$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: WKIWch1GCLpmwC51RdSf6KGj17IaV1RsuVpqPL4jQQ0= Subject key identifier: 5D:01:4F:14:C5:23:DC:5F:7C:B9:98:D3:3E:5A:02:63:AB:A7:A8:54 Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 58E35B53A1F15838F3CA9F48FAC5CAD9ABB0A44E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 0304 Signing time: Thu 23 Jul 2026 20:16:43 +0000 Manifest this update: Thu 23 Jul 2026 20:11:43 +0000 Manifest next update: Fri 24 Jul 2026 22:22:43 +0000 Files and hashes: 1: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: d/1lXdE+bUYazyCGwaP/OCTmtR3K5Kjdtl4JkuFQ3mo=) 2: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) 3: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e3:5b:53:a1:f1:58:38:f3:ca:9f:48:fa:c5:ca:d9:ab:b0:a4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Jul 23 20:11:43 2026 GMT Not After : Jul 24 22:22:43 2026 GMT Subject: CN=5D014F14C523DC5F7CB998D33E5A0263ABA7A854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:8a:c4:55:ce:d1:53:91:63:6e:01:58:d8: 96:ad:fc:d1:20:77:eb:11:91:4c:e8:fb:1f:d3:7c: a6:3f:04:2f:c5:8c:18:f2:c2:ab:85:50:60:f4:a2: 12:75:93:46:0d:1c:4e:e7:58:27:be:dc:3a:e8:27: e3:09:e8:e0:13:e7:72:ad:0c:d9:a0:9d:6f:91:f9: 93:be:7c:14:b0:6f:70:29:c2:25:49:43:0c:6d:df: 8f:d1:87:10:1e:23:68:2d:6a:41:8f:c2:af:02:87: 97:b4:5f:7c:03:92:08:49:38:36:e7:a1:fd:73:da: c4:3d:e3:a4:02:e9:e7:de:b5:4c:34:3d:8b:56:7e: 8f:eb:e6:d4:e8:c2:35:66:4b:14:a8:18:38:4a:33: 61:9a:74:80:f4:a6:2f:fa:83:60:9a:a2:0a:4d:4f: e3:7a:6d:58:02:55:77:b6:3c:f0:a9:8b:d8:f3:28: 08:16:e1:22:7b:b4:75:3f:9d:f9:65:2c:0f:42:d7: 37:f1:7e:d3:05:3d:db:99:de:23:29:75:fe:b3:11: ec:d8:ab:7a:b4:2a:6a:41:ab:80:35:aa:0a:cb:3a: a4:6d:58:b8:fc:35:f2:af:6a:7a:35:bc:c1:e0:84: ea:56:c6:0c:3a:43:fb:d9:5a:11:06:07:82:b4:ce: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:01:4F:14:C5:23:DC:5F:7C:B9:98:D3:3E:5A:02:63:AB:A7:A8:54 X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:23:41:93:bf:40:d2:8b:db:78:4e:7f:44:dd:92:6b:f5: 03:e3:1a:ef:3b:80:4d:c4:f4:a0:45:47:77:a3:b5:d5:98:52: 6a:f7:d6:9f:d6:f6:54:1c:f5:67:f4:c8:a2:b4:6d:d5:1d:2f: 98:40:e1:9c:09:e5:9f:c0:15:59:39:af:d6:a2:e5:d6:1e:01: 71:18:bd:54:7c:cf:87:5e:b9:31:9c:d8:ab:31:26:cf:ec:5f: 02:30:23:b3:a2:24:c6:99:cd:b8:4b:c7:37:0e:76:7d:8c:7c: 0b:32:45:b4:27:3d:33:a4:50:77:54:e6:06:b1:a6:33:d2:ea: fa:8c:55:5e:0c:a3:74:ed:59:b7:ca:c3:cb:fb:d1:a9:30:ea: 04:31:43:bf:ed:f9:49:8f:6c:bf:15:c0:20:41:bf:93:42:bf: b4:8f:5b:10:3b:7b:8c:89:12:4f:57:f4:d0:d9:7e:9b:db:bc: 99:23:fe:55:15:5b:e6:10:74:24:5d:ab:36:5b:b1:9a:34:3d: 23:6c:32:15:78:67:90:e0:d9:ed:95:f9:aa:f9:2d:58:9a:ff: 92:b7:14:eb:39:07:3b:21:d1:d1:0f:be:5e:8c:6f:af:0e:40: 6a:36:78:52:a7:bb:89:7d:74:da:0f:34:33:bf:59:fb:39:1e: 52:ed:91:a9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWONbU6HxWDjzyp9I+sXK2auwpE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA3MjMyMDExNDNaFw0yNjA3MjQyMjIyNDNaMDMxMTAvBgNV BAMTKDVEMDE0RjE0QzUyM0RDNUY3Q0I5OThEMzNFNUEwMjYzQUJBN0E4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEIrEVc7RU5FjbgFY2Jat/NEg d+sRkUzo+x/TfKY/BC/FjBjywquFUGD0ohJ1k0YNHE7nWCe+3DroJ+MJ6OAT53Kt DNmgnW+R+ZO+fBSwb3ApwiVJQwxt34/RhxAeI2gtakGPwq8Ch5e0X3wDkghJODbn of1z2sQ946QC6efetUw0PYtWfo/r5tTowjVmSxSoGDhKM2GadID0pi/6g2CaogpN T+N6bVgCVXe2PPCpi9jzKAgW4SJ7tHU/nfllLA9C1zfxftMFPduZ3iMpdf6zEezY q3q0KmpBq4A1qgrLOqRtWLj8NfKvano1vMHghOpWxgw6Q/vZWhEGB4K0zuYdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXQFPFMUj3F98uZjTPloCY6unqFQwHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWYjQZO/QNKL23hOf0Td kmv1A+Ma7zuATcT0oEVHd6O11ZhSavfWn9b2VBz1Z/TIorRt1R0vmEDhnAnln8AV WTmv1qLl1h4BcRi9VHzPh165MZzYqzEmz+xfAjAjs6IkxpnNuEvHNw52fYx8CzJF tCc9M6RQd1TmBrGmM9Lq+oxVXgyjdO1Zt8rDy/vRqTDqBDFDv+35SY9svxXAIEG/ k0K/tI9bEDt7jIkST1f00Nl+m9u8mSP+VRVb5hB0JF2rNluxmjQ9I2wyFXhnkODZ 7ZX5qvktWJr/krcU6zkHOyHR0Q++Xoxvrw5AajZ4Uqe7iX102g80M79Z+zkeUu2R qQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:20:17 2026 by rpki-client