$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: clmyFmwVdAZZkACJuiaSpwKg1Dua68eahViGqjTzWxQ= Subject key identifier: 94:8B:55:EB:07:B6:8A:4F:F8:05:E2:3F:60:E6:BF:5A:41:50:21:B0 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 08AD3B26CE1951C7390B1C80D3C7F35DFF057CEF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0470 Signing time: Thu 23 Jul 2026 22:19:11 +0000 Manifest this update: Thu 23 Jul 2026 22:14:11 +0000 Manifest next update: Sat 25 Jul 2026 02:15:11 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: AFdVbF+t7enaBcXtivBCIWZ4DC/o60h37NufNzvP0zQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ad:3b:26:ce:19:51:c7:39:0b:1c:80:d3:c7:f3:5d:ff:05:7c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 23 22:14:11 2026 GMT Not After : Jul 25 02:15:11 2026 GMT Subject: CN=948B55EB07B68A4FF805E23F60E6BF5A415021B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:c6:12:c9:51:4a:c9:bc:7f:ec:be:2c:80: 02:28:bd:7b:ce:d9:12:93:0e:1c:18:95:71:bf:39: 3e:97:08:81:52:46:99:8b:38:f2:b0:f8:09:90:f3: f0:8b:d2:51:7c:01:f9:ea:59:35:dc:81:00:70:43: 75:f2:41:d6:44:75:ce:fe:28:06:c4:ce:eb:aa:a2: c5:03:a7:f7:cb:15:5a:a9:24:aa:30:9a:6f:81:63: 66:8b:ad:a9:1f:39:a8:24:2d:97:51:1a:52:31:1c: f2:a3:5d:61:c4:31:90:10:a2:eb:9c:be:bd:55:84: 3f:53:f5:d3:78:78:8c:27:d7:51:75:d2:b2:2b:3a: e3:26:62:69:99:cb:56:88:07:16:18:ae:8d:ab:7a: 2f:97:1d:10:8e:4e:93:0f:79:27:1b:ac:32:18:a5: 10:37:62:05:28:cb:27:f0:a7:64:d3:4a:e5:9b:87: ef:a8:5e:ca:75:df:7f:a0:87:9e:42:b8:3c:ac:28: 82:5b:53:4d:fb:4f:0e:71:65:e8:f1:d4:e2:6c:c0: 1b:73:21:87:6e:31:80:75:b9:0a:90:ed:fe:64:43: dd:dd:ca:87:c4:52:06:d3:87:5c:97:33:98:a0:97: cc:db:a3:91:f6:19:f4:4a:7a:d6:58:7d:bd:8d:bb: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:55:EB:07:B6:8A:4F:F8:05:E2:3F:60:E6:BF:5A:41:50:21:B0 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a9:09:34:a8:2c:90:20:3a:36:3e:f1:f4:2e:bc:b9:7d:92: 6c:c4:6c:92:f1:c7:e1:db:41:39:b5:f2:4d:2b:d2:46:ca:e8: 70:a5:08:a3:93:f9:2c:b1:62:c6:41:cc:bf:bd:27:c6:04:cb: 65:c3:59:c1:bd:99:aa:88:ed:27:aa:fa:9e:9d:51:7e:b2:fa: 1e:01:88:a2:83:fc:e8:8b:69:f0:df:85:db:88:88:d0:8c:c3: 8a:d6:0e:25:89:4a:24:d0:0f:4b:38:ea:59:09:22:7a:55:f1: 9c:a8:e2:3d:80:fa:95:7c:42:6d:e5:ce:75:02:80:2e:03:32: 82:79:7f:f8:5d:11:e9:ac:6c:48:98:47:f7:fb:87:57:42:8d: c0:ab:26:0d:56:75:74:f7:4d:cb:45:54:18:2b:87:99:d7:e1: 5b:96:ac:8b:4f:7f:1b:0e:3c:23:15:db:6f:7a:bd:67:38:ea: a9:0b:95:70:03:cd:24:d1:39:e0:19:0e:d4:6e:c1:80:d4:6f: 9b:99:01:8e:f9:73:04:8c:02:92:b5:84:94:1b:27:f6:91:e5: 0b:cb:2c:e9:2e:b5:0c:c6:6f:54:70:6a:65:03:30:49:ef:4c: 60:43:4f:18:77:a8:e9:bc:f8:60:e8:ad:72:c9:a3:69:33:50: e5:8f:bd:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCK07Js4ZUcc5CxyA08fzXf8FfO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA3MjMyMjE0MTFaFw0yNjA3MjUwMjE1MTFaMDMxMTAvBgNV BAMTKDk0OEI1NUVCMDdCNjhBNEZGODA1RTIzRjYwRTZCRjVBNDE1MDIxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQcYSyVFKybx/7L4sgAIovXvO 2RKTDhwYlXG/OT6XCIFSRpmLOPKw+AmQ8/CL0lF8AfnqWTXcgQBwQ3XyQdZEdc7+ KAbEzuuqosUDp/fLFVqpJKowmm+BY2aLrakfOagkLZdRGlIxHPKjXWHEMZAQouuc vr1VhD9T9dN4eIwn11F10rIrOuMmYmmZy1aIBxYYro2rei+XHRCOTpMPeScbrDIY pRA3YgUoyyfwp2TTSuWbh++oXsp133+gh55CuDysKIJbU037Tw5xZejx1OJswBtz IYduMYB1uQqQ7f5kQ93dyofEUgbTh1yXM5igl8zbo5H2GfRKetZYfb2Nu8a/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlItV6we2ik/4BeI/YOa/WkFQIbAwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLqQk0 qCyQIDo2PvH0Lry5fZJsxGyS8cfh20E5tfJNK9JGyuhwpQijk/kssWLGQcy/vSfG BMtlw1nBvZmqiO0nqvqenVF+svoeAYiig/zoi2nw34XbiIjQjMOK1g4liUok0A9L OOpZCSJ6VfGcqOI9gPqVfEJt5c51AoAuAzKCeX/4XRHprGxImEf3+4dXQo3AqyYN VnV0903LRVQYK4eZ1+FblqyLT38bDjwjFdtver1nOOqpC5VwA80k0TngGQ7UbsGA 1G+bmQGO+XMEjAKStYSUGyf2keULyyzpLrUMxm9UcGplAzBJ70xgQ08Yd6jpvPhg 6K1yyaNpM1Dlj72h -----END CERTIFICATE-----Generated at Fri Jul 24 01:37:47 2026 by rpki-client