$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: ji8JiZ7RlX8O/8V7cBvipbYh2H8dxA6YpF0vuniGREQ= Subject key identifier: A2:06:4D:0B:D8:43:BD:3A:9B:F6:1C:3A:7A:A5:78:C6:41:7B:37:ED Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 5E8869AE8B0886693F5D013ED29EA78F55D7269A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0560 Signing time: Fri 18 Sep 2026 11:20:36 +0000 Manifest this update: Fri 18 Sep 2026 11:15:36 +0000 Manifest next update: Sat 19 Sep 2026 13:55:36 +0000 Files and hashes: 1: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 2: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (hash: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=) 3: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 4: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (hash: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=) 5: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 6: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 7: 3135392e3235332e312e302f32342d3234203d3e20343031333632.roa (hash: QjYsR9MbUft7eF4N67W1ParO0QTKQ1t2pO8q+FvFFyk=) 8: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 9: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 10: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 11: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 12: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: nJUu4OS5HEPutP9HeRmaYd5ejJEK0IgMYxg2TizGnE8=) 13: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:88:69:ae:8b:08:86:69:3f:5d:01:3e:d2:9e:a7:8f:55:d7:26:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Sep 18 11:15:36 2026 GMT Not After : Sep 19 13:55:36 2026 GMT Subject: CN=A2064D0BD843BD3A9BF61C3A7AA578C6417B37ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:be:44:ab:73:51:ec:0e:3c:2b:25:6c:5f: e9:5c:c1:9a:4e:1b:66:9a:81:26:a8:96:31:c8:f4: 49:e3:42:ec:bf:fe:f4:87:0a:47:d8:a8:72:0e:68: df:be:4c:6b:87:38:de:47:09:b6:e1:57:f4:be:8d: 5b:4b:85:e6:1a:b7:95:8e:39:12:66:91:de:8f:9e: 5f:f6:31:ba:c9:17:84:6d:d9:57:28:dc:45:3b:d4: 46:7f:2d:a5:34:68:b0:94:57:28:9f:c1:96:90:fa: 7b:56:a3:5a:6a:30:db:c9:f3:a5:79:54:2f:7c:57: ba:52:6f:c1:dc:c5:cd:33:1c:b4:d6:2b:1a:ee:9d: 4a:00:44:7a:8e:2f:77:75:71:dd:04:a6:e7:ba:b3: e1:47:75:42:a0:f1:71:24:46:f7:c2:60:0a:17:b4: 1d:2d:2b:c3:76:d9:a4:07:98:52:da:90:6d:4c:1c: a2:05:e5:59:46:aa:29:da:76:27:30:82:19:93:c9: 6c:38:45:6b:ac:ff:6d:08:3a:bb:39:21:21:3e:21: fe:cc:93:b9:4a:41:af:77:4c:02:8a:47:49:89:3f: fa:e3:8b:da:9a:19:7f:f7:36:6c:bc:d7:d9:6d:ed: 38:cc:70:23:13:5f:fe:0a:73:39:ba:71:0c:b0:92: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:4D:0B:D8:43:BD:3A:9B:F6:1C:3A:7A:A5:78:C6:41:7B:37:ED X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:43:8a:62:58:6f:1b:33:49:91:27:5d:9b:ef:67:db:56:a3: 8f:11:d8:6e:b5:87:0b:17:a0:3f:eb:6a:8c:07:2b:a4:c9:eb: 7d:55:9d:cd:52:ba:5d:2c:f9:3f:67:33:b8:ff:f0:b1:c2:6c: 03:5c:9b:b0:26:e1:7d:7c:c8:21:73:08:2c:a6:63:6e:0c:af: 86:a5:e5:be:5b:3c:8f:1f:a7:f0:45:8c:4a:5e:ce:72:51:70: 64:c6:93:4e:d4:93:1c:fa:e2:15:21:56:0e:fe:f2:70:71:18: b7:81:b0:03:11:fc:fb:f7:94:05:1a:57:f5:d8:85:12:5d:85: d8:16:5b:8d:c5:7d:5a:26:68:90:50:bd:11:16:d1:9a:15:30: 0d:ff:ce:19:62:21:5c:5d:95:f4:b4:08:e0:8d:9c:88:c5:86: 56:75:81:f7:96:21:3c:fd:ad:9d:9e:4e:42:ce:3d:3e:b1:67: 75:e6:f3:22:b9:4e:d3:45:f5:8f:9a:74:9f:fb:15:f4:e2:94: eb:bf:cd:fd:e1:03:76:3a:d6:a8:15:94:02:b9:cf:de:33:c0: 37:30:33:41:91:9b:6a:84:34:f6:69:26:d1:02:3d:f4:f1:c8: 50:63:22:78:33:ea:54:58:83:2b:cc:91:da:0e:4f:09:1e:c6: c8:57:d9:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXohprosIhmk/XQE+0p6nj1XXJpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA5MTgxMTE1MzZaFw0yNjA5MTkxMzU1MzZaMDMxMTAvBgNV BAMTKEEyMDY0RDBCRDg0M0JEM0E5QkY2MUMzQTdBQTU3OEM2NDE3QjM3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfab5Eq3NR7A48KyVsX+lcwZpO G2aagSaoljHI9EnjQuy//vSHCkfYqHIOaN++TGuHON5HCbbhV/S+jVtLheYat5WO ORJmkd6Pnl/2MbrJF4Rt2Vco3EU71EZ/LaU0aLCUVyifwZaQ+ntWo1pqMNvJ86V5 VC98V7pSb8Hcxc0zHLTWKxrunUoARHqOL3d1cd0Epue6s+FHdUKg8XEkRvfCYAoX tB0tK8N22aQHmFLakG1MHKIF5VlGqinadicwghmTyWw4RWus/20IOrs5ISE+If7M k7lKQa93TAKKR0mJP/rji9qaGX/3Nmy819lt7TjMcCMTX/4Kczm6cQywkh8ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUogZNC9hDvTqb9hw6eqV4xkF7N+0wHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekOKYlhvGzNJkSddm+9n 21ajjxHYbrWHCxegP+tqjAcrpMnrfVWdzVK6XSz5P2czuP/wscJsA1ybsCbhfXzI IXMILKZjbgyvhqXlvls8jx+n8EWMSl7OclFwZMaTTtSTHPriFSFWDv7ycHEYt4Gw AxH8+/eUBRpX9diFEl2F2BZbjcV9WiZokFC9ERbRmhUwDf/OGWIhXF2V9LQI4I2c iMWGVnWB95YhPP2tnZ5OQs49PrFndebzIrlO00X1j5p0n/sV9OKU67/N/eEDdjrW qBWUArnP3jPANzAzQZGbaoQ09mkm0QI99PHIUGMieDPqVFiDK8yR2g5PCR7GyFfZ sg== -----END CERTIFICATE-----Generated at Fri Sep 18 17:07:16 2026 by rpki-client