$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: 8BfvKFNNOvhIxJbZ09FkVKw3DHj6iMlXws4mfhRfBU0= Subject key identifier: F4:1F:79:99:62:55:F5:D8:01:4A:63:E5:4C:F8:8B:B2:4D:CA:C7:62 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 3013BB9A20AE43A047F8043D959E880A0CFA28B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 05CA Signing time: Mon 20 Jul 2026 11:31:13 +0000 Manifest this update: Mon 20 Jul 2026 11:26:13 +0000 Manifest next update: Tue 21 Jul 2026 13:11:13 +0000 Files and hashes: 1: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 2: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 3: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: rT3AjhKR5c+EF/QCmVJglZ/iiz0x7SXrJZB9bQkF0lQ=) 4: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 5: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 6: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 7: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 8: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 9: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 10: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 11: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 12: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 13: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 14: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 15: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 16: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 17: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 18: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 19: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 20: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 21: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 22: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 23: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 24: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 25: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 26: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 27: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 28: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 13:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:13:bb:9a:20:ae:43:a0:47:f8:04:3d:95:9e:88:0a:0c:fa:28:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jul 20 11:26:13 2026 GMT Not After : Jul 21 13:11:13 2026 GMT Subject: CN=F41F79996255F5D8014A63E54CF88BB24DCAC762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:7d:ac:6c:06:1e:4a:82:bf:bb:d8:9d:99: 03:a3:87:33:f1:0c:2f:24:0f:cf:2f:67:72:66:7a: 8e:84:26:59:b9:ad:41:f0:80:46:ea:70:c9:1e:24: ec:e0:05:f6:82:93:96:6c:1a:e0:d0:bb:10:7c:88: af:bd:20:9e:66:16:3d:c5:2a:c7:38:95:4a:65:f0: b9:42:b8:3a:e7:c2:6b:46:58:1a:0a:f2:12:b1:71: 31:64:46:0e:c0:f5:0c:4e:77:05:76:b5:57:f6:73: b7:32:69:8f:6f:92:7d:9b:b0:0e:33:76:ce:57:a5: 6c:dd:45:2e:0f:71:14:4e:82:4b:d5:b0:35:c5:2d: 2c:fe:87:fb:9a:ce:e2:15:51:d1:82:59:d2:1d:56: 53:4c:4c:0d:bf:c2:9a:eb:25:f6:0e:1b:3b:3e:52: e3:57:36:8e:bf:ce:44:c5:6e:b9:08:5e:f7:08:c8: de:81:9a:d1:b9:94:02:4b:84:c5:1a:08:c2:b0:68: 0d:ba:76:f8:17:a2:18:98:c2:e1:02:92:93:f8:9f: 78:17:31:05:97:d4:ea:1c:f8:79:0c:6e:51:e6:79: 5d:00:09:54:50:3f:a0:a0:b7:18:3d:d3:df:56:9a: b7:46:35:22:ca:62:2a:aa:38:ac:bd:9e:bb:70:53: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:79:99:62:55:F5:D8:01:4A:63:E5:4C:F8:8B:B2:4D:CA:C7:62 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5f:61:e9:31:2f:e8:32:4f:cf:bb:18:25:50:de:78:52:28: cf:c0:d6:1f:92:d7:2b:0f:c4:6f:d2:24:0c:bc:59:0c:a0:f8: 34:d4:cf:43:54:f4:53:81:6e:18:9d:c5:79:1c:2d:61:fc:7a: 04:da:57:1d:32:29:65:e0:4f:da:55:59:21:21:46:ac:b0:fe: 36:2e:9b:0c:c7:b9:42:dc:2a:c6:71:fd:ce:80:72:ab:cc:ff: d1:20:aa:79:70:d1:bd:ce:91:81:b1:6e:c6:44:90:51:3a:29: be:7d:66:ee:55:de:14:1b:c3:41:8b:29:2f:f7:76:16:ca:4d: ef:5d:d4:76:e3:23:4d:ad:dd:e7:88:e7:18:40:35:40:8a:64: 0a:21:bc:2a:08:78:b0:2c:9c:e2:6e:12:5d:60:cd:2f:6c:9d: 35:1d:10:8d:45:e9:a9:01:1f:3d:b4:28:4c:8f:5c:9c:9b:4e: 11:91:62:1a:66:13:67:f6:fb:4f:83:fc:e4:3a:bd:7b:e6:69: 38:fc:f4:2f:84:b9:dc:12:d0:65:14:17:83:d1:00:86:4d:a8: e0:08:51:4f:1c:b2:d9:a9:b7:85:7c:76:ab:93:cd:47:1b:db: 50:c7:90:4e:a0:7a:41:2c:e9:90:9f:ca:26:e2:36:5d:63:98: 4a:81:09:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMBO7miCuQ6BH+AQ9lZ6ICgz6KLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA3MjAxMTI2MTNaFw0yNjA3MjExMzExMTNaMDMxMTAvBgNV BAMTKEY0MUY3OTk5NjI1NUY1RDgwMTRBNjNFNTRDRjg4QkIyNERDQUM3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyn2sbAYeSoK/u9idmQOjhzPx DC8kD88vZ3Jmeo6EJlm5rUHwgEbqcMkeJOzgBfaCk5ZsGuDQuxB8iK+9IJ5mFj3F Ksc4lUpl8LlCuDrnwmtGWBoK8hKxcTFkRg7A9QxOdwV2tVf2c7cyaY9vkn2bsA4z ds5XpWzdRS4PcRROgkvVsDXFLSz+h/uazuIVUdGCWdIdVlNMTA2/wprrJfYOGzs+ UuNXNo6/zkTFbrkIXvcIyN6BmtG5lAJLhMUaCMKwaA26dvgXohiYwuECkpP4n3gX MQWX1Ooc+HkMblHmeV0ACVRQP6Cgtxg9099WmrdGNSLKYiqqOKy9nrtwU/OBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9B95mWJV9dgBSmPlTPiLsk3Kx2IwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArV9h6TEv6DJPz7sYJVDe eFIoz8DWH5LXKw/Eb9IkDLxZDKD4NNTPQ1T0U4FuGJ3FeRwtYfx6BNpXHTIpZeBP 2lVZISFGrLD+Ni6bDMe5QtwqxnH9zoByq8z/0SCqeXDRvc6RgbFuxkSQUTopvn1m 7lXeFBvDQYspL/d2FspN713UduMjTa3d54jnGEA1QIpkCiG8Kgh4sCyc4m4SXWDN L2ydNR0QjUXpqQEfPbQoTI9cnJtOEZFiGmYTZ/b7T4P85Dq9e+ZpOPz0L4S53BLQ ZRQXg9EAhk2o4AhRTxyy2am3hXx2q5PNRxvbUMeQTqB6QSzpkJ/KJuI2XWOYSoEJ uA== -----END CERTIFICATE-----Generated at Tue Jul 21 01:28:30 2026 by rpki-client