$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft File: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft (raw, json) Hash identifier: ldEjGnnUeHharapdOgzwpMg9HVPlj/J0mTnubA2ORRw= Subject key identifier: 28:98:F2:7E:3A:EC:04:CB:2D:8F:3B:2A:EA:6B:7B:C5:C6:77:E6:72 Authority key identifier: 01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 Certificate issuer: /CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Certificate serial: 4D61BC33867EECD755F3394C620529F95986D1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft Manifest number: 8B Signing time: Tue 28 Jul 2026 20:49:34 +0000 Manifest this update: Tue 28 Jul 2026 20:44:34 +0000 Manifest next update: Wed 29 Jul 2026 21:52:34 +0000 Files and hashes: 1: 326131333a376663303a313031663a3a2f34382d3438203d3e20323134353837.roa (hash: NILQ8/k8RWx9Jp9dOJ2tdW/rwY6dVyE3d3RQvgfQQ7Q=) 2: AS213216.asa (hash: E44tygSJlhvbcH//RusbDcWbj+tZTXOnGQ3XzZ2jCqQ=) 3: 326131333a376663303a613432613a3a2f34382d3438203d3e20323133323136.roa (hash: lt17UYcjIOUOPLVOK/FWXABZZQuRCYc0AYsajAWcNG0=) 4: 326131333a376663303a313031303a3a2f34382d3438203d3e20323134353837.roa (hash: qkAnu8n5ZwhWIiFOozTwrJIaIzyzsrR64v/E5gw6fnU=) 5: 3139342e36312e302e302f32342d3234203d3e20323133323136.roa (hash: cDv+tCpd/eaVv7HBUSB+v0knElafCYH9RP9hQp1KhK8=) 6: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl (hash: DYxnI4+9VbqgCHa5Ab6GeCnq97LiWdyeubGEDnwF7Z0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:bc:33:86:7e:ec:d7:55:f3:39:4c:62:05:29:f9:59:86:d1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Validity Not Before: Jul 28 20:44:34 2026 GMT Not After : Jul 29 21:52:34 2026 GMT Subject: CN=2898F27E3AEC04CB2D8F3B2AEA6B7BC5C677E672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:3a:e9:cc:27:eb:cd:4c:51:7e:ed:d5:8a: 67:d9:98:9b:15:6d:24:7b:85:dd:fc:1d:a4:54:35: 4a:b6:05:18:1e:7c:a1:cb:3c:00:e2:04:57:72:68: 5c:9e:1f:81:4b:13:17:65:75:af:67:0e:5f:76:8e: e3:dd:f3:24:fd:b1:9a:0f:26:64:ec:4b:ac:e8:35: f2:22:b6:cf:c0:d3:5e:bf:37:f8:51:5e:07:f3:6a: 85:cb:99:fe:59:0e:82:10:60:75:23:a5:00:dd:98: 14:ee:e2:d9:77:36:a9:d5:a8:25:52:25:d8:1e:6f: bf:c0:af:f8:81:1e:16:f1:99:27:5e:e3:4a:65:ae: 1a:e2:ea:d0:51:15:c4:ef:95:b5:23:7e:62:b5:28: a3:98:71:3d:e7:1e:f0:d1:45:2a:31:3a:2d:65:ba: c6:46:c6:5f:ee:35:2f:ff:9e:ba:8f:7b:9e:66:51: 96:02:f0:23:57:db:fe:8e:e3:4e:7e:74:a5:c2:f5: d6:21:a8:63:49:4d:f6:94:89:0e:85:ba:f9:f5:3e: 10:db:2a:78:52:5f:a6:2b:03:60:58:b2:b2:cb:47: 8f:c5:9e:ad:f9:9b:86:7f:34:4f:6a:5d:f8:a5:09: ad:17:e7:5c:1f:ba:b7:43:5a:80:26:d3:68:89:b6: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:98:F2:7E:3A:EC:04:CB:2D:8F:3B:2A:EA:6B:7B:C5:C6:77:E6:72 X509v3 Authority Key Identifier: keyid:01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3f:41:09:65:24:cd:9d:2c:4a:cf:54:90:9d:5d:f2:5e:f9: 51:ed:9d:27:42:55:e8:6b:f6:8c:7a:b6:a8:b8:d7:0e:0a:63: 3e:61:fa:28:30:24:07:54:21:66:5b:ad:ba:a6:23:c7:2e:eb: 8f:74:ea:cc:e0:08:2d:71:d3:8d:54:75:ee:32:57:21:32:fe: 88:d3:fe:4d:cd:6a:91:09:7b:2e:23:51:d1:5c:37:24:a7:bd: f0:ef:d2:5a:a8:17:4c:d8:c5:0f:36:8c:8e:af:fe:39:f4:27: f9:ec:0f:0d:7a:8f:db:b5:f8:c9:e5:b9:65:47:14:28:10:6b: 44:11:41:97:e3:9e:f0:30:87:98:6d:9d:08:ae:3d:a4:32:bc: 52:67:5c:86:bb:27:cb:e1:be:7c:c9:ac:5d:ae:dd:60:81:c7: 2d:d0:cf:02:c5:be:f4:23:fa:6d:62:6e:14:67:a8:30:f4:41: c9:fe:79:86:0b:33:57:4a:ea:14:33:cd:32:ab:c7:ac:96:b5: 51:8b:7b:e2:9e:8d:ec:8c:96:5e:00:7a:e7:22:2f:cc:89:a5: d6:fb:86:26:e3:2a:34:4d:b8:a6:8f:06:50:93:dd:9d:8a:67: ae:1a:50:34:29:8e:f4:f7:be:18:5f:15:31:23:33:cf:92:b8: c7:5a:35:8c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTWG8M4Z+7NdV8zlMYgUp+VmG0f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3N2RjZDdiZWUxMTkwNjI5NDM3Y2E0YzhhYjgzZTNh ZDE1YzdhOTAeFw0yNjA3MjgyMDQ0MzRaFw0yNjA3MjkyMTUyMzRaMDMxMTAvBgNV BAMTKDI4OThGMjdFM0FFQzA0Q0IyRDhGM0IyQUVBNkI3QkM1QzY3N0U2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxTrpzCfrzUxRfu3VimfZmJsV bSR7hd38HaRUNUq2BRgefKHLPADiBFdyaFyeH4FLExdlda9nDl92juPd8yT9sZoP JmTsS6zoNfIits/A016/N/hRXgfzaoXLmf5ZDoIQYHUjpQDdmBTu4tl3NqnVqCVS Jdgeb7/Ar/iBHhbxmSde40plrhri6tBRFcTvlbUjfmK1KKOYcT3nHvDRRSoxOi1l usZGxl/uNS//nrqPe55mUZYC8CNX2/6O405+dKXC9dYhqGNJTfaUiQ6Fuvn1PhDb KnhSX6YrA2BYsrLLR4/Fnq35m4Z/NE9qXfilCa0X51wfurdDWoAm02iJtqKZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKJjyfjrsBMstjzsq6mt7xcZ35nIwHwYDVR0j BBgwFoAUAXfc177hGQYpQ3ykyKuD460Vx6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBlNDhkYTItYmYzZC00Zjk0LTljMTMtYzA4YzExOTBk ZTE4LzAvMDE3N0RDRDdCRUUxMTkwNjI5NDM3Q0E0QzhBQjgzRTNBRDE1QzdBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FYZmMxNzdoR1FZcFEzeWt5S3VENDYw Vng2ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGU0OGRhMi1i ZjNkLTRmOTQtOWMxMy1jMDhjMTE5MGRlMTgvMC8wMTc3RENEN0JFRTExOTA2Mjk0 MzdDQTRDOEFCODNFM0FEMTVDN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT9BCWUkzZ0sSs9UkJ1d 8l75Ue2dJ0JV6Gv2jHq2qLjXDgpjPmH6KDAkB1QhZlutuqYjxy7rj3TqzOAILXHT jVR17jJXITL+iNP+Tc1qkQl7LiNR0Vw3JKe98O/SWqgXTNjFDzaMjq/+OfQn+ewP DXqP27X4yeW5ZUcUKBBrRBFBl+Oe8DCHmG2dCK49pDK8Umdchrsny+G+fMmsXa7d YIHHLdDPAsW+9CP6bWJuFGeoMPRByf55hgszV0rqFDPNMqvHrJa1UYt74p6N7IyW XgB65yIvzIml1vuGJuMqNE24po8GUJPdnYpnrhpQNCmO9Pe+GF8VMSMzz5K4x1o1 jA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:59 2026 by rpki-client