$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft (raw, json) Hash identifier: Om2h2iXivIoERWru2pRw5+YORYthL06+gczZYXRARWg= Subject key identifier: BA:15:CC:F9:A6:8A:9A:4F:41:56:E3:9C:0B:05:2F:56:DC:F6:4B:9A Authority key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 Certificate issuer: /CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Certificate serial: 5D8A4469371D74E28A5F367E1A576653B28CC60E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft Manifest number: AE Signing time: Fri 24 Jul 2026 12:02:29 +0000 Manifest this update: Fri 24 Jul 2026 11:57:29 +0000 Manifest next update: Sun 26 Jul 2026 02:17:29 +0000 Files and hashes: 1: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl (hash: 8veCfb80qH/K3pX0vl5wXcJBIrcSmI2XsTVi18u1q2c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8a:44:69:37:1d:74:e2:8a:5f:36:7e:1a:57:66:53:b2:8c:c6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Validity Not Before: Jul 24 11:57:29 2026 GMT Not After : Jul 26 02:17:29 2026 GMT Subject: CN=BA15CCF9A68A9A4F4156E39C0B052F56DCF64B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:a9:3c:77:5d:69:6a:47:3c:5c:b0:40:da: 6a:ae:89:f1:22:3b:75:58:f4:99:01:8d:b8:47:ee: f9:08:1e:a6:93:5f:7f:03:d9:c1:68:43:48:14:33: cf:0d:b1:15:46:3b:4e:e7:42:6f:8f:c4:cd:fd:64: a5:f7:cb:c0:37:a3:4b:cf:eb:e0:8d:1f:dd:fb:66: 8e:6b:d2:07:57:43:3e:64:8d:69:eb:a8:5d:bd:2b: 7f:15:be:44:63:8a:d8:fc:0f:01:13:fa:22:d5:e1: e6:c0:37:78:3d:7a:34:e1:b9:7e:d3:44:22:d5:db: 5d:59:d1:55:b7:71:9e:85:9c:d6:cc:b1:8e:3f:a2: c6:77:c0:98:f3:c9:62:22:54:63:c9:be:53:fa:b7: 0d:83:ad:e1:8d:93:a7:ae:2b:ea:6e:1f:6a:51:45: ab:10:90:1a:a4:da:3e:1a:06:25:91:a5:50:a5:7c: 09:e0:62:c0:04:fe:51:72:b6:64:98:45:53:f6:c3: ad:f2:c7:1a:ca:96:9f:db:40:35:4c:0e:bd:bd:6d: b8:c4:f7:d0:01:71:f2:53:29:28:96:b7:ac:83:f1: 27:bd:ed:e7:fe:39:98:88:55:af:98:31:74:7c:ba: 26:e9:80:e9:bb:10:b6:55:84:39:35:59:3d:81:80: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:15:CC:F9:A6:8A:9A:4F:41:56:E3:9C:0B:05:2F:56:DC:F6:4B:9A X509v3 Authority Key Identifier: keyid:10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f5:03:bb:47:43:e1:f8:e5:66:f9:06:14:2b:aa:c3:90:60: ce:8c:10:5b:6b:0d:49:f7:b1:c9:0a:65:63:5b:68:bd:d7:f4: bb:1a:e2:17:18:ba:20:21:a5:5d:fa:37:93:54:ab:aa:c0:9b: 36:7b:b3:56:36:04:60:1a:0b:fe:7a:13:ff:9a:2c:5f:24:60: c8:e0:10:58:7c:4d:f4:d9:3b:12:6c:c8:f6:e8:48:ea:59:49: d9:74:16:28:10:2f:b9:62:25:e7:22:7d:00:7e:da:1a:96:e2: 7d:71:45:16:3a:76:3f:41:82:97:41:63:94:da:29:2d:29:0b: 94:ec:cd:56:8c:80:ab:82:06:96:d6:48:03:e0:73:1f:14:c7: b1:a9:1e:f7:aa:84:57:eb:9b:fa:0f:69:61:99:e1:2e:f7:78: 19:c1:14:7d:ff:3d:12:7b:6f:5b:0b:73:56:e8:1c:18:da:39: 9a:b3:08:16:42:d7:43:34:64:01:07:6e:b4:b5:5d:95:de:fe: 15:38:aa:ce:a5:13:d1:23:86:ec:d1:f2:2c:8f:29:3e:b4:7a: 00:6a:3f:d9:c2:77:ac:01:0c:9b:f4:f1:b9:fe:5f:fe:8c:cc: 5e:af:6d:51:89:7b:af:68:3e:29:23:8b:95:11:93:c8:c1:94: 10:0c:13:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXYpEaTcddOKKXzZ+GldmU7KMxg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5 NUUyNTNDODAeFw0yNjA3MjQxMTU3MjlaFw0yNjA3MjYwMjE3MjlaMDMxMTAvBgNV BAMTKEJBMTVDQ0Y5QTY4QTlBNEY0MTU2RTM5QzBCMDUyRjU2RENGNjRCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZKk8d11pakc8XLBA2mquifEi O3VY9JkBjbhH7vkIHqaTX38D2cFoQ0gUM88NsRVGO07nQm+PxM39ZKX3y8A3o0vP 6+CNH937Zo5r0gdXQz5kjWnrqF29K38VvkRjitj8DwET+iLV4ebAN3g9ejThuX7T RCLV211Z0VW3cZ6FnNbMsY4/osZ3wJjzyWIiVGPJvlP6tw2DreGNk6euK+puH2pR RasQkBqk2j4aBiWRpVClfAngYsAE/lFytmSYRVP2w63yxxrKlp/bQDVMDr29bbjE 99ABcfJTKSiWt6yD8Se97ef+OZiIVa+YMXR8uibpgOm7ELZVhDk1WT2BgD95AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuhXM+aaKmk9BVuOcCwUvVtz2S5owHwYDVR0j BBgwFoAUEMpiNc+y9MW9ZAsuLhGe+5XiU8gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzMvMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5NUUyNTNDOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xMENBNjIzNUNGQjJGNEM1QkQ2NDBCMkUy RTExOUVGQjk1RTI1M0M4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8zLzEwQ0E2MjM1 Q0ZCMkY0QzVCRDY0MEIyRTJFMTE5RUZCOTVFMjUzQzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAO9QO7 R0Ph+OVm+QYUK6rDkGDOjBBbaw1J97HJCmVjW2i91/S7GuIXGLogIaVd+jeTVKuq wJs2e7NWNgRgGgv+ehP/mixfJGDI4BBYfE302TsSbMj26EjqWUnZdBYoEC+5YiXn In0AftoaluJ9cUUWOnY/QYKXQWOU2iktKQuU7M1WjICrggaW1kgD4HMfFMexqR73 qoRX65v6D2lhmeEu93gZwRR9/z0Se29bC3NW6BwY2jmaswgWQtdDNGQBB260tV2V 3v4VOKrOpRPRI4bs0fIsjyk+tHoAaj/ZwnesAQyb9PG5/l/+jMxer21RiXuvaD4p I4uVEZPIwZQQDBPn -----END CERTIFICATE-----Generated at Fri Jul 24 17:27:50 2026 by rpki-client