$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: 2w6rFB7fYFxth3rjtuqF0xCkwZUrI6g2zeeJJeqPMAs= Subject key identifier: 71:AC:31:6B:3D:B1:01:C8:6C:02:98:8E:9A:E4:FC:AE:4E:B3:4B:EC Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 596F8B368FFD5E4697DD8F76BE46313C4D4765D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 0510 Signing time: Mon 05 Oct 2026 14:18:32 +0000 Manifest this update: Mon 05 Oct 2026 14:13:32 +0000 Manifest next update: Tue 06 Oct 2026 16:07:32 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=) 2: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: JB2Hh5IC0VvkmmjejV15nWfzgwpZ0wghu2DUyxe9ARs=) 3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: r9IpgUJObA8nr7EulKLzOsEZibFRlyCDE79MY0ENB+c=) 4: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 14:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:8b:36:8f:fd:5e:46:97:dd:8f:76:be:46:31:3c:4d:47:65:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Oct 5 14:13:32 2026 GMT Not After : Oct 6 16:07:32 2026 GMT Subject: CN=71AC316B3DB101C86C02988E9AE4FCAE4EB34BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:4d:c9:58:b4:61:57:da:e1:6c:5e:67:a0: d6:60:97:ab:f0:3e:b9:d8:54:be:e3:92:9c:33:1e: a8:e1:92:b4:a9:02:42:44:16:92:cc:d8:57:04:e1: e2:70:75:53:a3:40:4b:ce:03:39:cf:a7:1b:cf:65: d0:7d:0c:94:18:92:91:30:d9:5f:f0:e9:92:2d:d1: 7c:ea:de:a0:16:3f:d9:3b:a2:62:3b:83:08:98:08: 6e:f9:c1:14:6a:3b:00:07:87:cd:95:bc:8a:9b:25: b4:19:11:6b:2d:1e:86:12:8e:e1:10:31:42:e3:51: a5:8f:11:18:66:ab:71:6e:28:4d:5d:44:62:51:47: a1:7c:da:15:93:34:65:7e:e9:58:5b:b9:46:bb:cc: a7:9b:90:2c:87:66:7e:bc:98:fc:2b:57:db:6c:3f: cc:7c:8b:c2:15:a9:fa:44:47:52:a2:99:cd:67:8c: 75:49:bb:59:3e:f4:ea:46:ce:bd:43:d2:3c:4c:f5: 78:0c:d8:87:46:26:74:ee:8b:22:51:be:4c:ac:58: da:6a:0c:26:9d:e7:97:86:18:61:da:9a:16:c6:d7: c4:0b:d6:36:8d:72:8d:ed:72:f9:ba:0f:3d:4c:84: 01:52:a1:b3:3c:e3:7b:27:0b:58:9f:8e:c7:8c:af: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AC:31:6B:3D:B1:01:C8:6C:02:98:8E:9A:E4:FC:AE:4E:B3:4B:EC X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f9:98:87:cf:b7:41:a4:4f:c4:8c:31:50:db:56:23:00:78: 02:45:ef:7c:b1:64:5f:14:2f:b9:a8:43:d5:62:50:94:d1:d2: 9c:0a:7e:fb:97:e9:d0:ad:36:e9:1a:8a:d2:9a:46:ad:f9:f2: a7:dc:86:ec:da:00:78:77:29:2a:0b:16:22:20:d8:59:1d:71: b4:20:a9:ab:3f:ab:3c:f2:b4:90:c8:f5:d4:85:ac:e8:f2:38: d4:55:11:5b:02:92:13:e7:bd:0a:37:c0:8d:89:f5:8a:bf:b0: 7f:95:7f:2a:f5:c2:cb:60:3f:5e:5d:7e:5d:b0:88:38:c4:ef: ce:07:a9:a7:31:42:32:98:0d:d7:b0:d5:a6:78:53:bc:d9:76: d3:a8:78:36:7a:eb:26:17:43:dc:44:17:29:46:ac:8b:79:8b: 71:31:dc:44:9e:06:3b:90:0a:93:d1:3c:b1:71:d3:0f:7e:a0: a6:26:4d:a5:31:ea:3d:05:4b:66:2c:3b:44:51:c1:ec:f8:c0: b7:27:5e:21:86:c3:be:93:5a:9d:6b:f6:62:69:7a:3e:35:03: 18:ad:9f:52:22:d9:12:7f:fb:f7:c4:0f:6c:e4:ff:9d:49:b4: fc:5d:29:f4:53:5f:7f:ac:13:b7:a9:6b:77:09:9e:15:df:41: 67:5f:3d:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWW+LNo/9XkaX3Y92vkYxPE1HZdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNjEwMDUxNDEzMzJaFw0yNjEwMDYxNjA3MzJaMDMxMTAvBgNV BAMTKDcxQUMzMTZCM0RCMTAxQzg2QzAyOTg4RTlBRTRGQ0FFNEVCMzRCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG03JWLRhV9rhbF5noNZgl6vw PrnYVL7jkpwzHqjhkrSpAkJEFpLM2FcE4eJwdVOjQEvOAznPpxvPZdB9DJQYkpEw 2V/w6ZIt0Xzq3qAWP9k7omI7gwiYCG75wRRqOwAHh82VvIqbJbQZEWstHoYSjuEQ MULjUaWPERhmq3FuKE1dRGJRR6F82hWTNGV+6VhbuUa7zKebkCyHZn68mPwrV9ts P8x8i8IVqfpER1Kimc1njHVJu1k+9OpGzr1D0jxM9XgM2IdGJnTuiyJRvkysWNpq DCad55eGGGHamhbG18QL1jaNco3tcvm6Dz1MhAFSobM843snC1ifjseMrwqXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcawxaz2xAchsApiOmuT8rk6zS+wwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/mYh8+3QaRPxIwxUNtW IwB4AkXvfLFkXxQvuahD1WJQlNHSnAp++5fp0K026RqK0ppGrfnyp9yG7NoAeHcp KgsWIiDYWR1xtCCpqz+rPPK0kMj11IWs6PI41FURWwKSE+e9CjfAjYn1ir+wf5V/ KvXCy2A/Xl1+XbCIOMTvzgeppzFCMpgN17DVpnhTvNl206h4NnrrJhdD3EQXKUas i3mLcTHcRJ4GO5AKk9E8sXHTD36gpiZNpTHqPQVLZiw7RFHB7PjAtydeIYbDvpNa nWv2Yml6PjUDGK2fUiLZEn/798QPbOT/nUm0/F0p9FNff6wTt6lrdwmeFd9BZ189 Fg== -----END CERTIFICATE-----Generated at Tue Oct 6 00:58:42 2026 by rpki-client