$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: AJfZafKVuGJmT5EGvN223C1UDNIhy2H9zMQlfI7nmIU= Subject key identifier: F7:1F:C1:0B:BA:AE:33:02:5D:4A:1A:E9:99:FE:E9:C5:74:B6:F8:7B Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 07CE3D4AA9ACAFCD74CE5934DF87ABD4F544B453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 05DD Signing time: Tue 28 Jul 2026 00:39:38 +0000 Manifest this update: Tue 28 Jul 2026 00:34:38 +0000 Manifest next update: Wed 29 Jul 2026 04:07:38 +0000 Files and hashes: 1: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 2: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 3: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 4: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 5: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 6: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 7: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 8: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 9: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: AeJt8muoEF1GwuBwKzSAe75mL0ZSK5nu2FebyoyFsx8=) 10: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 11: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 12: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 13: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 14: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 15: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 04:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ce:3d:4a:a9:ac:af:cd:74:ce:59:34:df:87:ab:d4:f5:44:b4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jul 28 00:34:38 2026 GMT Not After : Jul 29 04:07:38 2026 GMT Subject: CN=F71FC10BBAAE33025D4A1AE999FEE9C574B6F87B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:30:1c:41:3e:2e:b0:48:84:9b:a0:02:c1: 02:6f:8d:76:de:28:f6:7b:69:90:1d:f9:2f:f7:bb: 6c:34:fa:bf:c7:61:0c:2c:96:39:0c:79:54:8e:25: a5:30:62:cd:0a:59:80:a7:0b:c4:25:aa:c5:12:55: b8:71:eb:69:c3:31:91:85:7c:ca:71:26:60:2b:78: db:f2:e2:fa:d1:6a:1c:e8:79:c3:98:b4:f9:34:bf: 0e:ba:3d:88:91:08:d4:fe:c3:2d:3b:85:1f:f7:4e: 93:8d:9e:d3:f9:4d:65:29:35:b2:e8:80:37:3a:bd: ce:fc:4c:d0:56:1e:7e:8b:c1:31:76:8e:35:92:60: 49:7b:ef:0e:2a:e6:43:9c:2a:32:9a:43:5c:fb:ae: 1e:fe:af:5d:a3:0b:0a:06:b2:58:4e:ea:a6:5b:45: 7c:d7:39:64:3d:b8:37:4b:87:b1:8b:e7:cc:9e:66: 54:30:5c:d1:76:99:8d:ba:83:5a:5a:d4:96:c2:3a: 9b:a4:2e:3e:fb:8c:40:83:e6:84:b8:f7:f9:a8:5d: 12:49:5b:3d:df:04:96:3d:6c:d8:24:df:fc:da:7d: 73:fd:5d:99:c8:70:fb:dd:ea:06:b0:2b:0c:55:5e: 3e:de:30:0d:34:a5:26:7c:eb:2d:57:af:6c:e7:d1: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1F:C1:0B:BA:AE:33:02:5D:4A:1A:E9:99:FE:E9:C5:74:B6:F8:7B X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b3:c4:8c:33:96:4b:d2:99:70:99:f6:88:e6:54:da:28:64: cf:8e:31:c9:f7:46:01:90:fa:03:b3:81:86:c3:1b:3d:eb:dd: 47:cd:40:c1:7f:9c:ad:a0:98:11:9f:f5:bb:1f:2d:e5:f5:78: 4d:7b:38:b1:04:b9:a1:6f:99:5a:3c:e6:95:4a:79:a8:1b:3a: 52:01:0c:75:72:77:b3:ab:18:83:17:93:76:c7:ca:5f:3c:74: 5c:42:a9:8a:28:c8:41:ce:4d:97:2d:16:59:4c:e0:be:8a:95: 8a:47:c8:9a:e8:39:d4:ef:d4:ad:0c:bb:ff:9a:cc:95:7e:4a: 63:6e:39:12:79:fd:af:70:47:ba:e4:5a:64:23:4e:01:d3:49: 99:da:1d:c2:a7:53:61:0a:8a:d9:03:6b:2d:4a:9f:f3:0d:e7: 08:e7:90:83:1c:4e:41:30:d0:09:a6:c2:79:72:ac:54:d6:c4: ea:fc:fb:c2:ef:f7:27:05:f8:e7:8c:83:6e:ab:ee:23:9b:25: fe:6a:8b:24:32:76:ab:e8:0b:e9:c9:a4:7e:04:96:ce:0a:d6: cb:10:9e:a0:5f:2a:70:9f:a8:0f:7c:89:84:00:33:d4:81:74: c1:79:87:60:22:b7:4d:61:9e:b7:3c:ed:61:e4:42:55:75:58: 01:54:b5:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUB849Sqmsr810zlk034er1PVEtFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA3MjgwMDM0MzhaFw0yNjA3MjkwNDA3MzhaMDMxMTAvBgNV BAMTKEY3MUZDMTBCQkFBRTMzMDI1RDRBMUFFOTk5RkVFOUM1NzRCNkY4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNDAcQT4usEiEm6ACwQJvjXbe KPZ7aZAd+S/3u2w0+r/HYQwsljkMeVSOJaUwYs0KWYCnC8QlqsUSVbhx62nDMZGF fMpxJmAreNvy4vrRahzoecOYtPk0vw66PYiRCNT+wy07hR/3TpONntP5TWUpNbLo gDc6vc78TNBWHn6LwTF2jjWSYEl77w4q5kOcKjKaQ1z7rh7+r12jCwoGslhO6qZb RXzXOWQ9uDdLh7GL58yeZlQwXNF2mY26g1pa1JbCOpukLj77jECD5oS49/moXRJJ Wz3fBJY9bNgk3/zafXP9XZnIcPvd6gawKwxVXj7eMA00pSZ86y1Xr2zn0avpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9x/BC7quMwJdShrpmf7pxXS2+HswHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbPEjDOWS9KZcJn2iOZU 2ihkz44xyfdGAZD6A7OBhsMbPevdR81AwX+craCYEZ/1ux8t5fV4TXs4sQS5oW+Z WjzmlUp5qBs6UgEMdXJ3s6sYgxeTdsfKXzx0XEKpiijIQc5Nly0WWUzgvoqVikfI mug51O/UrQy7/5rMlX5KY245Enn9r3BHuuRaZCNOAdNJmdodwqdTYQqK2QNrLUqf 8w3nCOeQgxxOQTDQCabCeXKsVNbE6vz7wu/3JwX454yDbqvuI5sl/mqLJDJ2q+gL 6cmkfgSWzgrWyxCeoF8qcJ+oD3yJhAAz1IF0wXmHYCK3TWGetzztYeRCVXVYAVS1 yg== -----END CERTIFICATE-----Generated at Tue Jul 28 15:56:43 2026 by rpki-client