$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: Q1gfKhqQ/GoF5sqY7jlPtHo+o81Ofx3rAE0oql1bNEI= Subject key identifier: BE:4B:73:7E:F8:AD:9D:E6:91:4E:3A:93:80:62:09:15:CE:07:7C:59 Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 0E555639FAAE23B47B78F07EF6860D6BED308170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 058A Signing time: Tue 27 Oct 2026 15:18:10 +0000 Manifest this update: Tue 27 Oct 2026 15:13:10 +0000 Manifest next update: Wed 28 Oct 2026 15:34:10 +0000 Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: MT6dgAOeILyrbf54hafjhbNuuEI5KWsvLUxMO1UBj4A=) 2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 4: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) 5: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) 6: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 7: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 15:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:55:56:39:fa:ae:23:b4:7b:78:f0:7e:f6:86:0d:6b:ed:30:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Oct 27 15:13:10 2026 GMT Not After : Oct 28 15:34:10 2026 GMT Subject: CN=BE4B737EF8AD9DE6914E3A9380620915CE077C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:c8:97:54:86:c5:89:a1:3b:19:ed:06:9a: a4:54:f3:7b:53:7b:0b:f7:43:4a:87:d0:69:1c:d4: 3b:f0:4e:ec:2d:b1:b6:84:da:00:fa:87:f9:d5:7f: dc:84:3b:f1:0c:06:dc:6c:35:39:d6:54:4c:6a:f1: d3:f2:d0:ce:d6:6b:d6:ee:82:6a:bd:cb:5e:b7:fc: 33:8e:3b:3a:c9:66:9e:73:ec:5e:bc:b2:ee:49:6e: 9c:8a:12:68:5f:80:65:93:c5:e4:0e:26:12:82:55: f9:00:44:f7:1a:3d:19:56:ac:7c:f8:47:d3:ec:ce: 90:c6:41:77:15:32:c4:4a:07:1e:80:b3:cb:1f:04: 4c:c3:95:7b:b1:86:85:6f:d2:8d:2b:f5:8a:52:4d: f0:88:cc:fd:65:86:52:03:70:d3:72:f9:87:04:dc: 22:df:05:9b:80:dd:f7:48:3a:76:d1:1c:ff:f0:3b: 15:6b:e7:43:86:b7:78:ae:f1:0f:7c:50:b6:1e:60: 69:b1:79:47:1d:c1:32:22:00:18:78:1e:83:d2:b3: 17:d8:ba:be:39:0c:76:08:00:02:97:d3:1c:e6:c1: a0:25:44:24:5a:02:94:48:03:d9:b0:9e:b0:c0:29: 68:01:3a:14:1b:00:65:7f:93:2d:5e:ff:31:6f:9b: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:73:7E:F8:AD:9D:E6:91:4E:3A:93:80:62:09:15:CE:07:7C:59 X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:af:fa:84:df:20:17:1c:4b:23:7e:26:ea:4c:58:c2:cf: 06:2b:87:13:29:68:c6:15:a8:2f:18:29:5e:8d:1e:58:46:14: dc:f3:13:27:39:70:33:42:87:0d:55:5a:4c:72:89:8c:5c:e8: 19:62:d8:d3:67:2d:61:ee:e5:be:a7:ce:16:c6:63:6d:f2:66: 02:1b:48:55:f0:88:87:8d:2f:21:1c:18:a5:21:df:e7:8e:cf: 0f:e1:6d:0b:95:c7:08:73:51:d7:34:b5:b6:c6:49:0c:29:a4: 95:8c:4e:95:20:cb:d4:50:b9:c0:31:a3:9b:b6:75:5a:bc:a9: 51:0c:07:f8:25:4f:8a:4e:86:6c:36:8a:08:6e:b1:e3:1b:d7: 04:4a:f0:fe:7b:0f:77:23:fb:62:4f:63:36:3d:36:68:ed:41: 91:05:c5:dd:d6:20:f8:ba:58:b3:d9:0e:a9:0c:82:5f:c4:30: 5d:af:fd:be:35:8d:cb:80:22:ef:4a:df:78:37:03:46:89:fa: d9:3b:90:1f:e8:3d:94:eb:d0:48:d6:36:7c:29:75:e4:15:bd: 9d:af:0c:1e:8e:61:92:3e:ea:9b:0a:a8:ae:c5:67:5a:95:43: f2:62:d7:2e:c0:24:85:d7:2a:b0:9f:d3:52:9d:7a:6c:9f:9a: 02:b3:e8:ff -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUDlVWOfquI7R7ePB+9oYNa+0wgXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjEwMjcxNTEzMTBaFw0yNjEwMjgxNTM0MTBaMDMxMTAvBgNV BAMTKEJFNEI3MzdFRjhBRDlERTY5MTRFM0E5MzgwNjIwOTE1Q0UwNzdDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiciXVIbFiaE7Ge0GmqRU83tT ewv3Q0qH0Gkc1DvwTuwtsbaE2gD6h/nVf9yEO/EMBtxsNTnWVExq8dPy0M7Wa9bu gmq9y163/DOOOzrJZp5z7F68su5JbpyKEmhfgGWTxeQOJhKCVfkARPcaPRlWrHz4 R9PszpDGQXcVMsRKBx6As8sfBEzDlXuxhoVv0o0r9YpSTfCIzP1lhlIDcNNy+YcE 3CLfBZuA3fdIOnbRHP/wOxVr50OGt3iu8Q98ULYeYGmxeUcdwTIiABh4HoPSsxfY ur45DHYIAAKX0xzmwaAlRCRaApRIA9mwnrDAKWgBOhQbAGV/ky1e/zFvm/SpAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUvktzfvitneaRTjqTgGIJFc4HfFkwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsPK/6hN8gFxxLI34m6kxYws8GK4cTKWjG FagvGClejR5YRhTc8xMnOXAzQocNVVpMcomMXOgZYtjTZy1h7uW+p84WxmNt8mYC G0hV8IiHjS8hHBilId/njs8P4W0LlccIc1HXNLW2xkkMKaSVjE6VIMvUULnAMaOb tnVavKlRDAf4JU+KToZsNooIbrHjG9cESvD+ew93I/tiT2M2PTZo7UGRBcXd1iD4 uliz2Q6pDIJfxDBdr/2+NY3LgCLvSt94NwNGifrZO5Af6D2U69BI1jZ8KXXkFb2d rwwejmGSPuqbCqiuxWdalUPyYtcuwCSF1yqwn9NSnXpsn5oCs+j/ -----END CERTIFICATE-----Generated at Wed Oct 28 09:20:47 2026 by rpki-client