$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: SVijy2nRVijXM/Q5rGLhv+VxavZLMqmPGmejIFDs5pE= Subject key identifier: A4:07:B1:F2:0B:6B:7D:97:64:FB:CB:68:AB:D6:D0:3C:E2:6A:B7:39 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 43651B41AEADD3052BE4BD68504B1A98F1C331BA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 03EF Signing time: Sat 18 Apr 2026 20:10:33 +0000 Manifest this update: Sat 18 Apr 2026 20:05:33 +0000 Manifest next update: Sun 19 Apr 2026 22:15:33 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: vjGMBxD7VcBa3vXCmUFeQigWz9dCYnA69sEL/S0PQt4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:65:1b:41:ae:ad:d3:05:2b:e4:bd:68:50:4b:1a:98:f1:c3:31:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Apr 18 20:05:33 2026 GMT Not After : Apr 19 22:15:33 2026 GMT Subject: CN=A407B1F20B6B7D9764FBCB68ABD6D03CE26AB739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:2a:07:80:79:bd:ef:2b:f7:10:8d:4f:3d: 5e:12:88:f7:71:a8:dc:35:6a:0e:fa:67:27:cb:94: d7:98:3f:1d:0a:aa:68:e0:4a:be:40:4e:dc:6a:7c: e4:e8:58:89:f8:f5:6b:1f:14:81:43:af:2d:e7:b6: 6b:cb:89:81:e4:36:c6:14:af:f8:a4:5c:c8:48:d2: cf:d2:69:b0:f7:07:1d:15:53:b7:1b:73:8f:ca:20: 86:32:d5:7e:c4:24:7b:e0:3d:ff:b3:0c:07:45:4d: be:a8:2d:7f:2a:99:f5:76:68:f6:82:d7:ce:cb:a1: 2d:bf:ce:7d:f0:f2:3a:f1:35:06:d3:ea:e0:a2:60: 88:13:1d:57:c1:df:0e:b3:e9:ab:2d:3d:0b:22:fd: 3e:e5:76:96:7e:ba:ee:50:3f:78:8b:bc:b9:42:03: 27:a9:fe:bc:ed:87:cf:33:1b:cb:b9:19:4c:a1:a0: 3b:ef:f3:76:34:64:b8:78:16:8e:4d:af:a0:a1:36: 60:68:4f:73:11:90:95:d5:65:16:05:0b:61:cd:bc: cc:28:fd:29:5f:88:f5:c1:5b:94:ea:82:c1:d4:8a: 1e:5a:00:5e:5a:87:a1:fb:74:8e:d2:24:ec:50:a3: 21:76:39:d6:1b:36:b8:57:c3:8b:ba:7a:77:b0:42: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:07:B1:F2:0B:6B:7D:97:64:FB:CB:68:AB:D6:D0:3C:E2:6A:B7:39 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:dc:e1:f4:ce:89:44:04:94:ca:bf:8e:20:d7:8d:a7:98:e0: 0b:16:f3:0f:28:cd:82:fb:0c:11:8b:45:dd:d5:13:b4:75:91: c7:68:36:80:40:9b:4e:3c:99:42:9a:92:47:c2:2c:d6:5c:69: 62:b9:68:51:f0:24:cf:23:14:3c:3b:e5:e0:aa:9e:b6:8c:2f: 01:bf:96:1f:8a:bc:59:0f:a2:c2:a3:74:34:8a:24:d0:79:b3: 1b:81:45:96:0d:1e:be:47:95:2a:9e:e5:3c:a3:c4:2e:2f:34: b5:76:b2:ab:86:55:11:58:7a:cf:e8:1f:2a:4d:b4:28:32:1b: 1c:34:e3:ef:64:cb:65:93:93:f2:3b:68:4d:19:1a:08:ee:c7: e1:e1:d6:f0:69:df:17:39:46:89:61:e9:a0:2f:39:9b:62:03: 50:96:2b:5e:5c:43:ad:3d:bb:c5:69:89:85:f9:bb:03:8e:00: 1b:5a:20:69:5d:c0:1d:cd:83:4f:66:e3:f2:fc:6f:57:57:57: 4e:44:06:a6:82:d1:b8:e0:a8:cf:13:8e:5b:7f:e5:b8:57:c3: 2f:f9:d5:3d:2b:c3:3a:55:65:a4:6a:0e:73:ff:5f:b5:02:0b: 6c:59:e6:e5:13:a9:2b:d4:f8:7c:24:44:99:10:b7:e3:b4:fe: a9:91:e3:27 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ2UbQa6t0wUr5L1oUEsamPHDMbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA0MTgyMDA1MzNaFw0yNjA0MTkyMjE1MzNaMDMxMTAvBgNV BAMTKEE0MDdCMUYyMEI2QjdEOTc2NEZCQ0I2OEFCRDZEMDNDRTI2QUI3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QyoHgHm97yv3EI1PPV4SiPdx qNw1ag76ZyfLlNeYPx0KqmjgSr5ATtxqfOToWIn49WsfFIFDry3ntmvLiYHkNsYU r/ikXMhI0s/SabD3Bx0VU7cbc4/KIIYy1X7EJHvgPf+zDAdFTb6oLX8qmfV2aPaC 187LoS2/zn3w8jrxNQbT6uCiYIgTHVfB3w6z6astPQsi/T7ldpZ+uu5QP3iLvLlC Ayep/rzth88zG8u5GUyhoDvv83Y0ZLh4Fo5Nr6ChNmBoT3MRkJXVZRYFC2HNvMwo /SlfiPXBW5TqgsHUih5aAF5ah6H7dI7SJOxQoyF2OdYbNrhXw4u6enewQvRfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpAex8gtrfZdk+8toq9bQPOJqtzkwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCm3OH0 zolEBJTKv44g142nmOALFvMPKM2C+wwRi0Xd1RO0dZHHaDaAQJtOPJlCmpJHwizW XGliuWhR8CTPIxQ8O+Xgqp62jC8Bv5YfirxZD6LCo3Q0iiTQebMbgUWWDR6+R5Uq nuU8o8QuLzS1drKrhlURWHrP6B8qTbQoMhscNOPvZMtlk5PyO2hNGRoI7sfh4dbw ad8XOUaJYemgLzmbYgNQliteXEOtPbvFaYmF+bsDjgAbWiBpXcAdzYNPZuPy/G9X V1dORAamgtG44KjPE45bf+W4V8Mv+dU9K8M6VWWkag5z/1+1AgtsWeblE6kr1Ph8 JESZELfjtP6pkeMn -----END CERTIFICATE-----Generated at Sun Apr 19 08:25:19 2026 by rpki-client