$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: QMBY4yPmvFpqmlEligTcpXl8QB0m4HNCDZ4koq7XdyA= Subject key identifier: AD:73:12:10:E5:ED:18:0B:09:C6:A4:A2:E3:5E:72:90:51:9B:E8:41 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 525C7564AC4E97517E1312384CE4D870A46D4BF8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 015A Signing time: Thu 23 Jul 2026 14:10:19 +0000 Manifest this update: Thu 23 Jul 2026 14:05:19 +0000 Manifest next update: Fri 24 Jul 2026 14:47:19 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: vSvltqfOwM5UuR330eq9aUHkq4r13cUJYe3lDRHz0+Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5c:75:64:ac:4e:97:51:7e:13:12:38:4c:e4:d8:70:a4:6d:4b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Jul 23 14:05:19 2026 GMT Not After : Jul 24 14:47:19 2026 GMT Subject: CN=AD731210E5ED180B09C6A4A2E35E7290519BE841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5d:09:37:98:87:8c:97:e0:1b:01:cb:99:dc: a2:57:13:30:84:5a:d3:1c:69:cc:2c:af:a3:57:95: bc:b0:73:a0:b8:c6:ac:f2:a6:15:88:ec:7d:ee:de: a8:94:4e:7b:a8:a0:43:d9:78:14:0b:5e:3b:70:82: 4c:94:b5:8a:93:02:89:ad:6c:6a:97:95:58:22:34: 70:f0:9a:b6:b6:d6:b9:a4:a8:dd:1e:59:c8:4b:18: a0:3d:93:ab:b8:79:32:06:19:8d:5e:97:51:05:37: 68:ef:42:82:94:39:64:7d:f7:51:ad:2d:e4:96:97: 5b:7c:70:47:2d:72:8c:de:53:27:ab:19:7f:e0:51: 27:ec:07:3d:ab:ec:05:03:36:92:c6:33:44:0d:20: 7b:fd:ab:f1:46:6c:07:77:bc:30:87:8d:ae:64:fc: cc:3c:c0:87:4d:2a:b4:c9:fd:e1:5b:17:30:5d:8b: 85:17:c5:27:9e:5c:69:c8:9c:ae:c6:d4:a2:41:ee: 63:59:3c:5f:1d:66:6c:fe:ff:8f:27:91:d1:9a:b8: c3:c8:fb:ed:bc:f3:28:b8:7d:6d:3f:d6:a6:19:b4: 71:d9:67:c7:31:5e:68:4e:e3:c1:68:62:d2:b2:77: 50:38:64:d4:d8:bf:11:17:e8:64:c5:24:22:ca:f4: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:73:12:10:E5:ED:18:0B:09:C6:A4:A2:E3:5E:72:90:51:9B:E8:41 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:00:ec:78:45:7a:c2:88:ea:a4:21:54:ac:50:cb:a2:7c:12: 8c:04:db:55:54:a2:2b:10:16:94:3f:57:f3:fd:b4:09:29:75: a8:d6:ca:ef:5e:7a:2a:ee:19:23:92:14:f4:ea:59:31:69:05: af:b5:cc:5d:83:26:0c:6b:b8:ed:10:29:ca:85:49:fe:90:60: 59:eb:aa:fc:f8:4d:6d:3b:5e:7a:03:5c:42:1f:66:5a:2b:3c: ef:3b:6c:f3:6f:3c:35:99:0d:de:e8:50:ef:21:3c:67:ee:ed: 14:d0:b9:6d:00:e0:f9:4b:7b:3c:40:bc:19:d1:3d:ae:2d:08: 1b:21:5b:ed:67:af:de:d5:a9:40:8b:e1:af:da:26:d0:62:9c: ee:a6:57:4f:20:81:46:4f:2f:d7:ae:6e:3b:14:b5:5a:5e:6a: cb:06:da:90:ad:69:f7:6a:67:dc:1c:32:6f:e4:92:29:96:8c: 90:00:54:6d:4e:04:b9:b4:2e:16:4a:b2:f0:2d:fc:3b:4f:a7: e2:98:cf:64:a1:e5:f5:da:3b:2c:37:c9:d9:20:9c:6e:35:b5: da:53:20:83:cd:9e:1e:3a:db:cb:6d:94:cb:29:fd:68:72:7e: 30:e5:fa:b4:94:d7:83:7d:2b:70:bd:82:39:c5:17:ea:15:a3: 46:3d:d9:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUlx1ZKxOl1F+ExI4TOTYcKRtS/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjA3MjMxNDA1MTlaFw0yNjA3MjQxNDQ3MTlaMDMxMTAvBgNV BAMTKEFENzMxMjEwRTVFRDE4MEIwOUM2QTRBMkUzNUU3MjkwNTE5QkU4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4XQk3mIeMl+AbAcuZ3KJXEzCE WtMcacwsr6NXlbywc6C4xqzyphWI7H3u3qiUTnuooEPZeBQLXjtwgkyUtYqTAomt bGqXlVgiNHDwmra21rmkqN0eWchLGKA9k6u4eTIGGY1el1EFN2jvQoKUOWR991Gt LeSWl1t8cEctcozeUyerGX/gUSfsBz2r7AUDNpLGM0QNIHv9q/FGbAd3vDCHja5k /Mw8wIdNKrTJ/eFbFzBdi4UXxSeeXGnInK7G1KJB7mNZPF8dZmz+/48nkdGauMPI ++288yi4fW0/1qYZtHHZZ8cxXmhO48FoYtKyd1A4ZNTYvxEX6GTFJCLK9B9nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrXMSEOXtGAsJxqSi415ykFGb6EEwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8AOx4 RXrCiOqkIVSsUMuifBKMBNtVVKIrEBaUP1fz/bQJKXWo1srvXnoq7hkjkhT06lkx aQWvtcxdgyYMa7jtECnKhUn+kGBZ66r8+E1tO156A1xCH2ZaKzzvO2zzbzw1mQ3e 6FDvITxn7u0U0LltAOD5S3s8QLwZ0T2uLQgbIVvtZ6/e1alAi+Gv2ibQYpzupldP IIFGTy/Xrm47FLVaXmrLBtqQrWn3amfcHDJv5JIployQAFRtTgS5tC4WSrLwLfw7 T6fimM9koeX12jssN8nZIJxuNbXaUyCDzZ4eOtvLbZTLKf1ocn4w5fq0lNeDfStw vYI5xRfqFaNGPdlG -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:22 2026 by rpki-client