$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: F5VQQ07HCFpfFpIFGumjpx93M1Tu0Gymtz9YdbUi3ck= Subject key identifier: BD:19:05:92:F9:A8:16:DF:AD:D0:8E:30:9A:9F:B2:C0:16:F3:CD:80 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 3E6EAC01594B76FB662272F0097A621044089CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0700 Signing time: Tue 28 Jul 2026 03:11:58 +0000 Manifest this update: Tue 28 Jul 2026 03:06:58 +0000 Manifest next update: Wed 29 Jul 2026 04:04:58 +0000 Files and hashes: 1: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) 4: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: 01j76jqa9bu7eE+l8T4M0kcXE3plPOQAKPE6jgErjSs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 04:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6e:ac:01:59:4b:76:fb:66:22:72:f0:09:7a:62:10:44:08:9c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jul 28 03:06:58 2026 GMT Not After : Jul 29 04:04:58 2026 GMT Subject: CN=BD190592F9A816DFADD08E309A9FB2C016F3CD80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:9a:5b:70:eb:a3:45:1d:c5:b7:ad:4f:a7: a2:80:64:39:c4:65:1a:77:c8:bd:98:ae:1c:52:45: c7:a8:86:52:2e:e2:62:23:44:f7:10:66:10:c7:5c: ec:13:f1:55:ed:95:4b:32:68:a1:44:fe:c2:ff:af: 30:e3:09:3c:da:7d:d3:08:e3:8d:c5:81:75:87:f4: 9e:8e:16:2b:3c:ac:ad:26:c2:ff:b7:f8:bf:ee:f4: a0:b5:80:a6:c9:e9:de:0b:8e:08:0d:28:14:8a:fe: 77:e5:32:65:1c:47:35:e1:f0:f5:7e:47:8f:92:50: 50:b1:10:f7:8c:a1:69:c8:1a:33:c2:74:48:20:c6: 3f:5f:09:0b:59:7b:8f:4d:6e:90:4e:21:5b:90:65: 3b:3f:44:af:9f:18:5c:92:55:64:ab:03:2b:45:86: 3d:f2:1c:a5:6a:ca:64:fa:c8:c5:94:49:52:43:3f: fc:3c:0f:e4:9d:e0:e6:22:2e:d6:63:e2:ae:7c:2b: 0c:3f:df:5c:7f:aa:b0:42:e3:49:57:4f:7c:74:32: aa:60:8c:10:63:d3:5a:c0:a4:62:bf:ae:6e:61:87: 1a:8f:4c:b2:51:17:5f:9f:c9:75:34:c8:39:42:1e: d0:9e:19:83:43:79:65:72:f9:4a:7a:36:cb:c4:b2: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:19:05:92:F9:A8:16:DF:AD:D0:8E:30:9A:9F:B2:C0:16:F3:CD:80 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:18:71:9a:a6:ae:4d:70:cd:11:f8:da:e9:77:87:ff:24: 79:32:61:db:7c:4c:24:db:3c:6f:83:46:2c:4a:96:09:1a:8f: 11:b8:a1:85:cf:38:0d:8b:74:ae:e6:b4:b9:bd:e6:b7:e3:37: 6f:45:8a:a7:d1:6c:db:64:8d:ff:8e:92:2c:18:7f:29:54:8f: e5:c9:2f:f8:52:e9:4d:97:a6:18:e9:eb:f4:dd:d1:58:c7:c8: 56:4d:91:43:b6:d6:b0:96:d7:ae:85:f1:3e:ad:4e:a5:d8:68: d7:d0:24:ca:41:14:2b:fc:8f:51:ba:d0:4f:a1:10:2b:1f:b5: 2c:e3:b9:78:33:c8:f0:12:4c:01:a5:92:3c:31:b1:a2:6b:0a: 40:b0:78:d8:fb:97:3c:cf:89:08:f5:d6:ab:26:c6:e9:e6:1a: 45:2f:a7:c0:77:5d:38:28:0b:28:2d:43:98:5e:4b:48:d3:52: 32:4d:78:88:f8:70:d3:9b:f2:7f:5a:7f:eb:94:c2:b7:d0:bd: 73:21:fc:93:58:a4:c8:ce:0b:00:59:5e:0c:87:21:43:51:94: d6:bf:cd:06:ca:8b:40:04:77:f1:36:a3:e6:ef:11:a3:a9:de: 9c:32:a1:a1:a6:7b:8b:bc:56:4d:d2:60:76:8e:34:a1:28:d8: 84:c4:cd:c4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPm6sAVlLdvtmInLwCXpiEEQInLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA3MjgwMzA2NThaFw0yNjA3MjkwNDA0NThaMDMxMTAvBgNV BAMTKEJEMTkwNTkyRjlBODE2REZBREQwOEUzMDlBOUZCMkMwMTZGM0NEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9ZpbcOujRR3Ft61Pp6KAZDnE ZRp3yL2YrhxSRceohlIu4mIjRPcQZhDHXOwT8VXtlUsyaKFE/sL/rzDjCTzafdMI 443FgXWH9J6OFis8rK0mwv+3+L/u9KC1gKbJ6d4LjggNKBSK/nflMmUcRzXh8PV+ R4+SUFCxEPeMoWnIGjPCdEggxj9fCQtZe49NbpBOIVuQZTs/RK+fGFySVWSrAytF hj3yHKVqymT6yMWUSVJDP/w8D+Sd4OYiLtZj4q58Kww/31x/qrBC40lXT3x0Mqpg jBBj01rApGK/rm5hhxqPTLJRF1+fyXU0yDlCHtCeGYNDeWVy+Up6NsvEsl6xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvRkFkvmoFt+t0I4wmp+ywBbzzYAwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmgYcZqmrk1wzRH42ul3 h/8keTJh23xMJNs8b4NGLEqWCRqPEbihhc84DYt0rua0ub3mt+M3b0WKp9Fs22SN /46SLBh/KVSP5ckv+FLpTZemGOnr9N3RWMfIVk2RQ7bWsJbXroXxPq1Opdho19Ak ykEUK/yPUbrQT6EQKx+1LOO5eDPI8BJMAaWSPDGxomsKQLB42PuXPM+JCPXWqybG 6eYaRS+nwHddOCgLKC1DmF5LSNNSMk14iPhw05vyf1p/65TCt9C9cyH8k1ikyM4L AFleDIchQ1GU1r/NBsqLQAR38Taj5u8Ro6nenDKhoaZ7i7xWTdJgdo40oSjYhMTN xA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:33 2026 by rpki-client