$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: 8wUS2Wgo50H8rsPpqECD9i3vwlgOqY7UbnbKgpRIKAQ= Subject key identifier: 60:2E:89:64:D2:1C:14:1E:23:61:D3:63:4C:A7:4C:88:3B:65:E7:FF Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 3366E56220F6A6A3AC41E963A097F54DA18D1B5A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: FF Signing time: Tue 28 Jul 2026 13:39:51 +0000 Manifest this update: Tue 28 Jul 2026 13:34:51 +0000 Manifest next update: Wed 29 Jul 2026 15:31:51 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: +dbPucky19llYikiXjnFdTAW0Gg8yPCC9TdAhL8l2i8=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:66:e5:62:20:f6:a6:a3:ac:41:e9:63:a0:97:f5:4d:a1:8d:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jul 28 13:34:51 2026 GMT Not After : Jul 29 15:31:51 2026 GMT Subject: CN=602E8964D21C141E2361D3634CA74C883B65E7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:64:24:5d:ec:a9:23:c2:9b:db:fc:9d:ab: a8:89:32:7c:47:19:53:59:bb:63:52:96:cd:46:d5: 2c:64:b8:07:d3:a7:ea:26:54:45:40:2e:f0:1b:b0: 52:c0:ff:5b:4e:37:97:2b:74:95:a3:d3:0b:f6:c3: 74:03:21:de:74:74:a9:7a:11:c5:59:09:dc:3f:14: 46:a0:27:d9:0b:4f:38:80:c7:6e:12:a5:a4:e6:03: f8:aa:62:c8:04:d6:03:75:45:a2:25:37:be:0f:2b: 74:a0:1d:8e:43:3d:a3:6e:06:1c:4e:64:41:27:77: d1:52:fb:65:6e:7b:f6:20:ac:a8:eb:a1:07:d7:dd: 8a:65:a7:02:3b:0d:4d:a5:70:98:02:4e:fd:5c:4f: 61:47:b6:ce:1d:dc:bb:c6:e2:be:f4:00:e1:92:be: a6:cc:ec:ec:d7:7c:3b:b4:71:45:b4:22:ac:46:20: 09:14:b4:a7:5b:38:c1:4c:f2:c5:6a:04:44:9a:89: 64:87:03:20:ff:95:e5:99:89:59:29:78:38:13:b8: e4:18:1c:8b:3a:95:de:c0:b4:c5:2d:8b:51:84:a3: 89:0d:21:21:d3:c9:f3:d7:28:07:2f:ab:4c:9d:9d: 12:0f:3e:a8:e8:07:4f:d1:31:8a:3f:ec:4d:2a:fc: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2E:89:64:D2:1C:14:1E:23:61:D3:63:4C:A7:4C:88:3B:65:E7:FF X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:67:60:22:d9:e4:c2:e8:8e:62:fa:08:18:b1:55:e0:c3: f4:2a:1f:e7:5f:f7:c8:79:19:5f:29:97:b4:16:ac:25:53:68: f6:3b:30:a2:f2:26:c4:1b:94:53:d2:f1:c7:e7:9a:1d:cc:af: b6:94:01:3b:f8:bb:11:49:f2:5d:2a:73:f8:1e:59:05:f6:46: b8:7a:0b:cc:b6:84:5a:a8:9b:54:45:dd:9b:00:81:ee:0f:c0: a3:aa:30:5c:9f:63:14:1a:a5:29:90:f0:3a:e7:1c:e0:e7:e3: 11:a2:32:86:12:6f:e7:58:55:bf:87:23:df:32:cc:13:70:02: 2e:6a:6f:a1:f0:47:3b:50:f3:12:2f:c0:f5:a5:cf:e9:bb:0e: 23:5d:d7:29:bb:66:22:81:1c:f0:de:a5:ad:0c:0c:c0:f9:fe: f4:0d:34:9a:95:2f:5e:4e:a0:57:c3:59:46:60:35:20:c5:87: 8d:fa:2e:0a:b2:ba:d3:cc:86:90:ea:ae:9d:f5:56:7d:e8:a9: 06:ea:52:0a:74:5b:0a:19:55:e7:f2:fc:a0:fd:9f:ee:ff:57: e9:52:05:00:0e:cd:13:e5:41:32:94:2e:cb:63:b4:3a:e6:6e: 4c:4e:0b:a3:80:e6:ae:d2:08:d2:a9:94:e5:75:bf:f4:e0:ab: 31:06:79:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM2blYiD2pqOsQeljoJf1TaGNG1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA3MjgxMzM0NTFaFw0yNjA3MjkxNTMxNTFaMDMxMTAvBgNV BAMTKDYwMkU4OTY0RDIxQzE0MUUyMzYxRDM2MzRDQTc0Qzg4M0I2NUU3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvWQkXeypI8Kb2/ydq6iJMnxH GVNZu2NSls1G1SxkuAfTp+omVEVALvAbsFLA/1tON5crdJWj0wv2w3QDId50dKl6 EcVZCdw/FEagJ9kLTziAx24SpaTmA/iqYsgE1gN1RaIlN74PK3SgHY5DPaNuBhxO ZEEnd9FS+2Vue/YgrKjroQfX3YplpwI7DU2lcJgCTv1cT2FHts4d3LvG4r70AOGS vqbM7OzXfDu0cUW0IqxGIAkUtKdbOMFM8sVqBESaiWSHAyD/leWZiVkpeDgTuOQY HIs6ld7AtMUti1GEo4kNISHTyfPXKAcvq0ydnRIPPqjoB0/RMYo/7E0q/P6JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYC6JZNIcFB4jYdNjTKdMiDtl5/8wHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/O2dg ItnkwuiOYvoIGLFV4MP0Kh/nX/fIeRlfKZe0FqwlU2j2OzCi8ibEG5RT0vHH55od zK+2lAE7+LsRSfJdKnP4HlkF9ka4egvMtoRaqJtURd2bAIHuD8CjqjBcn2MUGqUp kPA65xzg5+MRojKGEm/nWFW/hyPfMswTcAIuam+h8Ec7UPMSL8D1pc/puw4jXdcp u2YigRzw3qWtDAzA+f70DTSalS9eTqBXw1lGYDUgxYeN+i4KsrrTzIaQ6q6d9VZ9 6KkG6lIKdFsKGVXn8vyg/Z/u/1fpUgUADs0T5UEylC7LY7Q65m5MTgujgOau0gjS qZTldb/04KsxBnmy -----END CERTIFICATE-----Generated at Tue Jul 28 19:51:50 2026 by rpki-client