$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft File: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft (raw, json) Hash identifier: mVwIP1qPw35TtEQPePx8UpJo0lOVG33tF7PkbVQ9uSY= Subject key identifier: BE:72:7F:72:82:24:DD:C6:66:25:EC:6A:32:34:66:E5:B4:E4:76:C1 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 2E70A5AD76FCDEF7441D74E686CAD5A24CD16F69 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft Manifest number: BA Signing time: Fri 04 Sep 2026 09:55:36 +0000 Manifest this update: Fri 04 Sep 2026 09:50:36 +0000 Manifest next update: Sat 05 Sep 2026 11:04:36 +0000 Files and hashes: 1: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl (hash: LEUjFTnYfHD06tEskiut5rSpIdTmz8l+5FN/41x0eEI=) 2: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: eBx6CYbDRTosurIDDB+KoSblZBSgp+vUq6zMeiKzypk=) 3: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: UaT2T+A+1mEnEGFNa0ifcwWPDZ4pmnvM/DYRoddIiqQ=) 4: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: vYGonux44s3TgewlYrrqNYb7AvM/5XVRjdpid9S48+w=) 5: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: TmQ0le/l8ws1Wb4HrTMvMEVGRgkcyqYl6oMiV7FPUPY=) 6: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (hash: 3otO5HJvX1DieLEArK3FSr6sImRjrYvFs3cQXeMl2p4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 09:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:70:a5:ad:76:fc:de:f7:44:1d:74:e6:86:ca:d5:a2:4c:d1:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Sep 4 09:50:36 2026 GMT Not After : Sep 5 11:04:36 2026 GMT Subject: CN=BE727F728224DDC66625EC6A323466E5B4E476C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:00:ac:7e:58:64:73:1e:52:8d:de:10:2b: d9:17:89:67:a5:9e:64:1a:a1:ba:1d:08:c2:89:75: f3:77:f3:df:58:70:98:17:8f:86:a0:2d:6d:cd:42: 45:88:dc:9e:4f:34:13:93:ff:c1:8f:65:97:08:e1: 8c:53:34:b9:00:52:0a:3c:b4:c5:c4:97:1a:06:32: 82:f3:b2:8a:0d:ca:49:9c:e4:c3:70:17:75:a9:ec: 78:cd:dc:15:67:9b:74:62:d9:66:9e:38:ce:cb:e6: 11:c1:4c:cb:06:0e:2c:c5:76:1f:90:af:01:84:89: bb:0e:a5:36:c1:e8:5d:c9:09:1b:fd:71:da:9a:35: 64:55:1c:50:44:4a:04:cf:2d:61:fc:24:f3:ca:53: 47:ff:63:26:33:e9:07:ee:e1:95:1e:62:b0:96:e8: 72:ff:60:91:be:a9:49:2e:87:50:0a:3b:68:2e:c6: bf:01:57:a3:e1:0b:35:46:98:24:1c:fb:c8:bc:5d: f5:f4:d9:45:d6:c8:04:73:fd:79:82:20:e6:86:7a: 3d:15:5c:79:3b:77:dd:ac:8f:5c:b0:21:55:f5:2a: 03:23:26:c0:b8:82:5c:f3:7e:e3:2e:b8:07:f2:b7: 2e:90:ab:64:d5:71:ec:99:4e:69:9a:ba:b8:90:c8: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:7F:72:82:24:DD:C6:66:25:EC:6A:32:34:66:E5:B4:E4:76:C1 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:61:44:56:9d:a7:c6:5e:88:75:5f:97:a1:87:03:19:72:df: ef:51:20:da:30:2a:2c:17:a7:a9:be:ee:60:54:cb:0a:0c:f2: 6c:f1:94:18:1c:d5:d4:aa:08:01:07:83:d7:5e:aa:29:81:7b: 8d:f1:cd:23:c0:54:a1:a1:c3:c6:91:04:49:46:0f:e3:22:da: 07:9f:3f:9e:73:10:5a:61:5f:3f:6b:bf:81:0c:20:67:11:82: fb:dd:59:46:1b:b4:90:75:76:14:71:3e:1d:7d:90:0f:aa:f3: 81:24:81:d5:e8:93:ac:58:32:44:a8:b9:eb:e4:b4:1d:ad:78: fa:45:69:36:0f:aa:13:97:1e:2e:65:a2:77:47:c6:36:73:b5: 11:87:a3:2a:0a:0b:5e:b6:c1:b2:07:7f:3e:59:f4:63:1b:bb: 17:92:7f:43:37:2d:d6:1a:99:b6:77:96:28:e0:d3:09:bf:24: 52:30:33:5e:b2:3f:a0:21:5e:e3:60:b6:b6:8a:a3:d6:08:2f: c7:72:9b:23:64:9f:98:a1:4a:25:e4:9d:2e:c2:9b:89:b1:20: 81:59:06:18:fc:0b:ca:a7:e0:5b:8b:c4:46:e8:a2:e0:a8:01: b8:a2:78:37:9b:b1:43:11:50:81:aa:62:19:f5:10:74:c1:73: dd:bf:96:bc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULnClrXb83vdEHXTmhsrVokzRb2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA5MDQwOTUwMzZaFw0yNjA5MDUxMTA0MzZaMDMxMTAvBgNV BAMTKEJFNzI3RjcyODIyNEREQzY2NjI1RUM2QTMyMzQ2NkU1QjRFNDc2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kACsflhkcx5Sjd4QK9kXiWel nmQaobodCMKJdfN3899YcJgXj4agLW3NQkWI3J5PNBOT/8GPZZcI4YxTNLkAUgo8 tMXElxoGMoLzsooNykmc5MNwF3Wp7HjN3BVnm3Ri2WaeOM7L5hHBTMsGDizFdh+Q rwGEibsOpTbB6F3JCRv9cdqaNWRVHFBESgTPLWH8JPPKU0f/YyYz6Qfu4ZUeYrCW 6HL/YJG+qUkuh1AKO2guxr8BV6PhCzVGmCQc+8i8XfX02UXWyARz/XmCIOaGej0V XHk7d92sj1ywIVX1KgMjJsC4glzzfuMuuAfyty6Qq2TVceyZTmmauriQyCSXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvnJ/coIk3cZmJexqMjRm5bTkdsEwHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS81LzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUYURW nafGXoh1X5ehhwMZct/vUSDaMCosF6epvu5gVMsKDPJs8ZQYHNXUqggBB4PXXqop gXuN8c0jwFShocPGkQRJRg/jItoHnz+ecxBaYV8/a7+BDCBnEYL73VlGG7SQdXYU cT4dfZAPqvOBJIHV6JOsWDJEqLnr5LQdrXj6RWk2D6oTlx4uZaJ3R8Y2c7URh6Mq CgtetsGyB38+WfRjG7sXkn9DNy3WGpm2d5Yo4NMJvyRSMDNesj+gIV7jYLa2iqPW CC/HcpsjZJ+YoUol5J0uwpuJsSCBWQYY/AvKp+Bbi8RG6KLgqAG4ong3m7FDEVCB qmIZ9RB0wXPdv5a8 -----END CERTIFICATE-----Generated at Sat Sep 5 00:22:25 2026 by rpki-client