$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: yJ1PNleswcxp8tdmI6WUkJfKT/W02Bj2xzoUQgJ6P+I= Subject key identifier: 89:B4:A1:DE:4A:E3:EF:3D:78:F6:2B:97:0C:11:9B:BF:94:5E:EF:49 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 0F73B3EB2036075AD72C7406690CD70897035803 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 0290 Signing time: Thu 23 Jul 2026 23:04:39 +0000 Manifest this update: Thu 23 Jul 2026 22:59:39 +0000 Manifest next update: Sat 25 Jul 2026 01:55:39 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: AKAYvqygh9MyVBFSm8h1QcYrk5lQVQNxLA5TlCg36k0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:b3:eb:20:36:07:5a:d7:2c:74:06:69:0c:d7:08:97:03:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Jul 23 22:59:39 2026 GMT Not After : Jul 25 01:55:39 2026 GMT Subject: CN=89B4A1DE4AE3EF3D78F62B970C119BBF945EEF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:a3:09:68:d0:18:96:ca:29:6d:00:65:bf: 76:ba:9c:52:66:ad:f5:9e:44:21:05:7a:9f:a8:e5: c1:83:74:cf:07:2c:a6:96:2b:16:f3:e5:b4:bb:95: fb:4a:01:03:4e:4e:64:a5:84:ea:18:a1:43:b9:55: 17:5d:07:b0:ef:7b:66:51:70:12:ef:81:ce:e6:12: 39:55:6a:62:7c:9e:be:85:98:16:43:f4:af:ce:0d: 93:6b:f0:2d:a9:03:4d:49:8b:d0:8f:8f:6e:a2:a7: cb:9a:f8:d2:c0:5d:0e:0a:41:6e:7e:76:ac:dc:20: 71:87:6b:67:95:44:ee:e0:33:aa:9f:aa:1d:3e:2e: c3:f2:18:0e:48:55:26:41:94:51:45:16:38:5b:ce: c9:00:1b:2e:e3:6a:1a:f5:65:39:06:0b:8a:23:69: c2:ca:25:7b:83:e7:db:df:0a:12:9c:5a:a4:14:42: 9d:20:ab:4f:f2:8a:69:03:ab:43:fb:e0:68:0d:96: 5d:89:3d:81:0a:5f:27:98:d6:39:b3:92:89:b9:d8: 44:a6:2f:a5:aa:f7:6b:a6:7e:a8:f5:06:53:01:e7: 30:58:86:99:41:e1:e1:28:d7:d7:c9:5b:d8:bb:e9: 9d:0b:24:9e:c1:f8:0e:8f:dc:f8:97:76:e4:ce:53: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:A1:DE:4A:E3:EF:3D:78:F6:2B:97:0C:11:9B:BF:94:5E:EF:49 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8a:f5:a8:14:42:68:ea:6e:42:4d:5a:e5:d8:ac:45:37:03: 1f:c0:5b:fa:3f:62:99:41:95:2c:41:11:63:b6:54:23:12:08: b2:a8:bc:89:5b:52:20:1c:72:0e:e1:99:f5:2b:b7:fa:81:8f: c6:b1:99:0d:58:86:66:e6:d2:30:2c:8c:99:cb:72:4b:16:56: 68:df:a3:49:18:15:79:65:3a:3b:bd:a4:b4:ef:89:8e:4f:25: a0:94:ff:bd:a0:f9:c3:a3:5c:1c:32:4f:a7:10:25:a2:67:bd: ae:e6:9a:d6:85:8f:d8:8f:a8:8b:0d:b8:69:4c:25:c4:5f:5d: 4a:cf:c0:c7:cb:b9:e6:e9:65:46:6d:04:12:b9:55:28:5b:4e: 38:6b:8f:99:1f:e4:4b:64:05:02:9f:b0:31:fe:f4:6b:09:c0: a2:2e:af:54:3e:64:e9:47:3e:68:5f:95:ba:b5:9d:37:f1:29: c5:98:e6:42:d0:e2:e8:2a:ea:79:67:f1:cd:d7:be:7a:c3:79: 09:6b:11:ef:cb:5f:f9:16:74:67:97:d4:bc:21:82:03:a9:1a: 7b:03:30:5e:8f:95:8b:0b:d4:33:7f:7a:35:c7:87:3a:e2:76: 60:66:c6:d4:f8:2e:a4:d6:af:b4:3f:e3:dc:88:8d:12:81:27: 46:54:fb:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD3Oz6yA2B1rXLHQGaQzXCJcDWAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjA3MjMyMjU5MzlaFw0yNjA3MjUwMTU1MzlaMDMxMTAvBgNV BAMTKDg5QjRBMURFNEFFM0VGM0Q3OEY2MkI5NzBDMTE5QkJGOTQ1RUVGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5qMJaNAYlsopbQBlv3a6nFJm rfWeRCEFep+o5cGDdM8HLKaWKxbz5bS7lftKAQNOTmSlhOoYoUO5VRddB7Dve2ZR cBLvgc7mEjlVamJ8nr6FmBZD9K/ODZNr8C2pA01Ji9CPj26ip8ua+NLAXQ4KQW5+ dqzcIHGHa2eVRO7gM6qfqh0+LsPyGA5IVSZBlFFFFjhbzskAGy7jahr1ZTkGC4oj acLKJXuD59vfChKcWqQUQp0gq0/yimkDq0P74GgNll2JPYEKXyeY1jmzkom52ESm L6Wq92umfqj1BlMB5zBYhplB4eEo19fJW9i76Z0LJJ7B+A6P3PiXduTOU55jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUibSh3krj7z149iuXDBGbv5Re70kwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtivWo FEJo6m5CTVrl2KxFNwMfwFv6P2KZQZUsQRFjtlQjEgiyqLyJW1IgHHIO4Zn1K7f6 gY/GsZkNWIZm5tIwLIyZy3JLFlZo36NJGBV5ZTo7vaS074mOTyWglP+9oPnDo1wc Mk+nECWiZ72u5prWhY/Yj6iLDbhpTCXEX11Kz8DHy7nm6WVGbQQSuVUoW044a4+Z H+RLZAUCn7Ax/vRrCcCiLq9UPmTpRz5oX5W6tZ038SnFmOZC0OLoKup5Z/HN1756 w3kJaxHvy1/5FnRnl9S8IYIDqRp7AzBej5WLC9Qzf3o1x4c64nZgZsbU+C6k1q+0 P+PciI0SgSdGVPsL -----END CERTIFICATE-----Generated at Fri Jul 24 09:00:44 2026 by rpki-client