$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft File: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft (raw, json) Hash identifier: pI1FGUco2i/RpVZZJ61gezsiCnYqHlGSPAf4JrdINuU= Subject key identifier: 5E:F7:1E:26:F4:AA:C8:6F:84:EE:26:03:19:8F:2B:8F:96:32:41:A7 Authority key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Certificate issuer: /CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Certificate serial: 3C8F28BBC2E2406624B82D72BC9AC42815C386AB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft Manifest number: 0B Signing time: Thu 10 Sep 2026 10:15:50 +0000 Manifest this update: Thu 10 Sep 2026 10:10:50 +0000 Manifest next update: Fri 11 Sep 2026 12:18:50 +0000 Files and hashes: 1: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl (hash: YKvNoLGH1zfE4zSPoZ7Fffa2Gw57Fh058iQG3MlYBJw=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: WbkLmPY7vquDS69dIt63nnAZsib0q7kTLNkqlvd3rPA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8f:28:bb:c2:e2:40:66:24:b8:2d:72:bc:9a:c4:28:15:c3:86:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Validity Not Before: Sep 10 10:10:50 2026 GMT Not After : Sep 11 12:18:50 2026 GMT Subject: CN=5EF71E26F4AAC86F84EE2603198F2B8F963241A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:d7:40:8b:56:c2:f4:e1:9c:3b:6a:4a:b9: 60:4f:d1:28:d0:53:f9:ed:2b:9c:15:97:0e:43:68: 0b:d6:fe:39:46:b6:00:aa:f5:6e:f4:ae:20:d6:14: 82:ed:2e:22:ce:e1:05:0b:2e:e7:b9:40:53:73:23: bd:dd:37:d3:a6:d5:63:7b:b6:38:8e:09:11:03:4e: 9f:50:70:6b:37:c7:6a:dc:fe:b2:99:a3:61:a2:dd: 49:a6:38:d3:0b:06:e3:76:36:b0:7c:2a:71:64:d4: ef:cf:ae:a4:a2:cc:a9:06:c4:5d:1f:fe:cc:09:6d: 0c:98:c8:20:be:4a:55:e5:21:04:12:db:d7:7e:ee: ec:ba:3f:4f:ef:53:90:30:7f:d4:aa:1e:01:a6:bb: 4c:a3:ce:1d:1e:53:63:ba:8a:36:4d:2a:79:b3:b9: fd:ff:8a:b7:65:ab:79:f7:fe:98:23:7a:a2:90:79: a8:92:43:a6:ca:6b:76:17:ff:77:dd:78:a9:45:3b: 05:74:13:26:ca:54:3b:6e:66:dc:5b:87:f2:25:45: da:18:d1:b3:f6:dc:1f:2a:7d:24:8f:9d:d1:56:6d: 12:e3:2c:29:b0:a3:8a:94:43:e1:76:ae:30:ba:60: b3:7e:f0:fc:c1:6f:f3:90:df:48:9d:a6:1e:bc:c6: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F7:1E:26:F4:AA:C8:6F:84:EE:26:03:19:8F:2B:8F:96:32:41:A7 X509v3 Authority Key Identifier: keyid:38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f1:a4:59:34:c7:30:ca:55:09:ff:3e:da:e9:49:58:55:56: da:ba:27:13:c7:96:42:f0:80:a3:c5:79:db:73:85:66:6d:ba: 1e:68:24:5c:ef:31:a0:74:e4:ee:68:55:f3:b5:b9:ef:c6:15: c9:68:09:13:12:63:dc:1e:46:ff:39:41:88:96:d4:98:21:62: f2:ab:2a:fe:25:2d:6e:28:11:13:52:dc:5c:f9:3c:ca:83:c2: 22:6e:e1:b4:74:c7:b8:5e:08:af:e7:df:13:b8:72:b1:eb:17: 9b:5b:12:a3:47:ae:7c:83:12:d9:53:8b:28:16:ec:5a:0d:d9: f2:f7:85:88:1f:7f:69:7f:65:c0:57:35:57:ee:22:7b:54:bb: b5:24:22:6c:8d:9b:56:8e:31:41:27:30:60:63:e6:55:58:3e: f5:77:63:57:32:40:82:2f:a0:e1:33:cc:3a:37:14:1b:c7:03: 8a:94:c4:d5:c4:1b:b2:4d:86:93:6e:a8:f1:d8:18:a6:b4:d0: 07:08:98:fb:93:e5:6a:53:c4:cc:fc:6a:21:73:77:96:1b:f4: 7d:7b:6f:37:55:13:6d:9b:63:b9:69:f8:4c:f9:51:fd:13:33: f4:d7:d6:5c:fa:84:8c:26:40:aa:70:0a:85:5c:0d:2c:6f:72: f8:f1:68:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPI8ou8LiQGYkuC1yvJrEKBXDhqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1 QkIzNjBFOTAeFw0yNjA5MTAxMDEwNTBaFw0yNjA5MTExMjE4NTBaMDMxMTAvBgNV BAMTKDVFRjcxRTI2RjRBQUM4NkY4NEVFMjYwMzE5OEYyQjhGOTYzMjQxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QNdAi1bC9OGcO2pKuWBP0SjQ U/ntK5wVlw5DaAvW/jlGtgCq9W70riDWFILtLiLO4QULLue5QFNzI73dN9Om1WN7 tjiOCREDTp9QcGs3x2rc/rKZo2Gi3UmmONMLBuN2NrB8KnFk1O/PrqSizKkGxF0f /swJbQyYyCC+SlXlIQQS29d+7uy6P0/vU5Awf9SqHgGmu0yjzh0eU2O6ijZNKnmz uf3/irdlq3n3/pgjeqKQeaiSQ6bKa3YX/3fdeKlFOwV0EybKVDtuZtxbh/IlRdoY 0bP23B8qfSSPndFWbRLjLCmwo4qUQ+F2rjC6YLN+8PzBb/OQ30idph68xhhxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXvceJvSqyG+E7iYDGY8rj5YyQacwHwYDVR0j BBgwFoAUOJTZPYe6udCtmPKm/0PxRluzYOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzIvMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1QkIzNjBFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zODk0RDkzRDg3QkFCOUQwQUQ5OEYyQTZG RjQzRjE0NjVCQjM2MEU5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS8yLzM4OTREOTNE ODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJCMzYwRTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDT8aRZ NMcwylUJ/z7a6UlYVVbauicTx5ZC8ICjxXnbc4VmbboeaCRc7zGgdOTuaFXztbnv xhXJaAkTEmPcHkb/OUGIltSYIWLyqyr+JS1uKBETUtxc+TzKg8IibuG0dMe4Xgiv 598TuHKx6xebWxKjR658gxLZU4soFuxaDdny94WIH39pf2XAVzVX7iJ7VLu1JCJs jZtWjjFBJzBgY+ZVWD71d2NXMkCCL6DhM8w6NxQbxwOKlMTVxBuyTYaTbqjx2Bim tNAHCJj7k+VqU8TM/Gohc3eWG/R9e283VRNtm2O5afhM+VH9EzP019Zc+oSMJkCq cAqFXA0sb3L48WiY -----END CERTIFICATE-----Generated at Thu Sep 10 12:57:17 2026 by rpki-client