$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: Z04qZ7E9YD8FBCyxQ/xQSvj9Mhzvg+CahhETFeJNV3w= Subject key identifier: 2C:27:49:7B:38:64:E4:1B:E2:18:7A:F8:44:5C:A1:7F:71:05:4C:E0 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 5C89F36A9FF8997D73384F279CC2DE08AE38276F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 014A Signing time: Wed 30 Sep 2026 00:03:33 +0000 Manifest this update: Tue 29 Sep 2026 23:58:33 +0000 Manifest next update: Thu 01 Oct 2026 00:59:33 +0000 Files and hashes: 1: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 2: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 3: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 4: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 5: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: ujgJInPQCJ1/zg0d/uXkM/ax9pC80KKXKmOsjEPAqfo=) 7: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 8: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 9: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 10: 3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa (hash: c7rDwmaeg1ixtTlrBNd5rmSVyV1b9P8eB3zeUnPw2no=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:89:f3:6a:9f:f8:99:7d:73:38:4f:27:9c:c2:de:08:ae:38:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Sep 29 23:58:33 2026 GMT Not After : Oct 1 00:59:33 2026 GMT Subject: CN=2C27497B3864E41BE2187AF8445CA17F71054CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:cb:7e:60:14:28:7f:58:b1:18:36:b2:a3: b1:95:97:72:de:4c:e5:f6:c0:d4:3b:9a:fa:52:32: 14:eb:f8:3c:76:11:c7:9f:7c:ec:2a:72:9f:21:33: f5:09:bc:3d:87:67:a1:88:28:7c:51:02:26:f6:e7: fa:49:7f:9e:ab:42:ae:68:82:3d:05:0a:09:95:88: 7d:d4:c2:bb:b3:82:0a:a5:55:c1:0d:3f:c5:e1:09: 7c:ef:aa:e7:95:d8:86:8c:a5:dc:0b:f6:23:d8:9a: e6:31:1d:f7:b4:fd:e5:f9:f6:4b:c1:2a:9c:ec:ec: 9f:ca:0f:fa:c6:f1:5c:11:42:fe:16:5f:38:40:8c: bf:9f:fb:62:59:44:1f:b5:91:2a:35:78:c4:7b:6d: 39:8c:6a:cf:fa:ba:89:1a:40:81:65:7f:c5:a4:c8: ce:bd:99:dc:b8:5d:5e:9f:bb:95:1d:ed:e9:3a:e6: aa:69:64:0b:cc:70:4c:ae:60:db:13:e5:3b:c7:78: 0c:ee:03:dc:50:9c:4d:bd:9f:b8:8f:3c:54:b9:7a: 12:91:9d:b6:bf:8e:ae:4d:92:ea:da:e3:7f:5e:89: 12:98:37:ac:f6:1b:48:29:41:3f:1b:4a:8d:b8:78: bf:d3:47:64:8c:93:8f:19:dc:32:2d:e2:4f:af:23: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:27:49:7B:38:64:E4:1B:E2:18:7A:F8:44:5C:A1:7F:71:05:4C:E0 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:71:d3:08:ac:50:86:d2:86:97:1b:be:29:2a:d5:c9:b6:61: e4:30:93:ed:14:15:8c:2a:78:01:a8:af:62:ce:34:88:d6:50: 96:9b:d2:63:b8:f7:c1:3c:b7:fc:37:70:85:ed:b1:1b:fa:02: a3:53:c4:28:03:da:48:1d:13:de:d5:92:d0:1c:e9:80:1d:32: 7a:ff:ea:1a:f8:4f:9e:04:1f:5e:fc:36:39:80:6b:26:9f:93: 8e:4a:ee:5c:e5:4c:28:6f:4f:71:e9:74:73:e2:fb:25:76:15: a0:c4:3e:f2:a7:d3:2f:5c:c8:b6:6b:39:5f:64:74:ca:60:65: c8:6c:26:aa:dc:69:fc:77:03:ab:87:04:32:b5:ca:e7:dd:5a: 19:44:b5:e8:65:65:7c:cd:4a:27:8e:62:91:88:60:d2:a8:dc: 10:58:9a:bd:fa:58:e4:e9:18:a2:58:a1:75:56:82:fc:df:d4: 8a:ba:d7:7c:74:a0:bf:bf:6f:8f:94:a1:9a:1d:75:67:07:32: d3:7f:ae:59:a6:a7:e3:fa:2e:62:77:c3:ce:35:80:a2:eb:bc: 8a:ba:39:0d:22:98:34:0b:24:42:7e:36:40:49:6c:d0:c9:2b: 06:4c:5a:b6:55:90:18:a4:21:af:6f:64:ee:d3:02:d3:37:b4: 58:53:0a:14 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXInzap/4mX1zOE8nnMLeCK44J28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA5MjkyMzU4MzNaFw0yNjEwMDEwMDU5MzNaMDMxMTAvBgNV BAMTKDJDMjc0OTdCMzg2NEU0MUJFMjE4N0FGODQ0NUNBMTdGNzEwNTRDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbct+YBQof1ixGDayo7GVl3Le TOX2wNQ7mvpSMhTr+Dx2EceffOwqcp8hM/UJvD2HZ6GIKHxRAib25/pJf56rQq5o gj0FCgmViH3UwruzggqlVcENP8XhCXzvqueV2IaMpdwL9iPYmuYxHfe0/eX59kvB Kpzs7J/KD/rG8VwRQv4WXzhAjL+f+2JZRB+1kSo1eMR7bTmMas/6uokaQIFlf8Wk yM69mdy4XV6fu5Ud7ek65qppZAvMcEyuYNsT5TvHeAzuA9xQnE29n7iPPFS5ehKR nba/jq5Nkura439eiRKYN6z2G0gpQT8bSo24eL/TR2SMk48Z3DIt4k+vI2ghAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULCdJezhk5BviGHr4RFyhf3EFTOAwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxcdMI rFCG0oaXG74pKtXJtmHkMJPtFBWMKngBqK9izjSI1lCWm9JjuPfBPLf8N3CF7bEb +gKjU8QoA9pIHRPe1ZLQHOmAHTJ6/+oa+E+eBB9e/DY5gGsmn5OOSu5c5Uwob09x 6XRz4vsldhWgxD7yp9MvXMi2azlfZHTKYGXIbCaq3Gn8dwOrhwQytcrn3VoZRLXo ZWV8zUonjmKRiGDSqNwQWJq9+ljk6RiiWKF1VoL839SKutd8dKC/v2+PlKGaHXVn BzLTf65Zpqfj+i5id8PONYCi67yKujkNIpg0CyRCfjZASWzQySsGTFq2VZAYpCGv b2Tu0wLTN7RYUwoU -----END CERTIFICATE-----Generated at Wed Sep 30 05:22:36 2026 by rpki-client