$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft File: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft (raw, json) Hash identifier: SelZLqOPekWMOLtUqXc1XkuTspV5AEqy5njJVXLq7wM= Subject key identifier: 33:C2:D6:BB:1A:9C:B1:6A:95:51:82:72:F4:C2:AD:56:DC:38:B1:EB Authority key identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 Certificate issuer: /CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Certificate serial: 42D7BE06AC821EF32BD34167879998BF1E829352 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft Manifest number: 10 Signing time: Thu 23 Jul 2026 19:17:37 +0000 Manifest this update: Thu 23 Jul 2026 19:12:37 +0000 Manifest next update: Fri 24 Jul 2026 21:13:37 +0000 Files and hashes: 1: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl (hash: IBA+FhUWCcbiEMnkhemWBXaAywXhYy2NdYb1vZ5S+XY=) 2: 326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa (hash: My6Ab96b5F0+JldNWozhK3m+60cIdrnbbGOkb8nRtmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d7:be:06:ac:82:1e:f3:2b:d3:41:67:87:99:98:bf:1e:82:93:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Validity Not Before: Jul 23 19:12:37 2026 GMT Not After : Jul 24 21:13:37 2026 GMT Subject: CN=33C2D6BB1A9CB16A95518272F4C2AD56DC38B1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:92:74:0f:14:0e:18:19:0b:94:4c:a7:06: 95:a9:85:f4:6f:16:86:4b:94:53:81:b4:ec:e7:2c: 28:6f:fa:8b:f5:f8:96:f4:41:2e:d6:1b:c6:3b:3a: 05:2e:4a:00:1d:2f:47:b2:74:ca:07:7c:42:43:9d: c7:db:08:12:ad:7a:bf:a4:3e:0a:b4:29:c8:1e:2a: e9:62:32:8d:a1:7c:c4:c5:4e:8a:22:e9:ca:7d:5c: 63:85:3a:bd:6c:e2:03:e2:80:8c:fd:ef:12:c3:6e: 71:86:6f:89:80:57:76:23:b3:b4:94:16:70:01:59: 92:97:c4:0c:e2:73:20:4c:f5:0a:2c:b7:45:4d:f9: bb:79:0d:4a:1c:e3:f2:c7:a8:39:e1:81:fc:87:e3: 6f:8e:d9:b4:eb:a4:d0:9e:86:1b:45:00:a2:e4:d8: 09:68:32:09:a3:22:0e:41:b2:a8:e2:00:bc:df:2e: b4:8b:bc:95:4e:b1:93:fc:b6:b0:40:4e:88:2c:18: ea:78:83:5d:a6:24:57:1d:6d:10:08:27:34:7c:cd: b9:f6:7b:a4:83:41:33:31:ea:2f:03:eb:95:31:e8: 03:c1:15:0c:8c:34:b1:9a:8f:06:5c:02:96:84:23: 00:de:f1:b4:dd:b6:27:36:f6:fd:22:5d:b7:d0:80: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:D6:BB:1A:9C:B1:6A:95:51:82:72:F4:C2:AD:56:DC:38:B1:EB X509v3 Authority Key Identifier: keyid:09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:c1:62:20:c1:94:b5:80:03:aa:e5:6c:d9:93:33:70:a6: 6a:02:80:8a:bc:03:af:88:43:e4:28:ce:4a:b6:17:5d:d2:06: 68:96:8c:f4:11:74:24:6c:de:df:93:7c:ac:21:fa:62:ce:65: 56:71:d1:c0:bc:76:84:a3:a4:96:0a:76:e5:78:c9:86:a4:85: fe:3f:c3:ab:a8:d4:30:4f:c9:13:66:86:0f:a4:e8:c4:65:cb: a8:c4:82:6d:60:9b:a0:a3:e0:8b:bd:9a:ee:f1:c1:9d:46:6d: 47:79:02:10:59:5d:cc:28:b6:3e:1a:9b:b4:96:f5:63:16:a1: 1b:02:6e:05:f3:a9:88:30:3d:06:56:5e:cb:5b:76:45:40:fe: 86:fa:5b:ab:00:30:6b:75:0c:80:db:aa:b6:fb:23:ec:a4:48: 90:13:3c:65:81:c5:17:7a:eb:03:59:e8:b0:be:4a:f4:8a:be: be:b1:71:0b:f8:52:6d:ab:20:91:70:48:0b:eb:dd:e8:e8:ce: 9c:ee:00:78:da:80:27:ff:68:0a:cb:67:d1:43:e7:1b:7f:7c: 73:d2:11:1e:fe:03:26:1d:21:e0:4f:bb:e9:df:b3:18:e7:c6: c2:e2:c2:c8:5e:e8:83:88:4a:a5:2f:4c:91:14:fe:96:58:01: 52:dc:44:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQte+BqyCHvMr00Fnh5mYvx6Ck1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1 MkJCOTFBNTAeFw0yNjA3MjMxOTEyMzdaFw0yNjA3MjQyMTEzMzdaMDMxMTAvBgNV BAMTKDMzQzJENkJCMUE5Q0IxNkE5NTUxODI3MkY0QzJBRDU2REMzOEIxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZe5J0DxQOGBkLlEynBpWphfRv FoZLlFOBtOznLChv+ov1+Jb0QS7WG8Y7OgUuSgAdL0eydMoHfEJDncfbCBKter+k Pgq0KcgeKuliMo2hfMTFTooi6cp9XGOFOr1s4gPigIz97xLDbnGGb4mAV3Yjs7SU FnABWZKXxAzicyBM9Qost0VN+bt5DUoc4/LHqDnhgfyH42+O2bTrpNCehhtFAKLk 2AloMgmjIg5BsqjiALzfLrSLvJVOsZP8trBATogsGOp4g12mJFcdbRAIJzR8zbn2 e6SDQTMx6i8D65Ux6APBFQyMNLGajwZcApaEIwDe8bTdtic29v0iXbfQgLCXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM8LWuxqcsWqVUYJy9MKtVtw4seswHwYDVR0j BBgwFoAUCf00/2g2+d0BrH/fNXhAx1K7kaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5 YzI4LzIvMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1MkJCOTFBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8wOUZEMzRGRjY4MzZGOUREMDFBQzdGREYz NTc4NDBDNzUyQkI5MUE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZkNTI1NjM4OWMyOC8yLzA5RkQzNEZG NjgzNkY5REQwMUFDN0ZERjM1Nzg0MEM3NTJCQjkxQTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5hcFi IMGUtYADquVs2ZMzcKZqAoCKvAOviEPkKM5Kthdd0gZoloz0EXQkbN7fk3ysIfpi zmVWcdHAvHaEo6SWCnbleMmGpIX+P8OrqNQwT8kTZoYPpOjEZcuoxIJtYJugo+CL vZru8cGdRm1HeQIQWV3MKLY+Gpu0lvVjFqEbAm4F86mIMD0GVl7LW3ZFQP6G+lur ADBrdQyA26q2+yPspEiQEzxlgcUXeusDWeiwvkr0ir6+sXEL+FJtqyCRcEgL693o 6M6c7gB42oAn/2gKy2fRQ+cbf3xz0hEe/gMmHSHgT7vp37MY58bC4sLIXuiDiEql L0yRFP6WWAFS3ETJ -----END CERTIFICATE-----Generated at Fri Jul 24 05:15:23 2026 by rpki-client