$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: tu6BN5O5iM/VZfBsMw3Cg/aqds3JvfI2jACIsJXjp00= Subject key identifier: 06:59:02:90:8F:AA:7B:B2:B0:5D:99:8F:C2:D3:4C:4F:30:A5:D9:11 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 46478C4CAEB497BB6CE52EF2548ADFBA18F85326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 02B1 Signing time: Tue 28 Jul 2026 05:48:31 +0000 Manifest this update: Tue 28 Jul 2026 05:43:31 +0000 Manifest next update: Wed 29 Jul 2026 08:38:31 +0000 Files and hashes: 1: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 2: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 3: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 4: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 5: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 6: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 7: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 8: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: dwhpJ+xVb9ykGHGsb2Oqb0v7nuGckiUTzy1TSJmD8XY=) 9: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 10: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 11: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 12: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 13: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 14: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) 15: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:47:8c:4c:ae:b4:97:bb:6c:e5:2e:f2:54:8a:df:ba:18:f8:53:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Jul 28 05:43:31 2026 GMT Not After : Jul 29 08:38:31 2026 GMT Subject: CN=065902908FAA7BB2B05D998FC2D34C4F30A5D911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:43:da:12:0d:b5:15:95:fd:52:70:c6:fc: 1b:c6:ef:f4:26:31:fc:61:63:2e:94:47:22:3f:8d: 2e:cb:28:7e:32:27:44:67:3b:ed:31:d7:1a:c6:37: af:88:09:18:38:2b:a6:34:2c:6d:9c:6a:a6:c4:57: 05:6a:19:be:90:fe:a9:af:b9:8e:70:41:52:0b:ca: 84:3c:fa:72:88:44:5f:d8:ac:78:cc:b3:d5:a7:e7: 11:00:ae:0a:b5:6f:89:89:75:4d:a2:6d:17:f6:73: ed:0e:7f:0e:20:18:ec:0b:41:35:b8:56:2b:35:09: ce:ca:15:98:97:c1:c8:01:54:1b:ea:e3:3f:ff:a2: 20:ae:52:82:a9:f2:a1:ba:8c:6a:91:1a:de:75:26: 89:9a:7a:38:84:91:ac:73:ef:73:6a:b7:5a:8c:8d: ac:50:57:40:5a:d0:00:ca:63:ac:57:d5:bb:4e:4f: 46:50:a8:f5:d6:e7:fe:83:b2:99:ea:d1:bc:bb:0f: 66:3f:64:0a:f9:71:0d:d9:39:ec:90:ce:6c:d2:cd: 3d:7b:dd:4f:2c:e3:f1:34:0b:8e:3f:d0:8d:2d:03: e5:61:61:4c:02:35:86:ae:61:e6:86:17:22:b0:7a: f8:f0:d2:27:e1:ec:c7:8b:39:92:e0:5e:35:f5:b2: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:02:90:8F:AA:7B:B2:B0:5D:99:8F:C2:D3:4C:4F:30:A5:D9:11 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:85:8e:b9:66:ef:7d:f0:98:c9:1b:ee:60:da:41:ca:df:30: 84:c0:de:c7:6f:85:71:0f:33:6b:d2:2a:6b:40:79:01:05:49: 95:0f:f5:27:29:25:7e:9e:17:e2:4e:fb:85:ff:ab:d7:b4:c8: 02:8d:8c:04:91:f2:53:f8:c1:4c:43:01:1a:81:9a:66:80:c5: cf:82:62:00:4e:7e:d1:75:23:0a:61:d6:72:e8:eb:00:c0:c7: 9a:20:24:ce:be:fe:76:b7:5b:26:c3:44:11:af:ae:9f:82:2a: 6b:74:71:e3:a2:2e:2a:4c:6c:21:54:59:23:e5:9c:1c:e4:75: f6:16:41:cf:68:7d:1e:c2:d3:7e:88:a8:7a:f6:83:f7:cd:e8: 1a:96:3f:d7:b7:38:0e:05:ac:fe:f0:62:a9:d6:c1:7e:a7:01: 6c:b2:78:20:b9:41:4e:52:d9:a0:70:9a:0e:c7:86:e1:c3:8c: 24:2f:cc:46:11:bd:e9:30:72:94:61:1d:97:5f:85:c1:2a:0d: 76:6a:8d:66:37:fc:0b:08:d2:87:ac:7d:ed:da:7e:93:8e:5b: b7:d2:23:e3:8f:8b:12:66:28:66:6b:6b:ac:54:b2:59:0e:51: a3:b0:d9:3c:37:a5:62:20:2c:03:df:dd:24:63:cc:c6:e9:c4: fa:31:85:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURkeMTK60l7ts5S7yVIrfuhj4UyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA3MjgwNTQzMzFaFw0yNjA3MjkwODM4MzFaMDMxMTAvBgNV BAMTKDA2NTkwMjkwOEZBQTdCQjJCMDVEOTk4RkMyRDM0QzRGMzBBNUQ5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcEPaEg21FZX9UnDG/BvG7/Qm MfxhYy6URyI/jS7LKH4yJ0RnO+0x1xrGN6+ICRg4K6Y0LG2caqbEVwVqGb6Q/qmv uY5wQVILyoQ8+nKIRF/YrHjMs9Wn5xEArgq1b4mJdU2ibRf2c+0Ofw4gGOwLQTW4 Vis1Cc7KFZiXwcgBVBvq4z//oiCuUoKp8qG6jGqRGt51JomaejiEkaxz73Nqt1qM jaxQV0Ba0ADKY6xX1btOT0ZQqPXW5/6Dspnq0by7D2Y/ZAr5cQ3ZOeyQzmzSzT17 3U8s4/E0C44/0I0tA+VhYUwCNYauYeaGFyKwevjw0ifh7MeLOZLgXjX1skU7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBlkCkI+qe7KwXZmPwtNMTzCl2REwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4WOuWbvffCYyRvuYNpB yt8whMDex2+FcQ8za9Iqa0B5AQVJlQ/1Jyklfp4X4k77hf+r17TIAo2MBJHyU/jB TEMBGoGaZoDFz4JiAE5+0XUjCmHWcujrAMDHmiAkzr7+drdbJsNEEa+un4Iqa3Rx 46IuKkxsIVRZI+WcHOR19hZBz2h9HsLTfoioevaD983oGpY/17c4DgWs/vBiqdbB fqcBbLJ4ILlBTlLZoHCaDseG4cOMJC/MRhG96TBylGEdl1+FwSoNdmqNZjf8CwjS h6x97dp+k45bt9Ij44+LEmYoZmtrrFSyWQ5Ro7DZPDelYiAsA9/dJGPMxunE+jGF 9g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:09 2026 by rpki-client