$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft (raw, json) Hash identifier: qFkQry9wZzH7cWUb62PaxnBHCa+epuiOB9HASNqnxsE= Subject key identifier: 8F:E9:E3:19:8A:0A:86:D7:98:43:AE:E9:A0:02:3C:70:F4:3C:22:96 Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 7CBD0A58570B9D43E4E7DC329F0F12A4BC926148 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft Manifest number: 02 Signing time: Sun 28 Jun 2026 18:06:06 +0000 Manifest this update: Sun 28 Jun 2026 18:01:06 +0000 Manifest next update: Mon 29 Jun 2026 18:29:06 +0000 Files and hashes: 1: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl (hash: nZeyA3gj2s2tau9MATikfXDoXp6TPv6JkuZtC9HCFAk=) 2: 326131333a633863343a323030303a3a2f34302d3536203d3e20313937383036.roa (hash: 0pda1MNSiDogiQJw0j/WqNX2XFKgk4h6e7j+Ff1GEI4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 18:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bd:0a:58:57:0b:9d:43:e4:e7:dc:32:9f:0f:12:a4:bc:92:61:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Jun 28 18:01:06 2026 GMT Not After : Jun 29 18:29:06 2026 GMT Subject: CN=8FE9E3198A0A86D79843AEE9A0023C70F43C2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:8b:0c:e3:16:e3:3a:c5:5c:84:9d:02:b0: 24:64:97:90:bb:58:b5:6a:1a:62:83:a6:33:c9:a9: 93:29:03:5d:0d:be:b1:0a:ac:21:da:31:2a:ee:88: 0d:7b:ea:c4:11:29:a0:ee:f8:35:8b:b4:6d:7e:d8: a1:7e:12:b9:44:09:ce:33:3c:c5:cf:97:66:f7:8a: 4f:04:24:fe:f5:e3:c0:4f:20:5e:68:b6:65:5e:05: 8a:8f:8c:b7:58:3c:f9:76:de:ff:70:49:10:40:33: 76:f1:4b:b7:2f:ec:e2:6c:9e:af:4b:66:fd:8b:d3: e8:2a:32:a1:15:0d:f4:d7:d2:52:23:b2:e1:16:2e: f2:6d:c4:ef:fd:d8:a7:9b:75:b3:72:8e:b3:7a:7f: 7a:e7:4c:49:c4:72:b0:9c:35:bd:1f:bb:e3:9a:a4: 5a:33:dc:26:d4:54:e2:4d:f8:69:b9:91:d1:30:5d: 58:31:55:bc:c4:a3:bc:a0:30:b2:87:7b:a5:c7:fc: c5:fd:e3:b6:9e:da:c3:1d:f2:a4:f6:5e:20:b3:fc: e7:6c:c3:24:d8:5d:de:b6:28:52:90:36:05:55:48: 00:d1:11:b6:90:a7:0c:67:e2:45:19:f5:6e:65:ce: 63:1d:14:95:b2:3f:ac:a7:af:c6:e4:2d:6d:61:8b: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E9:E3:19:8A:0A:86:D7:98:43:AE:E9:A0:02:3C:70:F4:3C:22:96 X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:1f:ef:00:06:6e:f4:32:23:06:b5:10:bd:52:50:5b:09: e1:57:dd:f2:6e:e6:46:f8:66:63:52:0f:73:1e:d6:30:9d:86: 9c:11:20:fd:bc:13:31:3a:08:11:75:32:d4:c2:33:a5:90:05: e8:39:bd:04:bb:fe:cf:da:21:08:e4:13:84:12:df:ec:d0:54: 01:a8:4f:0d:af:ea:65:71:5d:75:56:79:6d:85:99:b0:9f:7b: b5:72:bd:f1:59:72:d9:9f:31:ff:1f:15:57:c3:45:f2:f0:6f: f6:cc:fa:ee:d7:c8:12:de:10:63:63:7f:ba:9f:fa:e2:ff:28: 07:93:39:24:92:41:84:2d:8e:5f:6a:74:86:14:f2:3c:e0:2a: fd:27:f1:dc:72:72:53:e6:21:2e:4c:63:f8:8c:6a:53:f2:cb: 81:c8:1f:5c:fb:4c:bc:b6:ab:8e:4e:8c:ea:e8:c0:6a:7a:74: 9a:1d:50:3f:b1:c4:88:ee:b4:17:a1:99:86:a7:00:64:4e:13: 11:e9:fb:29:05:b4:f6:a5:df:6a:df:35:6a:da:9b:2b:b9:65: b5:b3:f6:63:a5:70:09:11:17:77:5c:b1:58:fd:d7:f4:f7:b9: 9d:79:8f:4c:8e:88:5c:de:94:15:98:4d:d8:29:fb:fd:f7:44: f7:dd:cf:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfL0KWFcLnUPk59wynw8SpLySYUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA2MjgxODAxMDZaFw0yNjA2MjkxODI5MDZaMDMxMTAvBgNV BAMTKDhGRTlFMzE5OEEwQTg2RDc5ODQzQUVFOUEwMDIzQzcwRjQzQzIyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfS4sM4xbjOsVchJ0CsCRkl5C7 WLVqGmKDpjPJqZMpA10NvrEKrCHaMSruiA176sQRKaDu+DWLtG1+2KF+ErlECc4z PMXPl2b3ik8EJP7148BPIF5otmVeBYqPjLdYPPl23v9wSRBAM3bxS7cv7OJsnq9L Zv2L0+gqMqEVDfTX0lIjsuEWLvJtxO/92KebdbNyjrN6f3rnTEnEcrCcNb0fu+Oa pFoz3CbUVOJN+Gm5kdEwXVgxVbzEo7ygMLKHe6XH/MX947ae2sMd8qT2XiCz/Ods wyTYXd62KFKQNgVVSADREbaQpwxn4kUZ9W5lzmMdFJWyP6ynr8bkLW1hixxFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUj+njGYoKhteYQ67poAI8cPQ8IpYwHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY3ODJkMzhiLTQwMTYtNDk2YS04Mjk4LWUzZTk3YmVlOTdiZC8xLzMwMEY4N0U0 NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoUB/v AAZu9DIjBrUQvVJQWwnhV93ybuZG+GZjUg9zHtYwnYacESD9vBMxOggRdTLUwjOl kAXoOb0Eu/7P2iEI5BOEEt/s0FQBqE8Nr+plcV11VnlthZmwn3u1cr3xWXLZnzH/ HxVXw0Xy8G/2zPru18gS3hBjY3+6n/ri/ygHkzkkkkGELY5fanSGFPI84Cr9J/Hc cnJT5iEuTGP4jGpT8suByB9c+0y8tquOTozq6MBqenSaHVA/scSI7rQXoZmGpwBk ThMR6fspBbT2pd9q3zVq2psruWW1s/ZjpXAJERd3XLFY/df097mdeY9Mjohc3pQV mE3YKfv990T33c+I -----END CERTIFICATE-----Generated at Mon Jun 29 11:31:29 2026 by rpki-client