$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: MF+3QNWgOa+AiNiKJE2O0IYJ+XTPBL3nY7F0VE1hZgg= Subject key identifier: 8A:8E:85:F6:12:D2:13:64:42:91:CD:AC:70:7F:74:0D:A6:47:EA:85 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 10B7625BA2387BED185ABEA7A8CD40ABF0B036ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0617 Signing time: Fri 24 Jul 2026 00:05:00 +0000 Manifest this update: Fri 24 Jul 2026 00:00:00 +0000 Manifest next update: Sat 25 Jul 2026 00:18:00 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 2: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 3: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 4: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 6: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 7: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: MeM0c1cPuNQteBUVWPd3vhxeh95eSYg8bR7GAmoyTWA=) 8: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 9: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 10: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 11: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b7:62:5b:a2:38:7b:ed:18:5a:be:a7:a8:cd:40:ab:f0:b0:36:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jul 24 00:00:00 2026 GMT Not After : Jul 25 00:18:00 2026 GMT Subject: CN=8A8E85F612D213644291CDAC707F740DA647EA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:a5:9d:13:ed:8b:10:90:f6:f9:61:43:76: cf:76:24:4f:3c:6a:a1:cd:27:c1:b7:8c:e0:1c:01: 14:b5:0b:87:04:1d:fb:09:5f:30:39:f7:db:d1:d3: 4d:e7:98:5f:98:6d:40:6d:1a:ca:43:14:ef:fd:e3: a0:19:1d:cd:e5:46:cb:76:e4:14:5c:b3:6e:b6:0b: 88:6f:d4:e4:2f:3c:dc:9a:5c:c9:00:40:4f:f1:d9: 50:87:f0:db:4c:c7:6a:1b:1e:e4:94:17:fe:14:58: 08:1e:aa:6b:39:2f:15:d5:4a:93:c2:73:f9:a4:31: 0c:78:9b:88:18:e5:eb:23:6a:12:ba:af:e3:ef:65: e3:05:14:17:a7:32:3e:55:a8:7b:d0:95:6d:33:49: e4:07:84:55:fd:42:cc:5c:69:02:64:86:ba:b2:2a: 2f:71:26:a1:aa:af:4e:e0:31:40:31:0e:23:49:b2: 6d:f8:aa:67:f1:da:ca:66:92:54:f9:16:9e:1b:18: 46:06:5e:ac:5d:c5:18:25:87:df:6f:93:78:34:ea: 6e:39:22:cd:6d:0b:d1:33:d4:81:21:13:97:16:3e: c1:1e:f0:3d:a9:53:40:33:3d:c8:a8:dc:63:70:dc: 0b:fb:d6:a0:18:a4:6c:a0:41:14:0d:e0:6f:f4:d7: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:85:F6:12:D2:13:64:42:91:CD:AC:70:7F:74:0D:A6:47:EA:85 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:30:27:a4:24:74:66:9b:2a:3c:99:d3:50:b4:a4:4c:42: 99:91:47:27:9f:44:19:71:3e:b2:e4:bc:63:cc:ca:8f:42:f6: 08:29:15:8a:20:75:f8:d3:3f:d1:ca:42:e5:76:26:38:14:db: ce:22:6c:18:ed:7f:c2:a5:39:86:52:bb:45:13:4a:93:15:b7: 46:d4:26:24:97:58:9a:bb:ae:ba:bf:5f:07:4e:be:36:aa:3c: 87:b8:32:70:a8:3b:65:bc:c7:2c:c1:1c:f4:9f:c4:1f:14:c9: b0:ad:e2:5f:42:57:dc:9f:50:95:16:19:ba:3d:e6:40:e2:63: a8:23:f7:d1:b6:96:ef:74:7d:0e:5a:58:d8:5d:e3:9d:76:36: 30:da:23:9d:c2:72:cc:a2:76:cf:2b:53:30:05:93:19:79:04: 31:38:2b:2b:a4:49:66:01:d4:c3:73:0d:dd:49:3b:78:a1:09: ae:39:37:d3:19:d5:41:a7:80:e3:63:13:1e:7c:a4:69:e1:db: 39:e8:30:89:2d:71:fe:d1:5a:92:41:a5:2f:fe:8e:f2:b0:6a: a3:db:3f:fa:47:5c:0c:fa:0f:c4:b7:ca:7e:6c:48:e5:15:69: d3:d3:c1:65:d0:05:3d:72:0e:e7:7e:b9:76:be:02:2e:05:72: 40:3e:13:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUELdiW6I4e+0YWr6nqM1Aq/CwNu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA3MjQwMDAwMDBaFw0yNjA3MjUwMDE4MDBaMDMxMTAvBgNV BAMTKDhBOEU4NUY2MTJEMjEzNjQ0MjkxQ0RBQzcwN0Y3NDBEQTY0N0VBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmqWdE+2LEJD2+WFDds92JE88 aqHNJ8G3jOAcARS1C4cEHfsJXzA599vR003nmF+YbUBtGspDFO/946AZHc3lRst2 5BRcs262C4hv1OQvPNyaXMkAQE/x2VCH8NtMx2obHuSUF/4UWAgeqms5LxXVSpPC c/mkMQx4m4gY5esjahK6r+PvZeMFFBenMj5VqHvQlW0zSeQHhFX9QsxcaQJkhrqy Ki9xJqGqr07gMUAxDiNJsm34qmfx2spmklT5Fp4bGEYGXqxdxRglh99vk3g06m45 Is1tC9Ez1IEhE5cWPsEe8D2pU0AzPcio3GNw3Av71qAYpGygQRQN4G/0189tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUio6F9hLSE2RCkc2scH90DaZH6oUwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPYwJ6QkdGabKjyZ01C0 pExCmZFHJ59EGXE+suS8Y8zKj0L2CCkViiB1+NM/0cpC5XYmOBTbziJsGO1/wqU5 hlK7RRNKkxW3RtQmJJdYmruuur9fB06+Nqo8h7gycKg7ZbzHLMEc9J/EHxTJsK3i X0JX3J9QlRYZuj3mQOJjqCP30baW73R9DlpY2F3jnXY2MNojncJyzKJ2zytTMAWT GXkEMTgrK6RJZgHUw3MN3Uk7eKEJrjk30xnVQaeA42MTHnykaeHbOegwiS1x/tFa kkGlL/6O8rBqo9s/+kdcDPoPxLfKfmxI5RVp09PBZdAFPXIO5365dr4CLgVyQD4T 9g== -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:39 2026 by rpki-client