$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: vyJROXapB4biIF5OtdqGaUixbedDQI4b3PDusCjv9Jo= Subject key identifier: 3B:C3:38:46:8D:9B:14:F4:E0:73:FA:26:D2:24:21:3D:19:F3:19:6A Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 16B8814F26DF08081FEF3812B7D718086C1A49E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 0260 Signing time: Tue 28 Jul 2026 13:13:06 +0000 Manifest this update: Tue 28 Jul 2026 13:08:06 +0000 Manifest next update: Wed 29 Jul 2026 14:18:06 +0000 Files and hashes: 1: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=) 2: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) 3: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: X9LmZWYrHnunenPjYFvg2DKBbxlVGYR7Qd0JA09oI9k=) 4: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: aQqyppfq1G0dtgfce5qUTiEgqU4ipo9uY/suA4axV58=) 5: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: kBwEK18YCfMx0ouzbMGql3wfMadnMbnDgpYbNfw03+g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b8:81:4f:26:df:08:08:1f:ef:38:12:b7:d7:18:08:6c:1a:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Jul 28 13:08:06 2026 GMT Not After : Jul 29 14:18:06 2026 GMT Subject: CN=3BC338468D9B14F4E073FA26D224213D19F3196A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:bf:b6:8e:ee:c1:6b:4b:5b:7e:ff:94:21: 7a:69:8e:42:40:ff:29:f7:0b:6d:e1:dd:0c:22:13: f1:18:d6:5d:f7:33:95:d0:1c:ea:3d:68:97:81:a3: f6:e0:e7:e5:81:29:9f:ac:85:22:ab:95:f4:6e:69: 31:de:b9:65:59:01:5f:e2:76:68:22:ba:a1:6b:40: 75:00:9d:b2:16:78:49:cf:7b:17:d6:42:30:97:11: 9d:9a:1a:22:44:85:b8:0f:21:a5:44:a4:31:9f:19: 26:35:54:33:0a:5d:0b:b8:c7:30:f8:75:6c:2e:9e: a2:e1:09:2a:1a:b2:4b:5b:0d:98:43:fa:65:c7:21: 8e:f5:1f:62:cb:4c:29:d8:db:b4:da:10:10:f3:65: 38:78:c1:c8:be:37:ca:2a:e8:27:be:f1:75:c5:93: 7a:4c:a7:1b:19:cf:75:0f:91:07:29:30:d7:ff:c4: 40:3b:0c:2b:3e:fd:57:ae:d0:2e:6f:71:9a:3b:ed: 97:5d:67:8a:8b:73:17:6d:67:d6:97:16:fc:32:e2: 8a:aa:d3:26:4d:4e:b7:a2:ca:f5:98:30:c1:90:40: 06:51:f3:e9:ea:f8:4f:91:9c:ed:95:87:61:aa:ef: 5b:12:67:ab:ad:01:b3:a3:5a:de:cc:47:86:53:46: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:38:46:8D:9B:14:F4:E0:73:FA:26:D2:24:21:3D:19:F3:19:6A X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:40:65:d0:b2:4f:70:05:77:08:da:46:c0:d5:33:4f:13:01: 7d:ec:27:72:3b:ae:38:ca:03:fa:8e:4c:91:ea:3b:4f:7b:94: 82:0b:b1:04:59:cd:03:02:64:05:fa:de:3d:32:dd:48:52:fd: 67:eb:45:7b:ff:4a:f6:13:b3:64:7b:76:69:24:be:f6:b1:1d: 58:af:eb:a6:11:94:55:61:6c:ea:af:db:2a:8b:f6:2a:71:f0: fd:c4:d8:e7:5b:d3:ab:a7:e0:2f:1c:1c:1e:17:4d:6f:6f:ee: fd:ea:d6:73:ca:ba:08:e6:3c:92:92:2d:5d:ba:e4:51:40:1f: 8c:34:75:e8:4f:7a:39:53:14:87:9a:d1:2b:38:9f:18:c9:ff: 0e:80:7f:ff:2e:24:69:73:ee:0d:68:50:18:bb:dd:d8:61:4b: c2:c6:84:a9:e6:4b:14:7c:76:7b:8c:0a:6a:5f:89:76:81:c9: 69:db:9c:40:f7:8e:1c:c9:7f:f6:3e:d3:b5:0f:b9:e6:8a:8a: 30:aa:cd:cd:c0:c9:e4:96:55:75:bf:c0:94:2f:0e:9a:d2:c7: 66:a3:b7:55:dc:df:6d:15:c2:e8:fd:0e:5d:d9:d2:c8:8e:20: de:b0:2e:6a:1c:d9:2c:87:4b:4b:9f:89:cc:c4:54:6e:b0:28: 7f:96:4f:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFriBTybfCAgf7zgSt9cYCGwaSecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjA3MjgxMzA4MDZaFw0yNjA3MjkxNDE4MDZaMDMxMTAvBgNV BAMTKDNCQzMzODQ2OEQ5QjE0RjRFMDczRkEyNkQyMjQyMTNEMTlGMzE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ57+2ju7Ba0tbfv+UIXppjkJA /yn3C23h3QwiE/EY1l33M5XQHOo9aJeBo/bg5+WBKZ+shSKrlfRuaTHeuWVZAV/i dmgiuqFrQHUAnbIWeEnPexfWQjCXEZ2aGiJEhbgPIaVEpDGfGSY1VDMKXQu4xzD4 dWwunqLhCSoasktbDZhD+mXHIY71H2LLTCnY27TaEBDzZTh4wci+N8oq6Ce+8XXF k3pMpxsZz3UPkQcpMNf/xEA7DCs+/Veu0C5vcZo77ZddZ4qLcxdtZ9aXFvwy4oqq 0yZNTreiyvWYMMGQQAZR8+nq+E+RnO2Vh2Gq71sSZ6utAbOjWt7MR4ZTRjy1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUO8M4Ro2bFPTgc/om0iQhPRnzGWowHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUBl0LJPcAV3CNpGwNUz TxMBfewncjuuOMoD+o5Mkeo7T3uUgguxBFnNAwJkBfrePTLdSFL9Z+tFe/9K9hOz ZHt2aSS+9rEdWK/rphGUVWFs6q/bKov2KnHw/cTY51vTq6fgLxwcHhdNb2/u/erW c8q6COY8kpItXbrkUUAfjDR16E96OVMUh5rRKzifGMn/DoB//y4kaXPuDWhQGLvd 2GFLwsaEqeZLFHx2e4wKal+JdoHJaducQPeOHMl/9j7TtQ+55oqKMKrNzcDJ5JZV db/AlC8OmtLHZqO3VdzfbRXC6P0OXdnSyI4g3rAuahzZLIdLS5+JzMRUbrAof5ZP fg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:41 2026 by rpki-client