLv4xXMYfbxRUoSUwxfyFBHExAR+ugvKp/Q5cFPqjrK3fvJE+c6RJ SHhyu9xnfPmnDfQYjm8n73JCpzVYc9aS7HLvv96Zhm5QsHjQOsiT19hTGpPkNCZB iBnu52vKJ6ujtI5OTpprk/DHZ5qsJq8PMw5lrlq7BxHXYIgZ7FqHDseyE2czAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUv+h51TgJU5/XqEEmkCG0oHg6mSgwHwYDVR0j BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0 MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02 ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2 NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL8F5HRUvZVo+GyOlZk3 IWl6DxJ0lZadVbLC4itdqB/1loc03n6GSa2eLZmSwSUthU5YKCMoagwek+PAe7b3 3WzmhyvsgnxzcM5ghq6zJtUK99O/2EcWT/6tZ0UadahNW7CLIttoXNRJj7nGmeGp jA0rcVw3yZpauHSeUHptSTApB/hyBs3vt7Rus5+8hdygDnXeRl0vTDPqqV6wH6tB HBbm7Y/whCUqwU59/TX9smof2eoMogybegfCIWgI2003U3qJTKC8h6WxtEP7wyZ2 rpxqmSJOW10UAHut5c5s+GR3wFn2hqGM4UAgGUjGEu/dY0u9ahMyB4Br1r/7Zcer hg== -----END CERTIFICATE-----Generated at Thu Oct 8 05:56:25 2026 by rpki-client