$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft File: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft (raw, json) Hash identifier: CTds4I7yfs+EC87OXeCLBKy9csXvR21914uNwwmvj9M= Subject key identifier: C5:47:4F:D4:F5:07:99:18:1C:1A:01:CB:FE:56:B7:EB:FE:09:1E:26 Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Certificate serial: 0972AF21A1EE6DCFE5293AFCD32A7552DB4B6256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft Manifest number: 91 Signing time: Fri 28 Aug 2026 03:38:20 +0000 Manifest this update: Fri 28 Aug 2026 03:33:20 +0000 Manifest next update: Sat 29 Aug 2026 05:14:20 +0000 Files and hashes: 1: 3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa (hash: L5DhNHLrlxwctN9vqKE08S22O12JNR5Iz8LhoGk9LAI=) 2: 3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa (hash: 1ABPmYy3OMkXM6hUipNaZqxStdmGCObQYP+N6B1Qe1M=) 3: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl (hash: Y9WG6WaFzRRB7mp28ooJUJJ6FsnRhqmiITiWAreLPsI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Aug 2026 05:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:72:af:21:a1:ee:6d:cf:e5:29:3a:fc:d3:2a:75:52:db:4b:62:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Validity Not Before: Aug 28 03:33:20 2026 GMT Not After : Aug 29 05:14:20 2026 GMT Subject: CN=C5474FD4F50799181C1A01CBFE56B7EBFE091E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:21:10:c1:62:b5:6d:51:2b:33:82:8a:fe:7a: b8:56:a8:91:eb:33:7a:c7:ff:ed:5f:aa:5c:53:70: 05:32:05:ca:f5:8a:b9:2a:7e:12:e3:17:4e:1e:41: a5:60:81:87:a3:9b:e9:40:66:07:f0:dc:59:2b:c4: ca:55:b3:26:82:d2:bf:a3:17:5c:49:20:42:3e:70: e8:75:e5:f0:46:3e:7c:2f:ee:e2:1c:96:49:62:0c: df:a2:4a:3a:54:e8:1a:bb:37:be:eb:3e:f5:5b:3e: 58:6f:2a:af:52:05:9b:9b:50:43:2f:d3:a1:0a:70: 87:c2:3b:cf:7e:78:84:5e:4b:10:66:04:a6:c9:69: 8e:69:f8:3c:0e:95:5e:81:7d:cc:ff:4a:96:8a:31: 66:a9:37:c5:3e:3a:0c:a6:4e:cb:aa:f7:41:34:91: c4:7d:f3:1b:26:e4:03:2b:76:59:83:4c:33:85:3a: 65:e0:24:37:f3:4c:f4:1e:27:20:08:2b:30:6b:a6: 9d:80:cf:f0:16:76:8e:05:1e:6e:ee:37:6d:c5:0a: 58:15:5f:4b:37:85:62:79:17:05:f8:6f:20:ff:38: d6:40:f4:94:13:b2:47:93:db:fc:5c:d2:62:28:b3: 2e:64:b5:09:9d:c4:2f:2b:9e:70:13:a8:b6:42:bc: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:47:4F:D4:F5:07:99:18:1C:1A:01:CB:FE:56:B7:EB:FE:09:1E:26 X509v3 Authority Key Identifier: keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a1:2d:48:99:c3:f6:23:70:51:4c:04:f0:97:de:e2:da:4e: 1b:c6:a9:01:c9:d6:b1:0a:34:8c:fa:b2:56:24:ff:94:d1:28: 65:70:b0:3f:d2:56:6c:f6:7a:4a:0f:66:8f:58:bc:5c:d4:75: fc:96:3b:44:92:16:2f:bf:81:a4:6d:5d:34:d7:76:36:30:04: c2:b0:62:09:99:36:2f:06:1b:0b:83:f0:98:7d:7e:c1:4a:e7: d3:11:f3:bb:c3:68:c9:79:4f:a3:7f:07:93:3c:37:16:a1:cc: 75:71:81:3d:36:1c:5a:63:b1:9b:97:09:67:71:2e:c5:df:4e: b6:35:f6:67:43:28:e3:f4:37:da:c1:cd:6a:46:d2:34:25:0d: 5f:8c:0e:00:0f:e8:97:c9:7b:53:da:0b:4f:56:b6:e3:c9:8d: 92:b5:ae:13:f0:1d:93:75:33:4f:4c:c9:07:99:3a:96:05:3c: 36:86:3f:af:7b:32:fb:3f:3f:4e:1c:35:42:55:e3:95:a0:5f: 6a:b8:e8:d6:f1:78:83:f0:ef:21:b4:c8:4a:05:80:26:f6:3e: 82:bb:55:89:49:57:a9:f8:f4:f8:84:bf:d3:93:8a:2d:7a:b4: 32:99:37:a1:52:5d:07:c6:84:e3:c2:3c:a9:b2:5f:e2:2c:a9: be:7d:42:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCXKvIaHubc/lKTr80yp1UttLYlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGQ1OWY2NjVhNjY3MGRmNWYxZWFkNmFlYjAxZTVmODBk NTBmMGNhMDAeFw0yNjA4MjgwMzMzMjBaFw0yNjA4MjkwNTE0MjBaMDMxMTAvBgNV BAMTKEM1NDc0RkQ0RjUwNzk5MTgxQzFBMDFDQkZFNTZCN0VCRkUwOTFFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIRDBYrVtUSszgor+erhWqJHr M3rH/+1fqlxTcAUyBcr1irkqfhLjF04eQaVggYejm+lAZgfw3FkrxMpVsyaC0r+j F1xJIEI+cOh15fBGPnwv7uIclkliDN+iSjpU6Bq7N77rPvVbPlhvKq9SBZubUEMv 06EKcIfCO89+eIReSxBmBKbJaY5p+DwOlV6Bfcz/SpaKMWapN8U+OgymTsuq90E0 kcR98xsm5AMrdlmDTDOFOmXgJDfzTPQeJyAIKzBrpp2Az/AWdo4FHm7uN23FClgV X0s3hWJ5FwX4byD/ONZA9JQTskeT2/xc0mIosy5ktQmdxC8rnnATqLZCvAuZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxUdP1PUHmRgcGgHL/la36/4JHiYwHwYDVR0j BBgwFoAUTVn2ZaZnDfXx6tausB5fgNUPDKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGVjZDNiMmMtMmYxMi00YjNiLWE3NzktOTg5Yzg3NGU1 M2Y0LzAvNEQ1OUY2NjVBNjY3MERGNUYxRUFENkFFQjAxRTVGODBENTBGMENBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RWbjJaYVpuRGZYeDZ0YXVzQjVmZ05V UERLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWNkM2IyYy0y ZjEyLTRiM2ItYTc3OS05ODljODc0ZTUzZjQvMC80RDU5RjY2NUE2NjcwREY1RjFF QUQ2QUVCMDFFNUY4MEQ1MEYwQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6EtSJnD9iNwUUwE8Jfe 4tpOG8apAcnWsQo0jPqyViT/lNEoZXCwP9JWbPZ6Sg9mj1i8XNR1/JY7RJIWL7+B pG1dNNd2NjAEwrBiCZk2LwYbC4PwmH1+wUrn0xHzu8NoyXlPo38Hkzw3FqHMdXGB PTYcWmOxm5cJZ3Euxd9OtjX2Z0Mo4/Q32sHNakbSNCUNX4wOAA/ol8l7U9oLT1a2 48mNkrWuE/Adk3UzT0zJB5k6lgU8NoY/r3sy+z8/Thw1QlXjlaBfarjo1vF4g/Dv IbTISgWAJvY+grtViUlXqfj0+IS/05OKLXq0Mpk3oVJdB8aE48I8qbJf4iypvn1C hQ== -----END CERTIFICATE-----Generated at Fri Aug 28 22:06:50 2026 by rpki-client