$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: UTCDJGhG3xiHFHDsVCcATYW71nxsvjdtaURikC+PMq4= Subject key identifier: 21:12:FD:A3:CB:A1:87:29:E2:CB:79:6A:DF:E7:74:36:B3:62:1B:90 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 3DCA34F9043E5E165598C9666D2D7F7658C287EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 06FA Signing time: Thu 23 Jul 2026 10:02:57 +0000 Manifest this update: Thu 23 Jul 2026 09:57:57 +0000 Manifest next update: Fri 24 Jul 2026 13:43:57 +0000 Files and hashes: 1: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) 4: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: xs56zCF50lW9dnfEV2eDyG3gQOU1ZZya8MsRWHqx7GQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:34:f9:04:3e:5e:16:55:98:c9:66:6d:2d:7f:76:58:c2:87:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jul 23 09:57:57 2026 GMT Not After : Jul 24 13:43:57 2026 GMT Subject: CN=2112FDA3CBA18729E2CB796ADFE77436B3621B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:a4:b3:c4:3a:0e:15:01:55:cf:ff:f4:c0: db:f4:aa:3b:8f:cb:4f:16:6d:03:7c:4a:63:49:52: b3:d7:74:74:53:45:a3:7a:b2:5d:73:af:46:7d:fe: 50:f8:69:99:4e:8f:a1:15:e2:c7:8e:33:7b:5b:be: 1a:53:24:c5:b4:03:92:29:51:e2:28:a1:80:50:06: 6c:42:30:80:a7:d7:3a:a2:82:16:30:f8:5b:15:49: 8f:95:10:06:a3:58:5d:93:9c:15:75:d6:e9:7a:b4: 48:84:41:6e:21:a1:b8:bf:da:06:9c:cf:a8:3a:60: df:34:2d:0f:ec:09:26:af:95:7e:fe:73:f8:1e:4e: 0a:77:95:48:bf:af:cc:b6:69:f8:79:72:bf:79:1b: be:4e:ec:4b:86:a9:c9:bd:5f:f8:b1:34:7d:af:4a: 04:cb:e7:33:53:02:da:ed:69:ec:9a:9b:7c:c8:3b: c2:26:3c:7c:15:f6:f3:b9:06:a2:3e:a6:ca:bf:03: 1d:57:5f:4e:13:f0:65:2c:c0:0b:94:3e:65:c8:1d: f6:cf:aa:cb:fe:3c:0e:d6:35:e7:7a:45:38:11:7d: 7a:29:16:e1:6e:0b:4f:71:01:2f:e8:5b:a9:62:04: 42:ca:ef:60:bc:c8:b6:2b:9b:c7:a7:aa:b8:fa:fb: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:FD:A3:CB:A1:87:29:E2:CB:79:6A:DF:E7:74:36:B3:62:1B:90 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:02:a6:fd:1d:f2:4a:87:33:60:54:e7:4a:b6:8d:9d:40:44: 08:68:b9:56:36:9d:73:f9:27:2d:f2:cc:6b:28:c0:90:96:e6: bb:94:d4:fe:ef:6d:ed:c4:84:07:76:06:52:05:b9:3c:37:1c: 53:27:d1:19:14:d9:a6:2f:65:70:01:23:16:79:72:71:8e:57: 65:e4:2a:86:16:b5:33:fc:0f:7c:db:0e:17:25:17:d4:13:88: 09:fd:dd:4a:1a:80:bf:6d:02:cf:92:d6:3f:06:3e:4f:d0:e3: 37:66:f4:98:df:92:97:30:de:97:4f:98:e6:83:12:e5:7a:ad: 9d:c9:39:e7:cb:ef:79:e2:29:d3:7e:77:12:d5:2d:08:50:96: 72:86:89:be:1a:5d:88:2e:03:10:c0:cd:da:74:49:8b:e9:d8: 6d:02:2c:80:f9:db:60:95:02:80:e8:4d:c3:e5:57:39:ec:5e: 14:99:cd:6e:2d:16:d1:5a:16:8c:14:b6:30:fb:c3:61:aa:dc: 2d:ef:06:b0:9c:3a:33:69:af:9e:a5:e4:1d:ba:11:da:42:79: 34:81:17:2f:81:a1:05:c3:02:26:65:f7:89:b7:fe:3a:7d:bf: 4c:74:a8:30:a6:08:cc:82:bf:08:23:b4:cb:f4:f8:26:b0:19: a6:5f:5c:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPco0+QQ+XhZVmMlmbS1/dljCh+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA3MjMwOTU3NTdaFw0yNjA3MjQxMzQzNTdaMDMxMTAvBgNV BAMTKDIxMTJGREEzQ0JBMTg3MjlFMkNCNzk2QURGRTc3NDM2QjM2MjFCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGaSzxDoOFQFVz//0wNv0qjuP y08WbQN8SmNJUrPXdHRTRaN6sl1zr0Z9/lD4aZlOj6EV4seOM3tbvhpTJMW0A5Ip UeIooYBQBmxCMICn1zqighYw+FsVSY+VEAajWF2TnBV11ul6tEiEQW4hobi/2gac z6g6YN80LQ/sCSavlX7+c/geTgp3lUi/r8y2afh5cr95G75O7EuGqcm9X/ixNH2v SgTL5zNTAtrtaeyam3zIO8ImPHwV9vO5BqI+psq/Ax1XX04T8GUswAuUPmXIHfbP qsv+PA7WNed6RTgRfXopFuFuC09xAS/oW6liBELK72C8yLYrm8enqrj6+02RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIRL9o8uhhyniy3lq3+d0NrNiG5AwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQKm/R3ySoczYFTnSraN nUBECGi5Vjadc/knLfLMayjAkJbmu5TU/u9t7cSEB3YGUgW5PDccUyfRGRTZpi9l cAEjFnlycY5XZeQqhha1M/wPfNsOFyUX1BOICf3dShqAv20Cz5LWPwY+T9DjN2b0 mN+SlzDel0+Y5oMS5Xqtnck558vveeIp0353EtUtCFCWcoaJvhpdiC4DEMDN2nRJ i+nYbQIsgPnbYJUCgOhNw+VXOexeFJnNbi0W0VoWjBS2MPvDYarcLe8GsJw6M2mv nqXkHboR2kJ5NIEXL4GhBcMCJmX3ibf+On2/THSoMKYIzIK/CCO0y/T4JrAZpl9c YQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:13 2026 by rpki-client