$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: 7rI0iCUW4KgEy3VYlH1EED0KUnUY/rsB6YCGO53po5s= Subject key identifier: 70:40:52:07:0C:CE:ED:2E:F7:26:29:68:7F:D9:FA:4D:D1:C0:0C:11 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 5E70113EDA652F67C87888B762E4A3C08EA32CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 05D7 Signing time: Thu 23 Jul 2026 14:44:38 +0000 Manifest this update: Thu 23 Jul 2026 14:39:38 +0000 Manifest next update: Fri 24 Jul 2026 18:00:38 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 2: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 3: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 4: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 5: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 6: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 7: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: F5SORuqMUyz4nMsz9CB5BWVF2GXrq98JDshS2IbuyGM=) 8: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 9: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 10: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 11: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 12: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 13: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 14: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 15: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:11:3e:da:65:2f:67:c8:78:88:b7:62:e4:a3:c0:8e:a3:2c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jul 23 14:39:38 2026 GMT Not After : Jul 24 18:00:38 2026 GMT Subject: CN=704052070CCEED2EF72629687FD9FA4DD1C00C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:fc:ef:88:45:14:33:22:2f:b8:ea:86:cd: f0:c0:81:cd:22:aa:08:a5:b0:bf:0e:a0:ef:81:73: f3:13:0c:68:91:5c:42:84:6d:b3:4e:46:c9:f3:31: c8:ea:f2:db:76:d5:a8:47:b0:fe:ff:7d:d0:e8:e5: ef:18:e5:e0:b6:7a:94:1c:d1:33:dc:91:de:c6:dc: ac:6b:1b:ad:e1:0f:3f:c0:f8:7a:f4:04:91:63:7a: a4:e1:03:d1:f2:e5:e7:e7:e6:0e:fa:a5:29:75:d3: 21:0d:7f:84:fb:f2:dc:f1:3b:f0:7d:4d:47:b9:35: a8:9b:84:02:bc:a5:a8:fd:2d:ab:80:ef:a0:61:44: ce:2c:a2:96:04:0b:7d:71:10:b9:f4:2d:63:3b:05: c0:eb:7f:da:45:4f:56:fd:f8:c8:10:1b:27:da:a0: c8:fc:0f:19:05:9e:28:1f:1c:60:17:f2:ad:51:73: 97:c7:6e:64:03:be:e7:65:44:ba:d9:86:fb:a5:2e: 7c:29:63:fb:95:32:ab:b8:34:b1:2f:23:ba:a2:38: d0:90:cb:8e:1f:3d:79:71:31:f9:d8:17:e7:0a:76: 8b:c8:99:72:5d:58:0d:e9:39:1d:08:b5:72:d3:0b: dd:ad:55:c5:ed:a2:58:54:0d:8a:ca:fd:ff:2e:b1: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:40:52:07:0C:CE:ED:2E:F7:26:29:68:7F:D9:FA:4D:D1:C0:0C:11 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:32:06:02:22:1a:a0:68:dd:f9:0c:57:72:32:59:65:f8:ea: aa:a5:e3:76:35:33:dd:7e:9b:ec:e8:e1:59:25:41:33:9e:57: fc:04:de:b8:bc:b0:94:54:37:cc:08:6e:12:cf:ef:65:96:d5: b8:05:f5:3b:16:86:b0:fe:51:3a:fa:00:a3:61:ec:67:f8:cc: 1e:ec:e0:08:61:af:07:f5:d1:06:62:c8:2b:d2:0f:d7:e8:95: 2c:3a:c7:3c:7f:9d:fd:54:8d:cc:12:ef:94:25:82:d7:fd:b2: e9:5a:83:cc:35:42:b6:e0:6d:01:62:5b:76:4f:f5:36:01:d7: cb:bf:6d:1a:da:72:d2:ba:f0:b1:51:25:24:94:49:62:91:b0: 7d:1e:1c:60:14:8b:c2:bf:1d:e5:0e:53:e2:7e:91:23:67:0c: 5e:00:76:60:aa:82:10:12:83:9a:a6:03:ea:d1:95:62:10:ae: 12:ef:be:f1:17:64:c3:b4:9c:fb:e3:2a:70:f0:63:ec:ab:d9: 31:29:1c:71:c6:c3:d1:8c:6c:4a:8d:bc:41:e1:e3:ea:5d:f8: f7:8a:cd:7a:04:89:d9:6f:23:29:2a:5e:a0:e9:6e:0d:9a:68: d0:1d:c5:8d:50:52:38:70:a5:db:ee:a1:21:5b:f1:a5:9b:75: 61:aa:b3:38 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXnARPtplL2fIeIi3YuSjwI6jLPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA3MjMxNDM5MzhaFw0yNjA3MjQxODAwMzhaMDMxMTAvBgNV BAMTKDcwNDA1MjA3MENDRUVEMkVGNzI2Mjk2ODdGRDlGQTRERDFDMDBDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hPzviEUUMyIvuOqGzfDAgc0i qgilsL8OoO+Bc/MTDGiRXEKEbbNORsnzMcjq8tt21ahHsP7/fdDo5e8Y5eC2epQc 0TPckd7G3KxrG63hDz/A+Hr0BJFjeqThA9Hy5efn5g76pSl10yENf4T78tzxO/B9 TUe5NaibhAK8paj9LauA76BhRM4sopYEC31xELn0LWM7BcDrf9pFT1b9+MgQGyfa oMj8DxkFnigfHGAX8q1Rc5fHbmQDvudlRLrZhvulLnwpY/uVMqu4NLEvI7qiONCQ y44fPXlxMfnYF+cKdovImXJdWA3pOR0ItXLTC92tVcXtolhUDYrK/f8usU1nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcEBSBwzO7S73Jilof9n6TdHADBEwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTIGAiIaoGjd+QxXcjJZ ZfjqqqXjdjUz3X6b7OjhWSVBM55X/ATeuLywlFQ3zAhuEs/vZZbVuAX1OxaGsP5R OvoAo2HsZ/jMHuzgCGGvB/XRBmLIK9IP1+iVLDrHPH+d/VSNzBLvlCWC1/2y6VqD zDVCtuBtAWJbdk/1NgHXy79tGtpy0rrwsVElJJRJYpGwfR4cYBSLwr8d5Q5T4n6R I2cMXgB2YKqCEBKDmqYD6tGVYhCuEu++8Rdkw7Sc++MqcPBj7KvZMSkcccbD0Yxs So28QeHj6l3494rNegSJ2W8jKSpeoOluDZpo0B3FjVBSOHCl2+6hIVvxpZt1Yaqz OA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:37:30 2026 by rpki-client