$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: ulfdmvyKkf5Oo8v6ODHgbyI4tvZmghMgCfDTHADk3WE= Subject key identifier: 70:2B:BF:80:06:DD:FD:77:F4:5B:79:2A:3A:14:C1:B6:91:93:F6:48 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 7566D1E5B75B0128BC1D49A24691A41CBEFC3E17 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 0115 Signing time: Tue 28 Jul 2026 20:28:08 +0000 Manifest this update: Tue 28 Jul 2026 20:23:08 +0000 Manifest next update: Wed 29 Jul 2026 22:37:08 +0000 Files and hashes: 1: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM=) 2: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 3: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 4: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: 1ENch0/QXSBT3pBbUZ8tDibBGUOF0ciStNmEx0ZpiaI=) 5: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:66:d1:e5:b7:5b:01:28:bc:1d:49:a2:46:91:a4:1c:be:fc:3e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Jul 28 20:23:08 2026 GMT Not After : Jul 29 22:37:08 2026 GMT Subject: CN=702BBF8006DDFD77F45B792A3A14C1B69193F648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:5a:93:35:17:2d:d5:18:6c:02:f7:ed:fb: 54:9b:cd:71:4d:4a:cc:74:b0:2d:9a:77:30:83:3b: 34:c1:18:ec:75:5e:fd:18:08:a8:c0:69:58:8b:38: 6a:e1:fe:73:05:63:6d:62:13:b0:88:cf:28:8b:c2: d4:c9:84:b1:73:14:05:94:10:06:a6:eb:75:f0:35: 80:3a:e1:78:5a:47:58:9d:1a:a0:de:8b:d8:7c:6f: 9a:8a:68:e7:f0:18:47:ad:df:b1:59:47:45:1f:e4: 84:b2:62:08:a8:f5:7b:b2:1a:88:db:cb:e9:87:23: ba:26:ad:a1:45:e1:fc:dd:3f:75:82:36:d0:07:01: 00:81:7c:9e:60:b6:3c:13:0e:3f:2b:b0:bc:6d:8b: 1e:92:c2:47:bc:57:99:eb:93:90:ff:08:19:6d:9a: 8f:c3:f1:f1:f6:33:5b:94:41:65:f6:04:29:a1:7c: e9:eb:bf:56:b8:57:4c:63:cb:23:a4:be:f4:39:c4: c5:c5:b1:6b:08:25:86:aa:6d:b7:74:cf:4e:65:89: 7b:3a:b4:5a:0a:75:ac:77:fe:f3:ff:44:72:f9:5d: e9:c1:d3:9d:bb:35:10:3e:b1:69:ad:2f:73:18:33: 39:11:96:58:3e:e3:11:94:74:29:14:0a:48:12:14: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:BF:80:06:DD:FD:77:F4:5B:79:2A:3A:14:C1:B6:91:93:F6:48 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2d:5f:4c:3f:bf:f2:86:6b:03:ab:47:5f:c7:6b:aa:d0:40: c3:b0:17:d9:d7:8c:ba:ba:96:fe:a8:58:2d:ae:51:08:63:1f: 03:5b:2f:b8:c7:a3:ba:08:33:d8:5e:81:21:67:47:32:60:da: 7e:18:48:0d:62:8f:ce:08:54:28:eb:25:23:05:48:7f:13:46: 6e:7a:8c:3e:30:ec:8d:39:13:4a:bc:c8:a6:7c:47:b3:5f:28: 97:37:80:8d:22:b1:29:80:6f:5b:38:dc:1d:42:92:d8:7c:e5: ec:f3:db:36:be:4e:21:87:69:c1:81:b0:95:f6:74:8c:00:52: f9:cc:eb:3b:03:c3:23:4a:71:3b:d2:bf:98:94:2c:37:f6:0d: 69:b7:9b:f6:46:53:58:99:f2:59:62:8e:72:07:c3:33:4d:bc: 4e:f7:e6:63:cb:25:eb:9c:80:55:df:9a:f8:a6:67:4c:32:bb: d0:13:56:e9:02:7f:fa:39:cf:db:8a:a9:aa:22:b7:6c:b4:09: 66:e1:04:2f:4e:26:4a:78:30:17:57:56:6f:41:3a:1f:7e:20: 65:5d:7b:b9:7f:dc:d3:9c:4d:f0:4f:50:ab:f5:20:a0:0b:ab: 0f:09:b9:ff:d5:8e:a7:92:22:5c:92:14:e6:02:24:4c:2c:09: d4:07:31:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdWbR5bdbASi8HUmiRpGkHL78PhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA3MjgyMDIzMDhaFw0yNjA3MjkyMjM3MDhaMDMxMTAvBgNV BAMTKDcwMkJCRjgwMDZEREZENzdGNDVCNzkyQTNBMTRDMUI2OTE5M0Y2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2olqTNRct1RhsAvft+1SbzXFN Ssx0sC2adzCDOzTBGOx1Xv0YCKjAaViLOGrh/nMFY21iE7CIzyiLwtTJhLFzFAWU EAam63XwNYA64XhaR1idGqDei9h8b5qKaOfwGEet37FZR0Uf5ISyYgio9XuyGojb y+mHI7omraFF4fzdP3WCNtAHAQCBfJ5gtjwTDj8rsLxtix6Swke8V5nrk5D/CBlt mo/D8fH2M1uUQWX2BCmhfOnrv1a4V0xjyyOkvvQ5xMXFsWsIJYaqbbd0z05liXs6 tFoKdax3/vP/RHL5XenB0527NRA+sWmtL3MYMzkRllg+4xGUdCkUCkgSFBvRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcCu/gAbd/Xf0W3kqOhTBtpGT9kgwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHLV9M P7/yhmsDq0dfx2uq0EDDsBfZ14y6upb+qFgtrlEIYx8DWy+4x6O6CDPYXoEhZ0cy YNp+GEgNYo/OCFQo6yUjBUh/E0Zueow+MOyNORNKvMimfEezXyiXN4CNIrEpgG9b ONwdQpLYfOXs89s2vk4hh2nBgbCV9nSMAFL5zOs7A8MjSnE70r+YlCw39g1pt5v2 RlNYmfJZYo5yB8MzTbxO9+ZjyyXrnIBV35r4pmdMMrvQE1bpAn/6Oc/biqmqIrds tAlm4QQvTiZKeDAXV1ZvQToffiBlXXu5f9zTnE3wT1Cr9SCgC6sPCbn/1Y6nkiJc khTmAiRMLAnUBzFr -----END CERTIFICATE-----Generated at Tue Jul 28 23:18:55 2026 by rpki-client