$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft File: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft (raw, json) Hash identifier: mQZfKTpGqKxlssTIvWyJdP+4ZWMxOdXZ/Lk+Og8KvZc= Subject key identifier: A5:DC:25:4C:EA:2C:31:4E:EB:25:D3:98:18:98:16:05:BD:8B:9E:B1 Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 Certificate issuer: /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Certificate serial: 120C705B9580FBDCF2387ADDFF255F5A1991F79B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft Manifest number: B4 Signing time: Thu 23 Jul 2026 18:37:29 +0000 Manifest this update: Thu 23 Jul 2026 18:32:29 +0000 Manifest next update: Sat 25 Jul 2026 09:24:29 +0000 Files and hashes: 1: 326131343a373538313a393966663a3a2f34382d3438203d3e20323134333434.roa (hash: t4EI/Mk5YhylQpYGn3RlsMvjC7W6xYVw8s3ZATd/tDM=) 2: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: O1DOX7fA9jfnoSeWMa11Wp/d995uhroRM2jfe2mLRug=) 3: 326131343a373538313a393930363a3a2f34382d3438203d3e20323134333434.roa (hash: BMn6K19jJ4iJtuNC2KsrQMJBXSWVJ59FtRrnw8F8pV8=) 4: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: +HkEXWJnMNkqLcMHQ1DXhuOI1jBvZDFvEhgNll+1Gx0=) 5: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: nZjZ1BnZI0dBzNhskqIxoEygMMm+y+RvaVl8qJu9fX4=) 6: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: pdi0gEMaG5/D7JK9Zh5vusH8qIO/fIfz8EKZlEVkW00=) 7: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: U3VxlYVJDi8xV7CxMMI72zfRcW4i6iOC2MTfg2xraIY=) 8: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl (hash: 04xKxYQTl6soUkJc/xRFsjus22CRDTibwRI/l+v7Em8=) 9: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: RqUe0gZydPYyKZQfKR8vKq452OBo5sS0uzmQSo0RksM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0c:70:5b:95:80:fb:dc:f2:38:7a:dd:ff:25:5f:5a:19:91:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Validity Not Before: Jul 23 18:32:29 2026 GMT Not After : Jul 25 09:24:29 2026 GMT Subject: CN=A5DC254CEA2C314EEB25D39818981605BD8B9EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:bc:ff:76:94:ed:01:6f:06:5d:97:c6:d5: ed:77:7a:ad:75:d0:90:49:c2:8f:36:bc:2f:4a:3c: 56:10:52:50:a5:26:19:1f:12:3e:4e:59:52:8a:0a: aa:62:fb:f9:ea:a6:bf:88:a6:86:c4:07:56:9d:b8: df:c0:ad:fa:61:d8:77:6f:cd:ba:fc:c1:52:d2:8d: 5b:5b:b7:72:aa:30:c5:c1:c6:0e:48:83:9e:2e:1d: 5a:e8:76:45:36:33:11:63:2a:a2:41:cb:54:8e:52: b1:f3:26:9a:c6:3d:c2:19:f4:37:c6:9b:b2:68:9b: a6:da:0d:96:6d:6b:33:7f:68:01:3f:2e:3a:90:82: b1:c8:97:2a:a3:58:eb:c0:c5:d5:ef:e0:8a:74:01: d8:79:ce:9c:d8:ad:26:ea:ff:d3:8e:75:4c:41:ad: e3:13:71:44:b5:fe:83:92:95:54:68:f5:81:4e:a6: 84:70:8c:07:ca:c0:72:a6:1c:9c:ad:d6:14:13:cb: f5:b0:c2:ee:f0:e7:a1:c1:d7:13:fd:27:53:6e:08: dd:05:2c:0f:ac:24:e7:3b:c1:74:76:6c:ac:ee:e4: ed:6b:7d:ee:69:b2:3a:5b:f0:f1:4b:7a:e0:77:52: 3c:d9:9c:56:84:2f:cd:1f:2d:1b:7a:3a:a2:b0:c5: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DC:25:4C:EA:2C:31:4E:EB:25:D3:98:18:98:16:05:BD:8B:9E:B1 X509v3 Authority Key Identifier: keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:76:80:5d:7e:ab:31:f2:62:a9:26:0f:5d:69:a5:76:77:df: 2a:9a:59:e5:3d:f5:8c:c8:9d:b6:25:d4:01:71:02:37:af:2f: de:b5:b2:a2:26:a6:70:e7:bf:9d:fe:7e:22:7b:08:7b:4a:12: 55:05:a0:8a:c0:f7:8a:7e:f1:a3:76:8d:ec:98:62:d7:e8:fb: 49:70:f2:a3:0a:fd:d1:44:a4:46:57:85:0f:57:9d:98:03:6d: 73:d7:c9:21:4f:fd:52:dc:c1:b9:ef:16:a2:9d:50:e9:21:7a: 62:21:31:d3:73:a5:96:f6:52:90:37:77:7d:0b:dc:4e:37:7b: d5:8c:2a:45:2c:12:c3:4c:2f:61:90:4a:c9:59:94:34:87:7e: 44:2f:c1:dc:f6:a9:14:19:cd:84:70:59:7d:3b:d4:43:33:f7: 5d:b8:d9:31:d2:d5:36:81:7a:ee:d1:c9:f6:ee:ba:70:80:b9: 37:8d:0f:41:ac:73:af:fe:f5:3e:22:7c:85:ae:36:3e:9f:f4: 31:06:ca:a1:03:78:03:ec:2a:92:ed:1b:7b:82:4f:4d:60:37: 3c:39:b0:82:9a:3e:34:6c:7a:03:7c:61:2d:95:fd:1c:df:f8: 3f:36:c3:79:63:71:fc:30:95:ee:f1:87:6c:45:5c:54:fc:60: e9:24:ad:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEgxwW5WA+9zyOHrd/yVfWhmR95swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5 MkIyMjUzNjAeFw0yNjA3MjMxODMyMjlaFw0yNjA3MjUwOTI0MjlaMDMxMTAvBgNV BAMTKEE1REMyNTRDRUEyQzMxNEVFQjI1RDM5ODE4OTgxNjA1QkQ4QjlFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlLz/dpTtAW8GXZfG1e13eq11 0JBJwo82vC9KPFYQUlClJhkfEj5OWVKKCqpi+/nqpr+IpobEB1aduN/Arfph2Hdv zbr8wVLSjVtbt3KqMMXBxg5Ig54uHVrodkU2MxFjKqJBy1SOUrHzJprGPcIZ9DfG m7Jom6baDZZtazN/aAE/LjqQgrHIlyqjWOvAxdXv4Ip0Adh5zpzYrSbq/9OOdUxB reMTcUS1/oOSlVRo9YFOpoRwjAfKwHKmHJyt1hQTy/Wwwu7w56HB1xP9J1NuCN0F LA+sJOc7wXR2bKzu5O1rfe5psjpb8PFLeuB3UjzZnFaEL80fLRt6OqKwxSn9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpdwlTOosMU7rJdOYGJgWBb2LnrEwHwYDVR0j BBgwFoAUYtKaBkjubYnZ6aaprBW0ppKyJTYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzIvNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5MkIyMjUzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82MkQyOUEwNjQ4RUU2RDg5RDlFOUE2QTlB QzE1QjRBNjkyQjIyNTM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8yLzYyRDI5QTA2 NDhFRTZEODlEOUU5QTZBOUFDMTVCNEE2OTJCMjI1MzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhdoBd fqsx8mKpJg9daaV2d98qmlnlPfWMyJ22JdQBcQI3ry/etbKiJqZw57+d/n4iewh7 ShJVBaCKwPeKfvGjdo3smGLX6PtJcPKjCv3RRKRGV4UPV52YA21z18khT/1S3MG5 7xainVDpIXpiITHTc6WW9lKQN3d9C9xON3vVjCpFLBLDTC9hkErJWZQ0h35EL8Hc 9qkUGc2EcFl9O9RDM/dduNkx0tU2gXru0cn27rpwgLk3jQ9BrHOv/vU+InyFrjY+ n/QxBsqhA3gD7CqS7Rt7gk9NYDc8ObCCmj40bHoDfGEtlf0c3/g/NsN5Y3H8MJXu 8YdsRVxU/GDpJK3D -----END CERTIFICATE-----Generated at Thu Jul 23 23:09:19 2026 by rpki-client