$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: hyQyU+6HBJ0f8gUBfn8G00C+6nQfq8h+eJ3fPPnfl+Q= Subject key identifier: D0:35:9E:43:04:B3:AB:F2:3E:17:D5:74:5F:F3:C4:F9:83:88:28:65 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 5C53B0A56F5CCCAA22733C28A90F68F57E5ED32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0644 Signing time: Tue 04 Aug 2026 04:35:09 +0000 Manifest this update: Tue 04 Aug 2026 04:30:09 +0000 Manifest next update: Wed 05 Aug 2026 07:28:09 +0000 Files and hashes: 1: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 2: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (hash: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=) 3: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 4: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 5: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 6: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 7: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 8: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 9: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: t+me/NNtRXSq6r7QTH7O6owNwn0gsGbEjpfA6sIEfAY=) 10: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 11: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 12: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:53:b0:a5:6f:5c:cc:aa:22:73:3c:28:a9:0f:68:f5:7e:5e:d3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Aug 4 04:30:09 2026 GMT Not After : Aug 5 07:28:09 2026 GMT Subject: CN=D0359E4304B3ABF23E17D5745FF3C4F983882865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d1:b0:19:8e:a5:04:eb:6f:e9:d7:5a:b8:1d: ae:a3:db:b3:44:29:ad:93:57:67:23:5e:b1:c0:84: b2:69:ac:97:ea:cb:d5:32:a0:f0:75:77:a8:0c:21: d1:5b:33:37:f1:0f:1d:9c:87:04:64:f1:de:d4:46: 98:9f:db:09:d0:3d:c4:9a:5f:1b:87:8d:64:fe:fd: df:a0:08:35:32:7b:88:69:35:2c:7f:b2:b0:50:ce: 3e:ce:64:eb:c3:47:b4:de:a0:55:4f:cf:5e:c5:5b: 70:d0:b8:f1:c7:a6:33:da:50:dc:8c:be:8f:38:79: 79:40:c5:21:84:a3:12:1f:55:27:1f:cf:18:f4:b3: 02:f2:32:eb:28:f5:ea:fa:47:4d:70:70:49:35:7a: 40:6b:6a:ae:2f:4a:00:fe:12:0c:36:ea:e0:43:85: 5e:7a:e4:59:63:31:d9:39:25:af:29:e6:51:23:12: 62:0a:86:66:c6:4e:df:b3:b8:94:22:f1:4a:dc:f8: 70:c0:78:03:f5:b1:f8:a5:80:8e:da:bd:52:21:7a: ac:5b:1e:a0:0e:58:42:3f:24:e8:16:74:0e:ab:c1: 04:6f:2a:7f:3e:47:aa:94:95:c8:04:13:13:57:6c: 90:e5:54:29:af:e0:bb:78:d8:35:06:bd:d4:73:98: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:9E:43:04:B3:AB:F2:3E:17:D5:74:5F:F3:C4:F9:83:88:28:65 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:61:4e:2a:5f:84:42:95:ed:41:74:ba:df:fe:80:ac:b3: f2:35:f9:ec:db:2a:f1:d4:04:b5:86:01:71:ed:51:3d:4e:b3: 68:b3:b6:66:14:0f:27:41:57:f4:b7:17:9b:f0:26:49:5e:40: 45:e1:7d:c2:e6:61:b9:bc:0c:a4:07:c3:12:16:9a:53:ac:6d: 40:20:1c:7e:d4:f4:d1:c4:28:7a:05:d2:1a:e4:98:d5:04:aa: ac:a4:b3:de:ac:8d:70:c0:df:db:3e:2d:8e:0e:6f:67:3a:13: 8f:38:66:46:33:01:47:af:42:cc:54:82:10:ee:98:21:d7:7b: 2e:44:ca:5d:8e:fd:f6:07:9b:41:de:20:07:f5:c3:56:29:4f: c0:4c:fe:85:a0:ef:32:5f:84:99:c4:53:b7:30:87:9c:7a:15: 03:bc:bf:12:c8:b7:6f:8f:73:ec:9a:32:80:cb:d5:f9:ff:b8: fa:9e:1b:de:f9:f3:df:f3:79:6a:67:09:be:6a:d2:13:bb:f2: db:db:9d:b7:65:7d:f5:57:6e:55:43:89:59:71:51:00:54:fd: 2f:57:d2:e0:e3:39:09:8d:75:51:31:45:2e:65:f4:04:d0:18: 0c:e9:48:d9:ce:dd:5a:fe:92:f8:04:8e:ae:a5:24:f2:53:cf: 35:53:a5:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXFOwpW9czKoiczwoqQ9o9X5e0ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA4MDQwNDMwMDlaFw0yNjA4MDUwNzI4MDlaMDMxMTAvBgNV BAMTKEQwMzU5RTQzMDRCM0FCRjIzRTE3RDU3NDVGRjNDNEY5ODM4ODI4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0bAZjqUE62/p11q4Ha6j27NE Ka2TV2cjXrHAhLJprJfqy9UyoPB1d6gMIdFbMzfxDx2chwRk8d7URpif2wnQPcSa XxuHjWT+/d+gCDUye4hpNSx/srBQzj7OZOvDR7TeoFVPz17FW3DQuPHHpjPaUNyM vo84eXlAxSGEoxIfVScfzxj0swLyMuso9er6R01wcEk1ekBraq4vSgD+Egw26uBD hV565FljMdk5Ja8p5lEjEmIKhmbGTt+zuJQi8Urc+HDAeAP1sfilgI7avVIheqxb HqAOWEI/JOgWdA6rwQRvKn8+R6qUlcgEExNXbJDlVCmv4Lt42DUGvdRzmPpdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0DWeQwSzq/I+F9V0X/PE+YOIKGUwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8thTipfhEKV7UF0ut/+ gKyz8jX57Nsq8dQEtYYBce1RPU6zaLO2ZhQPJ0FX9LcXm/AmSV5AReF9wuZhubwM pAfDEhaaU6xtQCAcftT00cQoegXSGuSY1QSqrKSz3qyNcMDf2z4tjg5vZzoTjzhm RjMBR69CzFSCEO6YIdd7LkTKXY799gebQd4gB/XDVilPwEz+haDvMl+EmcRTtzCH nHoVA7y/Esi3b49z7JoygMvV+f+4+p4b3vnz3/N5amcJvmrSE7vy29udt2V99Vdu VUOJWXFRAFT9L1fS4OM5CY11UTFFLmX0BNAYDOlI2c7dWv6S+ASOrqUk8lPPNVOl NQ== -----END CERTIFICATE-----Generated at Tue Aug 4 09:59:16 2026 by rpki-client