$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: JkJNSZSxyrVHV+ixEZcZ1TGVvuEufB410a7oNLumBuE= Subject key identifier: 26:B1:DC:E4:52:C0:DE:E0:A0:F5:2D:1E:C6:92:24:36:41:D1:95:DB Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 45CCE90466E377CF08CB042F8950D56D51AB504F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0709 Signing time: Fri 18 Sep 2026 19:30:39 +0000 Manifest this update: Fri 18 Sep 2026 19:25:39 +0000 Manifest next update: Sat 19 Sep 2026 23:20:39 +0000 Files and hashes: 1: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 2: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 72O3M08TYSpTDlojnTt+mRlscbLgVOXQCHXBZP39kmI=) 3: 3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa (hash: cAakJn9uvoUMXZcUb5f3QeJYFtOG/tvLTFzKc+z86q8=) 4: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: y0wXpV0FK7p0gj289yuBKhdBMbU7WqcUSNT/1+hV8BA=) 5: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: YkectCN3PwHXIUFvI6rErHB+GqYj62wKkXppDp93mWA=) 6: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) 8: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 8gedljcMcUepnTWG7eO8JnH6F3H/nRhAPdr59hxnNS8=) 9: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cc:e9:04:66:e3:77:cf:08:cb:04:2f:89:50:d5:6d:51:ab:50:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Sep 18 19:25:39 2026 GMT Not After : Sep 19 23:20:39 2026 GMT Subject: CN=26B1DCE452C0DEE0A0F52D1EC692243641D195DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4d:26:07:c7:c1:b0:67:0e:78:aa:9f:ff:45: 63:8f:5e:12:6e:4b:8b:dd:28:a5:54:91:e8:0d:c8: 72:27:6e:b7:91:e1:a3:4c:8f:da:ed:00:ec:06:8c: a1:06:df:82:a8:4f:e6:93:09:b3:93:cb:22:fe:43: 46:ff:99:d4:d5:39:e8:ae:76:bd:db:e2:62:b5:fa: a7:de:10:00:ae:0f:8f:04:e9:e2:39:ac:a4:df:70: 36:68:a8:49:5c:df:71:d5:43:4e:80:c6:bc:f9:12: 30:14:0e:12:ec:e2:7a:d6:00:ec:20:7f:c4:8f:d4: 85:ac:0e:6c:b2:ad:fa:d4:e0:08:0f:86:55:f1:09: b2:95:81:71:aa:37:72:fe:75:82:ea:6e:fd:78:ed: 0e:08:01:60:42:39:67:0a:57:65:df:3a:37:cc:dd: c1:3c:5b:40:69:da:84:c5:a6:77:e0:b8:8d:a0:41: 66:dc:16:90:a0:44:e3:83:4a:b9:5a:26:5b:21:c8: 57:be:28:cb:bb:65:fa:99:94:79:91:2d:58:9f:40: c2:c7:ef:a2:14:10:ad:fe:f8:7b:5c:86:a4:17:41: 59:35:de:c2:5b:b0:28:2f:46:61:b1:65:04:ee:ce: ac:0b:b9:d4:b5:ce:99:cb:75:87:4d:6d:d4:fc:d6: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:DC:E4:52:C0:DE:E0:A0:F5:2D:1E:C6:92:24:36:41:D1:95:DB X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:83:86:77:b3:1e:70:9f:d3:0b:79:b2:da:77:b3:a5:78:72: cf:16:64:ed:63:c2:23:eb:78:8d:e0:09:ca:98:1a:c6:9b:41: 44:10:bd:d0:77:b3:d2:98:c4:2b:09:3d:8e:03:61:ed:38:38: a8:b4:bc:ce:d4:82:f2:63:9a:6e:48:55:41:dc:8a:ff:dd:d2: de:b8:42:f4:ce:d6:41:4e:db:22:2f:a9:6a:2c:c0:2a:6b:0e: 58:7d:cd:68:a4:3d:73:97:06:bd:06:8f:9d:20:61:04:7e:fc: 39:fa:cd:9c:a5:61:d8:95:8e:a4:f4:03:f4:58:9e:43:f0:44: d8:92:32:3a:1f:60:a7:e4:56:7b:24:2d:fa:3b:31:31:62:9f: 05:f6:2d:68:3f:cc:02:59:33:d3:56:69:5f:1f:7a:86:61:4c: a6:24:b6:f1:d5:b0:11:14:b7:0f:07:45:6d:ce:ea:d6:57:05: 7f:75:71:3e:dd:fd:83:3e:62:6b:e3:87:3b:af:80:d5:bf:01: f8:fc:cf:a3:7b:b8:02:93:56:4c:02:82:12:27:c5:ad:d3:a7: f9:93:b0:25:e0:90:af:dc:a8:e7:00:23:b8:49:44:eb:ba:80: 0d:e6:21:66:71:62:f6:fe:a5:59:e8:de:fd:9b:81:09:4a:f8: 7f:bf:9c:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURczpBGbjd88IywQviVDVbVGrUE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA5MTgxOTI1MzlaFw0yNjA5MTkyMzIwMzlaMDMxMTAvBgNV BAMTKDI2QjFEQ0U0NTJDMERFRTBBMEY1MkQxRUM2OTIyNDM2NDFEMTk1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTSYHx8GwZw54qp//RWOPXhJu S4vdKKVUkegNyHInbreR4aNMj9rtAOwGjKEG34KoT+aTCbOTyyL+Q0b/mdTVOeiu dr3b4mK1+qfeEACuD48E6eI5rKTfcDZoqElc33HVQ06Axrz5EjAUDhLs4nrWAOwg f8SP1IWsDmyyrfrU4AgPhlXxCbKVgXGqN3L+dYLqbv147Q4IAWBCOWcKV2XfOjfM 3cE8W0Bp2oTFpnfguI2gQWbcFpCgROODSrlaJlshyFe+KMu7ZfqZlHmRLVifQMLH 76IUEK3++HtchqQXQVk13sJbsCgvRmGxZQTuzqwLudS1zpnLdYdNbdT81kX9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJrHc5FLA3uCg9S0expIkNkHRldswHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzYOGd7MecJ/TC3my2nez pXhyzxZk7WPCI+t4jeAJypgaxptBRBC90Hez0pjEKwk9jgNh7Tg4qLS8ztSC8mOa bkhVQdyK/93S3rhC9M7WQU7bIi+paizAKmsOWH3NaKQ9c5cGvQaPnSBhBH78OfrN nKVh2JWOpPQD9FieQ/BE2JIyOh9gp+RWeyQt+jsxMWKfBfYtaD/MAlkz01ZpXx96 hmFMpiS28dWwERS3DwdFbc7q1lcFf3VxPt39gz5ia+OHO6+A1b8B+PzPo3u4ApNW TAKCEifFrdOn+ZOwJeCQr9yo5wAjuElE67qADeYhZnFi9v6lWeje/ZuBCUr4f7+c mg== -----END CERTIFICATE-----Generated at Sat Sep 19 01:36:16 2026 by rpki-client