$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: 2tt/1zvVctmdJJu0a9mcsbT7eOKZWdQ1VuMcPtEP4YI= Subject key identifier: AF:78:FE:AA:62:5B:BD:87:C0:C9:C5:D0:27:D3:D7:0B:C8:A2:4D:91 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 36374294BF9447731A95325A1B31CD6A1224BAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0635 Signing time: Fri 24 Jul 2026 01:45:12 +0000 Manifest this update: Fri 24 Jul 2026 01:40:12 +0000 Manifest next update: Sat 25 Jul 2026 02:11:12 +0000 Files and hashes: 1: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 2: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (hash: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=) 3: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 4: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 5: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: SsL5SpIdWXkB72ZYkx47ho3f0Yq+GiNVcEYfMKjYfk4=) 6: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 7: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 8: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 9: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 10: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 11: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 12: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 02:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:42:94:bf:94:47:73:1a:95:32:5a:1b:31:cd:6a:12:24:ba:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jul 24 01:40:12 2026 GMT Not After : Jul 25 02:11:12 2026 GMT Subject: CN=AF78FEAA625BBD87C0C9C5D027D3D70BC8A24D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:c7:2e:0a:ab:5e:2f:86:b4:21:b8:35:b9: 76:fb:b1:e4:73:51:9d:88:66:ed:dc:61:4c:3a:b2: 35:98:76:8f:2f:b2:ff:90:14:f9:c1:32:48:3d:87: 61:16:3e:34:ec:21:92:72:ae:03:00:25:d0:38:e9: 6d:22:85:12:f8:fb:b6:80:34:82:a3:7e:10:d3:7b: bc:a2:0c:6b:78:f3:5d:71:8a:81:0c:a3:6d:d7:e9: aa:fb:c6:4f:0a:87:f8:b4:66:e3:40:50:14:12:b1: cf:aa:6c:8e:93:9c:90:3e:f8:67:3c:b0:74:7c:95: 5c:66:50:da:7d:23:3d:f7:c4:62:cc:c3:ac:3d:81: 5a:10:65:d1:d1:7a:ba:1b:42:22:1b:df:fe:28:63: a5:e5:3d:2d:4c:b3:74:3c:6e:33:85:6b:0a:c9:15: ca:02:03:c5:18:46:9c:4b:52:e5:82:92:09:f0:70: ff:9a:25:ac:29:d5:ec:e3:5b:7e:ad:71:f0:0e:b2: 48:66:e9:6b:26:4d:8e:5f:12:05:ba:24:12:cc:6d: b7:6f:87:20:b7:87:5e:cf:24:18:8f:38:1a:dd:a6: e5:75:3f:b1:77:40:ec:27:8b:56:9c:f2:83:80:17: 2c:f1:86:5d:b7:6d:22:90:4d:ab:e9:fb:36:22:c2: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:FE:AA:62:5B:BD:87:C0:C9:C5:D0:27:D3:D7:0B:C8:A2:4D:91 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e1:c1:58:e9:75:32:a4:1c:ef:c0:d5:88:cd:13:00:dc:f5: 61:04:eb:1a:aa:5b:66:ec:72:40:38:35:31:44:4c:f9:d5:1d: 31:b0:65:e7:71:c5:92:f0:a9:7e:1b:b9:06:f7:ae:af:6f:a7: fd:65:12:d0:e0:07:14:95:1f:c2:c5:ea:04:e4:f3:9c:c1:3c: be:31:44:1c:ab:61:dd:ce:58:dc:54:05:dc:8d:19:1d:62:b8: 45:05:9b:93:d1:b4:e2:a9:58:80:52:45:b8:99:1f:74:28:27: f1:b8:65:ba:f1:86:fe:c7:62:fe:05:34:9e:43:8a:c9:0b:23: f4:a8:89:bf:3d:2e:07:2b:80:9e:88:00:12:d5:7c:d2:34:a0: 38:31:e8:c0:ce:7c:7c:37:74:74:a1:09:68:49:a9:ff:e4:08: e1:25:46:61:cb:1b:6b:fe:75:f2:52:6c:f5:bc:a4:de:6c:72: a7:64:40:d6:42:7a:19:47:24:9a:f6:d3:a1:93:05:80:36:8e: e8:bb:18:02:68:70:94:a6:9a:88:16:19:37:51:4d:0c:4b:8d: 1c:e2:35:b5:fa:88:0c:76:84:29:fc:8e:ff:3c:fa:27:e2:29: 71:46:33:d4:60:e2:4c:21:e4:22:bb:4b:7e:b0:d6:d7:3b:16: fb:f6:e8:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNjdClL+UR3MalTJaGzHNahIkusIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA3MjQwMTQwMTJaFw0yNjA3MjUwMjExMTJaMDMxMTAvBgNV BAMTKEFGNzhGRUFBNjI1QkJEODdDMEM5QzVEMDI3RDNENzBCQzhBMjREOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVscuCqteL4a0Ibg1uXb7seRz UZ2IZu3cYUw6sjWYdo8vsv+QFPnBMkg9h2EWPjTsIZJyrgMAJdA46W0ihRL4+7aA NIKjfhDTe7yiDGt4811xioEMo23X6ar7xk8Kh/i0ZuNAUBQSsc+qbI6TnJA++Gc8 sHR8lVxmUNp9Iz33xGLMw6w9gVoQZdHRerobQiIb3/4oY6XlPS1Ms3Q8bjOFawrJ FcoCA8UYRpxLUuWCkgnwcP+aJawp1ezjW36tcfAOskhm6WsmTY5fEgW6JBLMbbdv hyC3h17PJBiPOBrdpuV1P7F3QOwni1ac8oOAFyzxhl23bSKQTavp+zYiwjWzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUr3j+qmJbvYfAycXQJ9PXC8iiTZEwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+HBWOl1MqQc78DViM0T ANz1YQTrGqpbZuxyQDg1MURM+dUdMbBl53HFkvCpfhu5Bveur2+n/WUS0OAHFJUf wsXqBOTznME8vjFEHKth3c5Y3FQF3I0ZHWK4RQWbk9G04qlYgFJFuJkfdCgn8bhl uvGG/sdi/gU0nkOKyQsj9KiJvz0uByuAnogAEtV80jSgODHowM58fDd0dKEJaEmp /+QI4SVGYcsba/518lJs9byk3mxyp2RA1kJ6GUckmvbToZMFgDaO6LsYAmhwlKaa iBYZN1FNDEuNHOI1tfqIDHaEKfyO/zz6J+IpcUYz1GDiTCHkIrtLfrDW1zsW+/bo Ow== -----END CERTIFICATE-----Generated at Fri Jul 24 12:28:35 2026 by rpki-client