$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft File: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft (raw, json) Hash identifier: c9565NazcV3srAmpPexzfqkMn4vZAbaKVK7iuVNBvnc= Subject key identifier: B4:C1:4C:40:32:6C:FD:03:BF:06:B3:73:E5:93:9C:C0:4D:1A:DC:53 Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Certificate serial: 52F0EF9A74FAD4A8070C2A0B673C4AD096FA1408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft Manifest number: D0 Signing time: Wed 14 Oct 2026 16:30:42 +0000 Manifest this update: Wed 14 Oct 2026 16:25:42 +0000 Manifest next update: Thu 15 Oct 2026 16:30:42 +0000 Files and hashes: 1: 3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa (hash: L5DhNHLrlxwctN9vqKE08S22O12JNR5Iz8LhoGk9LAI=) 2: 3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa (hash: 1ABPmYy3OMkXM6hUipNaZqxStdmGCObQYP+N6B1Qe1M=) 3: 4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl (hash: PT8MN6PqhXImvHGI5ZVGcSi+5/jmLxUzxU5SEYTgkno=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 16:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f0:ef:9a:74:fa:d4:a8:07:0c:2a:0b:67:3c:4a:d0:96:fa:14:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0 Validity Not Before: Oct 14 16:25:42 2026 GMT Not After : Oct 15 16:30:42 2026 GMT Subject: CN=B4C14C40326CFD03BF06B373E5939CC04D1ADC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:68:be:de:e2:c7:dd:a0:39:d9:90:3e:4b: 96:70:19:c3:25:7f:b6:2e:52:b0:10:6a:45:b3:d7: 17:e1:dc:0f:94:c7:12:81:f3:b1:2d:fe:32:70:ed: 26:b9:aa:89:f0:8e:53:39:10:e4:a6:0c:a6:30:85: 20:f3:04:64:bf:ee:15:ec:f8:00:7c:3c:ef:07:ff: c1:3d:c0:4d:3b:88:bf:48:e0:07:fa:07:ce:6b:e9: ad:6f:01:88:20:4b:3c:03:32:02:3b:e9:a6:83:bb: 36:d6:a5:00:21:83:6a:ab:3c:fb:e8:b1:31:10:fa: 23:5c:f2:2c:29:78:51:33:ae:9d:b2:a2:33:cf:42: 11:67:34:9c:d9:6a:b8:4d:a0:ea:7d:22:18:52:a8: 0a:48:c3:2f:5c:a6:83:b0:1f:eb:4d:6b:68:14:2b: 0a:dd:e6:d6:94:03:e8:08:74:35:ca:ad:a4:53:f5: 27:1b:4a:12:0d:70:ac:27:8f:9f:91:2f:e9:39:c8: 51:85:28:f0:c6:f4:02:09:9d:b0:04:db:64:12:c8: 79:5b:f1:5a:3e:ae:ef:01:a4:b6:1e:55:b9:9f:85: 90:c0:d5:5a:bf:9d:ce:2c:8e:c1:44:e5:b9:83:71: b9:6f:a5:31:9a:55:03:5b:4e:21:b1:1a:fc:a4:f1: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:4C:40:32:6C:FD:03:BF:06:B3:73:E5:93:9C:C0:4D:1A:DC:53 X509v3 Authority Key Identifier: keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:25:a2:df:f7:f7:b7:94:35:86:c7:43:73:ed:45:ad:d4:39: cb:8a:af:55:d9:24:24:78:69:5a:04:6d:2d:c6:5a:9e:b9:d0: eb:c9:0c:27:9b:de:83:48:d7:6e:c4:c7:94:e6:be:8a:5f:70: 8c:d0:7c:4c:c7:53:6a:49:1c:b6:eb:63:6e:9e:87:d3:4f:b3: 28:ce:68:f0:26:c0:ee:80:02:5e:b3:b9:bd:1d:20:88:63:3a: 1d:ac:ff:14:8b:ca:34:3d:0c:06:a6:f7:b8:fd:b2:99:fd:68: 63:63:90:e5:aa:ee:4a:db:56:af:d7:4a:91:83:f0:66:fa:5f: 17:33:81:75:2f:2a:c0:3e:ef:69:03:ad:a9:17:f7:b3:b2:03: 57:fc:96:80:4b:33:95:c2:d8:f9:a2:c8:2c:c3:b6:7f:62:48: fd:c3:1a:c3:b5:83:23:17:2b:b1:66:56:e3:9c:b4:13:a7:01: 98:8e:4e:51:80:aa:e3:44:09:f9:46:59:cd:b9:36:54:ad:b4: 1b:bd:67:b3:8c:f1:a5:87:1b:95:de:57:66:fa:25:03:72:05: bf:33:71:6b:48:61:02:c8:93:03:87:7b:54:77:e0:c8:01:fc: 56:13:14:61:44:02:42:38:66:1f:81:c6:37:28:3f:2b:e4:f6: bb:40:09:0a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUvDvmnT61KgHDCoLZzxK0Jb6FAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGQ1OWY2NjVhNjY3MGRmNWYxZWFkNmFlYjAxZTVmODBk NTBmMGNhMDAeFw0yNjEwMTQxNjI1NDJaFw0yNjEwMTUxNjMwNDJaMDMxMTAvBgNV BAMTKEI0QzE0QzQwMzI2Q0ZEMDNCRjA2QjM3M0U1OTM5Q0MwNEQxQURDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWbGi+3uLH3aA52ZA+S5ZwGcMl f7YuUrAQakWz1xfh3A+UxxKB87Et/jJw7Sa5qonwjlM5EOSmDKYwhSDzBGS/7hXs +AB8PO8H/8E9wE07iL9I4Af6B85r6a1vAYggSzwDMgI76aaDuzbWpQAhg2qrPPvo sTEQ+iNc8iwpeFEzrp2yojPPQhFnNJzZarhNoOp9IhhSqApIwy9cpoOwH+tNa2gU Kwrd5taUA+gIdDXKraRT9ScbShINcKwnj5+RL+k5yFGFKPDG9AIJnbAE22QSyHlb 8Vo+ru8BpLYeVbmfhZDA1Vq/nc4sjsFE5bmDcblvpTGaVQNbTiGxGvyk8TfLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtMFMQDJs/QO/BrNz5ZOcwE0a3FMwHwYDVR0j BBgwFoAUTVn2ZaZnDfXx6tausB5fgNUPDKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGVjZDNiMmMtMmYxMi00YjNiLWE3NzktOTg5Yzg3NGU1 M2Y0LzAvNEQ1OUY2NjVBNjY3MERGNUYxRUFENkFFQjAxRTVGODBENTBGMENBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RWbjJaYVpuRGZYeDZ0YXVzQjVmZ05V UERLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWNkM2IyYy0y ZjEyLTRiM2ItYTc3OS05ODljODc0ZTUzZjQvMC80RDU5RjY2NUE2NjcwREY1RjFF QUQ2QUVCMDFFNUY4MEQ1MEYwQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyWi3/f3t5Q1hsdDc+1F rdQ5y4qvVdkkJHhpWgRtLcZanrnQ68kMJ5veg0jXbsTHlOa+il9wjNB8TMdTakkc tutjbp6H00+zKM5o8CbA7oACXrO5vR0giGM6Haz/FIvKND0MBqb3uP2ymf1oY2OQ 5aruSttWr9dKkYPwZvpfFzOBdS8qwD7vaQOtqRf3s7IDV/yWgEszlcLY+aLILMO2 f2JI/cMaw7WDIxcrsWZW45y0E6cBmI5OUYCq40QJ+UZZzbk2VK20G71ns4zxpYcb ld5XZvolA3IFvzNxa0hhAsiTA4d7VHfgyAH8VhMUYUQCQjhmH4HGNyg/K+T2u0AJ Cg== -----END CERTIFICATE-----Generated at Thu Oct 15 02:04:31 2026 by rpki-client