$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: THfVC3wlTYZWbRqP2oQ0AFNqOaRQ8QpXmZU1PZq/5og= Subject key identifier: 18:1D:38:D3:5B:89:7D:44:19:00:9D:29:4B:87:D8:8D:5B:A6:1C:53 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 3E31B7126BC7C33158EE6BFB6DA27D5E1D7A99B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 0104 Signing time: Wed 09 Sep 2026 22:37:47 +0000 Manifest this update: Wed 09 Sep 2026 22:32:47 +0000 Manifest next update: Thu 10 Sep 2026 23:57:47 +0000 Files and hashes: 1: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 2: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 3: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: 1AAIfDLxM/76hhjagxnng9jb8jEKEtke4J0pE/o/igM=) 4: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 5: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 6: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 7: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) 8: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 9: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:31:b7:12:6b:c7:c3:31:58:ee:6b:fb:6d:a2:7d:5e:1d:7a:99:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Sep 9 22:32:47 2026 GMT Not After : Sep 10 23:57:47 2026 GMT Subject: CN=181D38D35B897D4419009D294B87D88D5BA61C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:67:cd:c1:bc:a0:1e:2e:a0:12:43:42:62: fb:49:a5:e3:ef:94:13:b0:d0:80:7e:45:8e:9a:3e: 2e:fe:b8:44:77:5c:3f:8d:df:2c:a6:22:8b:1c:61: 8e:d3:73:62:91:34:2a:49:31:96:71:74:81:58:a7: c2:5b:0f:f9:84:ab:ff:89:6b:1d:50:8a:ae:98:08: 17:b4:aa:0d:30:7c:bc:15:4b:b6:3c:34:15:a4:f9: b5:9a:5a:35:da:3b:3b:02:69:6c:04:20:6e:21:fe: fc:5d:e6:0c:4b:cd:75:d7:10:d2:5c:1d:6b:3f:3d: 34:d9:e7:28:7d:52:cc:04:5b:28:81:e1:9d:8d:dd: bb:59:10:cf:03:44:c8:48:0a:f1:22:67:23:45:4d: 07:fd:d0:c6:ea:c9:fd:e3:ad:67:8d:d0:21:22:ce: eb:2f:ea:4d:a5:4a:b4:99:0c:0c:61:c1:08:3b:c5: df:22:9a:1e:8a:48:7a:ec:15:9f:17:c9:81:40:ef: 66:82:7c:7c:b7:16:f8:cc:15:37:8a:8c:32:85:c0: 67:bd:4b:6c:d9:80:73:23:1a:b4:be:9f:49:61:2b: 30:70:5f:3b:ff:11:d5:4f:a7:f6:fd:35:0b:2b:38: ac:24:a2:68:01:45:f8:da:f0:f9:2d:a1:e5:b1:39: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:38:D3:5B:89:7D:44:19:00:9D:29:4B:87:D8:8D:5B:A6:1C:53 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:5d:95:bf:ef:e6:7b:ee:5a:dd:8e:2b:99:16:02:f2:de: 85:ba:61:bd:24:de:18:80:12:36:3a:34:37:36:a4:69:1d:eb: 13:9b:f4:f7:bd:eb:75:fb:13:8b:21:56:91:d0:e7:52:55:4d: 4f:12:1e:a0:3a:9d:12:62:dd:08:79:33:0b:5f:0a:7c:66:fd: 88:06:16:c2:d3:68:e5:46:53:fa:e1:8f:bb:d4:32:cb:96:fc: 14:a7:22:dd:a0:b7:d9:25:aa:20:d4:54:5e:0d:b8:e8:fa:3f: 6e:25:40:15:00:62:e4:2c:19:18:5e:a0:68:63:20:d9:cd:ae: 2d:ab:a7:f9:02:64:f2:1e:af:84:02:eb:8e:8e:05:f3:4b:0c: 98:b4:9d:93:32:2f:be:99:c1:97:1b:3a:7c:e8:25:d8:77:da: 08:65:75:63:3d:d4:99:65:f3:74:49:ca:7b:39:fb:48:e7:08: fd:55:59:59:31:78:ac:c6:af:30:50:50:02:33:25:4d:cc:ed: 7c:19:dd:a3:53:53:f9:e5:65:0d:f2:74:92:6a:18:fc:eb:3e: 78:0a:a5:b3:0c:5d:72:6d:4f:cb:21:77:78:5b:d6:fd:9a:cb: 9f:6f:7c:1b:a6:1c:81:a3:ca:b7:f5:e3:c4:6a:45:8d:fd:e9: 62:b1:74:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPjG3EmvHwzFY7mv7baJ9Xh16mbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA5MDkyMjMyNDdaFw0yNjA5MTAyMzU3NDdaMDMxMTAvBgNV BAMTKDE4MUQzOEQzNUI4OTdENDQxOTAwOUQyOTRCODdEODhENUJBNjFDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGu2fNwbygHi6gEkNCYvtJpePv lBOw0IB+RY6aPi7+uER3XD+N3yymIoscYY7Tc2KRNCpJMZZxdIFYp8JbD/mEq/+J ax1Qiq6YCBe0qg0wfLwVS7Y8NBWk+bWaWjXaOzsCaWwEIG4h/vxd5gxLzXXXENJc HWs/PTTZ5yh9UswEWyiB4Z2N3btZEM8DRMhICvEiZyNFTQf90Mbqyf3jrWeN0CEi zusv6k2lSrSZDAxhwQg7xd8imh6KSHrsFZ8XyYFA72aCfHy3FvjMFTeKjDKFwGe9 S2zZgHMjGrS+n0lhKzBwXzv/EdVPp/b9NQsrOKwkomgBRfja8PktoeWxOfeBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGB0401uJfUQZAJ0pS4fYjVumHFMwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo8V2V v+/me+5a3Y4rmRYC8t6FumG9JN4YgBI2OjQ3NqRpHesTm/T3vet1+xOLIVaR0OdS VU1PEh6gOp0SYt0IeTMLXwp8Zv2IBhbC02jlRlP64Y+71DLLlvwUpyLdoLfZJaog 1FReDbjo+j9uJUAVAGLkLBkYXqBoYyDZza4tq6f5AmTyHq+EAuuOjgXzSwyYtJ2T Mi++mcGXGzp86CXYd9oIZXVjPdSZZfN0Scp7OftI5wj9VVlZMXisxq8wUFACMyVN zO18Gd2jU1P55WUN8nSSahj86z54CqWzDF1ybU/LIXd4W9b9msufb3wbphyBo8q3 9ePEakWN/elisXSw -----END CERTIFICATE-----Generated at Thu Sep 10 13:30:35 2026 by rpki-client