$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: 0RSKXQDzDR3IXjbi9FACFGZe6xP2JWnuMlxJjClcNZM= Subject key identifier: A0:C1:5A:A8:F4:16:FB:F2:D9:59:98:20:E7:1E:B7:91:25:7F:BE:6D Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 11089CB99718828677132A2B2421EF470EAC6DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 02F8 Signing time: Thu 23 Jul 2026 17:51:43 +0000 Manifest this update: Thu 23 Jul 2026 17:46:43 +0000 Manifest next update: Fri 24 Jul 2026 19:28:43 +0000 Files and hashes: 1: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 2: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: /KQqGJENa4z+6Xwepble8Ac0X34Q7/yWDkndaTYSTxo=) 3: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 4: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 5: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:08:9c:b9:97:18:82:86:77:13:2a:2b:24:21:ef:47:0e:ac:6d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Jul 23 17:46:43 2026 GMT Not After : Jul 24 19:28:43 2026 GMT Subject: CN=A0C15AA8F416FBF2D9599820E71EB791257FBE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:41:64:ea:b7:2c:1c:ad:48:32:55:50:58: 93:de:71:5c:4f:6c:f3:d3:25:d0:fc:c2:ef:03:55: 78:55:6c:07:20:a8:4e:99:6f:ca:a6:14:f3:f1:0f: ce:41:54:06:e2:f0:1b:e9:88:cf:d5:15:c6:0d:85: 27:7e:07:cd:84:2f:c6:a2:3c:a6:06:b8:14:2d:7c: 1b:7a:a0:b0:f3:79:fc:5f:c9:9a:d7:cc:bb:d3:e3: 11:56:53:3d:41:ff:e1:b7:7d:ad:07:53:99:22:90: 94:22:94:e9:2b:b8:c2:d2:28:8e:67:65:6f:c9:eb: 07:c5:5d:ae:66:52:02:76:53:c6:53:3d:e9:83:a8: bd:cb:b7:cb:12:0e:97:bb:a5:5b:fa:12:7b:18:ad: 7d:5c:41:0d:3f:be:00:bb:03:ac:36:df:b2:2c:ca: d4:c8:29:36:b4:05:97:42:e6:86:00:02:cd:8a:e9: 34:5e:a3:87:2e:80:9d:38:09:e9:81:af:32:ca:5f: 80:6e:37:5f:eb:8a:82:ab:58:d0:46:76:9c:e0:da: 36:16:ca:0b:a7:c0:19:df:e4:61:2d:5a:b5:13:df: 38:b2:69:f9:d1:b2:e6:01:f5:c5:e9:7e:b4:8e:b4: d3:3d:d0:52:6f:8a:69:19:5d:00:b6:d4:4c:50:d2: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:5A:A8:F4:16:FB:F2:D9:59:98:20:E7:1E:B7:91:25:7F:BE:6D X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7a:4a:50:d6:11:e3:20:c0:7a:65:76:a6:ee:dd:66:24:7f: fc:2b:16:e8:86:f4:fc:2a:5d:3c:8c:49:20:93:a7:94:b2:29: 5b:61:27:cf:04:ca:f2:6d:1f:22:d8:ad:77:09:5a:da:f2:bf: 61:84:88:00:27:96:0f:87:85:4f:55:7a:bc:3b:2b:5f:8f:de: b3:77:56:49:de:72:42:83:48:fa:b1:1b:1b:23:42:f6:b2:a0: 2c:2a:db:61:76:74:e9:82:02:58:88:23:f2:a2:8d:dc:bd:aa: 9c:2d:3e:4b:58:ee:0e:de:c0:98:55:e7:e1:49:73:52:27:9d: 56:43:c6:a7:49:61:0d:ef:85:99:86:9d:e6:07:11:f5:e7:35: 4c:cc:56:ec:ee:fb:eb:4b:e7:78:1d:7b:c7:ca:bb:49:b0:12: 94:ca:41:b8:eb:29:cb:4e:b0:5f:20:91:e2:02:8c:80:c7:e2: aa:52:2a:0a:e2:7e:42:5d:a6:fa:1e:b3:42:ee:3d:7e:05:2b: 2d:c8:8d:22:b3:2b:9c:c5:55:eb:a8:db:95:70:4b:5b:1c:79: 86:0e:a5:de:8b:eb:ca:ae:58:56:3b:5e:a4:59:27:b2:f7:28: ab:8b:82:79:f7:86:8e:a6:60:75:9a:c3:45:e7:0b:47:57:b9: 33:6e:55:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEQicuZcYgoZ3EyorJCHvRw6sbdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA3MjMxNzQ2NDNaFw0yNjA3MjQxOTI4NDNaMDMxMTAvBgNV BAMTKEEwQzE1QUE4RjQxNkZCRjJEOTU5OTgyMEU3MUVCNzkxMjU3RkJFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerkFk6rcsHK1IMlVQWJPecVxP bPPTJdD8wu8DVXhVbAcgqE6Zb8qmFPPxD85BVAbi8BvpiM/VFcYNhSd+B82EL8ai PKYGuBQtfBt6oLDzefxfyZrXzLvT4xFWUz1B/+G3fa0HU5kikJQilOkruMLSKI5n ZW/J6wfFXa5mUgJ2U8ZTPemDqL3Lt8sSDpe7pVv6EnsYrX1cQQ0/vgC7A6w237Is ytTIKTa0BZdC5oYAAs2K6TReo4cugJ04CemBrzLKX4BuN1/rioKrWNBGdpzg2jYW ygunwBnf5GEtWrUT3ziyafnRsuYB9cXpfrSOtNM90FJvimkZXQC21ExQ0p+zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoMFaqPQW+/LZWZgg5x63kSV/vm0wHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3pKUNYR4yDAemV2pu7d ZiR//CsW6Ib0/CpdPIxJIJOnlLIpW2EnzwTK8m0fItitdwla2vK/YYSIACeWD4eF T1V6vDsrX4/es3dWSd5yQoNI+rEbGyNC9rKgLCrbYXZ06YICWIgj8qKN3L2qnC0+ S1juDt7AmFXn4UlzUiedVkPGp0lhDe+FmYad5gcR9ec1TMxW7O7760vneB17x8q7 SbASlMpBuOspy06wXyCR4gKMgMfiqlIqCuJ+Ql2m+h6zQu49fgUrLciNIrMrnMVV 66jblXBLWxx5hg6l3ovryq5YVjtepFknsvcoq4uCefeGjqZgdZrDRecLR1e5M25V HQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:27:24 2026 by rpki-client