$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: pktK8Hydt93qbhfHDSN4mWJNW5tnwCDETpVMUOa/blQ= Subject key identifier: D7:84:12:8E:09:BA:69:43:3D:E1:E8:27:68:30:5B:9D:E5:B2:44:EA Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 053D531F59C0515E9007FED83A1F9DD0DAE06499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 043A Signing time: Wed 28 Oct 2026 02:06:40 +0000 Manifest this update: Wed 28 Oct 2026 02:01:40 +0000 Manifest next update: Thu 29 Oct 2026 02:44:40 +0000 Files and hashes: 1: 352e3137382e3132342e302f32342d3234203d3e203431373230.roa (hash: denS4ShosQEflOOKSOFKHIlQq2P37gUifSSYnpY0oi4=) 2: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 42Orb6sEaGc2kPQ79cDpjC4AuglY/MZ0Ezi5aC23cnU=) 3: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=) 4: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=) 5: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=) 6: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=) 7: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=) 8: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=) 9: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=) 10: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=) 11: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=) 12: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=) 13: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=) 14: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=) 15: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=) 16: 352e3137382e3132352e302f32342d3234203d3e203431373230.roa (hash: 2wW5t36NJMTXW3Jrvo3pMIkucCLejHza7QPvifnreNo=) 17: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=) 18: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: KGBdO03qyyafMOxo4U+d/wPS0xbGpENnx76PaW6XZ3w=) 19: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=) 20: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=) 21: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 22: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: L9N61GZrgQ5virt2qFxgsc/JOkknEDcdSanMcULWk5s=) 23: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=) 24: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=) 25: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=) 26: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=) 27: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 02:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3d:53:1f:59:c0:51:5e:90:07:fe:d8:3a:1f:9d:d0:da:e0:64:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Oct 28 02:01:40 2026 GMT Not After : Oct 29 02:44:40 2026 GMT Subject: CN=D784128E09BA69433DE1E82768305B9DE5B244EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:b8:78:b4:7f:a1:16:d2:3f:02:fe:c4:e4: f0:d3:75:e8:e1:72:78:ab:f2:1f:1c:15:f7:14:18: f9:b9:30:ec:1b:b2:c3:22:db:90:c5:d2:31:54:e8: f3:da:55:b2:5a:24:8e:1a:77:be:32:37:40:2b:4c: bf:cc:16:ed:6c:1c:18:f3:b0:02:56:67:52:7e:eb: 64:93:36:4d:55:d4:bd:e5:3d:3e:54:62:32:25:d2: 93:cd:79:9b:1a:3b:d9:c1:51:80:83:44:eb:1a:13: 7d:6c:90:2b:60:65:04:5c:b0:91:f1:6e:59:95:e4: 69:83:83:c2:3d:6d:ea:76:d9:90:56:44:93:ae:d4: 77:53:2d:a0:02:37:e7:ed:e9:26:cb:60:5b:e7:fb: db:4a:28:15:a8:b8:c4:b4:e0:2d:ee:6e:26:0a:09: 01:3a:ef:c7:88:cf:7a:dd:f5:a0:8d:8a:b9:ce:8a: b7:ac:b8:b2:07:b6:13:4d:53:63:ec:86:99:0e:b6: 0e:70:19:09:f5:b8:ec:02:13:7c:30:a5:50:a7:40: 0b:c7:1d:b5:49:95:fe:99:0d:79:71:c7:04:8c:c1: 73:a0:c0:c8:51:b0:0f:c7:20:4d:7d:a8:22:05:50: 70:31:c1:d8:7e:4f:08:60:f7:47:81:bb:a8:48:55: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:84:12:8E:09:BA:69:43:3D:E1:E8:27:68:30:5B:9D:E5:B2:44:EA X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:62:26:d1:5e:7e:ea:92:8d:13:be:bd:e5:2b:e6:c8:b9:b2: 39:8f:65:de:24:58:b3:85:39:5e:3d:b0:60:1a:d3:bb:a7:da: 2c:24:f1:78:83:74:93:5c:d9:23:c3:54:b5:13:33:ee:78:fb: 6c:d7:8b:13:fa:18:5a:42:f5:e4:e4:83:db:eb:b5:0a:e3:43: 39:67:f1:fe:74:09:a4:9a:eb:a4:30:b1:b2:34:ab:0b:10:5a: bf:c3:20:16:dc:88:28:29:65:d2:43:a4:3e:7d:7e:9c:00:6c: 89:fb:7d:70:cc:8e:20:4c:98:aa:5a:7e:5e:9f:6d:d5:d8:f1: 7c:86:5e:12:aa:92:39:12:9c:34:f9:ea:fd:ae:75:c8:b1:cf: ea:26:aa:56:84:2c:cb:03:c8:22:23:f1:c6:79:c8:7f:fa:3e: 31:48:ee:84:9f:a8:0f:51:03:c7:8b:3f:d2:f2:6c:bf:8a:22: 4d:65:89:67:eb:f8:7a:36:fc:19:e4:7d:33:2c:f4:33:32:67: 47:b4:83:dc:dc:71:2f:e0:10:4d:c0:16:03:a7:a1:a3:78:05: e1:bd:ef:3e:0a:24:89:c3:14:df:e0:1a:6b:78:77:8a:2f:a7: fa:1b:fd:d9:cd:71:8b:d7:32:9e:73:61:8c:e7:22:a5:46:f1: bc:7b:90:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBT1TH1nAUV6QB/7YOh+d0NrgZJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjEwMjgwMjAxNDBaFw0yNjEwMjkwMjQ0NDBaMDMxMTAvBgNV BAMTKEQ3ODQxMjhFMDlCQTY5NDMzREUxRTgyNzY4MzA1QjlERTVCMjQ0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/7h4tH+hFtI/Av7E5PDTdejh cnir8h8cFfcUGPm5MOwbssMi25DF0jFU6PPaVbJaJI4ad74yN0ArTL/MFu1sHBjz sAJWZ1J+62STNk1V1L3lPT5UYjIl0pPNeZsaO9nBUYCDROsaE31skCtgZQRcsJHx blmV5GmDg8I9bep22ZBWRJOu1HdTLaACN+ft6SbLYFvn+9tKKBWouMS04C3ubiYK CQE678eIz3rd9aCNirnOiresuLIHthNNU2PshpkOtg5wGQn1uOwCE3wwpVCnQAvH HbVJlf6ZDXlxxwSMwXOgwMhRsA/HIE19qCIFUHAxwdh+Twhg90eBu6hIVWcjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU14QSjgm6aUM94egnaDBbneWyROowHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWIm0V5+6pKNE7695Svm yLmyOY9l3iRYs4U5Xj2wYBrTu6faLCTxeIN0k1zZI8NUtRMz7nj7bNeLE/oYWkL1 5OSD2+u1CuNDOWfx/nQJpJrrpDCxsjSrCxBav8MgFtyIKCll0kOkPn1+nABsift9 cMyOIEyYqlp+Xp9t1djxfIZeEqqSORKcNPnq/a51yLHP6iaqVoQsywPIIiPxxnnI f/o+MUjuhJ+oD1EDx4s/0vJsv4oiTWWJZ+v4ejb8GeR9Myz0MzJnR7SD3NxxL+AQ TcAWA6eho3gF4b3vPgokicMU3+Aaa3h3ii+n+hv92c1xi9cynnNhjOcipUbxvHuQ mg== -----END CERTIFICATE-----Generated at Wed Oct 28 18:47:18 2026 by rpki-client