$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 7f9thMqk1TwVZOqXL1EjKBHT3ah79S5q3TVgcEjk23k= Subject key identifier: C3:24:D7:E8:14:11:07:E5:B6:D2:7D:19:5F:42:E4:4D:A4:64:68:2D Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 06A1D1C91D94F97A68737A84DFEB06E2EC9E9818 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 01E9 Signing time: Thu 23 Jul 2026 11:56:17 +0000 Manifest this update: Thu 23 Jul 2026 11:51:17 +0000 Manifest next update: Fri 24 Jul 2026 13:23:17 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: cYBYKxh6CnqmC8UzsHGnrlU4K7/oFiLLCfVD2ILmzEg=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a1:d1:c9:1d:94:f9:7a:68:73:7a:84:df:eb:06:e2:ec:9e:98:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Jul 23 11:51:17 2026 GMT Not After : Jul 24 13:23:17 2026 GMT Subject: CN=C324D7E8141107E5B6D27D195F42E44DA464682D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:f7:c0:2b:61:b7:11:ac:f4:52:53:8b:90: 8a:e3:84:ec:c2:db:c0:6b:28:07:29:a6:99:f2:d2: 32:d1:89:aa:a4:d4:90:4b:e2:98:01:3f:0c:7b:a9: fa:02:82:96:88:fc:d8:85:a7:84:41:7e:00:6a:f2: 44:d2:f9:fe:d2:ae:5d:b9:1a:83:ff:a5:da:a4:66: a6:dd:71:46:4d:5f:db:7c:58:eb:fb:86:0e:56:be: 87:7e:01:fe:c0:bf:69:e5:1e:fe:e6:af:90:ce:47: 19:fd:15:b1:08:37:19:8e:e6:59:c5:28:22:2d:3d: 75:73:dc:93:f3:94:ce:59:87:3b:76:11:48:d2:39: 44:5b:30:4f:b9:df:77:eb:d7:4f:84:39:f6:70:35: a5:a3:bf:15:cb:fc:61:a0:06:74:ed:44:92:8b:8b: 9e:c3:ab:1c:0b:83:1d:04:c5:43:b2:e6:af:7f:1f: 56:32:ad:c6:8f:d7:f7:f7:12:82:3a:d9:be:db:87: 7f:f7:2e:e1:12:8a:7a:c6:0f:96:0a:9d:49:8d:47: 1c:2d:ed:47:a5:23:84:94:85:7f:31:42:ce:c9:ec: 82:5e:37:1f:71:cc:88:38:c6:26:ae:b9:ee:92:3e: d8:8a:4e:be:4b:a0:68:c6:4a:bb:cc:85:2f:42:70: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:D7:E8:14:11:07:E5:B6:D2:7D:19:5F:42:E4:4D:A4:64:68:2D X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:7d:6b:37:5c:82:77:ae:f8:ae:38:7c:b6:62:a2:f0:39: 37:9a:dc:cc:11:53:46:9a:01:48:c0:7f:a1:67:08:ce:f7:08: 7d:78:1f:04:de:06:87:a2:1a:2f:4c:2d:2f:20:34:a8:9e:69: 28:c3:af:fa:a3:e2:74:de:cd:7a:8c:ab:82:5b:a9:3a:c6:6c: 63:c0:a2:e9:27:8f:0d:9a:87:4c:ad:34:3b:e0:c0:c5:18:db: 45:77:30:d8:28:f1:90:ae:a2:3a:84:20:17:14:74:77:54:aa: 81:10:3d:26:09:68:51:b0:26:f5:10:c5:2e:bf:54:39:7f:3c: b2:a0:72:f5:2e:03:07:52:04:78:ae:55:d3:30:2a:04:b3:52: 2c:f2:45:82:fd:60:50:7c:c6:52:2c:53:c7:4c:44:a1:62:4c: 7e:64:ee:74:ab:8d:2d:d5:21:19:3d:59:4f:66:4b:12:a9:d1: d2:fb:cc:8a:85:ec:a7:20:30:62:5d:b6:ed:b1:17:1e:a6:cb: 8a:de:b2:37:fd:ae:b7:25:c9:3e:c1:a6:dd:bc:4e:5b:29:59: 05:83:46:83:bb:37:94:03:e9:fe:2b:10:b9:d1:67:93:10:02: 09:99:56:c0:03:c6:b2:75:df:41:13:90:c8:53:0d:84:71:e7: 34:6d:96:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBqHRyR2U+Xpoc3qE3+sG4uyemBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA3MjMxMTUxMTdaFw0yNjA3MjQxMzIzMTdaMDMxMTAvBgNV BAMTKEMzMjREN0U4MTQxMTA3RTVCNkQyN0QxOTVGNDJFNDREQTQ2NDY4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsPfAK2G3Eaz0UlOLkIrjhOzC 28BrKAcpppny0jLRiaqk1JBL4pgBPwx7qfoCgpaI/NiFp4RBfgBq8kTS+f7Srl25 GoP/pdqkZqbdcUZNX9t8WOv7hg5Wvod+Af7Av2nlHv7mr5DORxn9FbEINxmO5lnF KCItPXVz3JPzlM5Zhzt2EUjSOURbME+533fr10+EOfZwNaWjvxXL/GGgBnTtRJKL i57DqxwLgx0ExUOy5q9/H1YyrcaP1/f3EoI62b7bh3/3LuESinrGD5YKnUmNRxwt 7UelI4SUhX8xQs7J7IJeNx9xzIg4xiauue6SPtiKTr5LoGjGSrvMhS9CcGBVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwyTX6BQRB+W20n0ZX0LkTaRkaC0wHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPQ31r N1yCd674rjh8tmKi8Dk3mtzMEVNGmgFIwH+hZwjO9wh9eB8E3gaHohovTC0vIDSo nmkow6/6o+J03s16jKuCW6k6xmxjwKLpJ48NmodMrTQ74MDFGNtFdzDYKPGQrqI6 hCAXFHR3VKqBED0mCWhRsCb1EMUuv1Q5fzyyoHL1LgMHUgR4rlXTMCoEs1Is8kWC /WBQfMZSLFPHTEShYkx+ZO50q40t1SEZPVlPZksSqdHS+8yKheynIDBiXbbtsRce psuK3rI3/a63Jck+wabdvE5bKVkFg0aDuzeUA+n+KxC50WeTEAIJmVbAA8aydd9B E5DIUw2Ecec0bZY7 -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:17 2026 by rpki-client