$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: PETWT/1IPow7OpZEF99dKXraUAJiE8z+NoYYtYIEPwY= Subject key identifier: 6B:FB:14:7F:75:81:4B:49:69:DD:67:47:52:88:75:B9:BC:3A:0E:04 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 1C7969924098203EC96BA21D8D25E120C3758187 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: F0 Signing time: Fri 17 Jul 2026 08:08:27 +0000 Manifest this update: Fri 17 Jul 2026 08:03:27 +0000 Manifest next update: Sat 18 Jul 2026 11:25:27 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 3: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: VKbYly7lnhysYOKu5wrxopL0TSw3aesUgeGzSFDXDCU=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 11:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:79:69:92:40:98:20:3e:c9:6b:a2:1d:8d:25:e1:20:c3:75:81:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jul 17 08:03:27 2026 GMT Not After : Jul 18 11:25:27 2026 GMT Subject: CN=6BFB147F75814B4969DD6747528875B9BC3A0E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:c4:9d:eb:56:c7:7b:a1:54:bb:06:e6:02: d7:67:f0:ad:88:e0:28:b0:5a:19:be:75:e2:d0:e7: 17:66:57:46:bd:28:ac:d4:3e:7f:fb:cb:c4:6a:ef: 05:81:17:37:9c:09:73:9d:88:37:8d:bb:48:92:42: 41:90:52:ee:24:e2:e1:3e:a1:29:d1:15:18:9b:a4: 15:2e:f8:41:ab:8b:5b:00:e0:d3:83:ce:e4:0c:67: 8e:0a:8c:ea:04:e1:3f:89:e6:51:ef:f7:79:e4:ad: 32:b8:29:47:f6:47:6f:bb:e5:83:d2:e7:23:01:4c: ba:80:4c:41:f0:1e:57:7a:31:c6:b3:80:47:78:a3: 25:49:61:fd:4c:2e:da:56:d2:98:21:57:6e:92:5d: 14:20:f4:4c:b7:6c:40:9f:88:c7:7b:6d:3a:d3:86: 39:82:7d:6c:36:a8:bb:b7:52:b2:ee:0d:c4:f6:c2: 8b:67:a5:b6:df:f3:02:d2:e1:b0:5e:4c:56:ba:16: 06:c0:2c:1c:2e:bc:07:30:a1:48:61:95:19:79:ce: 48:ab:b2:8d:f5:45:86:88:3f:4e:b2:5b:3d:f6:b1: b8:7f:d6:e2:32:5b:e5:62:0c:b9:12:2c:1f:04:c1: 4a:a1:a2:38:a7:a9:7c:e4:c1:96:0f:d3:61:0f:5d: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:14:7F:75:81:4B:49:69:DD:67:47:52:88:75:B9:BC:3A:0E:04 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ad:58:ab:1a:c4:2f:f5:60:62:25:07:7b:e0:5f:ee:df:b5: 01:62:b1:ed:ca:3d:ae:07:41:08:4d:1d:97:a1:0b:f2:93:31: 23:67:b1:e1:44:13:1e:be:d5:7e:2b:d3:c6:fa:35:23:97:7b: f6:62:a3:df:3f:f8:3d:75:71:4a:27:b6:6c:f1:dd:a5:14:f5: 65:b3:79:a2:68:07:9b:fb:db:90:19:78:2d:3a:38:21:e4:7a: 99:f1:4d:7b:75:f7:8c:61:b7:31:64:41:a8:1e:21:eb:64:ea: 91:dd:26:89:f7:bd:db:d6:89:33:f6:26:4a:d5:f0:4b:47:f2: 78:f6:1c:28:aa:79:3d:0f:83:ef:2e:84:9f:a4:d7:a6:5a:71: 0b:b8:86:f7:84:5e:aa:23:6b:62:00:f8:ae:c5:72:53:d1:af: 80:52:81:6e:d5:b0:cd:18:3e:8b:40:f2:90:ed:7d:a6:fe:32: 9d:61:11:1e:6a:2c:a9:ec:a3:25:0f:85:48:e8:bd:0b:aa:1a: 71:31:70:19:04:51:07:e3:d0:07:cc:ff:d7:f0:15:9c:8f:95: ba:28:e7:10:6e:20:d0:24:a4:75:12:3c:ed:1d:02:75:f6:af: 6f:2c:54:72:e2:57:cf:fb:aa:a0:e0:7a:e4:3f:93:27:e2:bc: a4:11:e9:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHHlpkkCYID7Ja6IdjSXhIMN1gYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA3MTcwODAzMjdaFw0yNjA3MTgxMTI1MjdaMDMxMTAvBgNV BAMTKDZCRkIxNDdGNzU4MTRCNDk2OURENjc0NzUyODg3NUI5QkMzQTBFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24MSd61bHe6FUuwbmAtdn8K2I 4CiwWhm+deLQ5xdmV0a9KKzUPn/7y8Rq7wWBFzecCXOdiDeNu0iSQkGQUu4k4uE+ oSnRFRibpBUu+EGri1sA4NODzuQMZ44KjOoE4T+J5lHv93nkrTK4KUf2R2+75YPS 5yMBTLqATEHwHld6McazgEd4oyVJYf1MLtpW0pghV26SXRQg9Ey3bECfiMd7bTrT hjmCfWw2qLu3UrLuDcT2wotnpbbf8wLS4bBeTFa6FgbALBwuvAcwoUhhlRl5zkir so31RYaIP06yWz32sbh/1uIyW+ViDLkSLB8EwUqhojinqXzkwZYP02EPXVxnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa/sUf3WBS0lp3WdHUoh1ubw6DgQwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJrVir GsQv9WBiJQd74F/u37UBYrHtyj2uB0EITR2XoQvykzEjZ7HhRBMevtV+K9PG+jUj l3v2YqPfP/g9dXFKJ7Zs8d2lFPVls3miaAeb+9uQGXgtOjgh5HqZ8U17dfeMYbcx ZEGoHiHrZOqR3SaJ973b1okz9iZK1fBLR/J49hwoqnk9D4PvLoSfpNemWnELuIb3 hF6qI2tiAPiuxXJT0a+AUoFu1bDNGD6LQPKQ7X2m/jKdYREeaiyp7KMlD4VI6L0L qhpxMXAZBFEH49AHzP/X8BWcj5W6KOcQbiDQJKR1EjztHQJ19q9vLFRy4lfP+6qg 4HrkP5Mn4rykEels -----END CERTIFICATE-----Generated at Sat Jul 18 04:31:33 2026 by rpki-client