$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: LkGESfam8Vb1T53t1mBLrrrJq3rqjC2NxPkLkwMzKs0= Subject key identifier: 35:D3:2B:FB:E1:C0:7A:37:1B:22:66:B8:14:87:74:CB:60:11:8D:9B Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 4DB914905A1949C7BAF8A5187332864568FF9CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0445 Signing time: Sat 03 Oct 2026 22:41:58 +0000 Manifest this update: Sat 03 Oct 2026 22:36:58 +0000 Manifest next update: Mon 05 Oct 2026 01:06:58 +0000 Files and hashes: 1: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 2: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 3: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 4: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: jpaydqAGAuudbnGtFxUtGE1nTz+J2nckpZKZzTm0RxQ=) 5: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 6: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 7: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=) 8: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 9: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 10: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 11: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 12: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 13: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 01:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b9:14:90:5a:19:49:c7:ba:f8:a5:18:73:32:86:45:68:ff:9c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Oct 3 22:36:58 2026 GMT Not After : Oct 5 01:06:58 2026 GMT Subject: CN=35D32BFBE1C07A371B2266B8148774CB60118D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:d2:04:8d:75:31:6d:9a:66:34:9c:9e:e0: 66:f4:9a:2d:29:20:60:73:3e:ee:fe:2e:5d:7f:1d: 5e:51:ca:4c:be:ff:c4:8b:21:1e:20:35:45:ee:36: 59:e2:5a:a1:1c:7c:da:b9:28:4c:c8:54:3a:37:b1: 28:a9:a0:04:ee:e6:0c:3a:cf:85:35:c6:37:57:df: 3a:df:4d:d0:5d:19:74:f3:af:b5:43:df:e2:df:ef: 40:da:88:57:9a:e2:9e:1c:42:af:22:17:24:31:f1: 51:01:8e:03:5c:f9:e7:b7:31:26:51:6e:62:2b:e0: e9:cb:1b:79:11:a7:04:92:90:b4:76:59:3f:e9:c1: e3:6d:90:df:77:53:a6:1c:4b:8f:d0:7c:6c:89:7b: 8d:91:02:50:b1:92:d9:91:13:7f:14:d2:7a:bd:44: 4b:6e:f6:c6:c6:69:d5:b1:fc:2b:9a:5f:6b:7e:f7: 19:f3:7f:54:c8:fd:af:22:39:9d:ca:b1:45:37:40: f1:9f:c0:7f:96:da:90:61:97:f7:62:07:b2:64:6d: b2:a6:ad:d5:53:af:4f:ba:87:71:7c:70:d0:88:22: 05:6f:61:8f:b1:dc:fb:fb:d5:a4:2e:a6:d4:d3:41: 00:7a:57:75:1a:83:c0:07:4b:8f:c7:32:94:1a:49: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D3:2B:FB:E1:C0:7A:37:1B:22:66:B8:14:87:74:CB:60:11:8D:9B X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:73:ca:36:6c:8e:4a:af:08:68:d2:96:73:0c:ab:b5:96:fc: 11:6f:38:42:53:3d:7d:f1:1f:aa:4b:44:a0:82:0a:90:52:c9: 21:55:0f:7d:17:2d:2d:72:d0:2c:78:1d:bb:fc:eb:c7:2a:87: a0:71:15:bd:64:76:47:91:1d:76:0e:03:ac:59:cc:73:f8:f6: 14:28:04:d9:a9:59:48:3c:df:59:02:4e:82:3e:60:cb:18:06: e1:81:d4:ad:a3:cb:95:72:62:07:2a:a8:62:c0:08:96:0b:87: 7e:a0:f0:ca:52:99:37:8b:73:3e:ed:5e:80:fb:a7:6f:fd:09: 13:38:25:2b:e5:74:33:f8:fd:37:ef:45:ee:13:9a:8f:05:bf: 8f:d1:fc:6f:ac:cf:3f:fa:d8:bb:3c:64:cb:27:61:6d:fe:e3: e4:9a:15:8a:d1:93:4c:2a:e2:ef:1b:53:19:34:f0:0e:5d:c0: 07:80:42:00:30:94:13:a8:5e:d5:9d:b0:e9:74:1c:be:cc:35: ae:63:6d:ef:48:d2:82:9b:28:0e:6f:64:6e:9c:5e:8b:3d:40: 03:0c:04:5c:c9:f2:cc:0f:21:c8:2c:eb:97:cc:d2:36:fd:71: 44:04:4e:b4:3e:a4:49:a5:c7:79:7c:e0:0e:72:79:a8:ce:03: ab:6a:ae:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTbkUkFoZSce6+KUYczKGRWj/nLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjEwMDMyMjM2NThaFw0yNjEwMDUwMTA2NThaMDMxMTAvBgNV BAMTKDM1RDMyQkZCRTFDMDdBMzcxQjIyNjZCODE0ODc3NENCNjAxMThEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0dIEjXUxbZpmNJye4Gb0mi0p IGBzPu7+Ll1/HV5Ryky+/8SLIR4gNUXuNlniWqEcfNq5KEzIVDo3sSipoATu5gw6 z4U1xjdX3zrfTdBdGXTzr7VD3+Lf70DaiFea4p4cQq8iFyQx8VEBjgNc+ee3MSZR bmIr4OnLG3kRpwSSkLR2WT/pweNtkN93U6YcS4/QfGyJe42RAlCxktmRE38U0nq9 REtu9sbGadWx/CuaX2t+9xnzf1TI/a8iOZ3KsUU3QPGfwH+W2pBhl/diB7JkbbKm rdVTr0+6h3F8cNCIIgVvYY+x3Pv71aQuptTTQQB6V3Uag8AHS4/HMpQaScSzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNdMr++HAejcbIma4FId0y2ARjZswHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanPKNmyOSq8IaNKWcwyr tZb8EW84QlM9ffEfqktEoIIKkFLJIVUPfRctLXLQLHgdu/zrxyqHoHEVvWR2R5Ed dg4DrFnMc/j2FCgE2alZSDzfWQJOgj5gyxgG4YHUraPLlXJiByqoYsAIlguHfqDw ylKZN4tzPu1egPunb/0JEzglK+V0M/j9N+9F7hOajwW/j9H8b6zPP/rYuzxkyydh bf7j5JoVitGTTCri7xtTGTTwDl3AB4BCADCUE6he1Z2w6XQcvsw1rmNt70jSgpso Dm9kbpxeiz1AAwwEXMnyzA8hyCzrl8zSNv1xRAROtD6kSaXHeXzgDnJ5qM4Dq2qu WQ== -----END CERTIFICATE-----Generated at Sun Oct 4 17:37:24 2026 by rpki-client