$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: xo5KgkCiSsFxqN0kNmOd7+WUNpRLiM/5Fn9xEsfznWA= Subject key identifier: BC:C0:1C:71:44:94:49:C6:96:80:B3:86:A3:F2:07:C3:09:73:67:E7 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 47060D0B5941D282DD33C0E96B96718436E385BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: FE Signing time: Thu 23 Jul 2026 21:10:18 +0000 Manifest this update: Thu 23 Jul 2026 21:05:18 +0000 Manifest next update: Fri 24 Jul 2026 22:51:18 +0000 Files and hashes: 1: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: 8arPsG7yhBkpOeWuMIDm+pVb5CeTGBBagomrjUWCKDY=) 3: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:06:0d:0b:59:41:d2:82:dd:33:c0:e9:6b:96:71:84:36:e3:85:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jul 23 21:05:18 2026 GMT Not After : Jul 24 22:51:18 2026 GMT Subject: CN=BCC01C71449449C69680B386A3F207C3097367E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:61:51:e6:a4:43:8e:cb:41:f8:02:1b:5a: 5f:a3:1b:2f:a6:32:e0:4c:1d:45:f8:e9:86:93:c7: cd:a3:a5:29:87:1a:56:a4:cf:f3:43:a7:27:a3:b3: 61:ba:82:e8:d3:7d:e2:a4:c8:e1:57:8a:35:17:2b: 5f:ff:a9:79:19:c8:43:ea:ae:0b:ad:e1:8a:73:ef: 62:76:ef:99:f3:0f:89:d2:6e:64:81:a6:88:82:2b: 67:42:2b:04:d4:db:b2:c7:2e:d9:25:9c:e2:19:80: f7:e0:c7:0e:b2:cf:83:f7:84:d8:36:2d:97:00:2e: 6b:2f:81:5a:03:1a:25:c7:3c:97:1b:dc:12:a2:05: 94:fe:60:e6:6f:c0:9e:1e:4e:79:be:98:38:6d:06: f1:fd:39:31:18:7a:28:20:33:00:b0:48:05:39:63: 28:1d:a8:d4:2c:31:79:68:6b:9d:e3:7d:02:31:1b: 1c:fd:8f:f5:bf:49:7d:9e:ec:f7:06:02:28:c3:71: 99:38:3c:64:af:f1:99:b7:7b:63:5d:f5:c1:af:d3: d5:68:d1:ad:9a:7b:4b:5d:49:a7:ba:dc:2b:e2:19: 61:c4:70:d2:30:8e:3e:eb:f6:c9:bc:53:7f:8c:ca: 95:3b:61:25:c4:35:81:b3:d6:d5:9d:bc:10:bf:05: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C0:1C:71:44:94:49:C6:96:80:B3:86:A3:F2:07:C3:09:73:67:E7 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:1a:b7:79:1e:02:71:df:d9:d8:34:ba:1a:6a:a8:c9:0b: e7:fd:ae:53:87:b2:07:1b:27:8c:fd:60:02:e1:9a:7e:2f:c0: 43:f4:1a:2c:34:56:72:52:9e:fb:6e:c6:b6:64:ac:3f:44:e5: eb:94:84:7b:e1:c3:2e:c7:17:36:bd:11:c3:8f:f1:d1:05:a8: da:5c:38:f6:73:98:46:47:c6:9f:b4:12:7e:a2:e3:2a:9d:30: 29:37:f2:07:05:1c:f9:dd:f7:4f:e4:63:3a:6b:4d:66:3a:31: 7b:20:15:36:de:e0:25:fc:34:22:d9:52:93:15:64:02:d3:76: 1f:ad:fe:96:de:0b:89:89:9b:72:7d:ee:b1:8f:70:af:15:f9: 34:d0:03:fa:ab:c6:57:00:8f:db:d5:54:63:54:93:55:7e:11: 2a:43:5e:b8:d2:57:47:81:b8:f0:2c:44:1c:06:2d:15:49:76: eb:b9:be:fa:50:f4:ee:e9:08:15:92:5c:80:b3:61:40:c0:cd: 2d:09:56:2a:04:f9:31:24:8f:12:3e:6d:d7:f4:38:c0:a9:9d: 40:5c:4a:d2:96:7d:53:2f:00:d2:b9:ac:b5:03:e4:a0:ce:d6: b8:f8:25:a0:e9:74:6f:00:8c:10:72:e1:30:05:69:bc:21:4b: 85:41:1c:55 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURwYNC1lB0oLdM8Dpa5ZxhDbjhbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA3MjMyMTA1MThaFw0yNjA3MjQyMjUxMThaMDMxMTAvBgNV BAMTKEJDQzAxQzcxNDQ5NDQ5QzY5NjgwQjM4NkEzRjIwN0MzMDk3MzY3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxk2FR5qRDjstB+AIbWl+jGy+m MuBMHUX46YaTx82jpSmHGlakz/NDpyejs2G6gujTfeKkyOFXijUXK1//qXkZyEPq rgut4Ypz72J275nzD4nSbmSBpoiCK2dCKwTU27LHLtklnOIZgPfgxw6yz4P3hNg2 LZcALmsvgVoDGiXHPJcb3BKiBZT+YOZvwJ4eTnm+mDhtBvH9OTEYeiggMwCwSAU5 YygdqNQsMXloa53jfQIxGxz9j/W/SX2e7PcGAijDcZk4PGSv8Zm3e2Nd9cGv09Vo 0a2ae0tdSae63CviGWHEcNIwjj7r9sm8U3+MypU7YSXENYGz1tWdvBC/BYM/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvMAccUSUScaWgLOGo/IHwwlzZ+cwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Ahq3 eR4Ccd/Z2DS6GmqoyQvn/a5Th7IHGyeM/WAC4Zp+L8BD9BosNFZyUp77bsa2ZKw/ ROXrlIR74cMuxxc2vRHDj/HRBajaXDj2c5hGR8aftBJ+ouMqnTApN/IHBRz53fdP 5GM6a01mOjF7IBU23uAl/DQi2VKTFWQC03Yfrf6W3guJiZtyfe6xj3CvFfk00AP6 q8ZXAI/b1VRjVJNVfhEqQ1640ldHgbjwLEQcBi0VSXbrub76UPTu6QgVklyAs2FA wM0tCVYqBPkxJI8SPm3X9DjAqZ1AXErSln1TLwDSuay1A+Sgzta4+CWg6XRvAIwQ cuEwBWm8IUuFQRxV -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:32 2026 by rpki-client