$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: l93DRwbMLsFC5wB/i/6akbQhyYe3XK3hU3voJwOv4As= Subject key identifier: 11:EF:D5:36:02:61:6F:B3:15:CA:D8:D8:3F:0A:42:EB:F4:33:7D:6C Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 5A88EFAF6C3A443A01B9FA0234B3E7114D04AF6F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: 0109 Signing time: Tue 28 Jul 2026 15:52:33 +0000 Manifest this update: Tue 28 Jul 2026 15:47:33 +0000 Manifest next update: Wed 29 Jul 2026 19:34:33 +0000 Files and hashes: 1: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: US5NQCP4uhaIvQ3fnxR3WaMjV8fLoI2XBbT+ZGJr3rI=) 2: 326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa (hash: jkUpaqC40AVryws2M4l3hA6Beu5Hl97BKn2xwWx/2YU=) 3: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) 4: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 5: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) 6: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 7: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 8: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:88:ef:af:6c:3a:44:3a:01:b9:fa:02:34:b3:e7:11:4d:04:af:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jul 28 15:47:33 2026 GMT Not After : Jul 29 19:34:33 2026 GMT Subject: CN=11EFD53602616FB315CAD8D83F0A42EBF4337D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:67:40:23:be:01:eb:63:84:f8:92:b1:1c: da:52:bb:01:20:f8:9e:0e:3f:9b:9e:89:ae:f1:5b: cd:0c:a4:46:1b:19:e3:cb:4b:f2:b7:94:89:38:a2: 16:c2:86:a9:9e:9a:86:cf:fb:89:01:8f:58:a1:11: 8f:61:d4:86:05:90:9c:ff:10:ec:3b:d1:15:42:7e: db:6c:9d:32:a9:ca:cf:48:ee:4b:37:4f:61:2a:94: fb:7a:83:e8:3f:ae:63:a7:55:b4:93:a4:72:fb:dc: e5:ad:82:67:31:a9:0b:13:1c:d9:98:95:36:d6:3a: 30:00:64:94:45:68:ca:e2:8c:67:b2:be:da:68:4f: 22:70:7c:95:5f:8f:4f:a6:e0:6f:81:5c:0f:dc:00: d1:4a:9f:4f:ea:76:ce:92:4c:1a:b6:2d:21:cb:89: a1:e8:46:d4:ef:dc:b3:14:8c:31:1f:46:1d:c1:87: 92:ed:27:0b:28:2c:49:2c:46:c2:72:79:2c:85:49: 37:f7:b3:d7:db:99:f5:24:0b:8d:44:94:42:d5:b3: 78:1c:9f:eb:46:ec:a6:0e:53:52:2d:50:b1:c6:07: 45:55:e1:dd:6c:ef:00:b5:99:b4:4b:85:6f:1a:bf: c7:f3:8d:20:f8:6c:bf:f8:fc:7e:eb:ca:2e:73:6b: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:D5:36:02:61:6F:B3:15:CA:D8:D8:3F:0A:42:EB:F4:33:7D:6C X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:24:4d:99:1b:9f:2e:71:9d:4e:03:f9:38:32:14:40:c0: 8d:53:d4:34:96:10:59:a6:7e:63:a2:a2:53:9e:66:f7:32:b9: 23:98:c5:1e:2f:2f:ea:88:d7:80:87:ed:f8:06:50:9d:bd:69: 02:37:34:dc:c4:e4:d8:30:a6:05:78:a1:7f:8a:e6:69:bb:ed: 7b:ab:a2:78:f0:83:7e:66:29:40:65:ca:32:03:2e:58:28:fd: 97:67:0c:64:57:46:9e:2c:31:55:8d:51:e2:4a:21:82:d2:00: 7d:ae:62:50:9b:70:51:17:2a:33:47:5a:74:05:1a:5d:93:f7: bd:76:7f:1b:0a:c6:5e:e5:b0:f4:a5:8f:2a:ea:ea:87:d1:a8: 2e:07:3c:54:eb:32:e4:51:fc:0a:ff:db:ae:08:c3:7e:1f:a3: 2e:ac:c9:72:6e:9c:2a:46:59:2b:b8:6b:1d:87:68:c1:d0:a2: 52:ca:f2:f9:1a:e4:7f:36:16:d9:e1:21:25:19:e0:dd:f4:e5: 01:32:3a:85:63:da:01:b7:8a:2c:0f:ee:3e:2d:ec:af:ac:33: 4b:19:7d:32:92:dd:14:42:40:9d:de:0f:95:e6:8b:0e:66:96: 75:74:eb:1e:5d:bc:a9:ea:b8:eb:36:12:29:91:33:55:8c:e4: 53:3b:b0:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWojvr2w6RDoBufoCNLPnEU0Er28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA3MjgxNTQ3MzNaFw0yNjA3MjkxOTM0MzNaMDMxMTAvBgNV BAMTKDExRUZENTM2MDI2MTZGQjMxNUNBRDhEODNGMEE0MkVCRjQzMzdENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvWdAI74B62OE+JKxHNpSuwEg +J4OP5ueia7xW80MpEYbGePLS/K3lIk4ohbChqmemobP+4kBj1ihEY9h1IYFkJz/ EOw70RVCfttsnTKpys9I7ks3T2EqlPt6g+g/rmOnVbSTpHL73OWtgmcxqQsTHNmY lTbWOjAAZJRFaMrijGeyvtpoTyJwfJVfj0+m4G+BXA/cANFKn0/qds6STBq2LSHL iaHoRtTv3LMUjDEfRh3Bh5LtJwsoLEksRsJyeSyFSTf3s9fbmfUkC41ElELVs3gc n+tG7KYOU1ItULHGB0VV4d1s7wC1mbRLhW8av8fzjSD4bL/4/H7ryi5za4x7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEe/VNgJhb7MVytjYPwpC6/QzfWwwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3KyRN mRufLnGdTgP5ODIUQMCNU9Q0lhBZpn5joqJTnmb3MrkjmMUeLy/qiNeAh+34BlCd vWkCNzTcxOTYMKYFeKF/iuZpu+17q6J48IN+ZilAZcoyAy5YKP2XZwxkV0aeLDFV jVHiSiGC0gB9rmJQm3BRFyozR1p0BRpdk/e9dn8bCsZe5bD0pY8q6uqH0aguBzxU 6zLkUfwK/9uuCMN+H6MurMlybpwqRlkruGsdh2jB0KJSyvL5GuR/NhbZ4SElGeDd 9OUBMjqFY9oBt4osD+4+LeyvrDNLGX0ykt0UQkCd3g+V5osOZpZ1dOseXbyp6rjr NhIpkTNVjORTO7CO -----END CERTIFICATE-----Generated at Tue Jul 28 23:46:22 2026 by rpki-client