$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft File: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json) Hash identifier: t41mENuUbKQ6U2YoqaSew6WXjuHH/HsMEsMng0zWtZ8= Subject key identifier: FD:7F:F5:83:58:77:5C:0B:54:2E:53:5E:10:37:FE:82:7C:96:8A:C2 Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 5F1452B797E939BD3020CB4A44C761FB3DF753A0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft Manifest number: C2 Signing time: Tue 28 Jul 2026 11:43:12 +0000 Manifest this update: Tue 28 Jul 2026 11:38:12 +0000 Manifest next update: Thu 30 Jul 2026 00:51:12 +0000 Files and hashes: 1: 326131343a373538303a666166313a3a2f34382d3438203d3e20323134333434.roa (hash: LkT0ENe1YUFRxlS5aUhx4sNAMJ0+5HjZvFiPqwyHP/c=) 2: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=) 3: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g=) 4: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=) 5: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=) 6: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=) 7: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: XCeID9BTJqFjKJUGcRXOeSh38Dsk4oAlRSih2Es+X30=) 8: 326131343a373538303a666166323a3a2f34382d3438203d3e20323134333434.roa (hash: 2HKFlGEgh4l30gTTpJSrYvRSVMvgqrDNZ7KrLDKUxyY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:52:b7:97:e9:39:bd:30:20:cb:4a:44:c7:61:fb:3d:f7:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: Jul 28 11:38:12 2026 GMT Not After : Jul 30 00:51:12 2026 GMT Subject: CN=FD7FF58358775C0B542E535E1037FE827C968AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:ef:97:7d:34:0b:78:0b:57:96:4d:4c:3a: f2:bf:33:dc:a0:38:21:96:92:68:c9:cf:b5:c5:91: 0f:34:72:ef:16:c9:69:1c:5c:1d:5e:07:cc:a2:09: 07:36:f6:3e:f9:0e:79:c7:2d:44:a0:88:3b:a0:a8: b6:7b:2e:9e:15:ee:a3:cb:9b:01:cb:94:95:47:ed: 41:45:38:d3:46:e6:e5:54:36:09:c1:5f:93:ab:53: c1:00:ea:af:2b:f3:24:c5:e6:c7:03:36:bb:d1:8e: cf:42:92:e1:d8:eb:85:f3:f3:66:c3:39:d3:ce:da: a2:e6:cc:89:d0:9b:04:d2:e5:b9:24:f6:c2:9b:f3: 72:fb:f2:0f:86:27:b2:69:39:b1:b5:fb:7c:85:93: f9:d8:aa:d7:d4:1b:52:4b:97:00:98:02:60:fd:bd: 32:d1:06:2d:a3:25:43:f9:5b:42:f2:9c:77:e6:5b: 22:31:a4:4e:9b:f5:8d:f4:a0:de:67:f4:b2:9c:48: cb:d0:a9:1a:cd:35:0f:e2:b4:95:60:32:b8:70:60: e4:a9:5a:9d:e3:0a:68:54:79:99:90:67:26:b9:a4: 56:21:bf:e0:d6:b0:61:3a:86:6e:32:10:3a:b7:af: ae:37:26:bc:17:4c:69:5b:12:35:74:c1:68:3e:cd: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:F5:83:58:77:5C:0B:54:2E:53:5E:10:37:FE:82:7C:96:8A:C2 X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a2:90:7d:ef:71:40:76:e6:9a:a2:ea:bb:96:57:e8:3b:96: cd:b5:39:ca:3d:b6:be:68:b7:af:a6:25:99:3c:f0:34:28:32: 9a:35:82:af:d6:bd:cf:17:c9:5c:ab:41:8d:5c:35:5a:7e:f7: 3d:03:6b:eb:67:13:a5:20:8b:fe:70:5b:e3:29:46:c8:ac:93: 02:47:eb:37:6b:4d:32:ad:53:f8:6c:bb:1c:b9:d1:9d:7c:5a: de:c0:e6:6f:b5:ec:86:27:bf:20:48:2c:b6:91:06:3b:e2:b5: 48:a6:a7:17:5d:33:6e:86:c3:86:8b:39:85:77:0e:77:bd:45: 30:36:00:84:29:99:3c:96:98:fe:53:40:c6:1f:fb:d0:c6:f0: 69:a7:92:a3:f5:a5:a4:35:4a:4e:86:8c:5e:12:03:2f:14:2d: 21:3d:5d:72:c3:b5:d3:25:49:b1:93:47:bd:56:e7:d9:fd:b8: 78:bf:b9:90:df:c4:0f:5d:b5:ef:b8:a2:96:f9:ac:20:33:ee: 0b:b2:22:71:c0:21:b9:13:e9:af:48:ca:de:88:58:a7:70:14: 8f:e7:43:5b:64:df:6b:8f:ab:10:63:f3:4e:f1:8e:f8:4e:7c: b3:3d:50:c7:4a:c0:56:f4:64:29:ec:22:12:6a:8e:95:51:76: 91:f8:dd:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXxRSt5fpOb0wIMtKRMdh+z33U6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA3MjgxMTM4MTJaFw0yNjA3MzAwMDUxMTJaMDMxMTAvBgNV BAMTKEZEN0ZGNTgzNTg3NzVDMEI1NDJFNTM1RTEwMzdGRTgyN0M5NjhBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsu+XfTQLeAtXlk1MOvK/M9yg OCGWkmjJz7XFkQ80cu8WyWkcXB1eB8yiCQc29j75DnnHLUSgiDugqLZ7Lp4V7qPL mwHLlJVH7UFFONNG5uVUNgnBX5OrU8EA6q8r8yTF5scDNrvRjs9CkuHY64Xz82bD OdPO2qLmzInQmwTS5bkk9sKb83L78g+GJ7JpObG1+3yFk/nYqtfUG1JLlwCYAmD9 vTLRBi2jJUP5W0LynHfmWyIxpE6b9Y30oN5n9LKcSMvQqRrNNQ/itJVgMrhwYOSp Wp3jCmhUeZmQZya5pFYhv+DWsGE6hm4yEDq3r643JrwXTGlbEjV0wWg+zVZNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/X/1g1h3XAtULlNeEDf+gnyWisIwHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8xLzc3RTREMjNE MEZEQUNFRTI5MzNEOUE2RDMwMzNDREY1RUZDM0VEQTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5opB9 73FAduaaouq7llfoO5bNtTnKPba+aLevpiWZPPA0KDKaNYKv1r3PF8lcq0GNXDVa fvc9A2vrZxOlIIv+cFvjKUbIrJMCR+s3a00yrVP4bLscudGdfFrewOZvteyGJ78g SCy2kQY74rVIpqcXXTNuhsOGizmFdw53vUUwNgCEKZk8lpj+U0DGH/vQxvBpp5Kj 9aWkNUpOhoxeEgMvFC0hPV1yw7XTJUmxk0e9VufZ/bh4v7mQ38QPXbXvuKKW+awg M+4LsiJxwCG5E+mvSMreiFincBSP50NbZN9rj6sQY/NO8Y74TnyzPVDHSsBW9GQp 7CISao6VUXaR+N23 -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:24 2026 by rpki-client