$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: yATXuJgV6fCm7B/UhAuVdmSHfZE63FoMou8LJyKLXpQ= Subject key identifier: 96:69:C7:B7:31:87:43:96:5C:4A:05:18:17:00:38:03:9B:CC:D9:76 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 0B8378CC5130DCD64357D96683B5E94E83327F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 0259 Signing time: Thu 23 Jul 2026 05:48:06 +0000 Manifest this update: Thu 23 Jul 2026 05:43:06 +0000 Manifest next update: Fri 24 Jul 2026 09:40:06 +0000 Files and hashes: 1: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: kBwEK18YCfMx0ouzbMGql3wfMadnMbnDgpYbNfw03+g=) 2: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: aQqyppfq1G0dtgfce5qUTiEgqU4ipo9uY/suA4axV58=) 3: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: vcE25uXzjgA0lcPSP5QaJlKOlI0tCm/7Go4ZMFkMCNU=) 4: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) 5: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:83:78:cc:51:30:dc:d6:43:57:d9:66:83:b5:e9:4e:83:32:7f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Jul 23 05:43:06 2026 GMT Not After : Jul 24 09:40:06 2026 GMT Subject: CN=9669C7B7318743965C4A0518170038039BCCD976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:be:4e:2b:a0:5b:a1:da:0c:f3:5f:2a:f9: 2a:bc:af:05:6e:6a:77:4a:ba:67:51:7f:4c:0b:33: fa:dc:83:17:a9:28:8a:60:ba:6d:84:ab:5e:07:a7: 1c:11:a1:ce:67:d6:b0:98:a4:d7:81:c2:38:44:f6: 56:76:35:08:87:c0:71:d7:86:40:e1:a2:e6:1d:38: 54:09:d5:cc:07:c7:89:9f:e0:59:c1:bd:ae:c1:b9: 84:12:45:b4:f3:08:e5:a3:a9:a2:4e:63:03:2c:83: 87:77:36:80:17:7b:5f:08:0c:46:5f:68:fd:71:1e: fa:6d:1a:aa:68:9e:24:17:79:6b:bd:74:0d:bc:a3: 2f:c4:2b:b1:7e:36:49:b9:f2:b5:0f:ed:a1:3f:a8: a9:c0:a5:8b:5a:89:83:af:e9:82:35:2a:ac:60:99: 92:4b:10:b6:ff:5f:a9:58:c0:c5:3d:16:9a:13:8e: 7c:db:b2:8f:93:a1:f9:e5:5f:40:2c:55:23:ac:4b: 08:89:a3:bd:5d:83:b4:ef:12:d3:c7:00:3b:8f:ac: 6c:1e:97:ab:99:fa:96:da:51:e6:8b:9d:2c:d6:a0: 2d:00:6c:cd:40:42:91:82:12:61:25:93:ad:2f:a0: e3:39:2a:7f:da:1f:81:60:8c:a0:36:77:82:e4:54: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:69:C7:B7:31:87:43:96:5C:4A:05:18:17:00:38:03:9B:CC:D9:76 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:37:f9:e3:f3:10:00:f0:6d:44:e6:24:49:df:e6:7f:a3:ca: e9:4d:d3:4c:20:01:3e:06:de:32:2a:7c:48:d9:05:1b:b0:6c: 96:23:b9:c3:67:ef:4f:b4:fb:f2:cd:84:01:d5:eb:62:d6:9e: b5:19:b9:11:18:57:a4:8a:43:29:97:79:93:2c:90:f2:30:3c: d4:55:bf:6d:63:fb:4b:1b:9b:5d:9b:45:bf:f9:65:12:71:66: 0b:96:55:b2:0a:84:9f:ed:c8:89:53:0a:02:e4:f8:6e:c6:4e: 7e:ff:45:76:c3:c5:1a:65:02:2b:67:d3:db:8c:50:4d:a2:b7: d6:43:aa:d3:2a:13:91:32:78:23:b6:c6:24:4c:12:d0:03:2f: 55:ca:4e:3c:df:ac:e5:56:e3:70:43:1c:68:65:fc:4a:10:3a: f6:76:03:96:b6:8b:56:89:af:d4:a2:fe:71:d9:90:69:c0:be: c0:ee:2c:67:66:4e:62:b7:11:7c:83:0f:4f:ea:d2:a4:6f:34: 59:81:69:82:cf:51:9f:d9:1d:b8:d2:31:fa:f1:3a:8d:b3:8a: 5c:93:f8:2b:6d:54:7f:b9:5d:31:02:91:1b:ac:29:5d:ea:f2: 13:62:80:ea:eb:68:73:f0:a7:f1:a3:e7:22:2c:74:a0:75:16: f3:4f:89:d8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC4N4zFEw3NZDV9lmg7XpToMyfyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjA3MjMwNTQzMDZaFw0yNjA3MjQwOTQwMDZaMDMxMTAvBgNV BAMTKDk2NjlDN0I3MzE4NzQzOTY1QzRBMDUxODE3MDAzODAzOUJDQ0Q5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3r5OK6BbodoM818q+Sq8rwVu andKumdRf0wLM/rcgxepKIpgum2Eq14HpxwRoc5n1rCYpNeBwjhE9lZ2NQiHwHHX hkDhouYdOFQJ1cwHx4mf4FnBva7BuYQSRbTzCOWjqaJOYwMsg4d3NoAXe18IDEZf aP1xHvptGqponiQXeWu9dA28oy/EK7F+Nkm58rUP7aE/qKnApYtaiYOv6YI1Kqxg mZJLELb/X6lYwMU9FpoTjnzbso+TofnlX0AsVSOsSwiJo71dg7TvEtPHADuPrGwe l6uZ+pbaUeaLnSzWoC0AbM1AQpGCEmElk60voOM5Kn/aH4FgjKA2d4LkVObXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlmnHtzGHQ5ZcSgUYFwA4A5vM2XYwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTf54/MQAPBtROYkSd/m f6PK6U3TTCABPgbeMip8SNkFG7BsliO5w2fvT7T78s2EAdXrYtaetRm5ERhXpIpD KZd5kyyQ8jA81FW/bWP7SxubXZtFv/llEnFmC5ZVsgqEn+3IiVMKAuT4bsZOfv9F dsPFGmUCK2fT24xQTaK31kOq0yoTkTJ4I7bGJEwS0AMvVcpOPN+s5VbjcEMcaGX8 ShA69nYDlraLVomv1KL+cdmQacC+wO4sZ2ZOYrcRfIMPT+rSpG80WYFpgs9Rn9kd uNIx+vE6jbOKXJP4K21Uf7ldMQKRG6wpXeryE2KA6utoc/Cn8aPnIix0oHUW80+J 2A== -----END CERTIFICATE-----Generated at Thu Jul 23 20:13:38 2026 by rpki-client