$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: W5Kw0lqL+l8I/iYdJ3tWViL2alJdfXfhQF/k/1EA4a4= Subject key identifier: 7A:BC:65:65:9B:A8:5C:5A:5C:39:A5:86:2F:A1:66:11:03:3F:56:28 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 1157AF86D74600A7F495C6E10BA0E2DEEFF6B611 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 010C Signing time: Fri 24 Jul 2026 08:47:40 +0000 Manifest this update: Fri 24 Jul 2026 08:42:40 +0000 Manifest next update: Sat 25 Jul 2026 10:16:40 +0000 Files and hashes: 1: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 2: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 3: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: jGDSw6IzTVDWa8o05LWFwR9ETHHPzcpCR1UGveN592Y=) 4: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 5: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:57:af:86:d7:46:00:a7:f4:95:c6:e1:0b:a0:e2:de:ef:f6:b6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Jul 24 08:42:40 2026 GMT Not After : Jul 25 10:16:40 2026 GMT Subject: CN=7ABC65659BA85C5A5C39A5862FA16611033F5628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:f9:06:c0:9b:44:62:58:f1:d3:8d:ba:0a: fa:17:6c:81:79:c6:26:49:82:71:c4:05:6d:86:b8: 34:8a:71:ee:59:f9:f0:b4:73:e3:f3:6f:14:0b:30: ef:27:4b:9a:ca:c8:52:e4:60:ae:57:f6:d2:2d:77: 33:df:2b:f2:9f:2e:80:49:df:d7:65:a1:74:75:1a: 14:40:72:ed:38:74:b1:40:a0:74:cf:ef:a0:a8:ce: b8:6d:62:5d:ac:06:df:cb:f3:80:0f:44:98:c8:ed: 25:07:d5:da:38:a0:e8:c8:29:1f:07:a8:cc:fc:e8: bf:67:17:ca:f3:0c:ee:6e:50:33:a8:d7:13:ad:7e: d4:06:99:96:2a:98:90:b0:db:88:cd:1f:62:99:6c: e7:38:e9:3e:47:a7:2b:cb:6c:5c:65:08:9c:9a:51: cc:c0:fa:81:02:1d:64:aa:46:13:26:4a:30:57:dc: b7:c8:10:f1:28:20:d0:3e:df:42:e9:c3:a6:02:28: 8d:07:17:2c:45:e8:26:e4:bf:5c:89:db:4f:4f:ea: f7:6e:98:dc:2c:ef:68:7e:92:80:9b:38:f4:a8:f0: ae:ba:73:a1:81:22:e0:ba:da:3b:0d:e8:ef:64:2b: 13:98:af:95:83:81:3b:73:0b:c8:2c:3f:b3:2a:a4: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BC:65:65:9B:A8:5C:5A:5C:39:A5:86:2F:A1:66:11:03:3F:56:28 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:22:dc:01:68:ff:7c:0b:1f:2e:b4:b5:83:69:2c:5f:e8: 56:34:2f:e1:6d:74:fb:4c:5c:2f:d0:39:5f:94:94:bd:79:32: 83:c5:39:75:6d:fb:51:33:db:46:1e:7e:aa:a8:05:b4:84:64: 4d:72:ce:12:d4:ac:5e:33:90:3b:4d:7a:23:8c:f7:31:82:02: e4:15:6b:d0:a6:63:7c:ef:92:9a:be:19:b0:52:d5:1e:ee:04: 78:14:1c:59:a4:c4:f4:ae:8c:72:30:fb:d6:20:98:c8:70:93: 3f:e5:52:40:e7:3f:85:9c:e5:36:69:58:47:7d:44:bf:53:3d: be:3b:6c:88:90:ee:3e:2b:b7:71:14:dc:ea:8e:b0:e9:c7:ea: cb:c1:cc:27:52:d4:9a:87:b5:ef:40:e7:2b:d9:6b:90:f8:07: 43:60:2b:c4:e9:bf:e3:4b:58:d6:05:64:3d:ae:c0:39:25:5b: 9f:a1:05:22:d6:cf:61:52:2c:d6:e1:36:cd:ca:e0:8b:45:33: 84:e5:b9:08:87:d2:6b:56:0a:51:67:fb:33:f9:30:aa:58:9d: 25:c2:d6:ba:1a:b3:2f:be:29:da:ba:42:a0:cf:28:5e:32:c5: 61:9e:8b:55:e6:05:1a:a7:61:f5:3b:63:87:e8:a4:4b:15:50: c4:ce:3a:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEVevhtdGAKf0lcbhC6Di3u/2thEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA3MjQwODQyNDBaFw0yNjA3MjUxMDE2NDBaMDMxMTAvBgNV BAMTKDdBQkM2NTY1OUJBODVDNUE1QzM5QTU4NjJGQTE2NjExMDMzRjU2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GPkGwJtEYljx0426CvoXbIF5 xiZJgnHEBW2GuDSKce5Z+fC0c+PzbxQLMO8nS5rKyFLkYK5X9tItdzPfK/KfLoBJ 39dloXR1GhRAcu04dLFAoHTP76CozrhtYl2sBt/L84APRJjI7SUH1do4oOjIKR8H qMz86L9nF8rzDO5uUDOo1xOtftQGmZYqmJCw24jNH2KZbOc46T5HpyvLbFxlCJya UczA+oECHWSqRhMmSjBX3LfIEPEoINA+30Lpw6YCKI0HFyxF6Cbkv1yJ209P6vdu mNws72h+koCbOPSo8K66c6GBIuC62jsN6O9kKxOYr5WDgTtzC8gsP7MqpKsJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUerxlZZuoXFpcOaWGL6FmEQM/VigwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbFiLc AWj/fAsfLrS1g2ksX+hWNC/hbXT7TFwv0DlflJS9eTKDxTl1bftRM9tGHn6qqAW0 hGRNcs4S1KxeM5A7TXojjPcxggLkFWvQpmN875KavhmwUtUe7gR4FBxZpMT0roxy MPvWIJjIcJM/5VJA5z+FnOU2aVhHfUS/Uz2+O2yIkO4+K7dxFNzqjrDpx+rLwcwn UtSah7XvQOcr2WuQ+AdDYCvE6b/jS1jWBWQ9rsA5JVufoQUi1s9hUizW4TbNyuCL RTOE5bkIh9JrVgpRZ/sz+TCqWJ0lwta6GrMvvinaukKgzyheMsVhnotV5gUap2H1 O2OH6KRLFVDEzjpO -----END CERTIFICATE-----Generated at Fri Jul 24 12:07:31 2026 by rpki-client