$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: sFtu+WY2/xBZdD6TBk3o3aUoiN43gg6k031V2JzKxwA= Subject key identifier: 99:4A:22:C4:3C:BC:20:A7:AA:B1:40:DE:4A:D6:C2:F3:B2:7F:87:CC Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 59C288A582B7330FB0BA55D95A96173CD1D0EF03 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 032F Signing time: Thu 22 Oct 2026 17:27:24 +0000 Manifest this update: Thu 22 Oct 2026 17:22:24 +0000 Manifest next update: Fri 23 Oct 2026 18:40:24 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: lQWn07LZ61PKDvFm81GAk4FQUHnr4dbxoK0zKQG8Z2k=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: keGhxS8d7d435G80qK8IDZYuCdwi/tPmnjj30lAXiqM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 18:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c2:88:a5:82:b7:33:0f:b0:ba:55:d9:5a:96:17:3c:d1:d0:ef:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Oct 22 17:22:24 2026 GMT Not After : Oct 23 18:40:24 2026 GMT Subject: CN=994A22C43CBC20A7AAB140DE4AD6C2F3B27F87CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:de:70:f3:4e:b8:db:1c:3d:e0:15:9d:17: c9:c1:f9:66:00:30:ad:6f:08:b0:3d:f5:84:0a:ab: 02:33:af:5e:99:86:4e:68:0a:35:1e:59:e9:3d:f3: 12:cc:bb:54:3a:52:09:99:c7:f2:cd:e8:b9:7a:a2: f8:40:0a:a4:fc:58:e4:a8:d1:6e:15:94:68:75:69: 4d:42:d5:61:1d:7e:0c:5f:b9:97:29:b3:24:14:26: cd:6f:66:3c:8b:c7:ff:8d:de:0b:b7:9c:17:23:40: 0c:c5:1a:a5:7e:84:70:9b:37:4e:81:41:db:53:4e: 0a:e8:ec:cb:7a:3f:1c:c8:b3:ba:73:92:38:06:84: 0b:1d:9e:d3:ba:8b:97:73:3f:0a:9c:a5:d5:40:3d: 17:57:d4:d5:be:a3:4e:63:bb:b7:2e:45:7b:0a:f3: 49:0f:aa:06:19:25:42:27:3e:c1:ad:39:64:ea:47: 98:b5:e4:b2:fe:50:bb:8b:3d:a7:44:89:46:08:28: 54:43:ce:5e:ad:3d:68:e2:8b:d8:1a:aa:af:b8:6a: 04:40:60:2c:63:10:b8:8d:7d:9f:dc:a3:d5:8c:53: 6a:b7:65:b8:a1:3c:a2:14:ba:9a:63:d1:f8:bc:87: 59:4a:b4:06:d8:2b:fe:48:d7:99:40:84:1c:47:4c: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:22:C4:3C:BC:20:A7:AA:B1:40:DE:4A:D6:C2:F3:B2:7F:87:CC X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f0:6f:1a:db:75:9d:3a:dd:e9:87:55:16:07:fe:4f:8f:8f: a4:72:5a:73:85:3a:c4:56:61:88:06:5e:b5:73:18:97:d1:10: d6:54:94:3e:6f:7c:51:85:68:8b:6f:80:f8:f7:75:1b:fc:21: 5a:7e:e1:32:bb:95:5a:df:cd:0f:8e:4e:42:7b:21:f8:f7:59: 92:b8:aa:3c:4f:0f:69:e3:45:06:d7:fc:65:1e:11:62:40:2c: bd:05:cd:aa:11:55:f3:23:63:c7:45:4f:0a:60:7c:d0:c2:a0: 6a:50:3f:4f:80:fa:5a:2d:a2:57:c5:d1:7b:83:32:b8:87:03: 04:96:7a:e6:ac:b5:06:d5:91:df:d2:25:05:5b:d7:f0:82:b2: 21:dc:cc:a4:28:5c:7e:46:26:84:24:95:2a:79:ec:ac:eb:df: 9f:4a:59:6a:dd:95:db:52:93:c2:c4:6e:a4:66:1c:b1:9a:a6: 7d:06:b9:15:a4:f3:ec:d9:54:69:27:0f:2d:55:b7:d7:0d:d6: 14:c4:14:f4:71:5c:68:b0:6d:d5:b7:23:9c:c9:1a:10:91:f6: bb:b3:af:0f:8d:8e:ec:29:61:00:34:e3:14:78:f4:6f:c4:b7: eb:78:b9:7a:d5:6b:0f:fb:0d:63:b1:ed:41:91:2e:d1:62:7d: 6e:40:f2:c2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWcKIpYK3Mw+wulXZWpYXPNHQ7wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjEwMjIxNzIyMjRaFw0yNjEwMjMxODQwMjRaMDMxMTAvBgNV BAMTKDk5NEEyMkM0M0NCQzIwQTdBQUIxNDBERTRBRDZDMkYzQjI3Rjg3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe95w80642xw94BWdF8nB+WYA MK1vCLA99YQKqwIzr16Zhk5oCjUeWek98xLMu1Q6UgmZx/LN6Ll6ovhACqT8WOSo 0W4VlGh1aU1C1WEdfgxfuZcpsyQUJs1vZjyLx/+N3gu3nBcjQAzFGqV+hHCbN06B QdtTTgro7Mt6PxzIs7pzkjgGhAsdntO6i5dzPwqcpdVAPRdX1NW+o05ju7cuRXsK 80kPqgYZJUInPsGtOWTqR5i15LL+ULuLPadEiUYIKFRDzl6tPWjii9gaqq+4agRA YCxjELiNfZ/co9WMU2q3ZbihPKIUuppj0fi8h1lKtAbYK/5I15lAhBxHTKGnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmUoixDy8IKeqsUDeStbC87J/h8wwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAr8G8a 23WdOt3ph1UWB/5Pj4+kclpzhTrEVmGIBl61cxiX0RDWVJQ+b3xRhWiLb4D493Ub /CFafuEyu5Va380Pjk5CeyH491mSuKo8Tw9p40UG1/xlHhFiQCy9Bc2qEVXzI2PH RU8KYHzQwqBqUD9PgPpaLaJXxdF7gzK4hwMElnrmrLUG1ZHf0iUFW9fwgrIh3Myk KFx+RiaEJJUqeeys69+fSllq3ZXbUpPCxG6kZhyxmqZ9BrkVpPPs2VRpJw8tVbfX DdYUxBT0cVxosG3VtyOcyRoQkfa7s68PjY7sKWEANOMUePRvxLfreLl61WsP+w1j se1BkS7RYn1uQPLC -----END CERTIFICATE-----Generated at Fri Oct 23 09:54:05 2026 by rpki-client