$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft File: AD29F7F191997039ACFD9760F915FEE62892E578.mft (raw, json) Hash identifier: ePAux9kBS+tsMa9jLHoqhu6GXHWwE2X45hJTR7QTLUM= Subject key identifier: DA:95:CF:50:8F:09:85:0E:B0:44:6F:76:A5:17:EF:6B:B8:8D:42:F9 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 71CA54052E1E4A3FD011CD79D1279409DF9AC543 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft Manifest number: 42 Signing time: Tue 28 Jul 2026 16:19:57 +0000 Manifest this update: Tue 28 Jul 2026 16:14:57 +0000 Manifest next update: Wed 29 Jul 2026 17:40:57 +0000 Files and hashes: 1: 326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa (hash: suEMvsRkOdgU7KXcZY6xsLsXfy/ps3v5egW1Mfg9jJg=) 2: 326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa (hash: D74S6x+CX7pIkmyrYc8C0iPdqtxDPmFuGT9pYsyXb5o=) 3: 326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa (hash: TspdqNLxsfL6dp4xdPseIhhfwq7xkWofsgu2VL8cf5s=) 4: 326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa (hash: +Bzn0imBvQ3Dm0XfkE2a2wG1dPY04xOf0M1OUTVWvjc=) 5: 326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa (hash: EglxgVjZeYL21zAN5f1qTpSdvc9u/IUyk5p/E9eciNM=) 6: AD29F7F191997039ACFD9760F915FEE62892E578.crl (hash: Rvzzuiz4DNeSMp1KKof7Pb0FP+km2lhWwFTwrPlokGg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ca:54:05:2e:1e:4a:3f:d0:11:cd:79:d1:27:94:09:df:9a:c5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 28 16:14:57 2026 GMT Not After : Jul 29 17:40:57 2026 GMT Subject: CN=DA95CF508F09850EB0446F76A517EF6BB88D42F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:9e:09:96:cd:60:e7:61:f0:98:3b:6f:df: 7f:9d:44:38:61:5a:50:b5:d8:00:ed:a4:35:2b:d5: 25:1b:e4:17:9b:7d:5f:2b:ac:ae:ce:11:f6:dc:6f: dd:80:08:13:c4:79:af:57:6f:1b:c5:d8:b2:03:f0: 3d:b4:ed:69:d4:69:21:b0:cd:c4:ba:91:c0:38:60: 60:97:4b:7f:44:ec:5b:b2:09:fc:d0:f2:4e:1c:00: 54:4c:6b:8d:98:64:df:21:27:07:94:af:63:82:d8: 48:7d:41:99:84:b7:37:45:85:16:d9:a9:4c:ce:fc: 36:18:bd:76:38:2d:83:b8:c3:af:d4:45:66:d9:70: 6f:1d:ce:64:65:0b:d5:2d:05:90:58:82:89:79:71: d5:d2:43:db:9f:73:ba:88:73:1a:84:3c:60:e2:25: 4e:58:c1:e7:c2:b1:0d:19:54:7d:89:28:a6:1b:81: bc:70:e0:2a:d2:23:be:f7:9c:a9:5c:4f:72:52:66: 85:50:a2:1e:11:93:31:fa:62:e0:26:ae:a9:31:43: cc:12:7a:35:d9:95:48:ec:69:c3:92:ec:e6:7f:f9: a3:e3:c6:52:fa:65:73:bc:f9:c5:46:a2:9e:f7:af: 19:fe:50:72:ef:0e:3d:d2:ed:de:05:15:11:37:d4: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:95:CF:50:8F:09:85:0E:B0:44:6F:76:A5:17:EF:6B:B8:8D:42:F9 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e6:4f:2b:56:1a:e1:71:4d:ae:e7:4a:25:8f:3f:61:af:09: 56:ce:03:ec:3f:c0:d5:9e:fc:47:db:c3:3d:4b:09:1b:4c:2e: b9:21:65:54:f9:48:9d:d2:f8:6b:b3:b2:02:9d:99:43:2d:92: 8b:04:25:8a:86:04:78:13:8c:0e:58:66:b1:35:06:3e:ec:11: 8e:a8:6b:91:0c:81:9f:56:93:ed:c4:c0:7d:dd:84:dd:17:15: 88:7c:db:ae:c2:e7:a3:e3:e6:ec:d6:b1:19:3a:35:53:ff:bc: 3d:6c:0c:2e:27:1d:19:44:34:f7:40:ca:dc:68:60:36:49:e6: 67:50:7a:01:a6:cb:c8:a6:d1:f8:f5:d3:df:d9:0c:78:24:7e: 35:2d:4f:54:9b:88:06:32:09:41:13:31:3e:1c:ed:dd:34:16: 89:f1:9a:e9:e4:f6:e8:f8:a1:9f:42:c1:d1:94:34:6a:cf:33: b1:12:44:fc:c0:00:a6:05:d2:52:18:e2:5b:ff:2e:a4:fe:4e: 24:93:fb:cb:78:cf:e2:ee:29:70:41:07:8c:a6:2f:a6:5b:72: 96:cb:90:a3:3d:da:a9:af:13:a1:ee:e6:70:89:d8:76:8a:f2: 65:1f:3e:33:26:cd:14:35:1d:43:bb:a9:a4:94:9b:27:d8:71: ea:c3:78:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUccpUBS4eSj/QEc150SeUCd+axUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MjgxNjE0NTdaFw0yNjA3MjkxNzQwNTdaMDMxMTAvBgNV BAMTKERBOTVDRjUwOEYwOTg1MEVCMDQ0NkY3NkE1MTdFRjZCQjg4RDQyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZZ4Jls1g52HwmDtv33+dRDhh WlC12ADtpDUr1SUb5BebfV8rrK7OEfbcb92ACBPEea9XbxvF2LID8D207WnUaSGw zcS6kcA4YGCXS39E7FuyCfzQ8k4cAFRMa42YZN8hJweUr2OC2Eh9QZmEtzdFhRbZ qUzO/DYYvXY4LYO4w6/URWbZcG8dzmRlC9UtBZBYgol5cdXSQ9ufc7qIcxqEPGDi JU5YwefCsQ0ZVH2JKKYbgbxw4CrSI773nKlcT3JSZoVQoh4RkzH6YuAmrqkxQ8wS ejXZlUjsacOS7OZ/+aPjxlL6ZXO8+cVGop73rxn+UHLvDj3S7d4FFRE31HbtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2pXPUI8JhQ6wRG92pRfva7iNQvkwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QyNTUwY2FhLWUzOTItNDg0OC05MmZiLWEzZDU4MjhlMzY5NS8xL0FEMjlGN0Yx OTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5MkU1NzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/5k8r VhrhcU2u50oljz9hrwlWzgPsP8DVnvxH28M9SwkbTC65IWVU+Uid0vhrs7ICnZlD LZKLBCWKhgR4E4wOWGaxNQY+7BGOqGuRDIGfVpPtxMB93YTdFxWIfNuuwuej4+bs 1rEZOjVT/7w9bAwuJx0ZRDT3QMrcaGA2SeZnUHoBpsvIptH49dPf2Qx4JH41LU9U m4gGMglBEzE+HO3dNBaJ8Zrp5Pbo+KGfQsHRlDRqzzOxEkT8wACmBdJSGOJb/y6k /k4kk/vLeM/i7ilwQQeMpi+mW3KWy5CjPdqprxOh7uZwidh2ivJlHz4zJs0UNR1D u6mklJsn2HHqw3hi -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:41 2026 by rpki-client