$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: 77ljprFIUxF3Vg0lzdloqr1afiCTai1pQ2jU46kNEtg= Subject key identifier: 80:15:E0:E8:A0:71:0E:88:7A:61:21:31:6D:D7:F7:07:FE:11:E0:2A Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 6288F8F733DCD6656DA5BC6828C5F173CAE6678D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 02C8 Signing time: Fri 14 Aug 2026 17:23:55 +0000 Manifest this update: Fri 14 Aug 2026 17:18:55 +0000 Manifest next update: Sat 15 Aug 2026 20:24:55 +0000 Files and hashes: 1: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 2: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 3: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: D2SuucLcEpTwKXpsic77zvgy1HVKkgIn6KoahWXzBH8=) 4: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 5: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 6: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 7: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 8: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 9: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 10: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 11: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 12: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) 13: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 14: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 15: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:88:f8:f7:33:dc:d6:65:6d:a5:bc:68:28:c5:f1:73:ca:e6:67:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Aug 14 17:18:55 2026 GMT Not After : Aug 15 20:24:55 2026 GMT Subject: CN=8015E0E8A0710E887A6121316DD7F707FE11E02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:a5:f0:49:b8:cd:35:9e:e6:ff:6e:d5:94: 91:e2:64:66:15:ab:e0:c0:6e:98:08:9b:82:a5:b7: 22:a3:d5:b3:20:c7:df:36:a5:da:9b:21:f7:68:26: c2:d0:da:69:3b:55:7d:5a:49:f2:60:ac:a8:1f:48: 0c:b1:34:ac:45:ca:42:4e:16:e3:97:06:dd:ec:1e: ad:2b:e3:ec:bd:1a:8b:04:24:45:73:32:a0:e6:66: 98:8f:01:86:2b:9f:88:ab:a1:60:af:92:eb:b0:8f: 58:1f:1d:2c:b9:7f:58:1a:9c:c9:73:b5:d2:04:86: f1:b9:f3:85:a2:b4:76:e6:63:b3:f4:02:88:47:4a: 10:84:2e:f1:18:85:87:59:b8:28:48:e0:54:dd:ca: 38:27:92:6e:62:31:16:39:22:b1:e7:cf:95:c2:4b: 50:72:a4:71:d0:bb:90:8f:b2:aa:80:eb:3b:94:12: 18:c4:be:1d:6c:86:82:96:37:a6:48:a3:a8:24:1e: 5c:4c:f6:41:0d:e4:62:7c:cd:79:29:aa:1f:29:a6: 60:d8:a3:aa:19:5f:c9:a0:1a:2c:24:76:d5:cc:90: 33:8b:7a:51:90:f2:ec:09:c0:7a:37:8a:00:06:de: 9f:1d:12:58:74:dc:92:55:35:0d:6b:4a:85:db:a8: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:15:E0:E8:A0:71:0E:88:7A:61:21:31:6D:D7:F7:07:FE:11:E0:2A X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:30:b9:72:59:c3:c3:4e:40:c0:27:3c:36:07:b5:3e:04:00: 06:1c:9e:5f:7b:23:5d:ea:3b:4c:ea:a7:52:d7:f3:f6:43:27: 5d:14:61:02:0b:3b:99:a1:05:02:27:5b:aa:1e:1c:8b:d6:4a: a1:da:af:fa:87:58:7d:f4:bb:13:d5:71:10:9a:e3:ac:83:66: f8:3f:23:0f:fd:24:fc:b4:62:71:0f:f2:64:7d:43:a8:0f:16: 15:df:d6:47:29:c1:1f:f1:b8:16:b5:c6:dc:d0:91:e9:c5:ae: 86:4d:5e:da:a8:a8:bb:9f:24:4f:ce:b1:03:5c:fb:0e:91:85: d9:c4:bf:0f:bd:86:b2:05:b5:d9:4d:6d:ca:0b:fe:b3:7d:69: f9:4a:c9:92:1f:57:ab:66:c6:94:1a:2c:2b:8b:a2:e4:29:08: 40:f8:2c:b2:18:b5:f4:a0:7c:76:7a:77:e7:ff:ef:b8:eb:45: bc:17:59:ac:4d:38:1d:4a:fc:e4:92:8f:0b:6a:f6:05:8a:ea: 76:f7:11:d9:cc:32:80:9b:40:2c:6a:91:50:6a:97:6c:cd:22: a7:87:2c:70:f8:6e:72:38:21:69:17:29:09:71:86:07:7a:6d: 52:d0:2f:2a:04:89:0f:e3:8b:a8:7a:17:1f:2f:8f:a2:11:ed: a0:b5:87:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYoj49zPc1mVtpbxoKMXxc8rmZ40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA4MTQxNzE4NTVaFw0yNjA4MTUyMDI0NTVaMDMxMTAvBgNV BAMTKDgwMTVFMEU4QTA3MTBFODg3QTYxMjEzMTZERDdGNzA3RkUxMUUwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29aXwSbjNNZ7m/27VlJHiZGYV q+DAbpgIm4KltyKj1bMgx982pdqbIfdoJsLQ2mk7VX1aSfJgrKgfSAyxNKxFykJO FuOXBt3sHq0r4+y9GosEJEVzMqDmZpiPAYYrn4iroWCvkuuwj1gfHSy5f1ganMlz tdIEhvG584WitHbmY7P0AohHShCELvEYhYdZuChI4FTdyjgnkm5iMRY5IrHnz5XC S1BypHHQu5CPsqqA6zuUEhjEvh1shoKWN6ZIo6gkHlxM9kEN5GJ8zXkpqh8ppmDY o6oZX8mgGiwkdtXMkDOLelGQ8uwJwHo3igAG3p8dElh03JJVNQ1rSoXbqN+HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgBXg6KBxDoh6YSExbdf3B/4R4CowHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzC5clnDw05AwCc8Nge1 PgQABhyeX3sjXeo7TOqnUtfz9kMnXRRhAgs7maEFAidbqh4ci9ZKodqv+odYffS7 E9VxEJrjrINm+D8jD/0k/LRicQ/yZH1DqA8WFd/WRynBH/G4FrXG3NCR6cWuhk1e 2qiou58kT86xA1z7DpGF2cS/D72GsgW12U1tygv+s31p+UrJkh9Xq2bGlBosK4ui 5CkIQPgsshi19KB8dnp35//vuOtFvBdZrE04HUr85JKPC2r2BYrqdvcR2cwygJtA LGqRUGqXbM0ip4cscPhucjghaRcpCXGGB3ptUtAvKgSJD+OLqHoXHy+PohHtoLWH DA== -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:55 2026 by rpki-client