$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: 036qYHUKJPSgHNbI2mlkuOq+fqbUZRGYVpspEtoAABk= Subject key identifier: 0E:1F:DB:F1:B9:98:AB:C2:06:66:2F:1B:A9:91:19:9B:47:83:4E:C2 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 35C6700FA70B584BDB1FE2EAA912F11B62C5B203 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 0157 Signing time: Tue 21 Jul 2026 06:52:47 +0000 Manifest this update: Tue 21 Jul 2026 06:47:47 +0000 Manifest next update: Wed 22 Jul 2026 07:43:47 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: z88LrY+LU79UlsfN3qJ4wi7NeDLDky0RLC9oUqwHqLM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c6:70:0f:a7:0b:58:4b:db:1f:e2:ea:a9:12:f1:1b:62:c5:b2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Jul 21 06:47:47 2026 GMT Not After : Jul 22 07:43:47 2026 GMT Subject: CN=0E1FDBF1B998ABC206662F1BA991199B47834EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:5e:51:60:f9:15:53:a2:a1:40:d1:8d:f1: 72:0d:59:5c:c4:b8:c9:c4:b8:5b:2d:68:fc:37:11: 31:87:a8:cb:06:c2:4a:2d:61:f8:20:1c:db:1b:b2: 73:96:20:b6:91:8e:10:64:a4:d3:84:33:3e:7b:c6: 6c:74:d6:5d:50:6f:f6:38:f4:3c:f2:51:db:69:90: 57:77:f0:59:cc:de:7b:8b:33:d8:93:d3:88:cf:8b: 74:7c:36:43:bd:61:c0:1f:c6:53:b2:27:4c:ae:ab: 3c:2b:49:1c:74:9c:9d:92:58:ec:85:76:2a:44:2c: ed:91:15:ea:80:a2:16:11:4d:c2:d9:2e:85:77:ac: 30:3f:b3:5b:13:41:4d:9a:14:c2:91:03:b8:9f:bf: 87:79:97:28:a2:26:3f:ba:5d:62:e3:d6:c0:f6:8c: 65:7d:43:f3:1c:1f:0c:12:40:d6:e6:da:b9:68:b7: 04:a5:6a:69:38:9d:e0:1f:5a:47:11:3f:bf:19:05: 4d:77:22:7a:96:5c:6e:49:dc:62:70:c6:93:1d:22: 22:82:ce:5a:fd:79:d2:77:2f:9e:01:6b:4f:71:e1: 2d:22:ef:2a:b8:68:7b:d1:8c:50:52:04:d8:1c:a8: 6a:1e:39:7b:54:58:c4:bb:e2:71:9b:18:b2:cf:1e: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:DB:F1:B9:98:AB:C2:06:66:2F:1B:A9:91:19:9B:47:83:4E:C2 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:58:54:b2:3c:f7:93:9b:5a:e5:aa:31:46:5c:df:3e:fd:4c: 63:49:ad:b8:03:03:cb:21:56:50:40:9a:1e:f2:12:25:27:76: 6f:35:09:27:2d:1e:7e:28:ee:43:55:16:c0:cd:0e:63:90:91: ef:8c:c5:84:fd:ef:5e:4e:88:e6:e8:b9:15:59:82:ae:2a:e9: 43:f2:e8:c5:5b:c2:30:84:e6:d7:bc:81:2f:24:83:64:26:bd: c2:0c:cf:ae:92:b5:3c:8a:95:e8:fc:71:0f:14:5d:82:2f:f7: 0c:42:00:a3:7d:c0:87:55:a2:42:74:55:30:9d:fc:07:89:9d: e8:c9:56:1f:93:b1:c9:2a:c9:a5:ac:e6:a0:b2:26:7a:9f:2e: 91:f4:9c:8a:c2:e8:e1:90:d3:a4:01:2b:0b:38:0e:27:8f:ca: 7d:05:7b:78:a0:27:aa:43:14:1a:b3:4d:39:fd:0e:15:67:65: 9d:26:98:c2:4a:4d:67:a7:b8:93:33:f4:bf:ac:6c:8d:19:78: 63:49:06:f9:7a:d1:a5:bc:6d:48:47:4f:7b:6e:4e:19:af:d1: df:e6:21:a0:18:8e:73:11:b0:f9:65:dc:46:ab:8f:af:a3:c6: 5a:d7:89:c4:71:9a:ff:46:1e:61:43:df:c8:8f:17:3c:e9:9a: dd:8f:24:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNcZwD6cLWEvbH+LqqRLxG2LFsgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjA3MjEwNjQ3NDdaFw0yNjA3MjIwNzQzNDdaMDMxMTAvBgNV BAMTKDBFMUZEQkYxQjk5OEFCQzIwNjY2MkYxQkE5OTExOTlCNDc4MzRFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/l5RYPkVU6KhQNGN8XINWVzE uMnEuFstaPw3ETGHqMsGwkotYfggHNsbsnOWILaRjhBkpNOEMz57xmx01l1Qb/Y4 9DzyUdtpkFd38FnM3nuLM9iT04jPi3R8NkO9YcAfxlOyJ0yuqzwrSRx0nJ2SWOyF dipELO2RFeqAohYRTcLZLoV3rDA/s1sTQU2aFMKRA7ifv4d5lyiiJj+6XWLj1sD2 jGV9Q/McHwwSQNbm2rlotwSlamk4neAfWkcRP78ZBU13InqWXG5J3GJwxpMdIiKC zlr9edJ3L54Ba09x4S0i7yq4aHvRjFBSBNgcqGoeOXtUWMS74nGbGLLPHvBzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDh/b8bmYq8IGZi8bqZEZm0eDTsIwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTWFSy PPeTm1rlqjFGXN8+/UxjSa24AwPLIVZQQJoe8hIlJ3ZvNQknLR5+KO5DVRbAzQ5j kJHvjMWE/e9eTojm6LkVWYKuKulD8ujFW8IwhObXvIEvJINkJr3CDM+ukrU8ipXo /HEPFF2CL/cMQgCjfcCHVaJCdFUwnfwHiZ3oyVYfk7HJKsmlrOagsiZ6ny6R9JyK wujhkNOkASsLOA4nj8p9BXt4oCeqQxQas005/Q4VZ2WdJpjCSk1np7iTM/S/rGyN GXhjSQb5etGlvG1IR097bk4Zr9Hf5iGgGI5zEbD5ZdxGq4+vo8Za14nEcZr/Rh5h Q9/Ijxc86ZrdjySc -----END CERTIFICATE-----Generated at Tue Jul 21 17:41:02 2026 by rpki-client