$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: E1FBULpJlf22kGCbFOHvbcAE1QYVt6gdx/MUnNos4jg= Subject key identifier: EA:2C:81:28:9A:A7:83:5A:79:BD:53:D1:83:9C:8C:05:AB:F9:A0:F5 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 44C8BF7C2F1F064EDCD0D0EA8FDD34E7363B102C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 02AB Signing time: Thu 23 Jul 2026 16:28:24 +0000 Manifest this update: Thu 23 Jul 2026 16:23:24 +0000 Manifest next update: Fri 24 Jul 2026 18:01:24 +0000 Files and hashes: 1: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 2: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 3: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 4: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 5: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 6: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 7: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 8: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 9: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: FypeCPhZ6UtKaznOOVB1t5wo7QMb5Ly8yKCNAOnoelI=) 10: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) 11: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 12: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 13: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 14: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 15: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c8:bf:7c:2f:1f:06:4e:dc:d0:d0:ea:8f:dd:34:e7:36:3b:10:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Jul 23 16:23:24 2026 GMT Not After : Jul 24 18:01:24 2026 GMT Subject: CN=EA2C81289AA7835A79BD53D1839C8C05ABF9A0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:c8:50:bb:59:cb:9e:b4:83:48:89:59:2d: c7:f0:5b:62:58:db:a5:06:35:f1:6a:2c:4e:64:ea: 5b:0a:ca:30:b1:d4:37:3a:96:8d:6f:87:2c:e8:16: ab:36:68:5f:5b:81:16:ea:83:6d:20:47:5c:2f:6f: 2e:22:b8:7b:89:ff:51:9b:b5:50:cd:24:71:71:e2: 24:92:86:16:b8:4a:70:d3:ca:e0:19:65:f1:5c:62: a5:2a:98:3e:36:8e:cb:29:5a:ae:7b:58:fc:41:7e: a3:d0:4c:48:26:ad:71:c6:45:37:f3:a7:23:62:24: 38:74:16:65:dc:2f:ad:81:10:4b:0e:0e:4c:a0:64: fe:94:cb:da:3a:ac:dc:70:3f:03:80:7b:8b:79:41: c1:87:6c:e8:10:7e:41:06:49:aa:da:6f:d6:e2:a7: f2:c8:27:2b:cd:14:39:ca:6b:41:e5:fa:c3:26:64: d1:d2:e9:f0:12:0f:e5:db:fc:f0:4f:ef:ed:ea:e8: dc:5d:84:42:ec:e0:80:20:cd:37:10:f4:74:f9:20: 43:cb:f1:d1:f8:91:c3:46:bd:5c:c4:7a:95:7f:28: d7:f8:ab:85:3a:55:7a:68:7e:f8:6c:4f:a9:3f:cd: a8:ed:fd:1e:35:11:2a:64:15:5d:f3:3a:de:66:f2: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2C:81:28:9A:A7:83:5A:79:BD:53:D1:83:9C:8C:05:AB:F9:A0:F5 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b0:6c:3e:79:51:d7:2b:7a:72:2f:e0:ec:26:ea:28:d3:ae: e9:7f:a2:79:54:60:74:77:46:64:e2:96:ce:7d:ad:d6:81:09: 95:06:51:46:74:28:b2:9a:20:b5:c3:cf:14:ed:69:60:bc:09: 58:47:56:82:1f:c8:01:de:72:53:5e:fc:dd:0b:c2:7f:87:f7: 90:06:91:d9:b0:ce:6c:3a:e7:14:4c:4b:2e:15:cb:d9:87:98: ca:61:c6:1d:1b:20:d9:33:c2:ec:51:f8:a6:f4:9d:62:10:96: 71:7f:26:5e:5e:0a:10:b5:fa:61:6a:d1:02:53:4d:dd:64:ac: a8:45:38:a9:2c:92:84:79:60:bc:b7:d0:e8:34:ae:ae:a4:a8: d3:1a:31:fc:c8:63:b0:40:51:3b:21:61:a4:32:2f:a3:5c:f6: 38:47:30:3a:e5:74:86:95:d2:6b:3d:df:cb:3a:83:fc:94:82: 92:e6:d9:14:89:ae:09:2d:09:90:cc:f2:8d:14:ac:e0:e5:92: 76:fd:be:60:d8:2d:eb:f1:6b:1f:a5:eb:54:f2:fa:db:cb:53: 17:fe:46:69:67:37:ab:06:23:c4:69:ca:6a:3b:d4:3b:40:59: 25:2b:24:dd:b1:1b:35:0f:72:59:4f:a9:52:7a:34:fb:e8:3e: e0:39:d3:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURMi/fC8fBk7c0NDqj9005zY7ECwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA3MjMxNjIzMjRaFw0yNjA3MjQxODAxMjRaMDMxMTAvBgNV BAMTKEVBMkM4MTI4OUFBNzgzNUE3OUJENTNEMTgzOUM4QzA1QUJGOUEwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuchQu1nLnrSDSIlZLcfwW2JY 26UGNfFqLE5k6lsKyjCx1Dc6lo1vhyzoFqs2aF9bgRbqg20gR1wvby4iuHuJ/1Gb tVDNJHFx4iSShha4SnDTyuAZZfFcYqUqmD42jsspWq57WPxBfqPQTEgmrXHGRTfz pyNiJDh0FmXcL62BEEsODkygZP6Uy9o6rNxwPwOAe4t5QcGHbOgQfkEGSarab9bi p/LIJyvNFDnKa0Hl+sMmZNHS6fASD+Xb/PBP7+3q6NxdhELs4IAgzTcQ9HT5IEPL 8dH4kcNGvVzEepV/KNf4q4U6VXpofvhsT6k/zajt/R41ESpkFV3zOt5m8sRRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6iyBKJqng1p5vVPRg5yMBav5oPUwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELBsPnlR1yt6ci/g7Cbq KNOu6X+ieVRgdHdGZOKWzn2t1oEJlQZRRnQospogtcPPFO1pYLwJWEdWgh/IAd5y U1783QvCf4f3kAaR2bDObDrnFExLLhXL2YeYymHGHRsg2TPC7FH4pvSdYhCWcX8m Xl4KELX6YWrRAlNN3WSsqEU4qSyShHlgvLfQ6DSurqSo0xox/MhjsEBROyFhpDIv o1z2OEcwOuV0hpXSaz3fyzqD/JSCkubZFImuCS0JkMzyjRSs4OWSdv2+YNgt6/Fr H6XrVPL628tTF/5GaWc3qwYjxGnKajvUO0BZJSsk3bEbNQ9yWU+pUno0++g+4DnT 3w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:56 2026 by rpki-client