$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: GhxULWzQSvr6RXqPaSCeVBdQrATOLx2blaq+rNVTEVQ= Subject key identifier: E5:B8:9D:7A:42:7B:07:49:64:BF:F6:3C:A1:95:40:0C:9D:32:18:92 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 353512DEEB661AC560838B4E21E343A9C5D583F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 04A9 Signing time: Fri 04 Sep 2026 08:15:16 +0000 Manifest this update: Fri 04 Sep 2026 08:10:16 +0000 Manifest next update: Sat 05 Sep 2026 10:22:16 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: T35YYPFZaFksQRX75GEbcuGMHLVVhptRwAlBGG860vs=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: ROsrwkR7nWLwQbpaSZWVWx6M1N5sHIdeiD5wZMPm00g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:35:12:de:eb:66:1a:c5:60:83:8b:4e:21:e3:43:a9:c5:d5:83:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Sep 4 08:10:16 2026 GMT Not After : Sep 5 10:22:16 2026 GMT Subject: CN=E5B89D7A427B074964BFF63CA195400C9D321892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:cd:bb:c2:98:90:b1:c2:9e:92:6f:46:87: a6:d7:e2:50:89:6e:ab:6e:24:aa:bd:8f:81:57:b6: 8b:1a:e3:7c:7a:fe:64:c1:73:26:e9:d2:75:84:7f: cd:05:6a:5a:02:90:e5:27:07:78:a0:ec:63:6a:29: fb:99:9b:ea:68:59:c9:fc:a7:99:70:aa:af:af:97: 11:8a:db:ed:bc:f7:8e:c2:3f:16:8a:7d:e4:12:2a: 02:75:62:99:73:15:b8:ca:36:57:25:25:ab:88:94: 31:70:1f:ba:60:e7:12:8e:d4:24:39:56:ad:f6:73: 41:a3:ff:ed:6d:c0:c8:28:b2:7a:5e:64:1b:52:62: 75:ff:df:7e:a7:11:91:b8:68:61:c4:8f:85:c9:fa: 13:77:a6:43:bd:5e:4d:09:91:5d:78:c7:2b:01:0f: 56:f9:49:ee:cf:8b:f2:eb:e2:22:ba:16:2e:38:c9: 88:f2:15:73:b2:52:4c:50:54:d4:df:64:9a:ce:d3: cc:2f:d9:71:26:ef:a5:01:b8:fd:13:25:c3:6b:f8: 90:47:00:1a:fc:d1:30:bc:8a:62:64:f3:1f:1f:2e: 80:c1:b3:0a:3c:03:45:bc:95:43:f6:83:c6:77:8f: 4e:92:0f:b5:45:97:ba:8a:4e:e5:ff:85:f9:39:c6: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:9D:7A:42:7B:07:49:64:BF:F6:3C:A1:95:40:0C:9D:32:18:92 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5e:55:69:ea:07:78:a3:a6:93:34:f8:5c:e6:a6:82:0d:4d: 39:c4:21:55:21:b2:68:63:5f:24:26:a6:04:d0:46:9d:0a:29: c6:40:d8:39:0c:b4:72:ba:09:dd:18:3e:17:74:dc:b4:10:86: 65:2e:50:2d:68:b7:64:ae:e1:2b:1c:5d:d5:41:19:50:b5:aa: 7a:24:11:47:73:a2:f2:c0:8a:58:31:5f:60:1c:e3:91:82:76: 73:bc:2f:95:7b:01:7b:bd:7f:d6:71:3d:d3:a7:10:99:30:86: 82:ec:c2:0f:f2:f4:1c:05:8a:fa:19:66:0b:ce:0c:a5:67:47: 2f:12:8e:a3:9b:2d:a7:d2:fa:3f:44:a4:f7:d6:47:08:ce:60: 00:4b:ad:89:e7:49:c3:ab:04:7e:b0:42:62:fa:3c:1c:b1:63: 4e:7c:ff:ef:a2:9f:80:11:5e:5a:75:17:b1:e9:45:5e:09:42: 6f:38:c1:79:5b:97:c1:8c:c3:76:39:6c:9d:36:29:a7:2c:35: 3d:ab:18:46:ac:65:f3:a6:40:36:3c:3e:a3:4d:0c:d0:f6:28: ac:a3:9f:dd:34:9f:14:4e:a1:e6:a8:af:06:88:55:db:19:28: 03:d5:d6:0c:1f:f2:b0:5a:59:60:51:3f:a6:3f:b4:c9:6e:a9: f5:1e:01:e2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNTUS3utmGsVgg4tOIeNDqcXVg/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA5MDQwODEwMTZaFw0yNjA5MDUxMDIyMTZaMDMxMTAvBgNV BAMTKEU1Qjg5RDdBNDI3QjA3NDk2NEJGRjYzQ0ExOTU0MDBDOUQzMjE4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZ827wpiQscKekm9Gh6bX4lCJ bqtuJKq9j4FXtosa43x6/mTBcybp0nWEf80FaloCkOUnB3ig7GNqKfuZm+poWcn8 p5lwqq+vlxGK2+28947CPxaKfeQSKgJ1YplzFbjKNlclJauIlDFwH7pg5xKO1CQ5 Vq32c0Gj/+1twMgosnpeZBtSYnX/336nEZG4aGHEj4XJ+hN3pkO9Xk0JkV14xysB D1b5Se7Pi/Lr4iK6Fi44yYjyFXOyUkxQVNTfZJrO08wv2XEm76UBuP0TJcNr+JBH ABr80TC8imJk8x8fLoDBswo8A0W8lUP2g8Z3j06SD7VFl7qKTuX/hfk5xvFLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5bidekJ7B0lkv/Y8oZVADJ0yGJIwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwXlVp 6gd4o6aTNPhc5qaCDU05xCFVIbJoY18kJqYE0EadCinGQNg5DLRyugndGD4XdNy0 EIZlLlAtaLdkruErHF3VQRlQtap6JBFHc6LywIpYMV9gHOORgnZzvC+VewF7vX/W cT3TpxCZMIaC7MIP8vQcBYr6GWYLzgylZ0cvEo6jmy2n0vo/RKT31kcIzmAAS62J 50nDqwR+sEJi+jwcsWNOfP/vop+AEV5adRex6UVeCUJvOMF5W5fBjMN2OWydNimn LDU9qxhGrGXzpkA2PD6jTQzQ9iiso5/dNJ8UTqHmqK8GiFXbGSgD1dYMH/KwWllg UT+mP7TJbqn1HgHi -----END CERTIFICATE-----Generated at Fri Sep 4 22:25:05 2026 by rpki-client