$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft File: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft (raw, json) Hash identifier: dub4aM/6tA53XI5/qEr1O2X9BQ6o+xKzFr/mYDkt0LE= Subject key identifier: 31:92:9C:F7:01:72:4A:4B:3B:75:BE:40:95:77:38:FB:F7:A6:81:3A Authority key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 Certificate issuer: /CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Certificate serial: 6CC1B808383A7E2FA924C895EC5C4A5F81F8EF0A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft Manifest number: 2B Signing time: Fri 12 Jun 2026 23:15:41 +0000 Manifest this update: Fri 12 Jun 2026 23:10:41 +0000 Manifest next update: Sat 13 Jun 2026 23:21:41 +0000 Files and hashes: 1: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: QUdcaAWn6C0rRifC05Eb+UyicOWd/5qy/suPtH7clcc=) 2: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl (hash: 58ZCrF4nw1zwt1x/+jn2oC1TnDRz1w7eC/uVK3MZlKc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c1:b8:08:38:3a:7e:2f:a9:24:c8:95:ec:5c:4a:5f:81:f8:ef:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Validity Not Before: Jun 12 23:10:41 2026 GMT Not After : Jun 13 23:21:41 2026 GMT Subject: CN=31929CF701724A4B3B75BE40957738FBF7A6813A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:6e:25:62:ea:5b:92:6c:58:e4:f1:1f:78: 4c:92:15:63:df:5d:84:82:e1:e8:74:7a:74:73:55: 2c:76:50:36:54:4c:60:f0:09:0f:d7:24:f9:5e:8b: f1:d6:7e:77:88:5e:32:64:14:c9:16:f8:10:c4:dc: eb:0a:45:55:62:bc:59:e4:09:77:5c:eb:69:99:3f: 37:7e:36:cb:06:88:0a:92:9f:2d:87:16:19:eb:76: c6:d4:ff:4c:d0:68:d6:a8:f4:77:59:15:66:c6:0c: 16:95:7b:eb:fe:ff:20:52:f0:a6:e0:ae:3c:7e:85: e3:71:92:35:e4:f1:1a:18:c5:c3:4a:c0:bb:5a:43: 8d:62:96:a6:ab:ae:69:36:72:8e:e1:67:d1:da:20: 6d:29:38:28:90:1b:6f:37:7d:ce:88:49:45:2a:5a: 4e:e2:35:74:3b:40:f7:1d:e4:45:d0:b8:60:12:e6: fd:9d:3a:66:40:46:b0:56:78:53:15:52:16:d8:da: 3e:f0:86:bd:43:ad:b1:5f:6f:bb:5d:b5:66:47:4d: b0:b2:f9:72:40:1f:ab:b7:72:1c:5d:a0:d2:aa:52: e2:e3:c8:55:89:51:97:e6:11:d6:f4:76:36:4f:fb: 21:5c:75:93:ba:d6:be:3b:5c:29:c6:e6:4e:e1:fe: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:92:9C:F7:01:72:4A:4B:3B:75:BE:40:95:77:38:FB:F7:A6:81:3A X509v3 Authority Key Identifier: keyid:9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:be:90:cf:62:42:38:02:ad:ef:52:b3:7d:29:6b:4b:b3: fb:3c:d7:62:9f:4b:8c:e2:a3:b3:94:50:4b:a4:1b:26:24:77: 24:3c:f5:1b:27:ed:fd:f2:44:ad:46:7e:50:a2:83:d8:1d:c1: 71:68:43:61:eb:95:6f:6c:f0:8c:1e:52:eb:0c:11:53:a1:b5: 45:37:fc:7e:66:e5:ee:05:e7:de:2f:ab:bc:d7:23:9b:88:12: d2:e7:75:b8:46:7a:d6:61:7f:a0:32:39:59:d2:19:25:29:48: 69:43:e0:66:1a:8c:97:45:d5:e2:e1:d2:06:1d:18:b3:4f:79: 93:df:89:6e:74:a5:0d:f7:e6:28:25:b9:c7:4d:bd:49:7e:72: 04:28:ba:50:dd:66:3a:66:8e:ed:6a:5e:51:9b:0e:51:5b:f5: a5:4d:49:7e:51:5d:d4:b8:b8:bc:73:76:7f:c2:7a:ba:52:6d: 93:a5:50:65:8f:fa:bb:15:0c:7a:35:79:c0:83:93:61:5d:de: 65:09:a9:fc:d9:03:ff:ac:c9:69:9a:ec:0d:00:db:a2:83:18: 33:ec:e1:0e:23:d6:b2:85:4a:8f:4c:5d:64:d5:56:4c:0c:1f: 60:69:89:79:68:3f:66:3e:85:1e:75:a6:21:52:37:53:46:19: b8:10:79:72 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbMG4CDg6fi+pJMiV7FxKX4H47wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENF N0IxQjY3MjAeFw0yNjA2MTIyMzEwNDFaFw0yNjA2MTMyMzIxNDFaMDMxMTAvBgNV BAMTKDMxOTI5Q0Y3MDE3MjRBNEIzQjc1QkU0MDk1NzczOEZCRjdBNjgxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7G4lYupbkmxY5PEfeEySFWPf XYSC4eh0enRzVSx2UDZUTGDwCQ/XJPlei/HWfneIXjJkFMkW+BDE3OsKRVVivFnk CXdc62mZPzd+NssGiAqSny2HFhnrdsbU/0zQaNao9HdZFWbGDBaVe+v+/yBS8Kbg rjx+heNxkjXk8RoYxcNKwLtaQ41ilqarrmk2co7hZ9HaIG0pOCiQG283fc6ISUUq Wk7iNXQ7QPcd5EXQuGAS5v2dOmZARrBWeFMVUhbY2j7whr1DrbFfb7tdtWZHTbCy +XJAH6u3chxdoNKqUuLjyFWJUZfmEdb0djZP+yFcdZO61r47XCnG5k7h/v0ZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUMZKc9wFySks7db5AlXc4+/emgTowHwYDVR0j BBgwFoAUnMo63LnIPlGgyVkQSxZy3OextnIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzIvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0IxQjY3Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0Ix QjY3Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjdiNWVmNy1k MTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5YjgvMi85Q0NBM0FEQ0I5QzgzRTUxQTBD OTU5MTA0QjE2NzJEQ0U3QjFCNjcyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6W+kM9iQjgCre9Ss30p a0uz+zzXYp9LjOKjs5RQS6QbJiR3JDz1Gyft/fJErUZ+UKKD2B3BcWhDYeuVb2zw jB5S6wwRU6G1RTf8fmbl7gXn3i+rvNcjm4gS0ud1uEZ61mF/oDI5WdIZJSlIaUPg ZhqMl0XV4uHSBh0Ys095k9+JbnSlDffmKCW5x029SX5yBCi6UN1mOmaO7WpeUZsO UVv1pU1JflFd1Li4vHN2f8J6ulJtk6VQZY/6uxUMejV5wIOTYV3eZQmp/NkD/6zJ aZrsDQDbooMYM+zhDiPWsoVKj0xdZNVWTAwfYGmJeWg/Zj6FHnWmIVI3U0YZuBB5 cg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:19:38 2026 by rpki-client