$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: X+XfTs0txi5GehTl5zEi5jpUClBeSgmvp/bBcmIjiK0= Subject key identifier: 9B:13:81:6B:B7:40:8A:92:7D:14:CA:DB:4B:B8:14:BE:9E:BB:BD:81 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 14B8A382C0C33E1B1EC176F58A46C57805DFD52B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 063B Signing time: Tue 28 Jul 2026 11:48:23 +0000 Manifest this update: Tue 28 Jul 2026 11:43:23 +0000 Manifest next update: Wed 29 Jul 2026 15:34:23 +0000 Files and hashes: 1: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 2: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 3: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 4: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: ImwbsA7y1iPlh29P+PvTOXi2C5Dy77WrWGemsXj3WuE=) 5: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 6: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 7: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 8: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 9: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 10: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 11: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 12: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (hash: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b8:a3:82:c0:c3:3e:1b:1e:c1:76:f5:8a:46:c5:78:05:df:d5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jul 28 11:43:23 2026 GMT Not After : Jul 29 15:34:23 2026 GMT Subject: CN=9B13816BB7408A927D14CADB4BB814BE9EBBBD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:3f:08:c8:f9:b5:88:ac:4f:03:28:3b:20: ea:e1:42:04:dc:f8:7c:84:cf:25:08:d9:14:ee:78: f8:27:2e:21:19:c4:3c:31:bf:4b:aa:bc:e2:71:00: 59:6a:aa:ff:a5:a3:f0:05:fa:fe:9a:1f:10:8d:17: a4:28:8b:00:2d:b8:df:30:e1:11:27:f1:15:04:22: ca:83:a2:54:ea:f4:3d:38:5f:2b:2b:4a:2e:31:9a: 88:6e:82:12:d8:2f:31:62:a8:39:a0:82:e2:ac:0b: 61:8b:0d:2f:16:87:09:bf:84:86:d9:02:43:3a:13: 07:09:fb:bf:6e:f0:81:e3:bd:d2:e8:f5:15:32:8f: 3d:e2:40:79:f6:03:62:74:db:31:92:6c:d3:66:07: 25:43:bd:5d:50:71:f0:ce:9c:d7:fd:3e:b8:63:0b: 41:2f:9f:ac:57:6f:24:89:48:21:2a:9f:b1:78:56: 71:df:49:79:7d:26:83:49:9f:59:77:48:77:34:48: 55:8c:5f:9d:da:2f:70:91:e3:06:d2:bb:e6:12:11: 25:75:75:3f:9e:43:6f:6c:0e:8e:67:a6:c9:b4:a1: d5:b3:88:19:79:15:7e:da:d5:4f:42:5f:99:49:67: 25:0b:54:3f:8d:1c:7b:98:3a:ca:d6:ee:76:70:45: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:81:6B:B7:40:8A:92:7D:14:CA:DB:4B:B8:14:BE:9E:BB:BD:81 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:76:c0:f4:01:40:28:66:19:68:84:e3:c5:68:fc:33:86: 48:e6:38:71:ac:9c:7f:88:40:97:0c:15:f8:64:04:20:8d:d4: a8:a9:74:09:47:4b:5d:dc:ef:75:f3:bd:d3:ab:e8:77:c2:5f: 8b:c0:0e:21:71:a0:8a:0b:7c:52:1f:28:fe:55:82:89:43:ca: 50:b1:b7:68:24:ad:ff:3f:a7:b1:77:03:0d:c9:ba:5c:6e:f5: e4:4f:e8:19:41:f7:40:6a:d9:ec:69:a1:66:8b:94:74:a9:93: 5a:61:bd:fb:6a:f7:df:8a:82:1e:6b:e1:77:17:fa:55:a0:23: c1:21:d6:ae:54:86:93:3f:56:a4:60:8b:6b:b9:54:06:07:51: 47:5d:f4:d9:8d:4b:49:a0:fa:8c:75:13:08:4b:4c:02:11:36: ba:b5:69:5e:1d:6f:00:9f:12:3e:00:88:42:2b:4a:7b:a0:af: 4c:26:96:d6:d5:a8:fe:e7:ae:ad:f8:17:f4:e8:ae:a0:ee:cf: 41:d7:03:34:97:cf:0f:a0:92:07:6d:29:40:7a:84:5d:87:c0: 18:8c:f4:28:1e:cb:55:7c:19:a3:90:2d:09:04:89:21:e9:12: ad:41:5b:e9:06:ad:68:e7:b9:04:af:c7:6a:44:5a:30:7f:a9: 81:51:b9:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFLijgsDDPhsewXb1ikbFeAXf1SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA3MjgxMTQzMjNaFw0yNjA3MjkxNTM0MjNaMDMxMTAvBgNV BAMTKDlCMTM4MTZCQjc0MDhBOTI3RDE0Q0FEQjRCQjgxNEJFOUVCQkJEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4D8IyPm1iKxPAyg7IOrhQgTc +HyEzyUI2RTuePgnLiEZxDwxv0uqvOJxAFlqqv+lo/AF+v6aHxCNF6QoiwAtuN8w 4REn8RUEIsqDolTq9D04XysrSi4xmohughLYLzFiqDmgguKsC2GLDS8Whwm/hIbZ AkM6EwcJ+79u8IHjvdLo9RUyjz3iQHn2A2J02zGSbNNmByVDvV1QcfDOnNf9Prhj C0Evn6xXbySJSCEqn7F4VnHfSXl9JoNJn1l3SHc0SFWMX53aL3CR4wbSu+YSESV1 dT+eQ29sDo5npsm0odWziBl5FX7a1U9CX5lJZyULVD+NHHuYOsrW7nZwRV7hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmxOBa7dAipJ9FMrbS7gUvp67vYEwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknN2wPQBQChmGWiE48Vo /DOGSOY4caycf4hAlwwV+GQEII3UqKl0CUdLXdzvdfO906vod8Jfi8AOIXGgigt8 Uh8o/lWCiUPKULG3aCSt/z+nsXcDDcm6XG715E/oGUH3QGrZ7GmhZouUdKmTWmG9 +2r334qCHmvhdxf6VaAjwSHWrlSGkz9WpGCLa7lUBgdRR1302Y1LSaD6jHUTCEtM AhE2urVpXh1vAJ8SPgCIQitKe6CvTCaW1tWo/ueurfgX9OiuoO7PQdcDNJfPD6CS B20pQHqEXYfAGIz0KB7LVXwZo5AtCQSJIekSrUFb6QataOe5BK/HakRaMH+pgVG5 BQ== -----END CERTIFICATE-----Generated at Wed Jul 29 08:43:41 2026 by rpki-client