$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: AyNYnsKGaTCLihEdaL03JY0VhFkFqNoke11+fZwA27w= Subject key identifier: 7A:94:BF:DA:49:84:B4:93:F8:57:8B:AD:D5:19:D2:5C:17:88:A2:98 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 7ABE85E683EA1780717962917D5713E07B6D4B95 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 93 Signing time: Tue 28 Jul 2026 08:09:51 +0000 Manifest this update: Tue 28 Jul 2026 08:04:51 +0000 Manifest next update: Wed 29 Jul 2026 09:07:51 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: dB5uvhkHWD2qCL/+2T4w5R32SRXHQusQVjQXvZgLikY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:be:85:e6:83:ea:17:80:71:79:62:91:7d:57:13:e0:7b:6d:4b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Jul 28 08:04:51 2026 GMT Not After : Jul 29 09:07:51 2026 GMT Subject: CN=7A94BFDA4984B493F8578BADD519D25C1788A298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:73:c9:67:69:bd:48:a5:a6:63:4b:28:a5: df:1a:29:71:0c:b4:e0:2d:64:30:0b:de:16:11:9d: d1:91:de:45:29:d5:51:ff:c3:36:56:68:06:b7:fe: 2d:15:4b:d5:5c:fa:6e:fd:83:4a:d0:eb:cc:7b:c5: 8a:8b:7d:13:cc:1c:b7:58:a3:90:61:89:15:61:29: c0:d9:b5:5d:18:d2:f0:e0:32:02:df:63:f7:ef:93: 10:f2:24:1a:6b:2a:b1:2a:61:d8:7f:13:68:70:a5: 02:f2:e5:1c:2d:15:0e:66:91:ca:d2:d5:d9:3a:78: a3:c0:ff:ac:59:ef:e0:a5:61:cc:7b:b6:7f:0e:ff: 67:07:de:b0:7e:23:69:ee:38:cc:e4:f2:fd:b4:cc: 51:77:d0:2d:ed:95:b8:7d:3b:92:01:e8:58:d5:cd: d6:06:31:4c:de:83:37:f7:a4:97:df:44:01:66:56: 8c:22:50:84:62:20:7a:de:e7:09:2b:9b:d1:52:64: 91:f3:cb:7c:4b:91:75:90:3c:60:88:26:0b:dc:e9: 25:a5:64:f2:97:ba:74:24:47:d4:6a:18:8a:c2:15: c6:8a:9c:93:1f:d4:56:7c:15:33:b8:61:d3:95:2c: 0f:c8:c2:14:2b:f8:d5:cc:8a:f6:44:37:f9:0c:89: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:BF:DA:49:84:B4:93:F8:57:8B:AD:D5:19:D2:5C:17:88:A2:98 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:57:58:77:aa:95:0c:0f:2e:a9:07:25:21:5d:96:ce:52:dc: c4:16:db:78:de:32:51:00:49:4c:42:e9:a4:47:2c:96:cc:ca: 5e:21:1c:29:e9:14:cb:e5:23:50:b5:ec:39:39:59:08:d2:7e: 49:42:30:90:c7:de:bf:c4:39:ca:eb:d6:b4:1a:a1:a1:df:41: 48:c8:11:1a:79:5f:e4:ed:03:f4:84:c7:b1:76:03:f1:7d:d6: 70:7c:c4:e1:ef:81:12:0e:d0:e7:4f:31:d7:a1:b2:19:a1:1a: c9:26:d8:d3:5a:86:62:cd:50:de:ca:c4:2a:22:63:50:89:dc: 03:c1:14:82:64:58:9a:83:ac:9d:24:d5:34:a1:de:ea:08:b0: 96:9c:ed:32:f9:55:a3:9e:bd:ac:a2:43:0f:19:00:6d:d1:31: d6:af:84:4e:17:89:38:7e:50:db:e7:2e:de:7d:01:6d:0c:f8: 7e:c7:1e:47:87:98:62:d5:6b:15:4c:ca:ae:44:05:5b:84:fe: 96:2c:ce:d3:7f:dd:53:80:5b:1b:d9:13:47:a6:22:f1:9c:96: f3:9a:97:1a:df:9f:9f:ff:74:78:95:f4:45:c7:9a:ce:5b:46: cc:82:f9:0e:f7:14:ca:d4:be:28:06:f2:49:10:30:bf:62:d5: 5f:57:96:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUer6F5oPqF4BxeWKRfVcT4HttS5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA3MjgwODA0NTFaFw0yNjA3MjkwOTA3NTFaMDMxMTAvBgNV BAMTKDdBOTRCRkRBNDk4NEI0OTNGODU3OEJBREQ1MTlEMjVDMTc4OEEyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXG3PJZ2m9SKWmY0sopd8aKXEM tOAtZDAL3hYRndGR3kUp1VH/wzZWaAa3/i0VS9Vc+m79g0rQ68x7xYqLfRPMHLdY o5BhiRVhKcDZtV0Y0vDgMgLfY/fvkxDyJBprKrEqYdh/E2hwpQLy5RwtFQ5mkcrS 1dk6eKPA/6xZ7+ClYcx7tn8O/2cH3rB+I2nuOMzk8v20zFF30C3tlbh9O5IB6FjV zdYGMUzegzf3pJffRAFmVowiUIRiIHre5wkrm9FSZJHzy3xLkXWQPGCIJgvc6SWl ZPKXunQkR9RqGIrCFcaKnJMf1FZ8FTO4YdOVLA/IwhQr+NXMivZEN/kMiVBfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUepS/2kmEtJP4V4ut1RnSXBeIopgwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSV1h3 qpUMDy6pByUhXZbOUtzEFtt43jJRAElMQumkRyyWzMpeIRwp6RTL5SNQtew5OVkI 0n5JQjCQx96/xDnK69a0GqGh30FIyBEaeV/k7QP0hMexdgPxfdZwfMTh74ESDtDn TzHXobIZoRrJJtjTWoZizVDeysQqImNQidwDwRSCZFiag6ydJNU0od7qCLCWnO0y +VWjnr2sokMPGQBt0THWr4ROF4k4flDb5y7efQFtDPh+xx5Hh5hi1WsVTMquRAVb hP6WLM7Tf91TgFsb2RNHpiLxnJbzmpca35+f/3R4lfRFx5rOW0bMgvkO9xTK1L4o BvJJEDC/YtVfV5bO -----END CERTIFICATE-----Generated at Wed Jul 29 02:05:38 2026 by rpki-client