$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: nHtPiWW4R8Y7AKM9C4l57iGNll4ZBh6JpjAhZ4dD5kI= Subject key identifier: DD:C0:23:FA:AD:BF:43:EC:1F:C8:01:7B:6A:FB:E3:A9:02:B0:14:4C Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 060D5418D81ED456E24C9A69D94304681886C09B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0638 Signing time: Tue 28 Jul 2026 07:38:29 +0000 Manifest this update: Tue 28 Jul 2026 07:33:29 +0000 Manifest next update: Wed 29 Jul 2026 09:19:29 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: knI417qX565S1KFkXOZJmmtmS8zD7eB51TxcPjammDs=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0d:54:18:d8:1e:d4:56:e2:4c:9a:69:d9:43:04:68:18:86:c0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jul 28 07:33:29 2026 GMT Not After : Jul 29 09:19:29 2026 GMT Subject: CN=DDC023FAADBF43EC1FC8017B6AFBE3A902B0144C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:ec:96:98:85:ac:56:cd:48:e1:26:56:39: 1b:8e:3b:af:26:2b:fb:fa:2d:6e:3a:4a:c3:dd:3f: 35:57:b9:99:1e:97:7f:86:2e:c7:ac:d7:16:36:e7: 55:85:d5:57:bc:23:6a:cc:75:26:4a:e2:66:a6:e9: 06:e0:fc:fa:e5:85:fb:9d:6c:8d:4c:3c:4b:d4:06: aa:09:06:93:03:b6:ec:0a:15:f9:5f:dc:41:6f:ac: a7:d3:8e:b1:2d:36:61:fa:94:78:7b:37:e5:65:2e: 1a:b1:dd:6d:ed:6a:dc:16:d4:51:41:64:b8:db:48: 4f:df:45:dd:95:ce:90:09:a2:82:6c:c4:ac:f6:ee: 0e:53:59:98:49:00:a2:15:6f:38:69:d0:5e:15:15: b0:f8:2e:de:ed:a0:af:89:95:b4:06:14:bc:b7:9d: e7:a9:74:3a:18:38:f6:9b:8f:b3:c9:ba:a4:ab:52: 60:02:be:62:63:c9:ee:4e:09:9f:57:67:44:52:6b: 95:1e:5e:9c:e8:3d:8f:ec:68:15:e2:a4:fe:77:ea: eb:ff:fb:f0:05:e4:0e:02:99:f9:67:36:e5:f0:4b: 07:97:ae:f0:76:ab:18:bb:31:b3:90:b7:e8:3e:1e: 33:8e:f4:11:20:a9:e9:10:b0:e3:df:c8:6b:0b:91: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:23:FA:AD:BF:43:EC:1F:C8:01:7B:6A:FB:E3:A9:02:B0:14:4C X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:50:fe:66:d7:7e:b8:42:c2:5d:39:94:28:a9:e5:39:34:6c: cc:d0:d6:fa:b7:f0:8f:c6:71:dd:8e:5b:7b:4f:ec:0c:65:db: e7:da:5c:10:3f:41:7c:d4:6c:b0:24:e2:b2:c2:c9:c7:9d:dd: 53:ed:d9:20:5b:dd:b8:0c:cc:b4:cc:6c:f4:ba:f5:ff:e7:fd: 8c:94:bf:77:83:fc:a1:5c:7b:ad:fe:98:79:af:52:55:83:29: ba:a7:68:cf:b7:34:c4:dc:2b:db:2e:14:9c:4d:95:19:80:99: 7e:3b:58:d9:1d:49:b7:75:4b:8b:e9:89:1a:70:e3:21:6c:32: 1b:20:ac:42:54:1e:ee:59:5d:50:da:0e:d4:d8:f4:86:ae:3d: fe:cb:47:16:b4:3a:57:ff:e7:d2:96:a9:86:71:3b:b2:ce:8b: 9f:7d:2a:05:13:2e:3e:8f:0a:3c:41:61:d4:29:e6:eb:07:ef: be:d9:35:9a:4d:bc:e6:b6:c9:37:26:17:9a:65:67:ac:cc:4e: d4:67:2f:69:28:3f:b2:b2:06:31:66:b4:3a:94:94:dc:59:11: 09:10:2d:d8:bb:c8:fb:ae:80:ac:fc:c9:d7:4d:c4:bc:57:4d: a2:8e:5f:33:f8:42:d7:3e:71:88:5c:48:91:0a:3b:ef:c6:83: 85:69:1f:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBg1UGNge1FbiTJpp2UMEaBiGwJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA3MjgwNzMzMjlaFw0yNjA3MjkwOTE5MjlaMDMxMTAvBgNV BAMTKEREQzAyM0ZBQURCRjQzRUMxRkM4MDE3QjZBRkJFM0E5MDJCMDE0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUOyWmIWsVs1I4SZWORuOO68m K/v6LW46SsPdPzVXuZkel3+GLses1xY251WF1Ve8I2rMdSZK4mam6Qbg/Prlhfud bI1MPEvUBqoJBpMDtuwKFflf3EFvrKfTjrEtNmH6lHh7N+VlLhqx3W3tatwW1FFB ZLjbSE/fRd2VzpAJooJsxKz27g5TWZhJAKIVbzhp0F4VFbD4Lt7toK+JlbQGFLy3 neepdDoYOPabj7PJuqSrUmACvmJjye5OCZ9XZ0RSa5UeXpzoPY/saBXipP536uv/ +/AF5A4CmflnNuXwSweXrvB2qxi7MbOQt+g+HjOO9BEgqekQsOPfyGsLkckxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3cAj+q2/Q+wfyAF7avvjqQKwFEwwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFD+Ztd+uELCXTmUKKnl OTRszNDW+rfwj8Zx3Y5be0/sDGXb59pcED9BfNRssCTissLJx53dU+3ZIFvduAzM tMxs9Lr1/+f9jJS/d4P8oVx7rf6Yea9SVYMpuqdoz7c0xNwr2y4UnE2VGYCZfjtY 2R1Jt3VLi+mJGnDjIWwyGyCsQlQe7lldUNoO1Nj0hq49/stHFrQ6V//n0paphnE7 ss6Ln30qBRMuPo8KPEFh1Cnm6wfvvtk1mk285rbJNyYXmmVnrMxO1GcvaSg/srIG MWa0OpSU3FkRCRAt2LvI+66ArPzJ103EvFdNoo5fM/hC1z5xiFxIkQo778aDhWkf 8g== -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:02 2026 by rpki-client