$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft File: 238A11AE245357E72FEB39785C7BC03A973A44E1.mft (raw, json) Hash identifier: TzUbTqPj4EtFUF6Cada+/NrolHRQbdp9d0pUJ8DbjeI= Subject key identifier: 6C:DD:DB:9F:EE:D2:E5:4E:2F:FE:7C:B2:A4:CF:15:17:4A:12:29:57 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 0C341C8BF7B5130FCBED89D6196C836370F00FC6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft Manifest number: 3E Signing time: Sun 11 Oct 2026 22:29:05 +0000 Manifest this update: Sun 11 Oct 2026 22:24:05 +0000 Manifest next update: Tue 13 Oct 2026 00:25:05 +0000 Files and hashes: 1: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: b1a3Jjh6OCqVQv3BFg0/BsI0AK5ATcpf4fi1Bo5nYzQ=) 2: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: b5Idj5t7tuqn2ddvsBcRUBrXdLrx0alL1vLbTdmfpO0=) 3: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: XNORQmyv4cfPM5H0Kk051iHyUovOT9YKU3T8ljTmEOg=) 4: 238A11AE245357E72FEB39785C7BC03A973A44E1.crl (hash: TpkUcbYq65rk5pCCWm1KyH7cxl3KMFt80BTU6F/2Eko=) 5: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: rD43mzOj6hk9wZ+wkrs+0gGyJTyKVoY8YSNdSNkT6ww=) 6: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (hash: wLRhFi868Yq6U7aKu4r+Lg3ExFDFh+DUjWR9qvPNGKo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:34:1c:8b:f7:b5:13:0f:cb:ed:89:d6:19:6c:83:63:70:f0:0f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Oct 11 22:24:05 2026 GMT Not After : Oct 13 00:25:05 2026 GMT Subject: CN=6CDDDB9FEED2E54E2FFE7CB2A4CF15174A122957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:ec:e1:7a:b6:6c:7a:61:a9:fc:18:63:54: 57:93:7c:49:c7:ea:48:f3:b0:45:60:fb:25:9a:df: 67:3b:5b:58:09:b0:9e:0e:c8:b8:da:a5:2d:22:f2: 0f:fa:59:ad:b9:45:9a:f6:83:c6:d1:5e:30:79:05: ed:5c:0b:e1:e1:6f:f0:9b:db:b8:4d:fb:39:67:ae: 7a:a4:0e:1e:8d:e1:28:00:da:ee:2a:1b:8c:7b:87: 12:fd:32:4c:cc:1a:45:40:eb:a7:fb:33:8e:eb:e6: 00:01:0d:7e:ee:1f:df:41:10:11:37:de:12:b4:a8: 0e:38:93:22:e4:72:bc:83:94:87:4e:fd:c7:5b:f7: 5e:0e:18:08:9c:51:10:bf:94:90:ad:65:f0:51:d9: f2:09:d6:51:02:2d:f6:dc:06:6c:8b:d1:eb:4c:9d: 84:d8:0c:34:0a:96:d2:d9:08:e6:8c:fd:07:f9:88: ec:39:1a:a6:b1:78:58:bf:1e:d5:33:05:67:46:05: 3f:06:38:36:1e:88:5b:b0:aa:66:b3:1d:c0:fc:13: 09:64:c3:74:98:b5:8e:83:74:5d:2b:8f:20:2f:a6: 5a:c8:85:55:c2:2b:ea:8d:2c:db:a0:c7:5a:89:45: 94:09:92:86:f8:2a:51:b7:3e:57:c7:47:41:fc:f1: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:DB:9F:EE:D2:E5:4E:2F:FE:7C:B2:A4:CF:15:17:4A:12:29:57 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:eb:00:38:af:82:71:ef:a1:a2:8c:77:5f:55:7b:65:dd:77: 16:9f:cb:22:97:55:73:e6:ec:ac:9b:b9:48:70:c6:0b:6d:a5: 32:4e:82:6e:b8:52:57:12:ea:b7:16:2d:fb:12:54:0d:52:1c: 33:50:66:4d:8d:ef:d6:2d:23:10:a3:cc:b3:43:94:f8:d2:a7: 5e:5a:11:32:ee:71:ed:1c:72:95:0e:07:ef:5e:8f:1b:f0:df: 6d:b4:ca:86:4a:d2:a3:d9:41:c4:d1:39:62:21:f1:1a:61:8c: df:62:e2:96:c0:19:f1:a0:6b:c6:b9:b3:2c:68:81:4a:e7:d2: 24:8e:ed:b7:4f:f6:2f:ca:2d:a7:ff:a8:25:5d:10:f1:3f:ec: 00:80:a5:5f:c4:2d:22:75:b2:00:fb:e1:88:e9:12:7c:d7:50: a7:df:f5:d1:fc:7f:3a:8b:c4:40:b9:1e:4b:a4:e5:f4:69:4a: d6:b3:e1:f5:75:64:d9:17:c6:e9:63:64:4c:39:76:8c:cf:09: 01:32:61:95:fa:3c:77:ad:d0:a2:34:e1:19:3f:66:d5:44:91: 11:ae:e1:c1:f3:ae:cf:81:e2:d4:cb:95:0f:05:e2:d2:cb:e0: 22:48:c3:61:6b:ff:62:f7:5e:1e:c7:16:d9:6c:30:c4:f6:ae: 86:71:25:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDDQci/e1Ew/L7YnWGWyDY3DwD8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjEwMTEyMjI0MDVaFw0yNjEwMTMwMDI1MDVaMDMxMTAvBgNV BAMTKDZDREREQjlGRUVEMkU1NEUyRkZFN0NCMkE0Q0YxNTE3NEExMjI5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP2OzherZsemGp/BhjVFeTfEnH 6kjzsEVg+yWa32c7W1gJsJ4OyLjapS0i8g/6Wa25RZr2g8bRXjB5Be1cC+Hhb/Cb 27hN+zlnrnqkDh6N4SgA2u4qG4x7hxL9MkzMGkVA66f7M47r5gABDX7uH99BEBE3 3hK0qA44kyLkcryDlIdO/cdb914OGAicURC/lJCtZfBR2fIJ1lECLfbcBmyL0etM nYTYDDQKltLZCOaM/Qf5iOw5GqaxeFi/HtUzBWdGBT8GODYeiFuwqmazHcD8Ewlk w3SYtY6DdF0rjyAvplrIhVXCK+qNLNugx1qJRZQJkob4KlG3PlfHR0H88elXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbN3bn+7S5U4v/nyypM8VF0oSKVcwHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS81LzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX6wA4 r4Jx76GijHdfVXtl3XcWn8sil1Vz5uysm7lIcMYLbaUyToJuuFJXEuq3Fi37ElQN UhwzUGZNje/WLSMQo8yzQ5T40qdeWhEy7nHtHHKVDgfvXo8b8N9ttMqGStKj2UHE 0TliIfEaYYzfYuKWwBnxoGvGubMsaIFK59Ikju23T/Yvyi2n/6glXRDxP+wAgKVf xC0idbIA++GI6RJ811Cn3/XR/H86i8RAuR5LpOX0aUrWs+H1dWTZF8bpY2RMOXaM zwkBMmGV+jx3rdCiNOEZP2bVRJERruHB867PgeLUy5UPBeLSy+AiSMNha/9i914e xxbZbDDE9q6GcSWZ -----END CERTIFICATE-----Generated at Mon Oct 12 16:31:12 2026 by rpki-client