$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: x/U8+zIRTfXJ0HxHJGBN5e0Pq5X/7DnsfrbqJEUmAaw= Subject key identifier: E3:F2:80:C3:9E:90:98:E7:E2:DB:62:CB:78:C7:9E:0A:C7:5D:B9:20 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 293541406A02BC52654CEA05B65875EB111F590D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: 0138 Signing time: Tue 28 Jul 2026 20:28:08 +0000 Manifest this update: Tue 28 Jul 2026 20:23:08 +0000 Manifest next update: Wed 29 Jul 2026 21:59:08 +0000 Files and hashes: 1: 326130623a346530373a6330323a3a2f34382d3438203d3e20323135373630.roa (hash: 89YEfdCNb6RXT7z5CsfijNvWZCI5tf3pkWh8RSXOhww=) 2: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: iwuxg9dCVr8XxK0M5kEzflGe3ETEdMipS1z/X7Vx6do=) 3: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 4: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 16:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:35:41:40:6a:02:bc:52:65:4c:ea:05:b6:58:75:eb:11:1f:59:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jul 28 20:23:08 2026 GMT Not After : Jul 29 21:59:08 2026 GMT Subject: CN=E3F280C39E9098E7E2DB62CB78C79E0AC75DB920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:d5:df:56:1b:16:31:89:a5:f8:f3:83:89: 96:c2:10:7d:c8:7c:65:6a:21:2a:00:d2:91:ba:02: 44:21:01:08:29:fe:d5:d4:46:09:2f:35:46:8a:a4: 24:ef:fd:79:6a:af:fd:83:32:b2:6b:b2:8e:42:88: 05:6e:cc:b2:3e:d4:2c:55:87:c7:c8:43:90:9c:32: 7b:c8:59:44:03:f4:b2:c0:2d:5b:9c:fb:05:5e:45: 21:14:bd:35:9a:13:28:7e:e7:15:f0:2b:91:2c:c5: c5:21:b2:f5:7b:84:c3:ea:a3:d3:e3:e2:89:92:ef: 67:8e:aa:91:a3:ca:6e:cb:2f:42:54:b4:8e:32:28: 0e:03:ad:c7:7f:ec:7d:1a:ab:8d:1a:fa:ce:28:af: 12:48:06:f4:6e:58:34:7a:2c:5f:86:5e:e0:fa:8b: 02:97:14:d9:e0:47:91:a1:ba:de:20:a9:1c:5d:42: ca:eb:76:24:f9:9a:66:b7:0a:59:fe:07:56:2d:7b: a4:ef:de:b9:74:9d:3e:6c:f0:cb:ed:41:80:f8:36: 39:aa:52:7b:5b:9a:a6:1d:60:2f:24:f0:92:71:27: 60:42:ed:85:71:e9:28:99:cd:a9:26:70:51:87:98: 49:e6:63:84:54:02:fa:fe:e3:9a:8f:20:a1:ab:a2: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F2:80:C3:9E:90:98:E7:E2:DB:62:CB:78:C7:9E:0A:C7:5D:B9:20 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1b:34:69:67:22:33:15:55:a8:84:d6:0a:cd:34:44:d8:3a: 99:05:af:c9:02:f1:71:f7:79:39:7a:86:a0:f5:eb:0e:71:d8: 18:25:21:05:b9:d5:5a:02:06:a5:4f:53:40:67:08:7c:ae:ff: 26:14:34:77:1d:19:d6:ff:1d:f7:6b:80:64:fb:1f:a8:c5:4f: 5b:48:fc:bd:b0:47:00:32:5d:0e:18:89:26:99:7a:1c:2e:a4: f5:21:14:1f:c8:10:27:a0:ff:3f:f8:61:9e:1c:1b:e0:74:c7: 59:0a:6d:44:01:dd:65:28:ad:55:f2:6d:ce:65:e8:b0:bf:76: f5:65:00:5a:99:23:63:9e:30:e3:f8:74:4c:1e:0f:db:29:bb: d2:2d:67:5a:cf:09:43:80:cf:3b:44:b6:e4:c6:55:b0:df:5a: 51:47:ea:66:78:b1:0a:50:7c:aa:35:67:8f:15:6c:b8:ee:f9: ac:5c:6e:4f:9f:66:02:3c:46:84:4b:62:9b:f1:45:fa:25:d6: 0e:fb:5d:42:1d:b8:9f:4e:44:ef:a3:8f:19:40:9c:9f:1a:f5: 6f:b8:ce:68:36:f7:27:84:58:c8:f8:90:44:0b:2a:e6:58:be: c9:45:7f:b2:20:3c:08:a4:bc:b5:2f:b4:02:06:ee:a3:24:d8: 39:b2:d4:91 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUKTVBQGoCvFJlTOoFtlh16xEfWQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA3MjgyMDIzMDhaFw0yNjA3MjkyMTU5MDhaMDMxMTAvBgNV BAMTKEUzRjI4MEMzOUU5MDk4RTdFMkRCNjJDQjc4Qzc5RTBBQzc1REI5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ19XfVhsWMYml+PODiZbCEH3I fGVqISoA0pG6AkQhAQgp/tXURgkvNUaKpCTv/Xlqr/2DMrJrso5CiAVuzLI+1CxV h8fIQ5CcMnvIWUQD9LLALVuc+wVeRSEUvTWaEyh+5xXwK5EsxcUhsvV7hMPqo9Pj 4omS72eOqpGjym7LL0JUtI4yKA4Drcd/7H0aq40a+s4orxJIBvRuWDR6LF+GXuD6 iwKXFNngR5Ghut4gqRxdQsrrdiT5mma3Cln+B1Yte6Tv3rl0nT5s8MvtQYD4Njmq UntbmqYdYC8k8JJxJ2BC7YVx6SiZzakmcFGHmEnmY4RUAvr+45qPIKGrovRPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU4/KAw56QmOfi22LLeMeeCsdduSAwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBs0aWciMxVVqITWCs00 RNg6mQWvyQLxcfd5OXqGoPXrDnHYGCUhBbnVWgIGpU9TQGcIfK7/JhQ0dx0Z1v8d 92uAZPsfqMVPW0j8vbBHADJdDhiJJpl6HC6k9SEUH8gQJ6D/P/hhnhwb4HTHWQpt RAHdZSitVfJtzmXosL929WUAWpkjY54w4/h0TB4P2ym70i1nWs8JQ4DPO0S25MZV sN9aUUfqZnixClB8qjVnjxVsuO75rFxuT59mAjxGhEtim/FF+iXWDvtdQh24n05E 76OPGUCcnxr1b7jOaDb3J4RYyPiQRAsq5li+yUV/siA8CKS8tS+0AgbuoyTYObLU kQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:54:41 2026 by rpki-client