$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: QXqsI3zVDo8uBbeESPwokaVfn1wVw44TCU+8xXCktrU= Subject key identifier: 37:04:BA:A0:E3:4A:37:C4:4B:F9:5F:24:3E:5D:25:F1:35:AA:BA:83 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 11FC0B10D3725C96C146D706AAC87CFF2E96B724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 02F9 Signing time: Fri 24 Jul 2026 11:31:43 +0000 Manifest this update: Fri 24 Jul 2026 11:26:43 +0000 Manifest next update: Sat 25 Jul 2026 12:22:43 +0000 Files and hashes: 1: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 2: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 3: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 4: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 5: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: rMi5QXqNudFI4tZpGzBpD7eVI3opxUZUvYuIBW2b4Dc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fc:0b:10:d3:72:5c:96:c1:46:d7:06:aa:c8:7c:ff:2e:96:b7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Jul 24 11:26:43 2026 GMT Not After : Jul 25 12:22:43 2026 GMT Subject: CN=3704BAA0E34A37C44BF95F243E5D25F135AABA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:87:28:4f:2c:dd:29:a3:55:e9:00:a2:ad: 47:60:6c:3e:84:51:63:c5:24:f3:e1:7b:6e:8d:28: 5c:09:1e:03:2d:d5:59:4a:12:1d:64:a3:51:0c:64: 0c:2f:ad:8a:72:6f:af:4c:22:53:d8:07:98:fe:1c: b7:fa:c4:0f:eb:ac:b8:15:fe:a2:a4:09:90:ed:26: d4:b1:8b:9b:05:af:a6:89:38:c0:60:54:ad:a3:db: e9:da:1f:00:5c:73:83:40:2d:d6:0c:cf:c6:fe:40: b1:45:09:68:10:6a:84:3c:2c:7a:fc:05:c3:60:a9: d9:1b:16:f6:b2:a6:be:31:e9:c2:66:fd:9c:54:41: c3:ec:d1:12:fa:c7:f3:32:e1:ef:1e:a4:03:91:b0: d7:16:ae:1d:24:42:56:8e:fe:8f:c7:bf:7a:75:45: a9:de:76:85:68:60:bf:3d:43:54:30:ad:d5:92:57: 89:9c:b2:a4:80:a5:ba:60:9a:a2:94:ba:e8:e9:5b: d3:04:51:45:75:3c:a7:4c:de:31:52:3a:a9:71:71: 42:61:d3:80:a7:2c:a7:94:0d:53:4e:14:27:80:5f: 22:af:7b:b6:6a:a0:bc:22:14:9d:f2:3d:ca:66:20: f3:a6:76:ea:05:8e:73:93:47:85:39:e9:48:00:55: 44:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:BA:A0:E3:4A:37:C4:4B:F9:5F:24:3E:5D:25:F1:35:AA:BA:83 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a1:3b:4e:87:05:d1:ec:3a:02:1a:56:f1:a5:ab:6c:a6:9c: 59:ea:ec:ac:5f:3b:e0:07:c4:2e:02:a3:68:84:d9:e8:1d:53: a0:d8:91:f4:3f:2d:a4:11:f5:10:84:68:90:da:70:63:16:7d: 09:66:88:26:fb:28:85:24:3c:b4:d7:ae:19:03:ca:a3:f4:fb: 44:fd:e1:d7:f1:19:36:26:01:12:66:88:93:c9:b2:91:b8:59: cb:d5:a3:e8:06:cd:ea:95:e2:bc:48:3b:02:e6:17:42:e0:bf: 62:2d:34:29:9b:b4:5a:e9:27:9f:97:af:7e:d1:5c:80:2b:b9: 26:0e:81:fd:ba:cf:9d:fb:90:6e:d6:96:45:92:08:75:6d:52: 4f:c2:f1:5a:53:f5:f0:28:69:e2:97:05:87:c5:7e:3d:fc:06: 26:19:ff:6b:9c:ab:2d:59:0d:9e:a9:2d:b6:12:c7:3b:55:9f: 6b:dd:44:ff:81:e0:e2:7e:39:90:90:9c:51:c9:78:05:06:43: 6b:7a:cf:c5:7f:fe:78:11:1a:0c:fb:25:86:da:46:c7:10:c4: 4d:4e:af:32:08:b1:7f:89:e3:85:de:38:a0:bf:c3:98:e8:94: 77:54:39:5f:26:62:65:65:67:61:cb:27:4f:8b:b9:8e:18:2b: 14:42:0b:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEfwLENNyXJbBRtcGqsh8/y6WtyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA3MjQxMTI2NDNaFw0yNjA3MjUxMjIyNDNaMDMxMTAvBgNV BAMTKDM3MDRCQUEwRTM0QTM3QzQ0QkY5NUYyNDNFNUQyNUYxMzVBQUJBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCao4coTyzdKaNV6QCirUdgbD6E UWPFJPPhe26NKFwJHgMt1VlKEh1ko1EMZAwvrYpyb69MIlPYB5j+HLf6xA/rrLgV /qKkCZDtJtSxi5sFr6aJOMBgVK2j2+naHwBcc4NALdYMz8b+QLFFCWgQaoQ8LHr8 BcNgqdkbFvaypr4x6cJm/ZxUQcPs0RL6x/My4e8epAORsNcWrh0kQlaO/o/Hv3p1 RanedoVoYL89Q1QwrdWSV4mcsqSApbpgmqKUuujpW9MEUUV1PKdM3jFSOqlxcUJh 04CnLKeUDVNOFCeAXyKve7ZqoLwiFJ3yPcpmIPOmduoFjnOTR4U56UgAVUTxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNwS6oONKN8RL+V8kPl0l8TWquoMwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6E7TocF0ew6AhpW8aWr bKacWersrF874AfELgKjaITZ6B1ToNiR9D8tpBH1EIRokNpwYxZ9CWaIJvsohSQ8 tNeuGQPKo/T7RP3h1/EZNiYBEmaIk8mykbhZy9Wj6AbN6pXivEg7AuYXQuC/Yi00 KZu0Wuknn5evftFcgCu5Jg6B/brPnfuQbtaWRZIIdW1ST8LxWlP18Chp4pcFh8V+ PfwGJhn/a5yrLVkNnqktthLHO1Wfa91E/4Hg4n45kJCcUcl4BQZDa3rPxX/+eBEa DPslhtpGxxDETU6vMgixf4njhd44oL/DmOiUd1Q5XyZiZWVnYcsnT4u5jhgrFEIL 3Q== -----END CERTIFICATE-----Generated at Fri Jul 24 14:16:43 2026 by rpki-client