$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: xi8aiQMHp15Z2ROFjri5wX8SQxOKNTgn+0kWM0+64hQ= Subject key identifier: C4:10:22:BE:BC:A2:4F:74:11:8A:B9:EC:B7:DD:9D:6F:47:54:A6:98 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 4E0D418B8CA64B9BFD0452EABFDEC478F6218062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 05D5 Signing time: Tue 28 Jul 2026 19:06:20 +0000 Manifest this update: Tue 28 Jul 2026 19:01:20 +0000 Manifest next update: Wed 29 Jul 2026 22:58:20 +0000 Files and hashes: 1: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 2: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 3: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 4: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 5: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 6: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: XoHCGj2wCy49FTbojqNhDpWuJ9ygPbMmDzAiLYaEy4A=) 7: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 8: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 9: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 10: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 11: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 12: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 13: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 14: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 15: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 16: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 17: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 18: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 19: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 20: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 21: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 22: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 23: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 24: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 25: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 26: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 27: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 28: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:41:8b:8c:a6:4b:9b:fd:04:52:ea:bf:de:c4:78:f6:21:80:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jul 28 19:01:20 2026 GMT Not After : Jul 29 22:58:20 2026 GMT Subject: CN=C41022BEBCA24F74118AB9ECB7DD9D6F4754A698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:23:92:d3:d5:cb:f7:42:28:80:63:e3:de: a7:b1:8d:70:5f:35:62:95:da:7e:74:6a:3f:96:28: 4f:5d:95:ed:25:6d:74:78:ee:22:85:d1:05:7a:ed: 3a:e5:31:d7:5a:fe:9d:11:13:f1:51:02:15:1d:ef: 52:44:17:56:cc:4a:9b:75:fd:95:ec:55:ef:58:e2: de:fa:26:d4:a4:eb:a9:9e:52:08:10:86:5f:03:5b: 59:e2:9a:7e:fc:b9:5f:3d:26:b0:77:f4:0a:85:76: ae:f0:e2:79:94:b2:eb:39:60:62:68:43:e8:dc:22: 76:bc:68:89:3c:2d:35:ba:ce:c6:ba:27:03:ea:93: f8:fb:14:fa:88:0c:41:ca:c6:7c:38:2a:aa:1b:24: 85:a8:1b:7a:86:14:b1:27:05:5a:5a:7c:4a:b5:01: cd:8f:87:63:09:e2:aa:ce:b4:4b:cc:d9:db:0c:03: 8a:70:07:fa:61:2a:c0:c6:96:4e:60:1f:32:bb:66: 06:91:60:5b:47:40:34:dd:da:23:24:ac:0f:bc:54: 70:51:fb:5b:12:df:fe:9a:0f:16:df:58:c5:8c:00: 51:c0:e2:ea:cc:8f:27:c5:8f:db:8e:30:c6:73:b9: 86:01:c4:d3:4a:de:a9:bc:00:b7:ff:0f:94:50:72: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:22:BE:BC:A2:4F:74:11:8A:B9:EC:B7:DD:9D:6F:47:54:A6:98 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6b:c1:1c:22:82:e6:f9:31:c9:4d:4a:d4:3e:09:83:ab:d2: 0b:50:11:0d:72:bc:fe:b7:00:5f:f3:b5:f0:1c:a9:93:44:e3: fe:7c:af:ed:7d:f8:61:98:74:93:94:25:e5:ee:56:5d:a6:e8: 4d:56:06:90:15:75:7d:a6:d8:e8:a1:76:f9:a5:8b:1c:d2:a9: 39:42:36:af:10:c9:25:3a:30:5e:bc:7f:ae:64:0b:d4:dc:e1: 76:f3:f5:c5:97:10:7a:8c:3d:c7:17:36:c7:9d:04:63:59:52: 64:89:f9:73:36:41:be:d1:f4:74:8c:06:38:1d:28:a5:1f:ce: fd:ec:82:f5:7a:9a:01:bd:5b:85:12:6a:1c:d8:59:6f:13:4b: 22:eb:c4:53:23:f1:3a:68:dd:77:cc:09:fe:58:0b:a0:39:20: ab:86:59:d6:33:04:a7:88:ab:ce:40:38:58:3d:35:83:42:1d: 5d:24:39:ea:05:7c:2d:0c:8c:bd:4d:8c:16:6e:72:1b:94:5c: 61:69:a1:77:dc:31:5e:c2:a9:1b:02:eb:25:fb:bf:9a:13:97: e0:ec:7e:05:52:75:d2:b7:a7:7f:32:dc:31:35:3e:60:60:06: 03:02:4b:3c:30:ce:d8:18:e6:bf:29:5b:1e:2f:34:d7:02:95: a5:4d:37:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTg1Bi4ymS5v9BFLqv97EePYhgGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA3MjgxOTAxMjBaFw0yNjA3MjkyMjU4MjBaMDMxMTAvBgNV BAMTKEM0MTAyMkJFQkNBMjRGNzQxMThBQjlFQ0I3REQ5RDZGNDc1NEE2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxCOS09XL90IogGPj3qexjXBf NWKV2n50aj+WKE9dle0lbXR47iKF0QV67TrlMdda/p0RE/FRAhUd71JEF1bMSpt1 /ZXsVe9Y4t76JtSk66meUggQhl8DW1nimn78uV89JrB39AqFdq7w4nmUsus5YGJo Q+jcIna8aIk8LTW6zsa6JwPqk/j7FPqIDEHKxnw4KqobJIWoG3qGFLEnBVpafEq1 Ac2Ph2MJ4qrOtEvM2dsMA4pwB/phKsDGlk5gHzK7ZgaRYFtHQDTd2iMkrA+8VHBR +1sS3/6aDxbfWMWMAFHA4urMjyfFj9uOMMZzuYYBxNNK3qm8ALf/D5RQcpt1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxBAivryiT3QRirnst92db0dUppgwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmvBHCKC5vkxyU1K1D4J g6vSC1ARDXK8/rcAX/O18Bypk0Tj/nyv7X34YZh0k5Ql5e5WXaboTVYGkBV1fabY 6KF2+aWLHNKpOUI2rxDJJTowXrx/rmQL1NzhdvP1xZcQeow9xxc2x50EY1lSZIn5 czZBvtH0dIwGOB0opR/O/eyC9XqaAb1bhRJqHNhZbxNLIuvEUyPxOmjdd8wJ/lgL oDkgq4ZZ1jMEp4irzkA4WD01g0IdXSQ56gV8LQyMvU2MFm5yG5RcYWmhd9wxXsKp GwLrJfu/mhOX4Ox+BVJ10renfzLcMTU+YGAGAwJLPDDO2BjmvylbHi801wKVpU03 yg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:26 2026 by rpki-client