$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft File: 379234C5E71F2624C3A35F324BC6732473DEF7D4.mft (raw, json) Hash identifier: lI9UJ6qKt+4Uu9GASR8rKzKXE8Vy65/Vpeyd0abvFNs= Subject key identifier: 0F:81:23:E9:9D:D2:3A:AA:D0:20:45:FC:66:47:18:8D:93:A5:AE:15 Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 6816C0AF630682EF15520FF2EA6E7528ACBFF48C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft Manifest number: 08 Signing time: Fri 04 Sep 2026 10:52:25 +0000 Manifest this update: Fri 04 Sep 2026 10:47:25 +0000 Manifest next update: Sat 05 Sep 2026 11:28:25 +0000 Files and hashes: 1: 326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa (hash: 6pqnMmr7+bNaS8ZFVOFF0jbH70Kf/THIum4De2bpy9w=) 2: 379234C5E71F2624C3A35F324BC6732473DEF7D4.crl (hash: yKJuEuSCloJyKc/g97wR4r12HMM9qmlSGr3nT2BIN5Q=) 3: 326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa (hash: loyhwL3pSNC/lKJ6tVn3vsv+juNVKmavfgHP3HNEMhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:c0:af:63:06:82:ef:15:52:0f:f2:ea:6e:75:28:ac:bf:f4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 4 10:47:25 2026 GMT Not After : Sep 5 11:28:25 2026 GMT Subject: CN=0F8123E99DD23AAAD02045FC6647188D93A5AE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:83:ef:8c:b5:fb:bd:d2:b6:b8:52:1e:e3: b9:5c:06:d0:c8:23:35:1d:03:91:72:65:3d:9e:4a: 81:39:5d:b8:0a:77:21:84:3c:d5:52:3f:48:2f:2d: 36:9b:4d:fd:5a:36:c8:f0:73:a6:78:5d:44:fa:a0: a2:5a:71:0f:12:73:b7:10:b3:b3:ac:a3:52:53:e6: ee:0a:0e:b7:cf:cb:db:31:98:39:16:c6:07:6d:a2: f6:97:7b:d5:52:a0:9d:29:5e:69:39:cd:43:89:f1: 74:1a:66:e3:84:f8:b5:a2:c3:17:cd:7f:9c:49:8b: 3b:cb:8e:a0:8b:30:75:8c:04:e1:e0:1c:65:fe:1a: ec:a7:3b:f4:61:3c:a9:cc:84:ed:ab:da:1d:ec:3c: 71:68:f7:a7:3f:8a:dc:8c:19:f0:74:1e:ee:4f:e1: 1b:9c:b9:af:67:69:cf:56:2c:4a:2d:90:eb:80:1c: d8:c7:d6:13:37:2c:86:ee:c7:54:3e:64:50:42:14: 2b:8d:32:ac:fe:59:52:7e:3c:49:7a:2c:da:6b:27: 6e:4c:a4:9e:41:6d:c1:ff:51:ef:06:ea:0a:02:2c: 55:51:13:e4:6f:eb:ed:7e:79:31:f8:a0:03:b2:2a: a5:84:e6:8d:23:94:ee:97:a4:5e:94:10:6b:74:b7: cf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:23:E9:9D:D2:3A:AA:D0:20:45:FC:66:47:18:8D:93:A5:AE:15 X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:03:e8:e7:56:80:95:78:12:bd:b2:fd:fd:6f:37:41:67:b5: c4:eb:19:dc:83:57:f5:d9:17:c3:10:16:47:07:b9:cb:70:af: b5:5a:18:04:9a:fe:4f:2b:39:ac:00:2a:d6:bf:e2:d5:81:e5: 0e:26:6d:6b:42:31:c2:48:8f:e1:88:99:d0:cb:cd:1c:23:86: b6:48:8f:70:9c:72:7d:61:37:af:1b:55:f0:2e:65:e8:cd:1d: 5f:a5:26:f5:9d:97:b5:cb:87:25:96:d9:38:8a:85:24:e3:3a: fe:d3:08:d7:f6:65:46:27:28:84:63:3f:33:fc:7d:63:95:e3: 93:42:d2:c2:bc:b0:5c:f2:dd:04:d2:85:34:0e:de:98:39:a6: 11:5f:8f:07:bc:e4:3e:ec:d5:8e:0a:ba:0d:88:a0:5c:7a:e2: 79:51:72:80:dd:c9:4d:ed:fd:4d:f1:34:e8:db:aa:4c:1d:ee: 4d:be:af:cf:c2:d9:6f:84:20:60:fb:3a:ba:fb:61:2b:52:87: f6:35:e2:57:82:c1:b5:54:3a:9f:95:f3:08:61:4d:d4:d3:cf: 11:52:74:5e:21:ac:5e:e6:28:61:ab:a4:5d:a9:c8:64:95:61: 17:66:bf:ba:3b:a0:dd:00:82:28:9c:13:c3:04:ca:64:5d:71: 29:87:d1:64 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUaBbAr2MGgu8VUg/y6m51KKy/9IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MDQxMDQ3MjVaFw0yNjA5MDUxMTI4MjVaMDMxMTAvBgNV BAMTKDBGODEyM0U5OUREMjNBQUFEMDIwNDVGQzY2NDcxODhEOTNBNUFFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRIPvjLX7vdK2uFIe47lcBtDI IzUdA5FyZT2eSoE5XbgKdyGEPNVSP0gvLTabTf1aNsjwc6Z4XUT6oKJacQ8Sc7cQ s7Oso1JT5u4KDrfPy9sxmDkWxgdtovaXe9VSoJ0pXmk5zUOJ8XQaZuOE+LWiwxfN f5xJizvLjqCLMHWMBOHgHGX+GuynO/RhPKnMhO2r2h3sPHFo96c/ityMGfB0Hu5P 4Rucua9nac9WLEotkOuAHNjH1hM3LIbux1Q+ZFBCFCuNMqz+WVJ+PEl6LNprJ25M pJ5BbcH/Ue8G6goCLFVRE+Rv6+1+eTH4oAOyKqWE5o0jlO6XpF6UEGt0t88tAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUD4Ej6Z3SOqrQIEX8ZkcYjZOlrhUwHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjkwMDNlYy1m YTM1LTQ5NzktOWFjOC1lMzBiZTAwNTIxNjMvMS8zNzkyMzRDNUU3MUYyNjI0QzNB MzVGMzI0QkM2NzMyNDczREVGN0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwPo51aAlXgSvbL9/W83 QWe1xOsZ3INX9dkXwxAWRwe5y3CvtVoYBJr+Tys5rAAq1r/i1YHlDiZta0IxwkiP 4YiZ0MvNHCOGtkiPcJxyfWE3rxtV8C5l6M0dX6Um9Z2XtcuHJZbZOIqFJOM6/tMI 1/ZlRicohGM/M/x9Y5Xjk0LSwrywXPLdBNKFNA7emDmmEV+PB7zkPuzVjgq6DYig XHrieVFygN3JTe39TfE06NuqTB3uTb6vz8LZb4QgYPs6uvthK1KH9jXiV4LBtVQ6 n5XzCGFN1NPPEVJ0XiGsXuYoYaukXanIZJVhF2a/ujug3QCCKJwTwwTKZF1xKYfR ZA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:58:10 2026 by rpki-client