$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft File: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft (raw, json) Hash identifier: zDQ2SBSM7mHfWw0t8YHU6REuq0t91IIVnUpFBGnEvC8= Subject key identifier: 8C:96:6F:C5:CE:00:97:F4:54:3B:54:FE:B1:8E:A0:D1:1D:67:0A:23 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 2EF3297030CC8FBD674E72DEEF73CCFAE3E85D5D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft Manifest number: 82 Signing time: Wed 29 Jul 2026 00:13:56 +0000 Manifest this update: Wed 29 Jul 2026 00:08:56 +0000 Manifest next update: Thu 30 Jul 2026 03:01:56 +0000 Files and hashes: 1: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: eBx6CYbDRTosurIDDB+KoSblZBSgp+vUq6zMeiKzypk=) 2: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: TmQ0le/l8ws1Wb4HrTMvMEVGRgkcyqYl6oMiV7FPUPY=) 3: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl (hash: o2Wqz+mNcYiDr/MTptU6pDqmbAI5osI+R216C2Wxb/o=) 4: 326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa (hash: laI5Q0pzbwM0SFktw07XD+6OjZd2N3daUYCWjZILC6M=) 5: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: vYGonux44s3TgewlYrrqNYb7AvM/5XVRjdpid9S48+w=) 6: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: UaT2T+A+1mEnEGFNa0ifcwWPDZ4pmnvM/DYRoddIiqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f3:29:70:30:cc:8f:bd:67:4e:72:de:ef:73:cc:fa:e3:e8:5d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jul 29 00:08:56 2026 GMT Not After : Jul 30 03:01:56 2026 GMT Subject: CN=8C966FC5CE0097F4543B54FEB18EA0D11D670A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:7f:1b:35:15:2e:14:9a:24:cf:d4:60:fd: cb:3d:4d:41:53:b3:3f:cc:d1:e4:fd:2e:ec:3f:5c: 53:57:a6:18:24:45:fd:e3:e7:26:5c:2a:38:ea:f2: 77:6d:a1:e9:89:23:29:1f:7a:1a:48:94:cb:bc:2e: 0f:9e:b6:d0:ce:e1:31:97:08:3f:32:7b:38:69:2f: d1:4e:35:b6:72:70:6f:37:96:b4:fb:0b:b8:27:6f: 2e:4e:fc:00:24:cc:0b:ea:fc:f5:0e:29:e8:73:37: 1f:f1:fc:da:b9:9f:7f:c5:bf:ca:74:43:4f:7b:83: ad:4c:ba:ea:3f:9d:ed:90:f7:fa:c8:28:5f:19:4c: 72:66:cc:13:78:a1:38:a4:2d:d7:ed:bd:3c:59:37: a9:3d:bb:a3:8d:1d:24:f9:df:be:3b:b7:27:1c:2e: 5f:e1:d2:cd:6b:9a:a0:04:6f:ed:5e:16:2c:6b:6d: e3:8d:ed:92:57:45:0a:bd:36:30:16:0c:8b:ee:2d: 88:db:2b:c7:a8:d2:d7:95:e2:23:bc:47:1a:c5:86: a6:fb:4a:44:de:ae:a6:75:47:44:bf:b5:84:2c:ff: 0d:94:ed:03:45:63:9f:1e:e9:bb:be:e8:62:30:5c: 8d:39:b8:25:19:80:92:34:6a:08:ac:2e:16:f5:66: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:6F:C5:CE:00:97:F4:54:3B:54:FE:B1:8E:A0:D1:1D:67:0A:23 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dd:2b:1c:b3:cd:ed:b5:4d:2b:6e:20:c9:d4:cd:6a:0c:03: 16:43:0d:ba:9c:e5:49:48:8a:80:4c:54:b4:e1:b2:49:2d:24: 8d:62:5f:fc:d4:40:3f:a6:06:4a:53:fd:01:ca:f0:02:22:b5: d1:14:c8:a9:e5:69:4f:5f:5d:0b:a7:59:bf:1c:cc:ad:a8:7e: c5:7c:e9:a2:f4:90:22:ea:aa:25:c9:83:a6:3c:6d:f4:84:27: d8:f9:ab:8f:e4:8d:24:71:3f:fa:d6:4e:08:eb:ee:c4:3f:f7: 3c:96:71:7c:04:a4:69:bf:13:54:18:64:41:c1:c7:7c:51:8a: 7f:54:54:6d:d9:d1:9d:af:1b:26:f4:f6:e8:0d:d9:27:aa:2c: 21:88:2d:d7:97:e6:00:38:41:6c:ca:8f:02:b8:7b:4b:de:e6: ab:af:f6:ba:3d:61:e9:25:0e:4a:21:7d:a6:c9:8b:be:23:12: 35:b2:e5:5b:58:98:cf:64:45:74:b5:00:e7:14:1d:b2:2c:e4: d0:41:01:98:d0:e4:97:1e:fc:51:e6:d7:db:13:ab:37:60:8a: f5:1d:d7:fe:c6:18:1d:8a:dc:f0:c4:5c:cd:56:a5:03:43:29: cc:59:b1:cd:d8:c4:2a:50:4b:7c:3d:84:fe:52:50:e2:a4:08: 83:6f:d8:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULvMpcDDMj71nTnLe73PM+uPoXV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA3MjkwMDA4NTZaFw0yNjA3MzAwMzAxNTZaMDMxMTAvBgNV BAMTKDhDOTY2RkM1Q0UwMDk3RjQ1NDNCNTRGRUIxOEVBMEQxMUQ2NzBBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+X8bNRUuFJokz9Rg/cs9TUFT sz/M0eT9Luw/XFNXphgkRf3j5yZcKjjq8ndtoemJIykfehpIlMu8Lg+ettDO4TGX CD8yezhpL9FONbZycG83lrT7C7gnby5O/AAkzAvq/PUOKehzNx/x/Nq5n3/Fv8p0 Q097g61Muuo/ne2Q9/rIKF8ZTHJmzBN4oTikLdftvTxZN6k9u6ONHST53747tycc Ll/h0s1rmqAEb+1eFixrbeON7ZJXRQq9NjAWDIvuLYjbK8eo0teV4iO8RxrFhqb7 SkTerqZ1R0S/tYQs/w2U7QNFY58e6bu+6GIwXI05uCUZgJI0agisLhb1ZhCzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjJZvxc4Al/RUO1T+sY6g0R1nCiMwHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS81LzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY3Ssc s83ttU0rbiDJ1M1qDAMWQw26nOVJSIqATFS04bJJLSSNYl/81EA/pgZKU/0ByvAC IrXRFMip5WlPX10Lp1m/HMytqH7FfOmi9JAi6qolyYOmPG30hCfY+auP5I0kcT/6 1k4I6+7EP/c8lnF8BKRpvxNUGGRBwcd8UYp/VFRt2dGdrxsm9PboDdknqiwhiC3X l+YAOEFsyo8CuHtL3uarr/a6PWHpJQ5KIX2myYu+IxI1suVbWJjPZEV0tQDnFB2y LOTQQQGY0OSXHvxR5tfbE6s3YIr1Hdf+xhgditzwxFzNVqUDQynMWbHN2MQqUEt8 PYT+UlDipAiDb9im -----END CERTIFICATE-----Generated at Wed Jul 29 01:44:33 2026 by rpki-client