$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: dBMn4lNh0Ftx8ZA1LDMJDeiZKu4mgn0iwTxsunTUWvw= Subject key identifier: 78:58:DA:FA:32:6E:00:4E:17:51:BC:A5:D9:B9:AD:EE:05:F2:C6:B0 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 37095D03418D311A676FEDDA06082296E171ED69 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 02FE Signing time: Tue 21 Jul 2026 13:33:24 +0000 Manifest this update: Tue 21 Jul 2026 13:28:24 +0000 Manifest next update: Wed 22 Jul 2026 14:39:24 +0000 Files and hashes: 1: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: TpuGsAi3/moTwjeLPAGOjFRmqzJIbvw5os/eq73zW2c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:09:5d:03:41:8d:31:1a:67:6f:ed:da:06:08:22:96:e1:71:ed:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Jul 21 13:28:24 2026 GMT Not After : Jul 22 14:39:24 2026 GMT Subject: CN=7858DAFA326E004E1751BCA5D9B9ADEE05F2C6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:30:c7:c2:69:88:e6:d2:ae:e2:fa:f2:e0:52: 54:46:db:83:6b:68:83:d3:fa:7a:87:8c:15:ef:f6: 93:65:3e:c6:37:33:e7:89:1b:86:2d:4b:41:07:b3: 13:48:fd:3b:e1:fe:16:79:0f:5d:25:0b:41:51:f8: 7c:29:ee:d1:30:3d:d8:64:0f:71:47:15:94:e5:d7: 38:8f:ea:4a:2b:bd:87:d4:36:d5:15:6c:d5:0c:a6: 88:7b:5c:0f:95:e4:00:39:2d:36:74:36:44:26:bc: 86:24:b7:57:f0:1c:6f:ae:6a:00:17:29:8f:a3:78: a1:2c:47:cd:76:3f:bc:85:74:8d:f4:12:4c:5f:4f: d7:f1:bc:1b:2b:e1:51:c6:cb:09:ad:a2:e5:ac:fa: 0c:c0:e6:33:40:92:c2:6b:1d:7c:dc:84:0c:fd:2f: d3:79:d9:e8:35:51:fd:54:e7:5f:ef:cb:d6:ac:56: ba:f3:08:58:f1:88:cb:e3:2a:8a:3e:3b:00:8b:60: ef:8c:b9:a7:d3:26:86:86:a2:f4:ca:f6:fe:d3:4e: 97:14:50:db:34:ea:84:cb:84:db:48:b8:8a:9b:f2: b6:1d:39:34:03:4e:24:04:07:39:83:1f:1e:a8:b6: 09:b5:4e:5e:e2:24:ca:3d:4c:6c:ab:4c:96:47:20: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:DA:FA:32:6E:00:4E:17:51:BC:A5:D9:B9:AD:EE:05:F2:C6:B0 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:45:b8:99:5b:0f:4e:5d:5a:9f:14:58:5d:b0:f5:66:4e:34: 26:16:04:df:fb:e2:8f:0a:dd:cd:3f:99:8a:82:29:24:b9:9d: 92:10:49:db:1d:79:c7:27:91:a1:81:85:c7:23:77:cd:da:73: 32:53:32:c8:ca:9f:5b:d1:23:21:15:83:5e:db:5d:9d:9e:50: e1:5b:16:cf:59:b5:8a:0f:3e:6a:b8:48:7b:c5:0c:a3:d8:0f: 0c:d1:87:9c:f9:9f:09:af:1a:9f:44:7f:73:4e:c9:0a:e5:d5: 54:d1:c8:68:fd:28:59:96:27:b4:36:bd:0b:bd:db:18:4a:dd: 5f:4b:26:75:4c:89:6f:46:41:5c:2b:f0:38:bc:2e:ba:26:bd: 3c:2e:e1:c0:ca:f8:d9:a7:65:61:64:35:48:b9:49:95:52:fc: b8:60:ba:01:04:34:7a:6e:df:ab:b6:9d:a6:24:a9:80:6e:9e: c6:c1:a3:4e:75:45:09:45:0b:21:d7:7b:da:f2:f8:73:e9:76: 93:6b:ab:b8:ad:08:9d:4a:9d:33:e0:d9:8e:16:7e:ca:c1:c6: 6a:4a:3c:65:7d:e2:14:c9:0f:50:6f:cc:76:8f:61:09:0c:93: fd:58:a2:1a:6a:1e:e6:d9:e6:b1:e9:92:a9:95:c4:16:a7:68: ba:0c:5b:a7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNwldA0GNMRpnb+3aBggiluFx7WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNjA3MjExMzI4MjRaFw0yNjA3MjIxNDM5MjRaMDMxMTAvBgNV BAMTKDc4NThEQUZBMzI2RTAwNEUxNzUxQkNBNUQ5QjlBREVFMDVGMkM2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNMMfCaYjm0q7i+vLgUlRG24Nr aIPT+nqHjBXv9pNlPsY3M+eJG4YtS0EHsxNI/Tvh/hZ5D10lC0FR+Hwp7tEwPdhk D3FHFZTl1ziP6korvYfUNtUVbNUMpoh7XA+V5AA5LTZ0NkQmvIYkt1fwHG+uagAX KY+jeKEsR812P7yFdI30EkxfT9fxvBsr4VHGywmtouWs+gzA5jNAksJrHXzchAz9 L9N52eg1Uf1U51/vy9asVrrzCFjxiMvjKoo+OwCLYO+MuafTJoaGovTK9v7TTpcU UNs06oTLhNtIuIqb8rYdOTQDTiQEBzmDHx6otgm1Tl7iJMo9TGyrTJZHIG/dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeFja+jJuAE4XUbyl2bmt7gXyxrAwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxRbiZ Ww9OXVqfFFhdsPVmTjQmFgTf++KPCt3NP5mKgikkuZ2SEEnbHXnHJ5GhgYXHI3fN 2nMyUzLIyp9b0SMhFYNe212dnlDhWxbPWbWKDz5quEh7xQyj2A8M0Yec+Z8Jrxqf RH9zTskK5dVU0cho/ShZlie0Nr0LvdsYSt1fSyZ1TIlvRkFcK/A4vC66Jr08LuHA yvjZp2VhZDVIuUmVUvy4YLoBBDR6bt+rtp2mJKmAbp7GwaNOdUUJRQsh13va8vhz 6XaTa6u4rQidSp0z4NmOFn7KwcZqSjxlfeIUyQ9Qb8x2j2EJDJP9WKIaah7m2eax 6ZKplcQWp2i6DFun -----END CERTIFICATE-----Generated at Tue Jul 21 17:40:42 2026 by rpki-client