$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft File: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft (raw, json) Hash identifier: LbkJqAWpf/ZOJ0KkweZRv4amMTFhVBxOlc+TuBjkoJU= Subject key identifier: 25:51:ED:8A:84:BC:86:F9:3B:A9:1E:B3:BC:68:64:1A:8C:45:71:26 Authority key identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 Certificate issuer: /CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Certificate serial: 31F5B1345473CEA5A80A8974892B9AF1811A0E6A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft Manifest number: 16 Signing time: Tue 28 Jul 2026 07:46:04 +0000 Manifest this update: Tue 28 Jul 2026 07:41:04 +0000 Manifest next update: Wed 29 Jul 2026 08:51:04 +0000 Files and hashes: 1: 326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa (hash: My6Ab96b5F0+JldNWozhK3m+60cIdrnbbGOkb8nRtmc=) 2: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl (hash: 7SteNh8AHwMp+5hCDKqKcFLoHhICO8vstRKUlII5ICs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f5:b1:34:54:73:ce:a5:a8:0a:89:74:89:2b:9a:f1:81:1a:0e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Validity Not Before: Jul 28 07:41:04 2026 GMT Not After : Jul 29 08:51:04 2026 GMT Subject: CN=2551ED8A84BC86F93BA91EB3BC68641A8C457126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:75:f9:72:d9:84:02:08:f3:1b:39:8e:b1: 1e:d4:07:43:52:2c:cd:1e:25:65:80:73:09:c4:a0: 65:d6:56:be:e9:25:e6:8d:5a:84:0a:c6:18:a0:24: 58:9f:4a:13:a2:3e:33:45:14:6d:c9:d1:7f:2b:6e: 6a:ca:7b:53:f6:f3:3d:30:c0:0b:b8:b0:86:4e:d5: 2f:0f:7d:80:29:6b:6b:10:46:6e:43:95:1e:aa:ac: 9c:4c:cb:98:1d:0b:f8:9b:55:87:6a:94:76:03:e1: 34:1d:d8:55:95:75:95:7e:02:67:b8:b5:57:04:0c: fe:d8:00:be:31:9f:87:4a:46:ee:cb:a3:77:13:96: 1a:2d:5a:4d:8c:af:36:6d:af:2d:de:24:0b:40:95: 4f:a1:22:b3:21:ed:3b:8a:69:83:a3:04:9e:a2:9e: ff:3c:b4:a7:9f:01:9f:99:a3:79:23:98:bc:1c:90: bc:f5:da:53:f7:d4:b5:54:f2:7f:75:df:f3:a3:70: 36:c1:19:a3:6e:3f:7a:5a:13:04:69:7c:eb:0c:94: 52:f4:15:6c:b4:c2:d5:20:1a:f0:f7:aa:4e:a2:5c: 8a:10:9e:a1:bf:73:4f:db:36:f4:05:78:03:49:16: a3:11:66:f2:12:7c:ba:6f:1b:97:f5:bc:42:1d:df: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:51:ED:8A:84:BC:86:F9:3B:A9:1E:B3:BC:68:64:1A:8C:45:71:26 X509v3 Authority Key Identifier: keyid:09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9e:57:5c:67:e2:6d:b6:94:c3:85:fe:a7:66:9f:b9:af:e7: dd:18:2b:ed:e4:17:9b:38:e1:4e:3c:7a:e7:9d:09:4a:4d:52: 09:95:a5:a1:5e:21:99:4f:98:f1:8b:0d:70:13:6a:1f:f9:06: c1:a4:ce:32:ea:d2:3c:60:49:41:f0:07:54:18:e2:f5:1d:9f: ea:a2:5d:4b:00:66:6c:a4:37:fc:fa:49:bf:85:44:f1:d8:95: a9:53:a8:e6:e3:10:81:45:ba:7e:fc:05:2a:8c:57:a9:32:3b: a2:1d:74:33:4a:d5:77:ee:8d:ca:cd:a4:d6:50:8a:33:48:9f: 65:ea:8c:db:d8:be:25:9e:43:0b:fc:fb:9f:01:f9:7e:7d:02: 85:68:60:df:48:04:df:69:7e:34:49:24:bc:6e:b7:d7:b2:7d: 2c:b0:ac:45:9e:0d:35:36:7e:28:eb:76:5c:83:e5:23:c9:dc: f3:af:48:90:7e:6d:fc:6c:ba:8a:51:a1:41:a1:ce:9a:3b:40: e4:ac:86:3e:11:2a:28:4b:69:21:4e:28:24:86:e9:e1:5a:5d: cc:36:42:6a:ff:e2:cd:c1:65:84:50:08:0d:ad:18:45:d8:69: 19:cc:eb:35:78:b6:e3:e6:9d:2d:fa:fc:e0:b7:07:ef:17:e8: f1:a6:50:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMfWxNFRzzqWoCol0iSua8YEaDmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1 MkJCOTFBNTAeFw0yNjA3MjgwNzQxMDRaFw0yNjA3MjkwODUxMDRaMDMxMTAvBgNV BAMTKDI1NTFFRDhBODRCQzg2RjkzQkE5MUVCM0JDNjg2NDFBOEM0NTcxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uHX5ctmEAgjzGzmOsR7UB0NS LM0eJWWAcwnEoGXWVr7pJeaNWoQKxhigJFifShOiPjNFFG3J0X8rbmrKe1P28z0w wAu4sIZO1S8PfYApa2sQRm5DlR6qrJxMy5gdC/ibVYdqlHYD4TQd2FWVdZV+Ame4 tVcEDP7YAL4xn4dKRu7Lo3cTlhotWk2MrzZtry3eJAtAlU+hIrMh7TuKaYOjBJ6i nv88tKefAZ+Zo3kjmLwckLz12lP31LVU8n913/OjcDbBGaNuP3paEwRpfOsMlFL0 FWy0wtUgGvD3qk6iXIoQnqG/c0/bNvQFeANJFqMRZvISfLpvG5f1vEId3/HFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJVHtioS8hvk7qR6zvGhkGoxFcSYwHwYDVR0j BBgwFoAUCf00/2g2+d0BrH/fNXhAx1K7kaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5 YzI4LzIvMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1MkJCOTFBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8wOUZEMzRGRjY4MzZGOUREMDFBQzdGREYz NTc4NDBDNzUyQkI5MUE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZkNTI1NjM4OWMyOC8yLzA5RkQzNEZG NjgzNkY5REQwMUFDN0ZERjM1Nzg0MEM3NTJCQjkxQTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsnldc Z+JttpTDhf6nZp+5r+fdGCvt5BebOOFOPHrnnQlKTVIJlaWhXiGZT5jxiw1wE2of +QbBpM4y6tI8YElB8AdUGOL1HZ/qol1LAGZspDf8+km/hUTx2JWpU6jm4xCBRbp+ /AUqjFepMjuiHXQzStV37o3KzaTWUIozSJ9l6ozb2L4lnkML/PufAfl+fQKFaGDf SATfaX40SSS8brfXsn0ssKxFng01Nn4o63Zcg+Ujydzzr0iQfm38bLqKUaFBoc6a O0DkrIY+ESooS2khTigkhunhWl3MNkJq/+LNwWWEUAgNrRhF2GkZzOs1eLbj5p0t +vzgtwfvF+jxplCp -----END CERTIFICATE-----Generated at Tue Jul 28 14:40:55 2026 by rpki-client