$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: nWPz9cF5m9Ya5oXp2BGbL+U25HN1tjI+mn93XMRMmts= Subject key identifier: C8:04:B1:61:2D:76:4C:4F:0A:05:57:E4:04:E3:EA:91:F7:D1:80:75 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 28B67DEB118564BA6847715CDB7F1A4E794AA50C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: 012E Signing time: Thu 23 Jul 2026 20:37:40 +0000 Manifest this update: Thu 23 Jul 2026 20:32:40 +0000 Manifest next update: Fri 24 Jul 2026 23:55:40 +0000 Files and hashes: 1: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) 2: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: GPxXqqeMKpbAWWss1+Rcvz6I4GATibuw7CyMhDMFmzo=) 3: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 4: 326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa (hash: 89YEfdCNb6RXT7z5CsfijNvWZCI5tf3pkWh8RSXOhww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b6:7d:eb:11:85:64:ba:68:47:71:5c:db:7f:1a:4e:79:4a:a5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jul 23 20:32:40 2026 GMT Not After : Jul 24 23:55:40 2026 GMT Subject: CN=C804B1612D764C4F0A0557E404E3EA91F7D18075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:32:ee:b8:f3:4e:6a:90:d7:ce:6c:29:a1: 96:e1:7a:8d:c9:d0:36:8c:9d:b1:6a:17:9d:43:04: b0:9b:42:4d:33:a4:e8:05:ba:da:94:13:33:ca:74: a3:b8:14:d3:d8:8a:98:57:8d:a8:42:49:b0:b1:11: 6c:7c:ce:b3:92:fd:63:c6:c4:66:5e:11:14:aa:de: 47:81:b0:64:e3:6f:af:21:fc:5c:37:d8:0e:9c:85: aa:ce:ec:67:a6:ac:ae:bd:89:ab:7d:aa:e6:9e:39: 20:72:bd:e7:13:66:8b:07:77:5b:d6:44:56:3d:d8: c5:86:4c:d2:aa:18:d4:39:84:2e:5f:6c:79:a1:d3: 46:bd:df:aa:ff:1e:00:69:fc:d5:70:12:7e:ae:e8: a8:a8:12:df:05:94:73:e3:45:dd:24:6d:9f:bc:26: 57:aa:51:11:64:3f:c8:c4:15:4c:1c:c3:26:1f:80: d9:87:c9:68:18:2a:03:77:c5:50:50:b7:68:b1:9b: 5f:1d:df:e0:a5:1d:73:d4:90:10:0f:b3:5e:a3:00: 27:f4:fd:a3:51:9b:89:22:35:aa:c3:3b:49:b3:54: 70:8f:9d:ed:6e:a3:b8:59:59:2b:9c:a1:8d:81:a8: 1a:96:b9:51:e3:6b:53:8d:84:8e:fb:6e:ef:61:79: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:B1:61:2D:76:4C:4F:0A:05:57:E4:04:E3:EA:91:F7:D1:80:75 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8f:6a:ae:8d:a7:ce:c2:d5:f7:0f:5a:a4:bb:23:ae:82:5e: cd:51:6a:04:9d:fa:57:d3:04:ad:25:c2:2c:47:21:1d:7d:94: fd:75:d3:79:0b:75:c7:b5:a2:f6:b6:c3:09:ec:19:bf:03:c6: f8:67:57:14:64:6b:37:3b:ae:30:d6:f3:2e:d9:80:33:08:c6: 76:1e:19:5b:79:9d:01:ff:a5:08:8a:18:d4:3d:c5:1a:48:ae: 47:09:0f:1b:bf:01:7c:12:37:34:d3:85:33:fb:7d:9a:91:a3: 7b:35:17:ba:56:0f:d3:4c:d4:de:31:ac:21:83:95:6f:72:68: 4a:a6:5a:57:01:a1:8d:2d:66:67:97:87:db:76:8d:27:da:92: e6:9e:f9:b1:8f:59:71:09:49:e2:6d:79:7c:a4:bc:f9:15:8b: 74:31:3b:ef:2b:a8:8b:4c:4e:ad:3a:b4:3c:64:94:31:29:d8: f3:35:38:ee:9e:f7:49:c5:f9:7f:4c:97:eb:3d:74:c1:cc:ca: ba:33:16:84:8c:b1:a1:f1:2a:0d:67:61:b1:24:17:24:17:37: f8:87:a3:26:af:fc:ab:a5:9f:8d:98:d1:b4:96:83:79:52:20: eb:07:2e:7c:cf:fb:62:2a:42:d0:15:24:f1:50:b3:6c:e1:49: 5b:63:88:35 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUKLZ96xGFZLpoR3Fc238aTnlKpQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA3MjMyMDMyNDBaFw0yNjA3MjQyMzU1NDBaMDMxMTAvBgNV BAMTKEM4MDRCMTYxMkQ3NjRDNEYwQTA1NTdFNDA0RTNFQTkxRjdEMTgwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3zLuuPNOapDXzmwpoZbheo3J 0DaMnbFqF51DBLCbQk0zpOgFutqUEzPKdKO4FNPYiphXjahCSbCxEWx8zrOS/WPG xGZeERSq3keBsGTjb68h/Fw32A6charO7GemrK69iat9quaeOSByvecTZosHd1vW RFY92MWGTNKqGNQ5hC5fbHmh00a936r/HgBp/NVwEn6u6KioEt8FlHPjRd0kbZ+8 JleqURFkP8jEFUwcwyYfgNmHyWgYKgN3xVBQt2ixm18d3+ClHXPUkBAPs16jACf0 /aNRm4kiNarDO0mzVHCPne1uo7hZWSucoY2BqBqWuVHja1ONhI77bu9heYQ9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUyASxYS12TE8KBVfkBOPqkffRgHUwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI9qro2nzsLV9w9apLsj roJezVFqBJ36V9MErSXCLEchHX2U/XXTeQt1x7Wi9rbDCewZvwPG+GdXFGRrNzuu MNbzLtmAMwjGdh4ZW3mdAf+lCIoY1D3FGkiuRwkPG78BfBI3NNOFM/t9mpGjezUX ulYP00zU3jGsIYOVb3JoSqZaVwGhjS1mZ5eH23aNJ9qS5p75sY9ZcQlJ4m15fKS8 +RWLdDE77yuoi0xOrTq0PGSUMSnY8zU47p73ScX5f0yX6z10wczKujMWhIyxofEq DWdhsSQXJBc3+IejJq/8q6WfjZjRtJaDeVIg6wcufM/7YipC0BUk8VCzbOFJW2OI NQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:32 2026 by rpki-client