$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft File: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft (raw, json) Hash identifier: AGsdlsVk5jKwZecaBIQab7xrq0W7+DuHA0pRHXRxrhU= Subject key identifier: EE:A8:CD:B6:9B:0F:58:C8:AB:21:91:B1:62:B6:53:CD:BE:97:4A:19 Authority key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Certificate issuer: /CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Certificate serial: 3D14D95BDE4181D667AF135C3A03F69B9A73AEAF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft Manifest number: 59 Signing time: Tue 27 Oct 2026 16:19:28 +0000 Manifest this update: Tue 27 Oct 2026 16:14:28 +0000 Manifest next update: Wed 28 Oct 2026 19:42:28 +0000 Files and hashes: 1: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl (hash: 0+//NCwC1iAhIBSAgpN9cGKPeRM5VujffuHdO8rLHqU=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: WbkLmPY7vquDS69dIt63nnAZsib0q7kTLNkqlvd3rPA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:14:d9:5b:de:41:81:d6:67:af:13:5c:3a:03:f6:9b:9a:73:ae:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Validity Not Before: Oct 27 16:14:28 2026 GMT Not After : Oct 28 19:42:28 2026 GMT Subject: CN=EEA8CDB69B0F58C8AB2191B162B653CDBE974A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a6:da:73:37:5d:d6:de:61:62:3b:0f:da:40: 0f:a7:a0:21:66:10:dd:f6:2b:1b:62:10:14:b8:ee: 31:c8:3b:0a:83:72:3c:14:9c:31:5a:2c:ea:a0:3d: 27:63:10:a4:8c:fc:63:1b:af:c5:ef:3e:de:61:b9: 99:eb:75:e3:9a:38:86:96:18:a4:49:37:96:14:15: ec:4e:07:42:e7:22:31:57:0f:e8:e0:bf:cc:78:ac: 57:cf:51:b0:6e:93:23:c2:49:f7:58:4b:4f:9b:e6: 70:36:5c:f1:14:55:3b:7a:7a:0c:a9:d9:0a:59:1d: dd:1b:67:b2:ea:8a:05:eb:bc:4f:7b:96:6a:d4:43: 4f:bf:dd:55:9b:b7:b7:c5:bc:e0:85:a9:0e:18:17: a1:e3:58:38:69:1d:c5:12:10:51:de:e8:de:7c:f6: 1d:d4:84:1d:81:9c:78:b8:a0:b4:63:b3:0a:d4:da: c8:e4:6d:5e:c8:5b:fd:1e:8f:b6:15:c9:23:31:98: 1b:2a:26:8a:ec:6e:0e:bc:eb:24:3d:d2:26:aa:ce: a2:1e:fa:cb:00:74:c9:60:e8:ef:b2:6e:62:af:c7: 30:6e:fd:c0:7a:4a:8b:2e:7a:c7:62:6a:de:8a:9d: 99:1c:9b:09:b0:76:71:f2:58:c9:18:8f:54:63:1e: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:CD:B6:9B:0F:58:C8:AB:21:91:B1:62:B6:53:CD:BE:97:4A:19 X509v3 Authority Key Identifier: keyid:38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ab:65:fd:8f:7c:cf:d3:ac:f2:4f:5f:b3:ba:51:a7:7d:53: 1b:7c:90:d1:29:15:99:70:d4:0f:b2:0a:99:f3:6d:c0:c3:04: 75:c0:0c:b6:2f:94:60:1d:1f:6b:ef:30:7b:6c:1c:28:64:3d: 02:92:11:bb:8b:1d:a1:ab:87:46:ad:83:fe:99:e2:e3:ef:14: a0:fd:75:43:3e:7f:a9:bd:22:27:20:c3:1d:f3:16:1b:8b:cc: c2:c7:9c:e9:dc:54:8a:e2:aa:a6:4b:65:61:5a:f4:1f:12:5d: e1:29:7c:91:4e:c1:74:d5:24:04:68:ec:3f:e2:32:fb:f6:4b: 63:96:85:15:08:4a:ad:49:d6:cc:f0:10:7e:2d:dd:1b:8b:21: c5:f3:72:d4:38:8b:b3:d9:5d:4e:74:dc:3f:e8:e6:3f:70:6e: 51:e7:87:ee:d3:90:ec:8a:09:2c:da:94:04:76:2b:43:75:48: 90:d3:62:0b:ff:32:b6:40:2c:1f:4f:6d:e2:4c:da:cd:c3:57: 9b:f6:3c:63:84:5c:be:67:f5:f6:b1:e3:51:ae:a9:a5:29:9f: 39:59:dd:38:59:fd:44:e1:b8:4b:00:64:d1:7c:91:7a:0f:1f: de:00:05:c5:59:6a:a1:f2:f1:54:ed:6b:41:4e:39:03:d4:79: 74:6f:14:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPRTZW95BgdZnrxNcOgP2m5pzrq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1 QkIzNjBFOTAeFw0yNjEwMjcxNjE0MjhaFw0yNjEwMjgxOTQyMjhaMDMxMTAvBgNV BAMTKEVFQThDREI2OUIwRjU4QzhBQjIxOTFCMTYyQjY1M0NEQkU5NzRBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzptpzN13W3mFiOw/aQA+noCFm EN32KxtiEBS47jHIOwqDcjwUnDFaLOqgPSdjEKSM/GMbr8XvPt5huZnrdeOaOIaW GKRJN5YUFexOB0LnIjFXD+jgv8x4rFfPUbBukyPCSfdYS0+b5nA2XPEUVTt6egyp 2QpZHd0bZ7LqigXrvE97lmrUQ0+/3VWbt7fFvOCFqQ4YF6HjWDhpHcUSEFHe6N58 9h3UhB2BnHi4oLRjswrU2sjkbV7IW/0ej7YVySMxmBsqJorsbg686yQ90iaqzqIe +ssAdMlg6O+ybmKvxzBu/cB6Sosuesdiat6KnZkcmwmwdnHyWMkYj1RjHqt3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7qjNtpsPWMirIZGxYrZTzb6XShkwHwYDVR0j BBgwFoAUOJTZPYe6udCtmPKm/0PxRluzYOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzIvMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1QkIzNjBFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zODk0RDkzRDg3QkFCOUQwQUQ5OEYyQTZG RjQzRjE0NjVCQjM2MEU5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS8yLzM4OTREOTNE ODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJCMzYwRTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRq2X9 j3zP06zyT1+zulGnfVMbfJDRKRWZcNQPsgqZ823AwwR1wAy2L5RgHR9r7zB7bBwo ZD0CkhG7ix2hq4dGrYP+meLj7xSg/XVDPn+pvSInIMMd8xYbi8zCx5zp3FSK4qqm S2VhWvQfEl3hKXyRTsF01SQEaOw/4jL79ktjloUVCEqtSdbM8BB+Ld0biyHF83LU OIuz2V1OdNw/6OY/cG5R54fu05Dsigks2pQEditDdUiQ02IL/zK2QCwfT23iTNrN w1eb9jxjhFy+Z/X2seNRrqmlKZ85Wd04Wf1E4bhLAGTRfJF6Dx/eAAXFWWqh8vFU 7WtBTjkD1Hl0bxSv -----END CERTIFICATE-----Generated at Tue Oct 27 23:29:30 2026 by rpki-client