$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: cQmH0nRLMjCN5IAOLTxJZMq4slDlf7DQFKrlNHywlYg= Subject key identifier: 8A:85:22:30:4C:3A:B7:8D:D4:EA:27:2C:E5:C2:5B:DE:71:F5:8E:FD Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 12C6E4F5FCD2795259AD7C347AD5D9A1C5BE609A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 0297 Signing time: Wed 29 Jul 2026 02:09:39 +0000 Manifest this update: Wed 29 Jul 2026 02:04:39 +0000 Manifest next update: Thu 30 Jul 2026 04:21:39 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: GdykPT6d/rH1BzQduCp9FRs4kRoq91E83MSHposFi9Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c6:e4:f5:fc:d2:79:52:59:ad:7c:34:7a:d5:d9:a1:c5:be:60:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Jul 29 02:04:39 2026 GMT Not After : Jul 30 04:21:39 2026 GMT Subject: CN=8A8522304C3AB78DD4EA272CE5C25BDE71F58EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:12:9f:a7:8e:6f:85:30:15:93:8b:37:86: 14:26:f3:59:1a:15:57:43:93:fc:58:01:44:6c:b4: 31:77:32:3b:42:d7:2c:0d:88:8e:a3:2a:09:53:bd: a5:4e:c2:ca:13:79:6c:26:5e:3a:2e:6a:5f:bb:91: da:4c:c8:28:4b:1c:3f:c7:cb:72:95:a2:e2:ca:79: a7:14:09:5e:88:c8:2f:ac:f6:87:a3:3c:32:7f:96: fd:1e:85:24:32:11:c7:c2:37:e4:c5:94:18:5f:a2: c5:1d:63:3f:a6:48:ab:c9:ba:18:35:77:da:3b:ff: 24:86:d3:65:27:82:58:83:2e:81:0c:d1:5d:85:63: 84:9a:20:63:e0:a3:d7:1f:52:8a:a6:97:61:bc:e1: 89:0a:fb:cf:6f:2b:c3:ca:69:8f:22:74:0d:6a:36: eb:f2:60:5e:1d:09:4c:d6:f8:09:19:43:f9:62:29: 87:14:b5:89:23:39:50:f9:05:9f:25:a0:c0:02:b0: ca:65:ce:95:15:08:a7:97:6e:85:1b:81:4d:49:d2: 8c:2c:e8:80:8b:b9:e5:61:0d:15:1c:82:10:f6:b9: 2c:55:a9:44:2c:ba:5d:87:bd:3f:8a:a4:e9:4e:b5: 23:1d:80:ae:c5:d1:9a:f8:c0:a9:91:eb:32:97:d6: 68:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:85:22:30:4C:3A:B7:8D:D4:EA:27:2C:E5:C2:5B:DE:71:F5:8E:FD X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:1a:ff:9d:56:2b:55:2b:7d:6a:a2:d6:f2:ee:65:ac:4a: 9d:6d:57:36:e5:db:90:14:c2:84:a4:c5:7d:86:c0:68:05:88: 30:bd:48:1e:66:4c:4e:37:17:a3:21:34:be:a5:63:c8:93:f8: db:bc:52:b3:78:0f:e4:c7:fb:61:52:13:c6:19:53:98:f3:9f: c9:63:7e:29:98:af:1d:2b:0d:b0:6c:24:70:61:a0:72:68:1f: ef:55:ea:37:c0:97:ae:dc:62:fd:c9:d8:3e:3d:dc:32:30:01: f0:f7:c8:1b:4c:06:65:58:6b:85:75:86:73:f0:97:e3:f1:82: 15:44:72:69:cd:e6:81:d9:79:24:5f:1e:59:36:75:2b:0a:71: 0b:0c:d3:e8:d9:79:44:e5:58:03:d9:85:4f:99:1c:7c:22:3a: c9:d8:ce:88:2e:38:bd:b5:0b:4d:7f:b0:2c:95:05:04:6b:8e: 63:c9:fe:26:58:0c:65:d4:88:ec:7c:49:00:70:d5:cf:80:4c: a5:69:7d:4d:dc:41:71:a9:22:b8:ad:28:58:d2:12:3d:7f:13: 19:ea:9b:a2:59:70:00:b2:f5:9f:36:84:7c:7d:93:7d:d7:35: fe:e8:38:68:cb:69:21:7f:85:45:02:89:4a:5f:f2:36:45:d7: f3:71:0a:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEsbk9fzSeVJZrXw0etXZocW+YJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjA3MjkwMjA0MzlaFw0yNjA3MzAwNDIxMzlaMDMxMTAvBgNV BAMTKDhBODUyMjMwNEMzQUI3OERENEVBMjcyQ0U1QzI1QkRFNzFGNThFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDxKfp45vhTAVk4s3hhQm81ka FVdDk/xYAURstDF3MjtC1ywNiI6jKglTvaVOwsoTeWwmXjoual+7kdpMyChLHD/H y3KVouLKeacUCV6IyC+s9oejPDJ/lv0ehSQyEcfCN+TFlBhfosUdYz+mSKvJuhg1 d9o7/ySG02UngliDLoEM0V2FY4SaIGPgo9cfUoqml2G84YkK+89vK8PKaY8idA1q NuvyYF4dCUzW+AkZQ/liKYcUtYkjOVD5BZ8loMACsMplzpUVCKeXboUbgU1J0ows 6ICLueVhDRUcghD2uSxVqUQsul2HvT+KpOlOtSMdgK7F0Zr4wKmR6zKX1mjZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUioUiMEw6t43U6ics5cJb3nH1jv0wHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZDxr/ nVYrVSt9aqLW8u5lrEqdbVc25duQFMKEpMV9hsBoBYgwvUgeZkxONxejITS+pWPI k/jbvFKzeA/kx/thUhPGGVOY85/JY34pmK8dKw2wbCRwYaByaB/vVeo3wJeu3GL9 ydg+PdwyMAHw98gbTAZlWGuFdYZz8Jfj8YIVRHJpzeaB2XkkXx5ZNnUrCnELDNPo 2XlE5VgD2YVPmRx8IjrJ2M6ILji9tQtNf7AslQUEa45jyf4mWAxl1IjsfEkAcNXP gEylaX1N3EFxqSK4rShY0hI9fxMZ6puiWXAAsvWfNoR8fZN91zX+6Dhoy2khf4VF AolKX/I2RdfzcQrU -----END CERTIFICATE-----Generated at Wed Jul 29 07:29:50 2026 by rpki-client