$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: ARV5m4qdKQIAKEINtCvYQUj09ETWFno0jIEqq/yGog4= Subject key identifier: 39:64:75:BB:F3:7A:3C:4A:E9:81:A5:D7:2E:DA:FB:84:E1:79:5C:D9 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 18F183EBDA6295EC88BEAF21536F0E44AA5E5D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 05CE Signing time: Thu 23 Jul 2026 08:11:13 +0000 Manifest this update: Thu 23 Jul 2026 08:06:13 +0000 Manifest next update: Fri 24 Jul 2026 11:54:13 +0000 Files and hashes: 1: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 2: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 3: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 4: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 5: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 6: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 7: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 8: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 9: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 10: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 11: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 12: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 13: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 14: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 15: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 16: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 17: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 18: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 19: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 20: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 21: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 22: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 23: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: hChjoHY8fk8oE2D91Z9X6q6wPF3FsD7GI3xQgV+eo0o=) 24: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 25: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 26: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 27: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 28: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f1:83:eb:da:62:95:ec:88:be:af:21:53:6f:0e:44:aa:5e:5d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jul 23 08:06:13 2026 GMT Not After : Jul 24 11:54:13 2026 GMT Subject: CN=396475BBF37A3C4AE981A5D72EDAFB84E1795CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:b9:d3:4c:36:2d:80:22:69:02:c6:f3:4a: 94:e8:5b:0f:e3:02:60:44:ab:0b:b1:53:a8:87:58: f5:f1:fe:bb:c1:63:84:7b:64:d3:c4:3b:dd:30:b9: 36:50:5a:78:f9:c7:a9:69:39:0f:4e:8d:0f:9e:7f: e7:ef:68:41:88:d0:d3:50:22:40:cc:bc:4d:de:10: 47:00:af:fd:c5:43:14:60:97:34:8c:6b:e3:97:2f: 83:01:2e:4d:f5:d9:51:f8:1b:b6:61:09:2d:9e:1e: 79:4d:4a:24:c2:94:e6:d8:36:92:f6:c0:d1:38:8a: 5d:1f:b8:8a:a3:3b:a1:7a:33:6f:63:aa:39:7d:0a: e2:4c:3b:d4:2d:14:2f:d7:d9:a4:40:55:7d:fa:81: 51:40:c0:ab:2d:66:63:cf:05:0d:96:32:23:83:db: 13:cb:07:ad:41:9f:94:13:8f:a7:87:d9:2f:93:7f: aa:03:52:66:45:c7:4f:bc:a1:71:87:69:6f:db:6e: 81:2e:e4:87:d9:b8:6a:c8:f5:17:3b:f5:98:f4:9a: e3:e0:69:2d:b9:b7:e3:e9:06:3a:3f:18:9c:40:35: 11:93:5a:a8:ba:2f:ae:fd:4d:30:0d:14:d7:12:1a: fd:c8:c7:12:60:8a:b8:be:77:9b:a0:00:82:ff:27: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:75:BB:F3:7A:3C:4A:E9:81:A5:D7:2E:DA:FB:84:E1:79:5C:D9 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b3:30:52:78:ea:2c:92:32:c6:f5:f0:62:6c:38:5c:0f:9d: 5e:9d:f3:01:c1:7e:41:42:d0:02:db:96:32:7f:35:b4:14:5b: e4:49:76:91:8c:76:18:a3:be:df:b8:69:7a:44:b9:16:7d:05: 13:fa:83:ba:61:36:f6:d3:38:3c:85:70:69:06:a9:09:7d:03: 3a:42:4f:45:f6:39:db:57:9c:d9:da:10:97:bf:7b:a5:b6:0b: f6:c5:88:4c:5d:1c:07:83:93:1a:3e:f5:38:bc:80:1a:e1:7b: 24:58:98:bd:69:1c:a1:cf:ce:07:46:33:89:6c:06:29:be:b7: c4:ab:76:02:09:eb:10:32:fc:42:ca:75:ab:bc:11:08:5f:df: 1e:f0:fa:67:68:68:ed:54:c1:30:a4:7b:51:05:ab:9c:3d:05: 74:05:2b:aa:5d:bb:40:dd:cb:63:cd:43:fd:02:56:6b:b0:63: 51:f2:27:05:09:b9:90:81:ae:b9:82:e4:6a:7f:63:1a:58:25: 4e:5c:3f:d6:0f:2d:90:2c:59:0a:de:82:a9:f5:6d:eb:57:1b: 32:08:93:db:d5:9a:3d:f0:fd:1d:4d:29:b8:26:5c:30:46:cd: f7:ea:9e:c2:f1:86:10:62:5e:72:ec:42:01:13:c6:80:70:40: 31:2d:df:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGPGD69pileyIvq8hU28ORKpeXZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA3MjMwODA2MTNaFw0yNjA3MjQxMTU0MTNaMDMxMTAvBgNV BAMTKDM5NjQ3NUJCRjM3QTNDNEFFOTgxQTVENzJFREFGQjg0RTE3OTVDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i7nTTDYtgCJpAsbzSpToWw/j AmBEqwuxU6iHWPXx/rvBY4R7ZNPEO90wuTZQWnj5x6lpOQ9OjQ+ef+fvaEGI0NNQ IkDMvE3eEEcAr/3FQxRglzSMa+OXL4MBLk312VH4G7ZhCS2eHnlNSiTClObYNpL2 wNE4il0fuIqjO6F6M29jqjl9CuJMO9QtFC/X2aRAVX36gVFAwKstZmPPBQ2WMiOD 2xPLB61Bn5QTj6eH2S+Tf6oDUmZFx0+8oXGHaW/bboEu5IfZuGrI9Rc79Zj0muPg aS25t+PpBjo/GJxANRGTWqi6L679TTANFNcSGv3IxxJgiri+d5ugAIL/J6azAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOWR1u/N6PErpgaXXLtr7hOF5XNkwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLMwUnjqLJIyxvXwYmw4 XA+dXp3zAcF+QULQAtuWMn81tBRb5El2kYx2GKO+37hpekS5Fn0FE/qDumE29tM4 PIVwaQapCX0DOkJPRfY521ec2doQl797pbYL9sWITF0cB4OTGj71OLyAGuF7JFiY vWkcoc/OB0YziWwGKb63xKt2AgnrEDL8Qsp1q7wRCF/fHvD6Z2ho7VTBMKR7UQWr nD0FdAUrql27QN3LY81D/QJWa7BjUfInBQm5kIGuuYLkan9jGlglTlw/1g8tkCxZ Ct6CqfVt61cbMgiT29WaPfD9HU0puCZcMEbN9+qewvGGEGJecuxCARPGgHBAMS3f fw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:16 2026 by rpki-client