$ rpki-client -vvvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: OzSIB0fwq5dSGU/I15Q5kr138HFr9+AJmaAZ74qBb4M= Subject key identifier: F6:F2:D9:C1:A2:59:72:79:EC:B6:8F:32:79:85:DE:DD:7B:68:27:47 Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 2D3E578772B7966DC627A18F6ADBE701400EE2BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 054A Signing time: Thu 10 Sep 2026 00:17:38 +0000 Manifest this update: Thu 10 Sep 2026 00:12:38 +0000 Manifest next update: Fri 11 Sep 2026 03:43:38 +0000 Files and hashes: 1: 326131333a376134323a3330303a3a2f34302d3438203d3e20323134313031.roa (hash: zn8KPwlraCXKX1sUbrFXBZG6SSmSyQCO8rHA1GatBSY=) 2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=) 3: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=) 4: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: UwVQAzJrQCCg6oVMdqKex0Bm0+LQraIidYGP0FheBAU=) 5: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=) 6: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=) 7: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: pCMHWmlm59Yf5FQRj1kvt0zyb8v3ni3IkDYoXYWJcK8=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 03:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3e:57:87:72:b7:96:6d:c6:27:a1:8f:6a:db:e7:01:40:0e:e2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Sep 10 00:12:38 2026 GMT Not After : Sep 11 03:43:38 2026 GMT Subject: CN=F6F2D9C1A2597279ECB68F327985DEDD7B682747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:02:24:d4:47:f9:48:1c:ea:c1:62:4b:68: 63:2d:20:ab:1e:34:c2:58:78:5f:a1:67:67:4b:90: 34:f3:b4:4e:09:f5:99:ab:19:ff:ac:b5:bd:54:05: 5f:20:e2:9b:f0:60:2c:54:8b:66:1d:4e:ef:d7:23: 25:1a:c0:0f:18:1c:cd:1f:0a:5d:c2:cc:c7:cb:7e: 19:8d:aa:ba:be:33:5e:e5:da:59:6d:95:eb:b7:6a: e0:f1:60:53:a0:23:a2:6e:4f:5c:48:81:5f:ee:73: af:a2:55:03:04:f7:23:cc:f3:ba:b9:a5:6b:61:50: 0e:74:4a:10:c8:6d:ef:87:fb:65:83:69:a8:18:a6: 29:3f:18:ee:ac:7d:c2:32:ca:e6:45:88:4b:db:3f: a8:7b:c9:10:70:b8:02:23:7b:13:1d:9a:1f:b9:bb: e0:5d:0a:50:d8:f6:e6:74:e0:ba:6a:93:bf:33:5d: a8:71:d8:a9:7f:66:de:a0:7b:aa:68:94:7d:55:8f: 39:72:d9:1c:45:fa:30:b8:1e:69:d7:c5:96:24:4e: 15:17:f1:e6:a5:41:cb:c8:52:07:8d:73:5a:d5:60: b9:ef:40:5f:18:f1:05:6c:cc:11:fd:b5:f7:66:f8: 99:5a:78:b9:ab:68:c2:18:64:7e:a5:1f:f9:ed:77: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F2:D9:C1:A2:59:72:79:EC:B6:8F:32:79:85:DE:DD:7B:68:27:47 X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1a:12:d6:d1:11:c3:5a:6f:da:f7:70:5d:c1:09:3b:a7:18: 4a:3c:c8:a3:56:92:d5:c2:af:a0:4c:6b:df:c4:ea:f8:88:70: 9b:d7:37:5a:b6:67:8b:fd:a4:e5:9c:1f:16:69:16:d3:44:54: 03:5e:90:0a:3a:9b:23:88:24:da:e9:b3:c9:e3:b5:ac:60:8a: 91:88:4f:90:a9:2c:ef:1d:5e:9a:70:ec:91:61:0c:b8:79:6f: 65:28:ac:f8:08:c1:a7:02:e0:dc:d3:87:e6:fb:c9:62:56:04: c4:c4:d3:be:30:0b:d4:89:44:45:dc:1a:bd:36:1f:b5:90:36: 3d:fe:dc:8c:f7:28:aa:2d:9c:13:2f:fe:83:56:2b:42:b0:50: c0:72:21:08:65:7c:39:0c:76:24:07:20:4c:91:3e:13:9e:d3: ce:15:41:5e:c4:4a:12:3b:90:6e:66:82:5a:ff:ad:c7:72:1a: 63:c2:91:76:44:0f:57:2a:80:a1:51:49:a1:d3:47:c7:2e:8c: 2f:94:b9:2e:86:4a:6d:41:a0:12:80:e0:57:77:c8:c3:ee:26: f5:13:3f:62:ab:e7:95:ca:df:6f:44:38:45:ae:38:d2:c8:f1: bb:14:87:66:73:d0:dd:1a:64:1f:89:88:73:8e:34:38:22:86: 29:4f:1f:99 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIULT5Xh3K3lm3GJ6GPatvnAUAO4r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNjA5MTAwMDEyMzhaFw0yNjA5MTEwMzQzMzhaMDMxMTAvBgNV BAMTKEY2RjJEOUMxQTI1OTcyNzlFQ0I2OEYzMjc5ODVERUREN0I2ODI3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUAIk1Ef5SBzqwWJLaGMtIKse NMJYeF+hZ2dLkDTztE4J9ZmrGf+stb1UBV8g4pvwYCxUi2YdTu/XIyUawA8YHM0f Cl3CzMfLfhmNqrq+M17l2lltleu3auDxYFOgI6JuT1xIgV/uc6+iVQME9yPM87q5 pWthUA50ShDIbe+H+2WDaagYpik/GO6sfcIyyuZFiEvbP6h7yRBwuAIjexMdmh+5 u+BdClDY9uZ04Lpqk78zXahx2Kl/Zt6ge6polH1Vjzly2RxF+jC4HmnXxZYkThUX 8ealQcvIUgeNc1rVYLnvQF8Y8QVszBH9tfdm+JlaeLmraMIYZH6lH/ntd9oRAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU9vLZwaJZcnnsto8yeYXe3XtoJ0cwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPGhLW0RHDWm/a93BdwQk7pxhKPMijVpLV wq+gTGvfxOr4iHCb1zdatmeL/aTlnB8WaRbTRFQDXpAKOpsjiCTa6bPJ47WsYIqR iE+QqSzvHV6acOyRYQy4eW9lKKz4CMGnAuDc04fm+8liVgTExNO+MAvUiURF3Bq9 Nh+1kDY9/tyM9yiqLZwTL/6DVitCsFDAciEIZXw5DHYkByBMkT4TntPOFUFexEoS O5BuZoJa/63HchpjwpF2RA9XKoChUUmh00fHLowvlLkuhkptQaASgOBXd8jD7ib1 Ez9iq+eVyt9vRDhFrjjSyPG7FIdmc9DdGmQfiYhzjjQ4IoYpTx+Z -----END CERTIFICATE-----Generated at Thu Sep 10 16:56:34 2026 by rpki-client