$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: 7lWVxuzx1hR7rElsRe84+sq5pSrgzOu5MMMklWfwpTI= Subject key identifier: D3:9F:C7:58:A9:BE:43:C8:56:51:1F:91:42:86:72:FB:D4:1A:A6:88 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 4B7790F90E2E4D69B3DE68E601EBF09BE01B5E4D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 014F Signing time: Thu 23 Jul 2026 07:04:34 +0000 Manifest this update: Thu 23 Jul 2026 06:59:34 +0000 Manifest next update: Fri 24 Jul 2026 09:23:34 +0000 Files and hashes: 1: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 2: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: O+tBdv1bqCFprYkrT0HXMuvv5wh1/RtC3hdIF+h0x6M=) 3: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:90:f9:0e:2e:4d:69:b3:de:68:e6:01:eb:f0:9b:e0:1b:5e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Jul 23 06:59:34 2026 GMT Not After : Jul 24 09:23:34 2026 GMT Subject: CN=D39FC758A9BE43C856511F91428672FBD41AA688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:67:40:f5:19:1e:6e:f2:ef:16:d7:86:73: 6d:ee:b2:43:c6:4c:aa:7b:12:bd:0d:e1:90:65:7d: 70:1f:b7:42:98:22:47:95:9d:a0:f2:8a:5b:4b:59: fc:98:c8:35:82:9a:c3:ec:d0:6b:42:ad:c9:fb:eb: eb:df:14:ba:cb:4d:9c:21:22:8e:6b:34:b4:ff:7a: 11:38:2e:f7:3c:a0:91:73:09:bb:37:d9:bf:ac:99: 2c:32:59:1d:ca:1a:b0:c2:e0:66:b6:6d:62:f7:b9: 13:95:9e:f9:72:e5:4a:6d:d4:3f:2d:ad:ec:82:be: 4f:45:a1:7e:3f:64:53:80:e4:9b:1e:92:97:6d:6e: 99:e8:87:33:4e:85:e9:c1:74:53:ee:de:0c:ec:83: 81:68:a7:b3:9b:84:f2:76:b8:75:91:d3:63:b1:23: 0a:63:cb:07:9e:07:b9:08:50:60:3e:ea:54:0a:38: 86:57:a6:8b:06:3d:6e:cf:d9:a0:f7:85:c0:65:7a: 40:de:09:b2:91:03:f6:dc:cb:93:13:af:d3:8b:7d: f1:91:86:13:40:36:79:9c:1e:d3:73:c5:30:c1:09: cb:7e:a8:28:a4:c1:c4:86:21:70:b6:aa:76:54:3a: fc:d5:ac:80:fe:cd:c0:b4:41:ba:52:42:30:8d:44: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:C7:58:A9:BE:43:C8:56:51:1F:91:42:86:72:FB:D4:1A:A6:88 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1d:25:71:f7:dc:46:bf:29:d8:4d:09:b8:7a:0e:cf:82:3d: 36:32:ed:79:b7:bd:09:15:2c:5f:35:8d:57:1b:e2:4e:1a:bf: a2:98:35:45:60:61:a6:48:3a:7a:c5:05:f6:f0:6c:f5:35:4f: 03:b6:ce:64:22:e5:f5:3b:81:eb:3c:4a:14:f7:7c:a4:a5:b5: d7:cc:04:60:4f:bc:38:81:c6:cf:18:65:93:9d:7b:c4:0d:59: 0d:eb:f6:12:f7:84:26:40:c1:31:a2:22:ae:d2:ab:0c:ef:85: 0f:1e:bf:78:81:c8:dc:0d:2b:51:ec:c4:42:19:f5:01:52:9c: eb:f5:e1:83:64:83:f3:95:92:3f:05:4b:57:80:4e:ee:6d:39: 33:66:92:25:7d:a9:62:7b:39:4c:2a:5c:b8:b5:a4:95:74:59: 54:70:c3:ff:77:66:ec:ff:b1:e5:82:79:97:56:38:45:60:e5: dd:03:c3:e2:6c:b5:5b:7d:d9:48:03:de:5e:a1:37:9f:e2:e7: f6:8a:bb:0d:43:79:8b:38:d4:2c:3a:c9:6d:c5:90:82:2a:51: bb:03:bd:57:5c:d1:b4:ac:9e:8f:ce:6e:3f:59:c6:44:0b:ff: 3f:7a:93:29:e5:1c:00:12:9b:1a:ee:27:0b:2d:08:4a:15:6c: 3e:6b:3a:f1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUS3eQ+Q4uTWmz3mjmAevwm+AbXk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA3MjMwNjU5MzRaFw0yNjA3MjQwOTIzMzRaMDMxMTAvBgNV BAMTKEQzOUZDNzU4QTlCRTQzQzg1NjUxMUY5MTQyODY3MkZCRDQxQUE2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyG2dA9RkebvLvFteGc23uskPG TKp7Er0N4ZBlfXAft0KYIkeVnaDyiltLWfyYyDWCmsPs0GtCrcn76+vfFLrLTZwh Io5rNLT/ehE4Lvc8oJFzCbs32b+smSwyWR3KGrDC4Ga2bWL3uROVnvly5Upt1D8t reyCvk9FoX4/ZFOA5JsekpdtbpnohzNOhenBdFPu3gzsg4Fop7ObhPJ2uHWR02Ox IwpjyweeB7kIUGA+6lQKOIZXposGPW7P2aD3hcBlekDeCbKRA/bcy5MTr9OLffGR hhNANnmcHtNzxTDBCct+qCikwcSGIXC2qnZUOvzVrID+zcC0QbpSQjCNRB5BAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU05/HWKm+Q8hWUR+RQoZy+9QapogwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx0lcffcRr8p2E0JuHoO z4I9NjLtebe9CRUsXzWNVxviThq/opg1RWBhpkg6esUF9vBs9TVPA7bOZCLl9TuB 6zxKFPd8pKW118wEYE+8OIHGzxhlk517xA1ZDev2EveEJkDBMaIirtKrDO+FDx6/ eIHI3A0rUezEQhn1AVKc6/Xhg2SD85WSPwVLV4BO7m05M2aSJX2pYns5TCpcuLWk lXRZVHDD/3dm7P+x5YJ5l1Y4RWDl3QPD4my1W33ZSAPeXqE3n+Ln9oq7DUN5izjU LDrJbcWQgipRuwO9V1zRtKyej85uP1nGRAv/P3qTKeUcABKbGu4nCy0IShVsPms6 8Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:47:53 2026 by rpki-client