$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: XCEhiDWOe8zwtCo4GkY7smu/2TlfQ8WkzNYSYUheTos= Subject key identifier: 35:E0:4B:B8:4B:96:0B:A7:9D:AF:AA:AA:10:22:FB:11:E4:32:D6:F9 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 1DDBC76C25EA87BAB2B25A2AFA97061694C798FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: F8 Signing time: Thu 23 Jul 2026 05:08:59 +0000 Manifest this update: Thu 23 Jul 2026 05:03:59 +0000 Manifest next update: Fri 24 Jul 2026 06:14:59 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: +90h2mSuWZItVGI7NHwDrMRsUpYD7J1OzLgfy8pRdLI=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 06:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:db:c7:6c:25:ea:87:ba:b2:b2:5a:2a:fa:97:06:16:94:c7:98:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jul 23 05:03:59 2026 GMT Not After : Jul 24 06:14:59 2026 GMT Subject: CN=35E04BB84B960BA79DAFAAAA1022FB11E432D6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:e7:ac:42:15:40:5c:51:bf:d2:69:08:32: 4f:a6:c6:b1:85:b7:4c:b0:cb:bd:e3:c3:a1:43:7e: 73:3b:0e:34:2b:39:12:89:f0:ac:eb:26:e2:d3:e8: 23:79:80:03:b4:fc:d3:c4:19:a8:7f:4c:55:c6:21: 37:20:9d:d8:13:ce:38:51:a2:68:96:3c:39:e9:fd: 53:9f:49:ca:1a:cf:33:81:0f:63:b0:20:7c:a5:3f: c6:39:ee:27:7c:6e:68:0e:45:91:a1:16:fb:11:4d: b4:ba:d0:68:b1:ff:6c:25:fb:3e:b7:63:7c:11:69: 02:ba:ad:9d:6e:41:75:d7:7d:a4:77:27:c9:ba:04: a1:b2:17:8e:ab:30:3d:95:a0:a3:87:bd:af:0c:5e: 9c:20:cf:93:36:df:9e:ce:f4:ed:dc:cc:1f:04:ae: 98:bb:42:41:72:68:e7:47:cf:ce:38:75:64:8b:ae: ab:7a:4e:cd:01:ff:a9:7e:e4:77:81:0b:d8:d5:b9: b8:ac:04:0f:85:28:ea:d1:08:2d:80:a6:de:a6:a6: 80:92:b7:b5:9f:96:09:fe:85:93:bb:f7:83:87:9a: 2d:1a:67:c9:c1:19:53:2c:57:a9:9d:fa:30:32:18: a1:a2:46:86:36:07:7a:b3:ee:3d:4c:00:56:7c:9b: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E0:4B:B8:4B:96:0B:A7:9D:AF:AA:AA:10:22:FB:11:E4:32:D6:F9 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4f:6b:1c:ad:82:77:6b:99:ca:78:5d:bc:34:03:d8:ba:37: f9:d6:12:ab:78:f5:18:d1:b7:a2:2f:68:bf:9e:b2:89:31:2c: 4a:9a:0b:8e:34:5f:57:39:93:fb:a6:b8:a2:d2:b5:5e:72:23: d5:c4:e7:1a:cf:32:85:3d:67:74:91:48:e7:cd:35:bb:89:75: 7b:ab:50:a8:96:ac:56:eb:8a:58:90:21:c0:74:9a:7a:03:09: 16:5d:04:1f:40:3c:f5:b7:99:d1:2f:8c:56:dd:a7:c5:e6:4e: 64:29:86:17:33:b7:82:d9:e5:fa:b3:5f:57:74:66:54:b1:97: 47:ab:81:0b:ad:15:93:d9:69:41:f8:e0:15:1d:40:22:65:fe: 14:11:02:7c:5d:ae:b6:0d:8d:ff:5e:13:27:9e:67:a1:5b:6a: 0b:2a:9e:ef:2d:1c:8f:73:ed:08:28:fc:f8:34:e0:e2:5b:ba: 5d:5a:94:b1:9e:17:e6:1b:b2:2c:ce:95:39:be:d6:83:2c:6f: 59:53:d2:e2:6b:93:44:28:2f:b8:b6:03:46:ab:ae:fa:a0:48: 06:16:79:a1:32:57:83:c9:03:a3:25:a6:77:fe:69:d4:3d:fc: ae:b5:82:e6:dc:b3:e3:22:cc:38:b0:18:68:1c:17:1e:b8:37: a9:0a:c5:57 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHdvHbCXqh7qysloq+pcGFpTHmP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA3MjMwNTAzNTlaFw0yNjA3MjQwNjE0NTlaMDMxMTAvBgNV BAMTKDM1RTA0QkI4NEI5NjBCQTc5REFGQUFBQTEwMjJGQjExRTQzMkQ2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSheesQhVAXFG/0mkIMk+mxrGF t0ywy73jw6FDfnM7DjQrORKJ8KzrJuLT6CN5gAO0/NPEGah/TFXGITcgndgTzjhR omiWPDnp/VOfScoazzOBD2OwIHylP8Y57id8bmgORZGhFvsRTbS60Gix/2wl+z63 Y3wRaQK6rZ1uQXXXfaR3J8m6BKGyF46rMD2VoKOHva8MXpwgz5M2357O9O3czB8E rpi7QkFyaOdHz844dWSLrqt6Ts0B/6l+5HeBC9jVubisBA+FKOrRCC2Apt6mpoCS t7Wflgn+hZO794OHmi0aZ8nBGVMsV6md+jAyGKGiRoY2B3qz7j1MAFZ8m3p3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNeBLuEuWC6edr6qqECL7EeQy1vkwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8T2sc rYJ3a5nKeF28NAPYujf51hKrePUY0beiL2i/nrKJMSxKmguONF9XOZP7prii0rVe ciPVxOcazzKFPWd0kUjnzTW7iXV7q1ColqxW64pYkCHAdJp6AwkWXQQfQDz1t5nR L4xW3afF5k5kKYYXM7eC2eX6s19XdGZUsZdHq4ELrRWT2WlB+OAVHUAiZf4UEQJ8 Xa62DY3/XhMnnmehW2oLKp7vLRyPc+0IKPz4NODiW7pdWpSxnhfmG7IszpU5vtaD LG9ZU9Lia5NEKC+4tgNGq676oEgGFnmhMleDyQOjJaZ3/mnUPfyutYLm3LPjIsw4 sBhoHBceuDepCsVX -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:35 2026 by rpki-client