$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: E9sAlfDZc6Aq1oT9uTGKLN1m+SZTQsyOKmowCTCnXR4= Subject key identifier: 8C:B3:6B:3E:CC:7E:43:FD:C1:F5:3C:CF:A6:58:43:A2:9D:A0:1E:73 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 0C9CEA434DFC2D8714C873EBB04D4B600FE2AC6D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: E4 Signing time: Wed 07 Oct 2026 11:01:42 +0000 Manifest this update: Wed 07 Oct 2026 10:56:41 +0000 Manifest next update: Thu 08 Oct 2026 12:30:41 +0000 Files and hashes: 1: 326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa (hash: L3Uv7B+hE+Oyxs5R782Os6cl3p6QystB9KEXfmwlw58=) 2: 326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa (hash: pe+b9f7vSgc+6Km3teAs1TmzzeEKzWB4WHRIERv2Vjo=) 3: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: KeTBKmRxk3Vowj6chaVTTRXUn4gqr1mXxj+VMVfx5oQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9c:ea:43:4d:fc:2d:87:14:c8:73:eb:b0:4d:4b:60:0f:e2:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Oct 7 10:56:41 2026 GMT Not After : Oct 8 12:30:41 2026 GMT Subject: CN=8CB36B3ECC7E43FDC1F53CCFA65843A29DA01E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:2d:e5:ec:91:19:3e:bd:ba:46:6d:b0:45: 40:8d:e4:83:f8:04:47:16:a1:0c:5e:bf:89:c4:60: 42:e1:e1:0a:66:e2:50:45:e3:d7:e1:55:70:83:18: e0:bd:ac:1f:f4:55:d4:29:4e:38:85:bf:96:09:5f: ba:ba:3f:69:a4:a5:c9:f0:72:d9:aa:8a:9a:18:27: 3b:96:45:55:ab:9b:ce:04:97:a8:87:57:6c:21:2f: c0:93:cc:f8:7f:74:fb:50:c5:90:a3:66:d3:d6:9a: 28:79:6e:40:d5:44:2c:38:1e:8f:fe:ff:14:d5:1d: a7:61:48:92:ec:a1:e0:1d:13:85:7d:a2:28:3a:db: 2a:f8:8b:49:d8:84:71:5f:63:65:94:bb:a3:84:f4: 4c:c9:ac:0b:9e:7b:c4:3d:79:ae:db:cf:83:c1:d5: a7:f6:65:60:76:39:92:ef:82:8e:56:7d:3d:22:ab: 15:26:2c:b5:57:5c:1d:3d:4f:b4:d9:0e:d5:1e:22: 59:2b:55:de:74:d0:95:29:3a:2a:cf:55:5f:aa:87: 22:aa:56:1b:ef:a9:12:c5:a2:f3:44:c8:a4:7e:5d: 16:5a:51:88:64:9c:ae:b8:ee:b2:b3:48:45:d5:da: 89:ec:7d:47:4c:30:25:cd:10:1e:41:13:87:40:a0: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B3:6B:3E:CC:7E:43:FD:C1:F5:3C:CF:A6:58:43:A2:9D:A0:1E:73 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:81:5d:64:7b:e2:cb:db:5b:34:7a:37:28:82:0e:dd:3b: a6:e9:69:2b:90:14:04:86:6c:38:1a:4a:b6:86:a7:bb:5e:fa: 79:74:e6:23:52:44:9b:da:e6:26:81:87:11:22:37:b6:bd:72: c5:6a:72:93:54:db:e9:87:5a:38:62:9e:83:e1:80:35:dd:01: b6:8c:c6:60:e1:f5:f2:61:5a:30:5e:86:c8:88:87:06:b4:04: 39:bc:d7:2b:1d:12:f7:01:3c:82:de:6a:97:b1:40:d9:83:40: 4e:30:56:d0:89:cd:b1:e7:8c:09:23:62:4c:42:55:e3:ea:8e: e0:08:87:13:d5:52:4d:99:e3:c2:80:ec:3a:f1:d6:de:ef:28: 29:62:99:41:0d:7c:6e:6f:a5:5e:e8:f0:ae:24:db:fe:e7:35: cd:ef:c2:2d:0a:26:14:9c:04:97:1b:10:1a:f1:0f:4d:f0:97: ff:f0:bd:5c:b6:27:27:40:5e:62:81:a0:c6:1d:94:0f:88:27: 37:1e:e6:e6:ea:17:4e:7d:58:76:8b:e3:98:6e:2f:93:05:8a: 26:ce:ed:30:37:66:69:3d:a6:86:1e:06:d8:cf:9d:c8:66:03: 29:68:33:d8:91:dd:9b:d9:e8:0b:bc:a8:c5:50:bf:5f:ec:35: 24:88:bd:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDJzqQ038LYcUyHPrsE1LYA/irG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjEwMDcxMDU2NDFaFw0yNjEwMDgxMjMwNDFaMDMxMTAvBgNV BAMTKDhDQjM2QjNFQ0M3RTQzRkRDMUY1M0NDRkE2NTg0M0EyOURBMDFFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYy3l7JEZPr26Rm2wRUCN5IP4 BEcWoQxev4nEYELh4Qpm4lBF49fhVXCDGOC9rB/0VdQpTjiFv5YJX7q6P2mkpcnw ctmqipoYJzuWRVWrm84El6iHV2whL8CTzPh/dPtQxZCjZtPWmih5bkDVRCw4Ho/+ /xTVHadhSJLsoeAdE4V9oig62yr4i0nYhHFfY2WUu6OE9EzJrAuee8Q9ea7bz4PB 1af2ZWB2OZLvgo5WfT0iqxUmLLVXXB09T7TZDtUeIlkrVd500JUpOirPVV+qhyKq VhvvqRLFovNEyKR+XRZaUYhknK647rKzSEXV2onsfUdMMCXNEB5BE4dAoMp/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjLNrPsx+Q/3B9TzPplhDop2gHnMwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfbIFd ZHviy9tbNHo3KIIO3Tum6WkrkBQEhmw4Gkq2hqe7Xvp5dOYjUkSb2uYmgYcRIje2 vXLFanKTVNvph1o4Yp6D4YA13QG2jMZg4fXyYVowXobIiIcGtAQ5vNcrHRL3ATyC 3mqXsUDZg0BOMFbQic2x54wJI2JMQlXj6o7gCIcT1VJNmePCgOw68dbe7ygpYplB DXxub6Ve6PCuJNv+5zXN78ItCiYUnASXGxAa8Q9N8Jf/8L1cticnQF5igaDGHZQP iCc3Hubm6hdOfVh2i+OYbi+TBYomzu0wN2ZpPaaGHgbYz53IZgMpaDPYkd2b2egL vKjFUL9f7DUkiL1k -----END CERTIFICATE-----Generated at Wed Oct 7 13:11:05 2026 by rpki-client