$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: 1q9sYo9zHbFtTERYTi8/AXcf5lJFb/JorjsOyDMNYMw= Subject key identifier: 01:8F:F0:C4:8D:9D:39:1C:07:9A:48:FB:44:81:B8:FC:EB:AF:A2:E6 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 2994A6736BA17A42A432C2B9D9F6471497BA52F5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 0240 Signing time: Thu 27 Aug 2026 10:36:39 +0000 Manifest this update: Thu 27 Aug 2026 10:31:39 +0000 Manifest next update: Fri 28 Aug 2026 14:07:39 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=) 2: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: TQW6ysixu0tP91BwcnDo0gwRpG74gPFiPCid6NcU7fI=) 3: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: nq1N0Uj3cJLDBoWNQHsn0MWSYsGbRpjWxke0lVJA7ZU=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 08:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:94:a6:73:6b:a1:7a:42:a4:32:c2:b9:d9:f6:47:14:97:ba:52:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Aug 27 10:31:39 2026 GMT Not After : Aug 28 14:07:39 2026 GMT Subject: CN=018FF0C48D9D391C079A48FB4481B8FCEBAFA2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:78:92:1f:c3:19:d8:65:9e:a8:60:de:01: 75:6c:89:6f:1e:ab:c0:8f:1c:ed:dd:3f:c0:33:35: 61:76:fb:a9:12:00:60:cc:e2:f5:ef:60:af:0a:75: ef:89:a3:f3:de:39:3a:5a:ed:38:13:5e:ca:61:06: 46:ef:e1:57:c5:6e:22:b6:2a:a1:ff:84:7f:f1:c6: 58:4b:8a:89:ed:4c:46:bb:dd:a2:c0:10:8b:18:e5: 55:ae:e2:e0:40:95:5a:17:40:6f:01:54:f3:04:70: 90:a1:7d:e7:34:44:cc:94:2f:df:ac:1e:44:78:22: 8f:4e:1e:7a:b5:38:46:66:44:73:84:c1:42:c1:81: 68:73:7e:ad:b8:ea:44:e1:98:83:27:b0:53:e5:24: 70:f5:2c:d3:c6:cd:24:45:da:53:e1:bc:3a:c3:d6: 93:d5:2b:e4:d9:2d:fc:fc:31:75:21:22:f2:d2:6f: eb:89:05:f9:86:f3:42:a1:e4:f6:87:5d:a0:e3:07: 3d:a8:6c:27:97:5f:cc:83:ef:ae:ee:99:e0:34:08: cf:e6:0f:66:38:d1:0d:33:93:16:36:d9:7e:b7:e0: 2e:fc:e7:19:d7:9d:97:c2:7f:50:d7:08:8b:3c:07: bf:7b:a0:43:1b:41:1f:2f:b9:e3:2f:e1:dc:d4:3e: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:F0:C4:8D:9D:39:1C:07:9A:48:FB:44:81:B8:FC:EB:AF:A2:E6 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ac:71:86:da:17:54:cd:30:00:7a:cb:ff:8f:22:2a:e2:25: af:e6:35:9f:dd:42:a9:eb:66:64:d8:91:43:e1:9f:10:27:aa: 55:92:4f:6f:ca:f9:86:5f:3b:5d:78:60:bd:2e:9b:53:2d:22: b1:e1:0d:e5:11:06:f9:2b:9e:45:9c:75:56:a3:2f:0b:92:95: b6:ac:af:a7:69:5a:6f:89:10:f4:80:ab:42:d1:cf:5e:ff:fe: bc:21:00:ce:fe:85:10:3d:9d:5c:f8:a5:66:f7:b9:a8:e1:af: 42:f2:ca:a0:9e:97:23:91:58:2b:23:2e:dc:36:d0:f6:7e:9f: 37:d1:18:36:d4:2a:44:7e:ce:2e:d5:23:40:d7:91:8e:e9:af: 87:50:10:62:d0:19:74:82:0d:c4:08:64:eb:dc:c7:30:b7:9d: 80:e7:57:19:12:ee:87:f1:79:4b:4e:ba:ba:1b:5c:4f:c7:39: b8:3e:da:9d:ee:83:f9:4d:99:7b:0d:c9:d1:77:c3:49:b8:52: eb:6c:35:6d:62:1c:4c:f9:4d:05:a3:6e:42:1f:25:5f:3f:c6: 9a:44:8c:91:38:ed:84:7a:f5:82:b7:bb:b1:ee:db:6e:d4:b2: 08:e5:87:d5:f9:db:2f:dd:33:03:f7:9d:c7:4b:ac:9a:bc:fb: 8d:56:3f:67 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUKZSmc2uhekKkMsK52fZHFJe6UvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjA4MjcxMDMxMzlaFw0yNjA4MjgxNDA3MzlaMDMxMTAvBgNV BAMTKDAxOEZGMEM0OEQ5RDM5MUMwNzlBNDhGQjQ0ODFCOEZDRUJBRkEyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9XiSH8MZ2GWeqGDeAXVsiW8e q8CPHO3dP8AzNWF2+6kSAGDM4vXvYK8Kde+Jo/PeOTpa7TgTXsphBkbv4VfFbiK2 KqH/hH/xxlhLiontTEa73aLAEIsY5VWu4uBAlVoXQG8BVPMEcJChfec0RMyUL9+s HkR4Io9OHnq1OEZmRHOEwULBgWhzfq246kThmIMnsFPlJHD1LNPGzSRF2lPhvDrD 1pPVK+TZLfz8MXUhIvLSb+uJBfmG80Kh5PaHXaDjBz2obCeXX8yD767umeA0CM/m D2Y40Q0zkxY22X634C785xnXnZfCf1DXCIs8B797oEMbQR8vueMv4dzUPv0/AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUAY/wxI2dORwHmkj7RIG4/OuvouYwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA vKxxhtoXVM0wAHrL/48iKuIlr+Y1n91CqetmZNiRQ+GfECeqVZJPb8r5hl87XXhg vS6bUy0iseEN5REG+SueRZx1VqMvC5KVtqyvp2lab4kQ9ICrQtHPXv/+vCEAzv6F ED2dXPilZve5qOGvQvLKoJ6XI5FYKyMu3DbQ9n6fN9EYNtQqRH7OLtUjQNeRjumv h1AQYtAZdIINxAhk69zHMLedgOdXGRLuh/F5S066uhtcT8c5uD7ane6D+U2Zew3J 0XfDSbhS62w1bWIcTPlNBaNuQh8lXz/GmkSMkTjthHr1gre7se7bbtSyCOWH1fnb L90zA/edx0usmrz7jVY/Zw== -----END CERTIFICATE-----Generated at Thu Aug 27 16:03:12 2026 by rpki-client