$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: PZkWFiPjktmShpn0B6udyVNPoD4t1JcdaslpYMcSBuM= Subject key identifier: 51:1E:D6:04:46:1F:53:D2:5F:7B:CC:22:FD:33:0F:9E:DA:12:83:9B Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 6AAE35FAA03BF8FFA3EB941C4C3415FA2CE697A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0444 Signing time: Sat 03 Oct 2026 03:56:58 +0000 Manifest this update: Sat 03 Oct 2026 03:51:58 +0000 Manifest next update: Sun 04 Oct 2026 06:36:58 +0000 Files and hashes: 1: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 2: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: /HrYt+2gmBD+xo+IXaGeKx9ukfdiDrwJ036nvJ6ZjIo=) 3: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 4: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 5: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 6: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 7: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 8: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 9: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 10: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 11: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: o//1/J/GteVD7Bkv3tVM3xd+hJyni3O2iokpWvoEkpc=) 12: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 13: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 06:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ae:35:fa:a0:3b:f8:ff:a3:eb:94:1c:4c:34:15:fa:2c:e6:97:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Oct 3 03:51:58 2026 GMT Not After : Oct 4 06:36:58 2026 GMT Subject: CN=511ED604461F53D25F7BCC22FD330F9EDA12839B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:dd:b2:09:02:48:ec:0b:ea:53:65:99:15: 26:3e:db:b6:e4:44:cd:dd:f9:46:e9:f5:57:ee:9f: af:a8:74:db:34:64:53:3c:b7:16:b8:17:84:44:29: 81:47:a8:12:d0:2d:13:33:90:a3:50:88:91:b7:45: e4:d2:9c:f5:a1:51:dd:44:95:04:c6:bf:e9:63:77: f3:f3:67:0f:fe:e0:06:15:ab:cd:16:01:06:c9:75: 94:1c:43:23:7a:e5:8d:05:6a:99:27:b1:42:16:4b: 80:36:26:7e:9b:cd:49:6c:9b:57:ff:5a:5f:82:72: 02:00:75:1e:57:9e:43:c1:bf:79:a5:80:6e:34:46: 5b:87:ce:0e:cf:57:e8:24:84:92:38:e7:ed:b8:11: 1c:04:55:23:0c:5a:e5:61:55:3e:0b:34:cc:06:57: 66:6d:7d:26:28:cf:d3:af:b4:11:21:7c:1a:be:ed: d3:e8:ba:70:fa:c8:01:df:53:ff:88:2e:c5:ba:5c: dc:d0:c4:03:90:37:c1:a5:c0:a1:64:4e:c2:05:74: c0:d9:7c:84:13:21:5d:bb:32:32:1f:92:fa:45:d9: a7:9c:72:c1:3f:b4:46:76:a6:28:ec:6b:8a:ee:bc: 53:86:24:9e:30:2f:44:ba:5d:2d:78:7e:ce:af:70: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1E:D6:04:46:1F:53:D2:5F:7B:CC:22:FD:33:0F:9E:DA:12:83:9B X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6b:74:14:27:05:6c:e5:f5:ca:57:27:ee:0d:60:01:36:7b: 79:63:23:2f:8c:ca:b2:7a:ba:87:8d:ff:19:b7:30:02:9d:e4: 9a:f7:9e:fe:88:c2:d6:67:17:d0:e7:a6:31:1c:5b:cc:ec:3d: a7:21:7c:b6:93:4a:a3:bf:54:c7:2f:58:92:cf:5b:71:1d:3a: b1:96:91:d1:a7:a8:56:fa:34:94:76:2a:e0:18:ca:0c:4d:2a: 53:d0:17:e9:25:71:5b:76:7c:98:43:aa:69:8c:80:08:05:03: 13:58:b4:7e:75:e7:46:2b:ef:04:8d:d8:50:0e:da:95:68:a9: 79:07:55:75:d4:05:8f:14:c0:f6:02:e2:f2:7b:35:c7:30:82: 61:25:af:57:55:87:3f:c8:0a:bc:61:56:91:c1:05:a6:e2:49: 17:e0:16:d1:0b:bf:8e:65:0e:d6:ee:3a:0f:63:73:0a:7e:f9: b5:aa:e4:a3:fb:2c:e1:db:10:8d:4b:31:14:d4:96:ee:57:1c: dc:7b:0b:b6:96:50:72:29:63:c3:26:60:a5:09:dc:71:3b:9a: b7:ad:9b:5b:9a:a6:dd:98:a3:9e:b4:07:57:08:ba:0b:81:bb: b2:a5:1d:fb:c8:bc:8e:b0:35:46:02:27:dd:3b:b3:89:5e:99: b6:0d:ef:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaq41+qA7+P+j65QcTDQV+izml6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjEwMDMwMzUxNThaFw0yNjEwMDQwNjM2NThaMDMxMTAvBgNV BAMTKDUxMUVENjA0NDYxRjUzRDI1RjdCQ0MyMkZEMzMwRjlFREExMjgzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggN2yCQJI7AvqU2WZFSY+27bk RM3d+Ubp9Vfun6+odNs0ZFM8txa4F4REKYFHqBLQLRMzkKNQiJG3ReTSnPWhUd1E lQTGv+ljd/PzZw/+4AYVq80WAQbJdZQcQyN65Y0FapknsUIWS4A2Jn6bzUlsm1f/ Wl+CcgIAdR5XnkPBv3mlgG40RluHzg7PV+gkhJI45+24ERwEVSMMWuVhVT4LNMwG V2ZtfSYoz9OvtBEhfBq+7dPounD6yAHfU/+ILsW6XNzQxAOQN8GlwKFkTsIFdMDZ fIQTIV27MjIfkvpF2aeccsE/tEZ2pijsa4ruvFOGJJ4wL0S6XS14fs6vcGLzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUR7WBEYfU9Jfe8wi/TMPntoSg5swHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmt0FCcFbOX1ylcn7g1g ATZ7eWMjL4zKsnq6h43/GbcwAp3kmvee/ojC1mcX0OemMRxbzOw9pyF8tpNKo79U xy9Yks9bcR06sZaR0aeoVvo0lHYq4BjKDE0qU9AX6SVxW3Z8mEOqaYyACAUDE1i0 fnXnRivvBI3YUA7alWipeQdVddQFjxTA9gLi8ns1xzCCYSWvV1WHP8gKvGFWkcEF puJJF+AW0Qu/jmUO1u46D2NzCn75tarko/ss4dsQjUsxFNSW7lcc3HsLtpZQcilj wyZgpQnccTuat62bW5qm3ZijnrQHVwi6C4G7sqUd+8i8jrA1RgIn3TuziV6Ztg3v ww== -----END CERTIFICATE-----Generated at Sat Oct 3 20:10:27 2026 by rpki-client