$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: C7qDVZ2sr0atoUxheWNapvcKv7MjJI6xqVbZj0Vigf0= Subject key identifier: 26:C2:03:6E:79:E2:FA:98:61:8F:38:42:BC:F0:7D:21:C3:5A:39:26 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 4F7A59D97595E1A3AAD4DEE300B6089C1084BB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0639 Signing time: Tue 28 Jul 2026 16:28:29 +0000 Manifest this update: Tue 28 Jul 2026 16:23:29 +0000 Manifest next update: Wed 29 Jul 2026 19:36:29 +0000 Files and hashes: 1: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: 855yZ5kq9Vq8RnG2HLhWr9Da/bp3xjT4bwBQfmoNolc=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:59:d9:75:95:e1:a3:aa:d4:de:e3:00:b6:08:9c:10:84:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jul 28 16:23:29 2026 GMT Not After : Jul 29 19:36:29 2026 GMT Subject: CN=26C2036E79E2FA98618F3842BCF07D21C35A3926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:0b:1e:5d:0b:b3:b8:0a:18:26:10:3d:26: 1e:41:14:cc:20:3e:8b:96:71:b4:7c:53:03:6c:18: 70:2c:5f:0c:bf:75:45:c0:e6:1c:e3:8d:10:3b:16: 93:4c:e9:f4:46:13:af:7e:9a:d7:89:69:56:f2:8c: df:98:e3:58:4f:36:fc:97:be:6b:ab:11:3b:4d:88: 8d:9b:89:87:d1:6a:98:7c:14:a0:2b:5b:2e:6f:3f: c1:3c:da:4a:5a:8b:97:be:90:67:94:cb:48:47:5c: ab:a2:19:d8:9a:cf:e8:18:52:9e:df:9c:7e:12:b8: 20:86:06:f0:dc:b4:f7:f2:b2:1e:b1:6a:1c:9e:a0: 99:cc:b1:79:62:13:bc:4a:99:8e:39:1a:d7:3e:7e: ca:a7:57:30:37:cf:f0:a8:3b:2f:d1:b8:50:72:a6: 83:68:14:6d:42:ce:b6:38:e1:34:41:7e:cc:f4:c6: f8:39:66:53:78:d8:d6:f9:13:e7:f5:08:29:5f:93: 6d:f7:0e:63:39:96:3c:2c:29:51:27:3e:e4:9d:87: 78:25:25:b1:f8:30:31:6e:79:b3:07:43:07:0d:7a: d5:82:a1:78:f8:30:9e:e3:ac:b6:de:99:51:ae:d4: 5a:76:71:ce:8f:34:ce:ac:f0:3b:2e:5d:b0:6e:8c: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C2:03:6E:79:E2:FA:98:61:8F:38:42:BC:F0:7D:21:C3:5A:39:26 X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:39:00:47:4f:3f:fc:6c:12:b7:2c:7f:6d:ee:d8:14:10:23: 70:58:06:99:7f:e5:5d:32:1e:d7:a3:32:6c:69:13:eb:44:66: d2:47:d3:04:0a:17:a5:ec:0f:a9:8d:7a:9e:f0:88:ab:3e:73: 27:4e:6d:b7:97:cc:95:67:83:45:4d:49:7a:cf:b1:b5:f0:6b: ef:d2:15:43:d5:75:c0:6d:5c:ce:78:89:9c:fc:55:f8:62:d5: 9d:25:5e:ad:94:a6:4e:0b:5e:93:49:85:9f:7c:e6:8f:5b:65: 02:bb:a1:ab:15:14:5d:42:ac:21:05:24:b1:79:14:1d:7c:da: 71:33:2f:69:bf:84:58:fe:bf:33:a7:f1:be:8d:5b:fd:54:b1: 1d:16:95:75:9c:d4:b1:cf:0f:10:89:96:3c:cc:07:44:e3:aa: ce:42:22:18:e4:f5:0f:47:ec:ea:ec:08:49:3a:4c:28:ce:00: ff:cb:bd:44:0c:cf:87:2b:e0:bb:9b:c5:4c:b0:14:3b:11:3f: df:8b:e2:b1:9f:15:94:bb:6b:e6:3a:9e:4b:cb:32:d2:b7:db: 8c:18:a2:40:5d:f7:2e:18:47:b0:b3:1c:d2:cd:a3:6d:dd:30: 53:1d:0a:b1:d1:07:f5:e8:9c:88:4c:d9:9b:70:aa:cc:5f:55: 56:04:ac:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT3pZ2XWV4aOq1N7jALYInBCEuxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA3MjgxNjIzMjlaFw0yNjA3MjkxOTM2MjlaMDMxMTAvBgNV BAMTKDI2QzIwMzZFNzlFMkZBOTg2MThGMzg0MkJDRjA3RDIxQzM1QTM5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyQseXQuzuAoYJhA9Jh5BFMwg PouWcbR8UwNsGHAsXwy/dUXA5hzjjRA7FpNM6fRGE69+mteJaVbyjN+Y41hPNvyX vmurETtNiI2biYfRaph8FKArWy5vP8E82kpai5e+kGeUy0hHXKuiGdiaz+gYUp7f nH4SuCCGBvDctPfysh6xahyeoJnMsXliE7xKmY45Gtc+fsqnVzA3z/CoOy/RuFBy poNoFG1CzrY44TRBfsz0xvg5ZlN42Nb5E+f1CClfk233DmM5ljwsKVEnPuSdh3gl JbH4MDFuebMHQwcNetWCoXj4MJ7jrLbemVGu1Fp2cc6PNM6s8DsuXbBujBvJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJsIDbnni+phhjzhCvPB9IcNaOSYwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzkAR08//GwStyx/be7Y FBAjcFgGmX/lXTIe16MybGkT60Rm0kfTBAoXpewPqY16nvCIqz5zJ05tt5fMlWeD RU1Jes+xtfBr79IVQ9V1wG1czniJnPxV+GLVnSVerZSmTgtek0mFn3zmj1tlAruh qxUUXUKsIQUksXkUHXzacTMvab+EWP6/M6fxvo1b/VSxHRaVdZzUsc8PEImWPMwH ROOqzkIiGOT1D0fs6uwISTpMKM4A/8u9RAzPhyvgu5vFTLAUOxE/34visZ8VlLtr 5jqeS8sy0rfbjBiiQF33LhhHsLMc0s2jbd0wUx0KsdEH9eiciEzZm3CqzF9VVgSs jw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:24:23 2026 by rpki-client