$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: BDNd/+XbEKi8elxHuquVQqCbbCGqQ7MWFRddbSvKbPA= Subject key identifier: 88:67:78:20:7B:00:E1:81:68:92:2E:4D:B7:F8:54:71:62:69:1F:F9 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 20A5BB427970FD56ED0A505D849F98681132446E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 02D9 Signing time: Tue 21 Jul 2026 05:58:24 +0000 Manifest this update: Tue 21 Jul 2026 05:53:24 +0000 Manifest next update: Wed 22 Jul 2026 07:27:24 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: /S8ONZGKuGcg6tTV+hAcChCVEEGWAhRjL67ILjRlOTU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a5:bb:42:79:70:fd:56:ed:0a:50:5d:84:9f:98:68:11:32:44:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jul 21 05:53:24 2026 GMT Not After : Jul 22 07:27:24 2026 GMT Subject: CN=886778207B00E18168922E4DB7F8547162691FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:d0:ac:cb:6c:b9:32:97:bc:e7:de:fe:5e: cb:37:5d:3f:43:d2:5a:99:3d:28:88:8e:46:b7:9b: 30:af:85:f1:a8:e3:33:03:84:9e:29:b9:dc:38:c4: cc:0c:30:f7:11:af:07:cc:ef:ff:95:89:f3:de:5a: 96:71:9a:1e:42:3f:38:ae:92:06:8a:c9:c6:ec:89: 5a:6a:3d:e6:e8:4e:37:a3:53:7a:20:13:a4:95:3b: 2a:01:be:d7:29:cc:cd:86:18:34:77:3c:9b:8d:8a: d1:0a:c3:ba:82:d2:18:62:d6:24:d7:cf:aa:3b:b5: 34:04:15:cf:2c:c4:8d:8c:5a:72:51:3d:a3:6e:11: 35:fc:ae:36:f2:ce:70:a1:1d:b6:d9:37:73:7c:7c: b9:c4:d4:cd:ab:44:70:f8:71:14:bc:3b:5c:36:39: be:c5:dd:5d:55:c6:8e:cf:32:45:0f:bf:eb:34:8a: d9:0e:8d:da:ad:16:50:6c:cb:6c:09:93:a4:73:48: 2c:e9:30:de:0f:b5:92:65:09:20:b7:8a:09:08:8e: 5e:54:58:f5:be:7e:f6:64:37:59:18:92:db:96:49: f9:7e:02:3e:26:42:03:e0:bb:34:52:df:b9:5c:2f: 07:be:59:82:a7:c1:09:28:fc:91:f9:55:05:b3:e3: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:78:20:7B:00:E1:81:68:92:2E:4D:B7:F8:54:71:62:69:1F:F9 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:27:bc:63:7f:4a:3c:5b:98:f6:7e:0b:cc:39:db:a2:f7: 20:f7:47:ad:f9:af:89:c5:fc:2b:9c:b1:40:e8:42:98:2a:bd: b0:a1:1c:81:d2:eb:6b:08:7d:cd:83:05:12:6a:9f:40:1c:d2: 08:d9:05:21:ae:40:f4:71:c6:9e:ac:f7:7c:12:cc:02:d9:eb: 6e:d8:ac:65:34:e6:1f:4e:20:f7:dd:ed:b7:cd:ac:02:12:bc: 82:58:96:ef:24:6a:95:a7:9c:a8:44:f5:86:70:a3:18:4e:b5: e7:69:e5:2f:12:3d:59:94:e3:4b:40:99:3f:5e:9d:8c:1e:d3: 0f:84:67:76:cf:0d:8b:93:bd:4f:4d:c2:18:28:c4:2e:01:44: 8e:53:5e:6a:2a:80:9f:15:33:2e:29:40:21:29:57:6a:d8:6c: b4:7f:ad:42:81:26:1e:28:fe:c1:d1:a5:19:de:67:a8:55:92: 99:d3:93:09:08:40:fa:0d:79:8c:55:88:e2:2d:93:38:76:45: d8:ee:a2:46:06:28:eb:4f:5e:73:39:89:e2:c5:5e:06:46:fe: e8:6a:9e:bb:06:56:e3:be:b6:c0:34:e5:96:ac:7d:a4:af:dd: aa:a2:55:4a:37:5d:11:37:17:fc:c3:0d:ba:af:92:30:2b:b5: 36:af:a5:00 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIKW7Qnlw/VbtClBdhJ+YaBEyRG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjA3MjEwNTUzMjRaFw0yNjA3MjIwNzI3MjRaMDMxMTAvBgNV BAMTKDg4Njc3ODIwN0IwMEUxODE2ODkyMkU0REI3Rjg1NDcxNjI2OTFGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNcdCsy2y5Mpe8597+Xss3XT9D 0lqZPSiIjka3mzCvhfGo4zMDhJ4pudw4xMwMMPcRrwfM7/+VifPeWpZxmh5CPziu kgaKycbsiVpqPeboTjejU3ogE6SVOyoBvtcpzM2GGDR3PJuNitEKw7qC0hhi1iTX z6o7tTQEFc8sxI2MWnJRPaNuETX8rjbyznChHbbZN3N8fLnE1M2rRHD4cRS8O1w2 Ob7F3V1Vxo7PMkUPv+s0itkOjdqtFlBsy2wJk6RzSCzpMN4PtZJlCSC3igkIjl5U WPW+fvZkN1kYktuWSfl+Aj4mQgPguzRS37lcLwe+WYKnwQko/JH5VQWz44H9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiGd4IHsA4YFoki5Nt/hUcWJpH/kwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJYye8 Y39KPFuY9n4LzDnbovcg90et+a+JxfwrnLFA6EKYKr2woRyB0utrCH3NgwUSap9A HNII2QUhrkD0ccaerPd8EswC2etu2KxlNOYfTiD33e23zawCEryCWJbvJGqVp5yo RPWGcKMYTrXnaeUvEj1ZlONLQJk/Xp2MHtMPhGd2zw2Lk71PTcIYKMQuAUSOU15q KoCfFTMuKUAhKVdq2Gy0f61CgSYeKP7B0aUZ3meoVZKZ05MJCED6DXmMVYjiLZM4 dkXY7qJGBijrT15zOYnixV4GRv7oap67BlbjvrbANOWWrH2kr92qolVKN10RNxf8 ww26r5IwK7U2r6UA -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:37 2026 by rpki-client