$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: BDt8y9BJLTK/Z0gPWzh1TyQVMz6s76hl0BK2P9MoG24= Subject key identifier: 18:FA:2A:0B:DB:23:E2:A1:FF:7F:79:19:46:08:22:69:5E:DB:1A:3F Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 5C8F33201C0116A6809118CF15B1564A6A5D8019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0637 Signing time: Sat 03 Oct 2026 14:14:38 +0000 Manifest this update: Sat 03 Oct 2026 14:09:38 +0000 Manifest next update: Sun 04 Oct 2026 17:49:38 +0000 Files and hashes: 1: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 2: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 3: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 4: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 5: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 6: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 7: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 8: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 9: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 10: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 11: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 12: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 13: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 14: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: FTkEpXzb2blX2c+NBR0c5QNPrJXl44dv6EeGUJzu4PE=) 15: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: Zefj/e0JMuu7oq2XsOjhFgJLIE9NkoqPwbvxoxEQNE4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8f:33:20:1c:01:16:a6:80:91:18:cf:15:b1:56:4a:6a:5d:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Oct 3 14:09:38 2026 GMT Not After : Oct 4 17:49:38 2026 GMT Subject: CN=18FA2A0BDB23E2A1FF7F7919460822695EDB1A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:5d:cd:33:90:8c:48:b2:2e:86:11:e7:c3: 01:dc:80:51:f9:ca:01:e8:49:65:b6:77:50:09:12: 30:9a:7d:83:81:7b:a1:09:6a:ae:ad:90:b7:2e:f7: c7:aa:63:33:d2:4f:31:ec:8c:f1:23:11:1f:be:69: 3c:f5:96:4a:ed:d2:13:0d:6b:a7:88:91:12:55:8c: 95:0a:ae:68:6f:16:83:00:e7:70:23:cf:8e:94:19: e6:89:ae:66:10:f4:c2:e2:84:3f:20:c3:5b:81:19: a6:ec:36:67:34:3b:45:8a:7a:bb:cd:1b:be:8d:43: 15:f6:f0:65:1f:82:68:7e:22:af:cd:59:bd:60:03: c8:26:49:4f:84:82:af:02:e2:5e:34:29:86:57:c1: df:64:6d:a8:ff:91:d8:7f:78:61:29:86:b7:5d:fd: 46:4b:b5:b7:73:6b:2a:76:fb:13:cb:ea:42:74:ef: 15:49:e7:77:24:e5:86:6f:c2:e2:f6:6c:84:ec:d6: 63:5e:88:a0:0e:9f:39:d1:6c:fe:af:8e:06:30:ff: 2b:2f:87:30:91:46:12:a4:66:d4:7c:64:e7:67:d4: d8:e7:66:72:6d:f9:06:f0:4e:30:f1:fa:5d:d0:97: 15:fe:94:de:c7:3a:6b:c0:24:e5:11:b0:e7:76:af: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:2A:0B:DB:23:E2:A1:FF:7F:79:19:46:08:22:69:5E:DB:1A:3F X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:74:3a:d8:47:95:47:dd:6a:3d:e9:be:16:f2:61:c7:04:3c: f0:74:25:94:58:d8:bc:87:91:f8:0d:7d:13:ea:eb:9b:69:ff: fe:7c:2a:83:73:99:e0:8f:f7:90:73:ea:78:d8:2f:d6:86:73: e2:0c:31:b7:83:f1:a0:a7:5c:23:55:5b:18:79:24:41:87:2f: 77:b0:01:c7:8c:d8:97:e5:67:f4:b1:b2:08:a1:12:96:1f:a1: f3:64:82:21:80:03:de:06:0a:a4:e0:67:4e:e3:fe:c7:2d:09: 31:24:20:ac:ac:15:56:1e:4f:25:5a:33:f0:f2:7a:4e:f8:bf: 17:b8:ca:2b:87:ae:76:8b:01:d2:c5:be:69:6d:91:b2:fd:93: 47:0c:c0:2a:29:ef:c7:94:25:9f:ba:23:ee:6e:f8:14:98:f9: cb:e4:ac:a2:df:a5:94:39:59:83:b5:6f:aa:52:81:c4:54:4f: 65:7f:08:2c:f3:fb:f7:ae:64:72:41:9c:15:25:69:a9:dd:10: d5:e2:97:10:79:5b:ff:39:80:25:5b:f1:2d:b7:26:9e:d0:9e: 03:0f:67:b8:bd:ab:c9:48:50:a4:a4:62:c3:6d:e6:b4:9e:35: 85:e3:38:5a:41:1b:66:c5:22:22:d2:47:7e:c6:b1:6c:0e:c4: ec:29:e4:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXI8zIBwBFqaAkRjPFbFWSmpdgBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjEwMDMxNDA5MzhaFw0yNjEwMDQxNzQ5MzhaMDMxMTAvBgNV BAMTKDE4RkEyQTBCREIyM0UyQTFGRjdGNzkxOTQ2MDgyMjY5NUVEQjFBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAH13NM5CMSLIuhhHnwwHcgFH5 ygHoSWW2d1AJEjCafYOBe6EJaq6tkLcu98eqYzPSTzHsjPEjER++aTz1lkrt0hMN a6eIkRJVjJUKrmhvFoMA53Ajz46UGeaJrmYQ9MLihD8gw1uBGabsNmc0O0WKervN G76NQxX28GUfgmh+Iq/NWb1gA8gmSU+Egq8C4l40KYZXwd9kbaj/kdh/eGEphrdd /UZLtbdzayp2+xPL6kJ07xVJ53ck5YZvwuL2bITs1mNeiKAOnznRbP6vjgYw/ysv hzCRRhKkZtR8ZOdn1NjnZnJt+QbwTjDx+l3QlxX+lN7HOmvAJOURsOd2r5GPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGPoqC9sj4qH/f3kZRggiaV7bGj8wHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXQ62EeVR91qPem+FvJh xwQ88HQllFjYvIeR+A19E+rrm2n//nwqg3OZ4I/3kHPqeNgv1oZz4gwxt4PxoKdc I1VbGHkkQYcvd7ABx4zYl+Vn9LGyCKESlh+h82SCIYAD3gYKpOBnTuP+xy0JMSQg rKwVVh5PJVoz8PJ6Tvi/F7jKK4eudosB0sW+aW2Rsv2TRwzAKinvx5Qln7oj7m74 FJj5y+Ssot+llDlZg7VvqlKBxFRPZX8ILPP7965kckGcFSVpqd0Q1eKXEHlb/zmA JVvxLbcmntCeAw9nuL2ryUhQpKRiw23mtJ41heM4WkEbZsUiItJHfsaxbA7E7Cnk ow== -----END CERTIFICATE-----Generated at Sun Oct 4 08:32:10 2026 by rpki-client