$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: 6sfj/AwhYnIOAe9jOwQXbXVINJR0jR8wnXgpl/YdawU= Subject key identifier: AA:BC:65:D9:FA:F9:D2:65:1E:01:6F:71:C3:BB:EF:ED:D2:EF:87:B6 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 2313F54C83A437FFF3858B120147B0D8A925D931 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 02ED Signing time: Fri 04 Sep 2026 09:15:42 +0000 Manifest this update: Fri 04 Sep 2026 09:10:42 +0000 Manifest next update: Sat 05 Sep 2026 10:48:42 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: jyAYLpqpKyg65dnPBn9HmGf1EiGDKy0BnAiguNbBylc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:13:f5:4c:83:a4:37:ff:f3:85:8b:12:01:47:b0:d8:a9:25:d9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Sep 4 09:10:42 2026 GMT Not After : Sep 5 10:48:42 2026 GMT Subject: CN=AABC65D9FAF9D2651E016F71C3BBEFEDD2EF87B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:fd:fb:da:79:95:6d:66:07:e0:f8:e8:f4: 37:ba:52:1e:17:05:13:39:77:87:38:4e:d1:86:be: 15:b9:c7:fb:a2:22:01:08:15:de:45:0e:f6:3a:29: 1f:65:79:ae:36:08:2f:06:5c:d1:84:20:97:50:7a: c0:9f:c6:d3:ec:53:31:8d:64:e6:03:99:b9:57:f6: a3:b8:c9:74:9f:9b:38:66:ad:8b:e8:b9:fd:87:b1: 75:14:3e:b9:ec:85:e7:02:09:cb:1a:f4:53:bf:33: 84:62:7e:1a:3e:48:9a:5d:b4:f9:40:2a:fd:df:07: f7:65:ef:95:f7:2c:70:10:87:9f:8d:c3:dd:4c:56: dc:8b:45:b0:25:3f:bf:0b:aa:9a:37:b1:9c:4c:b9: e3:95:2a:ee:5a:82:9a:84:81:d3:d7:8a:10:34:c3: 5d:e3:d0:30:b1:1d:34:7a:e2:db:da:17:9f:c7:2e: 03:af:ed:29:ef:9c:60:8f:6b:95:73:75:e4:25:16: 05:c3:c7:96:ba:10:90:03:f5:dd:ef:8c:58:79:ca: b5:91:0e:9f:73:af:5a:a2:97:22:b4:99:0b:46:cf: bb:7d:41:da:ee:91:36:56:85:e3:e2:54:ed:9c:5b: 74:5b:53:20:bc:d4:a7:20:59:14:a8:46:2d:3f:fc: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:65:D9:FA:F9:D2:65:1E:01:6F:71:C3:BB:EF:ED:D2:EF:87:B6 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e0:75:8d:59:42:41:a3:70:fb:76:04:88:88:98:58:a8:09: 27:00:33:d5:07:52:82:09:13:82:05:fa:5b:7d:62:3f:8c:52: 49:61:f7:ce:06:1d:aa:4b:15:44:ef:84:bb:41:16:9e:85:fb: 52:cf:0c:da:89:bf:34:23:8b:ab:37:b1:02:de:c4:6e:f0:ac: 62:18:37:17:da:d1:d9:be:f8:48:ff:e9:bd:0c:05:7a:68:e3: ca:c3:12:af:c0:46:85:b3:a5:11:35:72:43:bb:3a:4c:b0:46: 2f:82:e7:53:3e:75:6d:a9:c7:09:06:d6:79:bf:70:61:1a:f0: 93:b6:a4:dd:e2:11:2b:a2:8b:33:37:14:71:07:43:44:5c:f2: e4:ba:d3:b9:37:8a:97:f6:de:c5:46:20:f7:94:f6:d8:33:37: e9:b2:77:e2:4f:72:80:0e:d2:3a:40:15:b7:2c:42:6c:d6:37: f4:b0:e7:9c:81:72:93:db:8b:31:fb:15:aa:c1:14:3c:7c:f9: fa:fa:02:35:77:de:b2:e6:2a:53:f7:30:0f:62:de:98:f5:e6: 66:66:5b:15:bb:d8:0f:6f:36:c1:8c:65:ac:dc:ac:f9:0d:4b: b7:28:87:0f:04:16:ed:56:45:1b:c7:f1:e4:a3:b3:6e:87:ed: 54:b7:22:b9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIxP1TIOkN//zhYsSAUew2Kkl2TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA5MDQwOTEwNDJaFw0yNjA5MDUxMDQ4NDJaMDMxMTAvBgNV BAMTKEFBQkM2NUQ5RkFGOUQyNjUxRTAxNkY3MUMzQkJFRkVERDJFRjg3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sf372nmVbWYH4Pjo9De6Uh4X BRM5d4c4TtGGvhW5x/uiIgEIFd5FDvY6KR9lea42CC8GXNGEIJdQesCfxtPsUzGN ZOYDmblX9qO4yXSfmzhmrYvouf2HsXUUPrnshecCCcsa9FO/M4Rifho+SJpdtPlA Kv3fB/dl75X3LHAQh5+Nw91MVtyLRbAlP78Lqpo3sZxMueOVKu5agpqEgdPXihA0 w13j0DCxHTR64tvaF5/HLgOv7SnvnGCPa5VzdeQlFgXDx5a6EJAD9d3vjFh5yrWR Dp9zr1qilyK0mQtGz7t9QdrukTZWhePiVO2cW3RbUyC81KcgWRSoRi0//GqFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqrxl2fr50mUeAW9xw7vv7dLvh7YwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz4HWN WUJBo3D7dgSIiJhYqAknADPVB1KCCROCBfpbfWI/jFJJYffOBh2qSxVE74S7QRae hftSzwzaib80I4urN7EC3sRu8KxiGDcX2tHZvvhI/+m9DAV6aOPKwxKvwEaFs6UR NXJDuzpMsEYvgudTPnVtqccJBtZ5v3BhGvCTtqTd4hErooszNxRxB0NEXPLkutO5 N4qX9t7FRiD3lPbYMzfpsnfiT3KADtI6QBW3LEJs1jf0sOecgXKT24sx+xWqwRQ8 fPn6+gI1d96y5ipT9zAPYt6Y9eZmZlsVu9gPbzbBjGWs3Kz5DUu3KIcPBBbtVkUb x/Hko7Nuh+1UtyK5 -----END CERTIFICATE-----Generated at Fri Sep 4 23:21:31 2026 by rpki-client