$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: PiYVXjLvvK/CDiTZ/cshJ87nhLzjGYfgv86qZgml6NA= Subject key identifier: 7F:EE:E0:A2:34:72:A5:67:50:E9:E1:44:89:FF:BB:BC:AC:A6:4C:6F Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 2A1012F459A74132A776DF3B4D6B6C617916D4B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 0301 Signing time: Thu 23 Jul 2026 15:43:24 +0000 Manifest this update: Thu 23 Jul 2026 15:38:24 +0000 Manifest next update: Fri 24 Jul 2026 19:03:24 +0000 Files and hashes: 1: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: /EMUQBcgVvRasJA7WRyy//jTod/2ZoA/CIQSyitjsJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:10:12:f4:59:a7:41:32:a7:76:df:3b:4d:6b:6c:61:79:16:d4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Jul 23 15:38:24 2026 GMT Not After : Jul 24 19:03:24 2026 GMT Subject: CN=7FEEE0A23472A56750E9E14489FFBBBCACA64C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:2f:cf:7f:50:d5:4f:69:fb:b5:98:3f:48: 6b:59:35:b1:fa:d0:2c:5c:d0:6b:6e:1d:2d:8e:d4: dc:3e:52:87:eb:01:3e:de:e1:dc:ef:f4:97:cc:08: d9:1a:ba:57:05:e5:fb:f5:fc:c7:72:5d:06:6a:ef: 5a:63:97:b1:59:b1:f1:75:b6:fe:45:11:01:c3:96: 82:c0:6f:45:79:55:e7:83:c5:f6:63:84:64:2f:cc: 68:a8:a5:7d:69:2d:03:c0:34:34:d6:89:2e:be:7c: 31:79:26:18:6c:8a:48:d6:aa:1a:59:ba:b1:8a:18: 5c:bb:f7:fc:6c:b7:f1:90:34:c8:b9:06:86:ab:52: b1:07:63:5d:70:89:11:eb:9b:fb:c3:90:ea:d2:d9: 2b:10:0c:85:6c:4a:9f:8e:f7:9e:6d:f4:86:15:4b: 5a:99:3b:d3:12:0a:9b:70:b1:77:45:9f:48:08:28: 85:5b:67:d2:23:18:2d:a2:76:1a:4d:a2:17:53:62: 52:05:46:43:97:76:8b:40:4b:09:3c:51:ca:16:cc: 13:bf:4d:2d:83:a2:69:a6:7c:ef:33:03:d1:e1:af: b6:b6:cd:48:6e:6d:da:56:bd:13:e4:6b:6b:06:9e: 90:fa:36:a2:b6:26:2b:48:77:69:b7:07:04:b8:d3: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:E0:A2:34:72:A5:67:50:E9:E1:44:89:FF:BB:BC:AC:A6:4C:6F X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:a0:e6:22:ef:84:7e:2c:57:8e:56:1b:5e:9b:db:bf:b2: 4d:bf:16:69:ea:eb:51:73:36:06:d2:be:bd:b4:10:1a:c9:ec: e3:1c:62:44:df:05:b7:93:4d:d4:c3:76:27:5d:fc:fa:33:e1: 01:79:4f:67:9d:0b:fb:4e:08:ab:bc:4e:66:89:31:5e:5c:14: 43:3e:b7:bf:90:08:bc:7c:03:aa:ea:9a:4d:5a:89:9f:19:82: 63:f4:8a:61:cf:cb:d7:01:7f:7c:52:03:4f:e5:41:56:05:fd: ee:85:52:4a:e6:34:39:c1:69:fc:0a:ac:3a:39:64:9b:f2:ef: 6f:32:d8:cb:b6:37:ec:7a:19:f0:a0:80:f8:6d:40:e8:6a:f5: 4f:3a:a7:5b:5e:c2:83:5e:89:2c:7a:32:00:21:12:46:37:13: dd:93:9d:64:40:6b:f8:54:ee:83:ac:c2:8a:0f:87:98:05:9f: ad:d9:3a:22:32:a0:18:da:48:04:09:c6:8f:1d:81:2a:72:3f: 99:fd:9b:fd:15:ac:b6:eb:6f:0c:27:36:5b:9d:dd:17:61:fe: b8:cc:ad:06:ca:8e:9f:79:60:d7:b5:d0:45:e5:78:24:6d:16: c8:1b:d6:9a:d2:57:81:9d:75:8c:7a:05:59:51:9d:7a:1d:f2: e9:e9:2d:80 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKhAS9FmnQTKndt87TWtsYXkW1LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNjA3MjMxNTM4MjRaFw0yNjA3MjQxOTAzMjRaMDMxMTAvBgNV BAMTKDdGRUVFMEEyMzQ3MkE1Njc1MEU5RTE0NDg5RkZCQkJDQUNBNjRDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1C/Pf1DVT2n7tZg/SGtZNbH6 0Cxc0GtuHS2O1Nw+UofrAT7e4dzv9JfMCNkaulcF5fv1/MdyXQZq71pjl7FZsfF1 tv5FEQHDloLAb0V5VeeDxfZjhGQvzGiopX1pLQPANDTWiS6+fDF5JhhsikjWqhpZ urGKGFy79/xst/GQNMi5BoarUrEHY11wiRHrm/vDkOrS2SsQDIVsSp+O955t9IYV S1qZO9MSCptwsXdFn0gIKIVbZ9IjGC2idhpNohdTYlIFRkOXdotASwk8UcoWzBO/ TS2DommmfO8zA9Hhr7a2zUhubdpWvRPka2sGnpD6NqK2JitId2m3BwS4046rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf+7gojRypWdQ6eFEif+7vKymTG8wHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWbaDm Iu+EfixXjlYbXpvbv7JNvxZp6utRczYG0r69tBAayezjHGJE3wW3k03Uw3YnXfz6 M+EBeU9nnQv7TgirvE5miTFeXBRDPre/kAi8fAOq6ppNWomfGYJj9Iphz8vXAX98 UgNP5UFWBf3uhVJK5jQ5wWn8Cqw6OWSb8u9vMtjLtjfsehnwoID4bUDoavVPOqdb XsKDXoksejIAIRJGNxPdk51kQGv4VO6DrMKKD4eYBZ+t2ToiMqAY2kgECcaPHYEq cj+Z/Zv9Fay2628MJzZbnd0XYf64zK0Gyo6feWDXtdBF5XgkbRbIG9aa0leBnXWM egVZUZ16HfLp6S2A -----END CERTIFICATE-----Generated at Fri Jul 24 07:38:52 2026 by rpki-client