$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft File: AD29F7F191997039ACFD9760F915FEE62892E578.mft (raw, json) Hash identifier: Xf/zhr5cxe4wvojgGyEpPwHWEgjMxsAIMZY/KvhjFbo= Subject key identifier: 30:C4:E5:A8:8C:A7:0A:A6:1F:99:7F:FA:A4:1E:47:0C:44:AA:6F:47 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 69BEA6586746694CA155BEE6E4585B5FC9596AE9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft Manifest number: 3B Signing time: Thu 23 Jul 2026 16:34:37 +0000 Manifest this update: Thu 23 Jul 2026 16:29:37 +0000 Manifest next update: Fri 24 Jul 2026 17:51:37 +0000 Files and hashes: 1: AD29F7F191997039ACFD9760F915FEE62892E578.crl (hash: 6Se8FmfgL5t8Q2cc6JFMa2e0Cvv+fD2tU+aOnNKsrtk=) 2: 326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa (hash: D74S6x+CX7pIkmyrYc8C0iPdqtxDPmFuGT9pYsyXb5o=) 3: 326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa (hash: TspdqNLxsfL6dp4xdPseIhhfwq7xkWofsgu2VL8cf5s=) 4: 326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa (hash: EglxgVjZeYL21zAN5f1qTpSdvc9u/IUyk5p/E9eciNM=) 5: 326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa (hash: +Bzn0imBvQ3Dm0XfkE2a2wG1dPY04xOf0M1OUTVWvjc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 17:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:be:a6:58:67:46:69:4c:a1:55:be:e6:e4:58:5b:5f:c9:59:6a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 23 16:29:37 2026 GMT Not After : Jul 24 17:51:37 2026 GMT Subject: CN=30C4E5A88CA70AA61F997FFAA41E470C44AA6F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:f0:da:9f:5b:f6:ce:ed:04:7f:51:76:cb: ed:3b:c6:1c:d6:02:2b:22:07:40:4f:c0:34:d3:99: 08:2c:35:32:d9:65:46:a9:a9:75:64:97:9b:07:e9: 0f:21:ef:6a:0d:06:42:ad:07:d5:26:31:96:fc:92: 52:ea:36:40:f8:87:2e:50:34:28:61:f9:1f:16:1a: 29:46:f3:0b:8a:3f:da:dc:13:21:a3:09:7d:04:14: 2b:20:e1:1c:42:65:3a:1c:88:f3:93:ec:35:65:69: c2:76:5c:ee:88:01:a0:6f:fa:37:87:06:0b:05:3d: 28:69:e8:e7:03:60:9a:b7:58:73:ad:96:60:f9:fb: 97:bb:ab:c2:50:25:40:4b:ee:2e:e4:f0:69:fc:ee: 67:37:e7:d7:1e:58:a7:af:74:00:ff:9b:da:91:fa: d7:c3:c8:a3:ce:60:ba:33:23:d4:bd:e2:f6:e1:fd: b1:11:a6:e6:0e:3e:96:da:1b:c6:38:bf:11:65:55: 33:7a:d9:a2:d7:fa:68:f2:98:a2:f7:ab:de:9f:bd: 8b:5e:fd:5b:6e:f4:3c:4d:88:91:fb:59:6d:9c:63: bb:2f:dc:92:a9:9d:7f:39:69:3f:42:d3:6b:75:29: ae:d7:bc:20:f1:df:0b:d6:a4:a4:ec:bc:ed:20:f3: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:E5:A8:8C:A7:0A:A6:1F:99:7F:FA:A4:1E:47:0C:44:AA:6F:47 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ba:8d:41:ae:55:75:1f:eb:c6:8f:07:5d:b2:57:15:b2:92: 13:33:dc:bd:14:d6:53:c1:68:f6:6c:af:2a:93:c5:cb:91:57: 5a:50:f6:b3:99:ef:ae:9f:54:f1:75:a2:ce:c5:bd:7c:96:87: f9:30:56:e2:69:28:53:70:5c:70:94:d7:a4:4a:b0:10:f2:07: 48:19:40:40:d8:8a:fc:d3:9f:df:6a:a5:d9:86:ec:de:04:c4: 0c:35:65:72:17:4b:b3:7f:4a:20:71:42:3a:f4:67:40:8e:3c: a6:d7:89:e5:3e:b6:19:5b:c4:b1:26:fd:ef:98:52:c9:88:ee: 55:7c:7c:ce:59:c6:12:2a:ed:3b:67:30:5d:72:3f:6b:ba:42: e2:d8:c6:81:1d:6c:91:d8:24:01:3a:f2:3c:50:6c:7e:4e:47: b4:08:99:ae:a9:ca:34:19:e0:7b:8f:f7:44:4a:f0:de:f2:8e: 2e:36:a4:2f:f6:3e:3a:af:0b:cc:ec:d8:72:6f:32:77:c1:e5: c0:ec:b5:09:cd:61:18:d8:ce:62:a3:c2:38:09:aa:98:e1:25: d8:28:0f:ed:77:19:a7:0c:d6:b8:9d:77:c9:b6:46:d1:c4:51: 20:b7:dd:24:f5:b5:75:62:9b:e6:06:d9:b3:26:9f:aa:b0:44: 55:de:31:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUab6mWGdGaUyhVb7m5FhbX8lZaukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MjMxNjI5MzdaFw0yNjA3MjQxNzUxMzdaMDMxMTAvBgNV BAMTKDMwQzRFNUE4OENBNzBBQTYxRjk5N0ZGQUE0MUU0NzBDNDRBQTZGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYOvDan1v2zu0Ef1F2y+07xhzW AisiB0BPwDTTmQgsNTLZZUapqXVkl5sH6Q8h72oNBkKtB9UmMZb8klLqNkD4hy5Q NChh+R8WGilG8wuKP9rcEyGjCX0EFCsg4RxCZTociPOT7DVlacJ2XO6IAaBv+jeH BgsFPShp6OcDYJq3WHOtlmD5+5e7q8JQJUBL7i7k8Gn87mc359ceWKevdAD/m9qR +tfDyKPOYLozI9S94vbh/bERpuYOPpbaG8Y4vxFlVTN62aLX+mjymKL3q96fvYte /Vtu9DxNiJH7WW2cY7sv3JKpnX85aT9C02t1Ka7XvCDx3wvWpKTsvO0g8zghAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMMTlqIynCqYfmX/6pB5HDESqb0cwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QyNTUwY2FhLWUzOTItNDg0OC05MmZiLWEzZDU4MjhlMzY5NS8xL0FEMjlGN0Yx OTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5MkU1NzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVuo1B rlV1H+vGjwddslcVspITM9y9FNZTwWj2bK8qk8XLkVdaUPazme+un1TxdaLOxb18 lof5MFbiaShTcFxwlNekSrAQ8gdIGUBA2Ir805/faqXZhuzeBMQMNWVyF0uzf0og cUI69GdAjjym14nlPrYZW8SxJv3vmFLJiO5VfHzOWcYSKu07ZzBdcj9rukLi2MaB HWyR2CQBOvI8UGx+Tke0CJmuqco0GeB7j/dESvDe8o4uNqQv9j46rwvM7NhybzJ3 weXA7LUJzWEY2M5io8I4CaqY4SXYKA/tdxmnDNa4nXfJtkbRxFEgt90k9bV1Ypvm BtmzJp+qsERV3jG4 -----END CERTIFICATE-----Generated at Fri Jul 24 09:37:27 2026 by rpki-client