$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: c1sv40dTgQSNDEmRFxxUkYyzrSTwBsPHwJpy2+Onwkw= Subject key identifier: 79:53:B7:DB:A0:3A:C0:AF:C6:30:0D:D9:7F:BD:53:4C:28:E6:7E:DC Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 5E5578C0A280B9705DF50500530FA516A57886B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 02E3 Signing time: Wed 29 Jul 2026 00:03:29 +0000 Manifest this update: Tue 28 Jul 2026 23:58:29 +0000 Manifest next update: Thu 30 Jul 2026 00:18:29 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: 70PRal2f7tFDG5zxtMT0tSRVVBsz89h4uhZ055jgEAs=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:55:78:c0:a2:80:b9:70:5d:f5:05:00:53:0f:a5:16:a5:78:86:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jul 28 23:58:29 2026 GMT Not After : Jul 30 00:18:29 2026 GMT Subject: CN=7953B7DBA03AC0AFC6300DD97FBD534C28E67EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:c0:28:f2:38:47:71:d8:f6:c1:f7:33:ca: 67:7c:b9:dd:4c:8f:04:46:38:fb:b7:ee:25:b2:cb: fb:ca:a0:a3:00:e9:63:03:eb:54:fb:6c:e3:7a:a3: 45:10:50:f7:83:ed:4a:f8:a8:9b:4e:d8:e2:d3:57: 17:53:2f:52:0c:7f:b9:61:3c:49:70:81:47:6f:b2: 25:92:c6:ab:ec:b2:ab:4d:d4:e4:dd:25:6d:d8:e6: 7a:76:80:cc:cd:fb:37:6c:86:a6:64:49:ca:95:0c: b9:c5:16:62:77:61:66:b2:97:73:57:56:a8:35:b1: 18:ef:31:03:4d:2d:2d:2e:c0:ff:38:90:94:aa:7e: ad:4c:1d:3d:ea:c7:a8:e4:0d:2a:d6:07:83:b6:c9: 38:b0:d1:3c:a3:9f:36:d5:2a:99:73:b2:ba:4a:23: 7f:35:31:59:8b:61:2f:28:dd:ec:22:69:14:db:58: d5:95:d5:43:b2:27:f3:f8:0e:e2:d5:f7:e7:fd:6f: 73:dd:f5:27:67:5f:50:dd:91:55:78:3d:5f:28:7a: 8c:f8:da:ae:08:4b:f7:9d:ca:0a:34:38:47:37:ce: 23:22:e0:6b:04:d3:3c:a7:c2:1c:48:e3:1a:5d:01: dd:1b:8a:4a:f0:5d:db:07:1f:09:5d:ba:98:83:f9: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:B7:DB:A0:3A:C0:AF:C6:30:0D:D9:7F:BD:53:4C:28:E6:7E:DC X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ac:13:19:0e:17:1e:1a:51:55:c2:09:cc:9f:05:6e:14:d9: 1b:ec:33:cd:7c:1f:cc:3e:39:40:c4:90:8d:e4:25:43:99:06: 4e:ea:ad:77:17:ef:5a:4a:5d:96:e5:c6:dd:fd:e7:88:71:97: 77:d7:5c:7c:6e:18:60:9e:af:13:f7:dc:44:a8:38:80:d1:08: 4e:6e:2a:02:b6:95:3f:dd:e8:66:e9:62:19:15:e7:f6:8c:68: e2:ab:6b:15:b2:df:8d:6d:c8:37:78:c5:30:a7:cc:c0:88:05: 6b:de:69:25:5e:e1:83:7b:55:4e:4e:c1:52:98:81:ec:12:7b: 6a:a4:6f:76:b3:f9:ca:91:82:58:d3:03:cb:a4:b3:60:37:58: 4b:7d:3b:be:a8:60:cc:e3:a8:70:ac:0c:90:db:d0:f0:f0:cf: 0f:15:c1:61:01:3f:a9:29:51:f4:a7:5b:66:c2:ed:76:d4:b0: bc:2e:44:14:5d:dc:04:6f:89:a4:b4:60:13:46:68:a7:9d:8f: 93:b9:d7:c2:2d:52:49:aa:8a:4d:00:7b:4c:18:2e:10:39:b8: 31:d8:5b:55:8a:c5:ff:34:bf:43:9c:a7:16:53:b4:46:2d:74: 51:a0:a1:35:9f:95:73:38:00:d4:49:23:1a:cf:32:5f:73:12: 79:59:28:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXlV4wKKAuXBd9QUAUw+lFqV4hrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA3MjgyMzU4MjlaFw0yNjA3MzAwMDE4MjlaMDMxMTAvBgNV BAMTKDc5NTNCN0RCQTAzQUMwQUZDNjMwMEREOTdGQkQ1MzRDMjhFNjdFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oMAo8jhHcdj2wfczymd8ud1M jwRGOPu37iWyy/vKoKMA6WMD61T7bON6o0UQUPeD7Ur4qJtO2OLTVxdTL1IMf7lh PElwgUdvsiWSxqvssqtN1OTdJW3Y5np2gMzN+zdshqZkScqVDLnFFmJ3YWayl3NX Vqg1sRjvMQNNLS0uwP84kJSqfq1MHT3qx6jkDSrWB4O2yTiw0TyjnzbVKplzsrpK I381MVmLYS8o3ewiaRTbWNWV1UOyJ/P4DuLV9+f9b3Pd9SdnX1DdkVV4PV8oeoz4 2q4IS/edygo0OEc3ziMi4GsE0zynwhxI4xpdAd0bikrwXdsHHwldupiD+b1hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeVO326A6wK/GMA3Zf71TTCjmftwwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhrBMZ DhceGlFVwgnMnwVuFNkb7DPNfB/MPjlAxJCN5CVDmQZO6q13F+9aSl2W5cbd/eeI cZd311x8bhhgnq8T99xEqDiA0QhObioCtpU/3ehm6WIZFef2jGjiq2sVst+Nbcg3 eMUwp8zAiAVr3mklXuGDe1VOTsFSmIHsEntqpG92s/nKkYJY0wPLpLNgN1hLfTu+ qGDM46hwrAyQ29Dw8M8PFcFhAT+pKVH0p1tmwu121LC8LkQUXdwEb4mktGATRmin nY+TudfCLVJJqopNAHtMGC4QObgx2FtVisX/NL9DnKcWU7RGLXRRoKE1n5VzOADU SSMazzJfcxJ5WSiq -----END CERTIFICATE-----Generated at Wed Jul 29 06:06:49 2026 by rpki-client