$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: aHGmFMTQ20jZxn7dcVt5UEZmDZqryMkvegTNP/s2Bfc= Subject key identifier: A3:E2:96:DF:EC:B0:79:40:A4:3C:E1:F9:C7:30:39:8F:23:AF:0F:9F Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 68B48FB93412784A535800AD2E2EA6AAAFBE23A4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: F0 Signing time: Wed 29 Jul 2026 01:09:52 +0000 Manifest this update: Wed 29 Jul 2026 01:04:52 +0000 Manifest next update: Thu 30 Jul 2026 02:09:52 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: p2BeVV9jb9JZpNhXU7xFZLBRX3dPjXVYVDSfh/lIoHM=) 2: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b4:8f:b9:34:12:78:4a:53:58:00:ad:2e:2e:a6:aa:af:be:23:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jul 29 01:04:52 2026 GMT Not After : Jul 30 02:09:52 2026 GMT Subject: CN=A3E296DFECB07940A43CE1F9C730398F23AF0F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:27:69:b8:3c:52:ef:d5:ca:bc:c3:24:dd: 54:4d:94:9d:1d:44:bb:ee:1e:ad:4e:2c:f4:b6:67: c1:18:35:35:6e:c0:de:fb:e6:65:75:e5:e2:df:40: e1:6e:71:dd:70:9e:87:ff:6f:7e:bd:b9:5a:d9:14: 11:7c:e0:a7:81:40:84:9b:9f:20:a0:02:c9:66:d5: c3:44:69:57:44:57:08:23:64:cd:dc:f1:f8:d4:b4: 95:fa:cf:5e:db:c1:62:90:cb:51:e2:b3:b5:e4:5c: 3b:f3:c1:e9:2d:5f:c2:7b:cb:9c:87:8d:d6:20:c5: e7:58:b8:1f:82:64:70:b7:41:5e:d1:eb:ac:7d:b3: 33:45:a2:4b:89:dd:55:f6:92:92:45:a2:92:e2:28: ed:5b:87:74:e0:6e:06:61:32:b3:7f:f9:64:c5:3d: 27:47:b7:52:49:4f:71:92:5d:7b:ff:1f:df:ce:5f: fc:f6:8e:4e:4d:d1:5f:bd:0b:59:64:23:90:c5:f8: f1:cc:b2:39:d9:a7:0c:32:7d:41:27:35:a0:af:17: 47:15:b6:ed:f7:68:57:ed:7e:80:7c:ec:2c:1a:90: 49:07:25:70:7e:72:31:fe:23:9b:32:a8:61:c5:e9: 5d:22:01:11:ba:d6:fb:9b:cd:50:c9:31:f6:c6:c8: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:96:DF:EC:B0:79:40:A4:3C:E1:F9:C7:30:39:8F:23:AF:0F:9F X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:76:51:51:51:9a:b4:3c:7d:8b:e8:89:c5:d7:f6:9f:83:60: 81:b9:39:c8:2a:18:0e:da:06:28:0c:45:f6:6d:e7:b5:f0:50: dc:26:89:94:70:7c:d4:cb:2b:f8:c5:bd:6c:bd:10:3a:be:71: 5c:c5:23:f0:df:0e:b5:62:d7:b0:3b:25:2e:2c:b3:f8:47:3b: a6:36:c3:5f:94:ff:6b:4c:d2:50:77:2b:23:b6:9d:84:7d:1f: 37:88:9e:59:63:7f:cf:fc:8a:f6:a4:ab:fa:9b:fc:43:f8:b6: b2:1f:f9:1f:71:e0:49:78:74:3c:24:16:15:ba:80:8b:ca:c6: 21:3b:6d:8a:f2:72:bd:2d:67:dc:2d:ee:d5:cb:51:d1:5c:5f: bc:9a:68:bf:65:52:cb:91:0d:ce:03:da:01:8c:27:33:01:ab: 24:43:13:e3:08:d3:a1:d1:ba:fd:95:01:3c:1b:21:88:2f:42: a5:f1:cf:ec:f6:61:fa:25:aa:92:c5:41:96:a9:5f:ef:8c:51: df:2e:5a:c0:2f:d0:bb:3b:3f:e5:e0:02:d0:f5:1b:42:9f:28: 4e:c5:5d:5f:47:c2:f7:4a:7b:24:59:28:fe:86:aa:32:b9:45: ff:cf:8e:6b:fb:26:00:4f:08:57:da:c5:3f:ba:9d:c5:ed:09: 6d:5e:5c:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaLSPuTQSeEpTWACtLi6mqq++I6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA3MjkwMTA0NTJaFw0yNjA3MzAwMjA5NTJaMDMxMTAvBgNV BAMTKEEzRTI5NkRGRUNCMDc5NDBBNDNDRTFGOUM3MzAzOThGMjNBRjBGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9ydpuDxS79XKvMMk3VRNlJ0d RLvuHq1OLPS2Z8EYNTVuwN775mV15eLfQOFucd1wnof/b369uVrZFBF84KeBQISb nyCgAslm1cNEaVdEVwgjZM3c8fjUtJX6z17bwWKQy1His7XkXDvzwektX8J7y5yH jdYgxedYuB+CZHC3QV7R66x9szNFokuJ3VX2kpJFopLiKO1bh3TgbgZhMrN/+WTF PSdHt1JJT3GSXXv/H9/OX/z2jk5N0V+9C1lkI5DF+PHMsjnZpwwyfUEnNaCvF0cV tu33aFftfoB87CwakEkHJXB+cjH+I5syqGHF6V0iARG61vubzVDJMfbGyPXVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo+KW3+yweUCkPOH5xzA5jyOvD58wHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVdlFR UZq0PH2L6InF1/afg2CBuTnIKhgO2gYoDEX2bee18FDcJomUcHzUyyv4xb1svRA6 vnFcxSPw3w61YtewOyUuLLP4RzumNsNflP9rTNJQdysjtp2EfR83iJ5ZY3/P/Ir2 pKv6m/xD+LayH/kfceBJeHQ8JBYVuoCLysYhO22K8nK9LWfcLe7Vy1HRXF+8mmi/ ZVLLkQ3OA9oBjCczAaskQxPjCNOh0br9lQE8GyGIL0Kl8c/s9mH6JaqSxUGWqV/v jFHfLlrAL9C7Oz/l4ALQ9RtCnyhOxV1fR8L3SnskWSj+hqoyuUX/z45r+yYATwhX 2sU/up3F7QltXlyX -----END CERTIFICATE-----Generated at Wed Jul 29 09:00:14 2026 by rpki-client