$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: Wjo1EYdc7K5Lm7SSa2U+1j3JGucAap5wBtyqwWKzD+o= Subject key identifier: 72:EC:83:8E:4B:9C:CE:19:0F:27:4B:31:5C:67:6B:BA:66:A4:A4:95 Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 7732C259010E245613B03499A2AD9AF5E028C4F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: 7F Signing time: Thu 23 Jul 2026 17:34:39 +0000 Manifest this update: Thu 23 Jul 2026 17:29:39 +0000 Manifest next update: Fri 24 Jul 2026 19:34:39 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: OjGz06l+2mQUNAJpUTI0lwbWQpE+pWrKhWnYd4hUEMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:32:c2:59:01:0e:24:56:13:b0:34:99:a2:ad:9a:f5:e0:28:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Jul 23 17:29:39 2026 GMT Not After : Jul 24 19:34:39 2026 GMT Subject: CN=72EC838E4B9CCE190F274B315C676BBA66A4A495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:e3:31:13:84:3c:83:ad:83:cd:72:8a:b9: 38:3e:5b:88:a4:70:f7:ff:d7:9d:66:6b:5c:5a:c9: e0:09:1d:b2:7e:c9:8e:e8:a2:48:e5:47:d2:c4:5a: 9a:b0:39:6d:8d:9a:8e:75:2d:3f:f8:44:d9:96:48: 22:81:2e:b6:56:01:1d:6d:d0:9d:65:30:a9:fe:7a: bf:88:b7:20:aa:61:44:13:dc:c4:96:97:01:6b:2a: 31:00:b0:c8:a1:80:ba:b9:77:b4:ae:29:04:2e:b8: 96:2c:00:e5:df:03:6c:e3:09:4c:e9:26:70:0c:b7: 18:6f:03:10:12:77:45:6a:45:9a:1f:f8:da:27:82: 3a:2d:ae:4b:e1:a3:4e:4b:6e:49:67:6d:d4:c0:f3: da:3d:9d:8f:0c:e4:c2:93:a7:63:f0:62:6f:a1:47: 21:5a:f1:7c:3d:39:21:78:69:30:50:75:6b:67:38: 42:1b:47:75:87:74:d3:09:23:c0:18:52:06:2a:a7: 2a:b4:28:f0:4d:e6:54:2f:6e:9d:f3:97:81:65:26: d6:bb:16:5f:06:4f:1b:b8:69:6d:40:47:dd:d7:a4: 25:0b:8a:50:5a:4d:a8:2c:93:62:4f:65:6a:35:ed: 61:d5:b7:02:e2:2e:d4:94:fe:4b:f1:15:29:37:18: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EC:83:8E:4B:9C:CE:19:0F:27:4B:31:5C:67:6B:BA:66:A4:A4:95 X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:21:93:5c:52:e9:bf:09:a5:96:ae:d9:06:50:2d:8c:a3: 19:c8:c5:78:0a:71:9d:2f:f8:10:3a:35:19:53:e0:ab:4e:c6: e8:f1:f0:dd:ee:1c:5f:02:0a:67:94:cd:4a:58:64:58:cb:0e: 43:92:5b:59:b1:5c:da:d6:29:ad:c2:62:2b:e5:15:9f:05:e0: 7d:c6:c4:ed:e3:41:99:cf:6c:37:08:cb:4b:34:3a:99:ae:0d: 99:b2:ae:f8:ea:eb:69:10:3b:1c:41:f1:37:dc:65:95:ee:34: 61:52:eb:d4:b7:66:ca:d9:f5:9c:d0:c5:c5:d5:be:3d:6e:17: d5:e9:55:bf:33:87:f6:9e:fb:5d:6d:de:c5:24:64:4b:7e:f1: 2e:df:50:39:d4:41:b2:90:67:57:76:90:f9:0a:86:bb:98:3a: 74:5d:ae:75:e0:68:f1:d3:80:18:78:ee:82:e0:bc:27:9f:b8: 0d:ad:9b:39:d5:20:af:cf:03:13:8c:f1:80:08:a5:1a:1d:b5: 16:67:e6:59:c3:eb:3b:db:e0:02:4c:b2:e7:a2:01:7b:98:c8: bb:42:24:3e:69:0d:ce:1e:e5:81:24:01:8b:bb:82:9c:17:21: 05:15:c4:9d:60:7a:04:c7:3a:e3:26:da:b9:7a:e6:92:4c:6e: 6d:d6:61:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdzLCWQEOJFYTsDSZoq2a9eAoxPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA3MjMxNzI5MzlaFw0yNjA3MjQxOTM0MzlaMDMxMTAvBgNV BAMTKDcyRUM4MzhFNEI5Q0NFMTkwRjI3NEIzMTVDNjc2QkJBNjZBNEE0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZuMxE4Q8g62DzXKKuTg+W4ik cPf/151ma1xayeAJHbJ+yY7ookjlR9LEWpqwOW2Nmo51LT/4RNmWSCKBLrZWAR1t 0J1lMKn+er+ItyCqYUQT3MSWlwFrKjEAsMihgLq5d7SuKQQuuJYsAOXfA2zjCUzp JnAMtxhvAxASd0VqRZof+Nongjotrkvho05LbklnbdTA89o9nY8M5MKTp2PwYm+h RyFa8Xw9OSF4aTBQdWtnOEIbR3WHdNMJI8AYUgYqpyq0KPBN5lQvbp3zl4FlJta7 Fl8GTxu4aW1AR93XpCULilBaTagsk2JPZWo17WHVtwLiLtSU/kvxFSk3GKhZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcuyDjkuczhkPJ0sxXGdrumakpJUwHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnuCGT XFLpvwmllq7ZBlAtjKMZyMV4CnGdL/gQOjUZU+CrTsbo8fDd7hxfAgpnlM1KWGRY yw5DkltZsVza1imtwmIr5RWfBeB9xsTt40GZz2w3CMtLNDqZrg2Zsq746utpEDsc QfE33GWV7jRhUuvUt2bK2fWc0MXF1b49bhfV6VW/M4f2nvtdbd7FJGRLfvEu31A5 1EGykGdXdpD5Coa7mDp0Xa514Gjx04AYeO6C4Lwnn7gNrZs51SCvzwMTjPGACKUa HbUWZ+ZZw+s72+ACTLLnogF7mMi7QiQ+aQ3OHuWBJAGLu4KcFyEFFcSdYHoExzrj Jtq5euaSTG5t1mHN -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:25 2026 by rpki-client