$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: yu6yGlbTaaCYP04rccyaSsduRv2WYMWSgzzSfcW1biQ= Subject key identifier: 3C:6B:E7:8E:C4:95:D0:B0:93:E8:80:F0:CE:A8:38:66:D1:A5:1D:80 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 325BD4C1E1367107C71CEE434B3E3390543CDC38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0630 Signing time: Thu 23 Jul 2026 04:08:29 +0000 Manifest this update: Thu 23 Jul 2026 04:03:29 +0000 Manifest next update: Fri 24 Jul 2026 05:42:29 +0000 Files and hashes: 1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: uj4kgknIyK63ImwE4QDb3BZorVr/SOM+jcCJbXjS+ec=) 2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 05:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5b:d4:c1:e1:36:71:07:c7:1c:ee:43:4b:3e:33:90:54:3c:dc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jul 23 04:03:29 2026 GMT Not After : Jul 24 05:42:29 2026 GMT Subject: CN=3C6BE78EC495D0B093E880F0CEA83866D1A51D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:15:b6:b6:4b:d8:89:64:39:14:41:d1:4c: e9:b5:ad:10:12:b9:55:95:6f:03:44:45:81:33:37: 47:9e:14:6c:a2:76:51:37:89:0c:ad:73:53:c1:fa: 12:e0:58:23:df:19:97:dc:6c:55:f1:3d:8c:db:c7: f7:c0:08:86:57:ba:66:43:2d:39:43:df:2d:60:08: 5b:9a:9b:43:b8:3f:c3:2d:45:2b:9a:9b:b9:c0:0a: 13:2e:cb:b6:1c:4c:3a:e7:08:4f:b6:91:a7:81:55: 8a:81:5f:ab:43:0d:65:c9:5d:ea:e8:a1:9e:c9:b1: 98:7f:03:0c:09:98:2f:3e:0b:fd:b5:cb:9a:19:e5: 2b:ec:ab:b4:95:64:31:39:65:33:08:6d:26:1a:7a: 29:ee:10:fe:16:e2:38:9b:af:82:52:b6:f4:9b:7c: b8:10:82:21:db:ba:59:9d:bd:25:27:12:db:f0:98: 5c:d7:86:7e:3b:4e:1b:77:92:45:9a:d5:8d:66:e5: 21:4d:16:b2:82:6a:bb:f0:e0:01:eb:1b:24:52:49: d6:6a:ce:5a:02:4b:7a:de:09:f9:67:85:69:65:c9: 3c:db:89:b7:18:1f:ed:01:78:ae:a9:73:bf:35:78: 6d:26:f2:ee:5d:ad:05:55:e8:be:18:30:3b:3d:47: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:E7:8E:C4:95:D0:B0:93:E8:80:F0:CE:A8:38:66:D1:A5:1D:80 X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ce:fe:4c:7b:9a:22:7f:eb:0a:00:aa:6d:2f:d4:13:7a:27: 5b:6b:2e:84:92:08:80:98:52:ec:0d:77:cb:55:40:0f:41:bc: 74:fb:41:29:24:2d:1a:a8:82:3e:e8:3a:08:d7:07:aa:00:c5: 9b:28:fb:04:46:06:5b:c7:5b:f2:42:e7:d4:a5:68:56:32:43: c2:54:61:35:ed:0d:a7:5e:68:08:52:f0:a7:c9:6b:8b:3b:54: c3:c9:c5:e2:09:07:ee:64:ff:5f:6b:6d:bf:1f:a3:68:68:e4: 2a:25:7f:d1:15:e8:99:d0:3e:da:9c:dd:49:c1:a0:7e:2a:cd: 03:6a:2c:5a:1f:77:45:fc:02:9d:db:e1:8b:12:62:f2:99:eb: a9:c1:21:13:50:1a:15:5e:62:f0:1a:03:a5:20:68:1d:ac:97: 20:bf:48:22:8b:d4:f6:bf:59:74:e3:78:b0:67:c0:d8:67:63: 7b:3f:52:00:29:be:dc:8c:e8:78:20:99:cb:2d:1b:1d:15:ab: 6f:4e:c2:88:fc:28:67:c4:21:b1:ea:00:2e:40:d6:d7:62:06: cf:60:5e:68:ab:f1:c5:b6:e5:7e:fa:01:9e:96:fc:40:44:b9: 22:52:04:80:1d:06:e5:20:e4:3f:89:3e:b1:c2:79:90:26:ea: 5e:9e:3f:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMlvUweE2cQfHHO5DSz4zkFQ83DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA3MjMwNDAzMjlaFw0yNjA3MjQwNTQyMjlaMDMxMTAvBgNV BAMTKDNDNkJFNzhFQzQ5NUQwQjA5M0U4ODBGMENFQTgzODY2RDFBNTFEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgxW2tkvYiWQ5FEHRTOm1rRAS uVWVbwNERYEzN0eeFGyidlE3iQytc1PB+hLgWCPfGZfcbFXxPYzbx/fACIZXumZD LTlD3y1gCFuam0O4P8MtRSuam7nAChMuy7YcTDrnCE+2kaeBVYqBX6tDDWXJXero oZ7JsZh/AwwJmC8+C/21y5oZ5Svsq7SVZDE5ZTMIbSYaeinuEP4W4jibr4JStvSb fLgQgiHbulmdvSUnEtvwmFzXhn47Tht3kkWa1Y1m5SFNFrKCarvw4AHrGyRSSdZq zloCS3reCflnhWllyTzbibcYH+0BeK6pc781eG0m8u5drQVV6L4YMDs9R5DLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPGvnjsSV0LCT6IDwzqg4ZtGlHYAwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs7+THuaIn/rCgCqbS/U E3onW2suhJIIgJhS7A13y1VAD0G8dPtBKSQtGqiCPug6CNcHqgDFmyj7BEYGW8db 8kLn1KVoVjJDwlRhNe0Np15oCFLwp8lriztUw8nF4gkH7mT/X2ttvx+jaGjkKiV/ 0RXomdA+2pzdScGgfirNA2osWh93RfwCndvhixJi8pnrqcEhE1AaFV5i8BoDpSBo HayXIL9IIovU9r9ZdON4sGfA2Gdjez9SACm+3IzoeCCZyy0bHRWrb07CiPwoZ8Qh seoALkDW12IGz2BeaKvxxbblfvoBnpb8QES5IlIEgB0G5SDkP4k+scJ5kCbqXp4/ WQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:07:07 2026 by rpki-client