$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: rGGDchSSs1/qjmnzXzO3pFcwa6h8qaqWDp4hKLHVEP8= Subject key identifier: 51:B5:65:A3:48:95:26:7A:A4:9C:07:01:DF:F6:A4:DD:04:FF:53:B4 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 04B3BCD965413F72EA91371834F924C3DD4C9D1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 8B Signing time: Thu 23 Jul 2026 21:48:03 +0000 Manifest this update: Thu 23 Jul 2026 21:43:03 +0000 Manifest next update: Sat 25 Jul 2026 01:36:03 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: 595Wu+52vS6SR51ZMasS+Eh06F8YXDpU8WfV2D0dEJw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b3:bc:d9:65:41:3f:72:ea:91:37:18:34:f9:24:c3:dd:4c:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Jul 23 21:43:03 2026 GMT Not After : Jul 25 01:36:03 2026 GMT Subject: CN=51B565A34895267AA49C0701DFF6A4DD04FF53B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:66:4b:31:7a:77:2a:ee:b2:1f:d3:c1:b6: e3:bf:2e:6a:63:a1:45:b5:56:0e:93:17:9a:a4:a9: 1e:37:8d:d0:e0:57:6f:27:fb:b7:36:fd:70:33:91: a5:04:51:6f:b5:94:9f:bb:da:f8:e1:d1:3d:51:26: 50:e6:61:c9:2f:b7:a3:88:1d:b1:ad:59:76:f9:e2: 87:85:99:a8:b1:66:7e:ea:2c:f1:18:69:e7:3f:47: 8d:ae:f4:bf:e4:a9:fd:02:8d:52:02:17:e1:51:9c: 15:13:67:b0:b0:de:7c:f8:0a:04:e7:8a:70:1b:81: 2c:12:06:fb:4e:ce:f3:2f:2c:40:ef:f7:9c:17:2b: 8e:57:1a:f8:c3:bb:a0:42:81:2e:c7:6a:f6:95:c4: 94:1e:8c:7d:40:eb:51:ad:ed:65:cd:52:34:7e:84: 23:c7:f7:b8:ee:86:dd:b7:08:6d:dc:c4:d3:23:d1: cc:01:56:19:e1:40:31:ae:41:77:68:17:8d:84:9a: 38:54:8b:4e:3c:ea:94:4f:54:d7:8e:a2:c4:bc:2f: 23:17:81:f4:98:ef:12:07:99:dc:a4:4d:e3:da:2a: 26:e4:17:f4:84:7b:1b:5c:0e:39:06:4e:e5:87:80: f9:bf:94:f9:9c:51:e6:50:98:68:d7:c3:d5:21:ee: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B5:65:A3:48:95:26:7A:A4:9C:07:01:DF:F6:A4:DD:04:FF:53:B4 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:1d:91:f5:56:fa:00:23:bf:bb:b3:7c:36:f7:6f:84:f9: a5:c5:6f:94:48:61:fe:a6:7e:6e:8b:c4:ee:f2:29:0d:1c:35: bc:1b:a7:67:59:66:10:10:a1:c9:e1:72:f7:38:e2:d9:ee:d1: 88:7b:3f:76:f2:78:9c:fd:1e:7d:d2:83:f9:32:e3:ea:2c:9b: 9e:e6:90:b1:1a:f3:b5:a5:d6:14:6d:2f:e3:e4:f6:e3:9f:6b: 8e:0f:5a:a7:9c:24:b6:c1:21:16:a7:82:11:ef:a0:1d:80:8b: 73:16:5f:74:5e:6f:bc:07:27:db:50:80:4c:3a:04:1b:51:36: b7:6b:69:f7:fd:03:aa:4a:3f:fe:5a:86:ca:4d:40:ea:07:cf: 5e:1e:b6:83:2a:c8:aa:51:36:80:48:40:70:bc:b7:b5:3d:ef: 94:b9:53:03:59:72:9c:51:e9:0e:64:ef:6f:e1:0d:77:df:5d: 94:3a:11:a4:0c:91:de:72:bc:e8:c4:55:8e:4d:af:eb:9a:e3: 5c:b2:18:10:ce:0e:a3:52:7e:52:d7:db:a5:cb:d0:ce:93:37: 68:69:07:8d:c7:35:29:69:75:21:bf:27:9e:af:4f:08:fd:4d: 07:8a:92:08:79:ac:d2:58:34:6f:bd:99:e2:06:2e:ca:7c:54: 67:9b:ca:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBLO82WVBP3LqkTcYNPkkw91MnR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA3MjMyMTQzMDNaFw0yNjA3MjUwMTM2MDNaMDMxMTAvBgNV BAMTKDUxQjU2NUEzNDg5NTI2N0FBNDlDMDcwMURGRjZBNEREMDRGRjUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0GZLMXp3Ku6yH9PBtuO/Lmpj oUW1Vg6TF5qkqR43jdDgV28n+7c2/XAzkaUEUW+1lJ+72vjh0T1RJlDmYckvt6OI HbGtWXb54oeFmaixZn7qLPEYaec/R42u9L/kqf0CjVICF+FRnBUTZ7Cw3nz4CgTn inAbgSwSBvtOzvMvLEDv95wXK45XGvjDu6BCgS7HavaVxJQejH1A61Gt7WXNUjR+ hCPH97juht23CG3cxNMj0cwBVhnhQDGuQXdoF42EmjhUi0486pRPVNeOosS8LyMX gfSY7xIHmdykTePaKibkF/SEextcDjkGTuWHgPm/lPmcUeZQmGjXw9Uh7pGLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUbVlo0iVJnqknAcB3/ak3QT/U7QwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Oh2R 9Vb6ACO/u7N8NvdvhPmlxW+USGH+pn5ui8Tu8ikNHDW8G6dnWWYQEKHJ4XL3OOLZ 7tGIez928nic/R590oP5MuPqLJue5pCxGvO1pdYUbS/j5Pbjn2uOD1qnnCS2wSEW p4IR76AdgItzFl90Xm+8ByfbUIBMOgQbUTa3a2n3/QOqSj/+WobKTUDqB89eHraD KsiqUTaASEBwvLe1Pe+UuVMDWXKcUekOZO9v4Q13312UOhGkDJHecrzoxFWOTa/r muNcshgQzg6jUn5S19uly9DOkzdoaQeNxzUpaXUhvyeer08I/U0HipIIeazSWDRv vZniBi7KfFRnm8qz -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:27 2026 by rpki-client