$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: endls/66ZPuYndz3iYTKUgvhVQLEKpioSOQXun7/5Eo= Subject key identifier: E4:5A:D4:F8:B9:D9:42:8D:E4:18:5D:13:7A:11:FD:DB:2D:D7:7F:1A Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 724A1F95F362CD888BB359AEDD16FD2CBF0F37C4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0206 Signing time: Tue 04 Aug 2026 12:24:10 +0000 Manifest this update: Tue 04 Aug 2026 12:19:10 +0000 Manifest next update: Wed 05 Aug 2026 15:04:10 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: 3Oy0/+Zmc9e5z/F4yp6K4LzyzEeGtPjpxBkzzaKS8w0=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: qJI/zUYVC3coOl+17Mai+H6CWhEZ3cbr1eQNFdbeRSo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4a:1f:95:f3:62:cd:88:8b:b3:59:ae:dd:16:fd:2c:bf:0f:37:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Aug 4 12:19:10 2026 GMT Not After : Aug 5 15:04:10 2026 GMT Subject: CN=E45AD4F8B9D9428DE4185D137A11FDDB2DD77F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:4e:b8:d9:cf:de:74:dd:40:d9:f0:9c:75: 4c:65:2d:3c:62:30:e9:41:de:1c:37:bb:73:2b:da: 34:5e:dd:7f:f8:30:0f:30:cb:84:72:e4:e5:89:52: 36:4b:eb:c2:8c:0e:ea:18:4b:5c:31:1e:28:27:38: 02:1c:3a:34:3f:5d:04:2f:96:4d:f8:74:f8:6e:98: 37:df:eb:96:42:d5:1c:c4:9d:24:b0:a2:65:ae:52: b9:f8:5f:a5:6b:0c:02:d5:97:8e:43:7c:8a:4e:ad: a9:d1:eb:7e:89:47:2d:34:da:e6:a6:dd:c6:50:86: 38:14:9e:55:4e:50:3d:24:ad:09:2c:87:0d:45:c1: c0:9d:5f:f9:29:87:60:46:65:59:ed:c8:f2:fa:b2: 87:b4:67:3c:81:8b:71:f2:a0:45:3f:4a:08:b4:a3: f6:8d:2c:17:bb:de:78:4c:8f:f7:ce:2b:b6:73:21: 2c:c6:de:a6:12:f7:18:db:2e:7c:b9:60:45:6a:dc: e1:de:e5:f6:00:0c:fc:5c:5d:da:06:23:06:f9:f8: b2:96:db:6e:3f:b2:bb:13:5b:e6:6d:8d:f1:29:f0: 78:64:fa:0e:f7:ed:3b:27:07:01:16:f8:51:ae:22: 61:33:69:6b:7f:5c:e8:9b:0d:ec:bc:c3:c8:8c:13: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:D4:F8:B9:D9:42:8D:E4:18:5D:13:7A:11:FD:DB:2D:D7:7F:1A X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b0:43:c4:48:4c:c2:ce:09:d2:62:c6:47:e7:43:64:31:db: a2:98:7a:10:d1:d9:b5:2d:28:60:1e:d8:44:1c:e0:e1:90:47: 1a:c3:0e:bc:bb:d5:9f:97:2a:7f:aa:02:95:df:68:98:11:3a: 66:31:1a:cf:fa:6f:ca:98:90:24:1b:7b:9d:dc:45:12:54:17: 6c:4c:4a:5f:87:4b:1c:d0:3d:f7:a6:43:be:28:0a:40:4e:73: 84:b2:f7:03:aa:df:07:32:75:6e:84:9e:95:fb:8f:2d:a8:54: 1c:bc:b2:ea:49:87:05:92:c5:f4:88:30:f0:f8:6e:7b:9a:69: d8:7c:b5:45:3c:85:55:ad:05:3e:f7:5f:fe:de:8d:65:2a:33: f5:42:30:9e:e8:76:b1:82:b6:15:64:40:e9:25:9f:2d:40:f3: c4:da:c8:b4:c6:77:63:04:5b:a4:bc:7f:c4:ad:43:31:85:22: d2:f6:69:a7:11:75:bd:87:9e:9e:9d:b0:db:80:db:0c:84:d2: e4:16:b4:e8:3c:22:da:c4:ff:28:7f:63:c2:8b:70:2b:fd:dd: ba:cd:b5:f5:6e:43:fd:7a:28:ef:12:05:b7:2b:9d:af:92:f5: 5c:6e:d9:3c:78:b8:ea:c8:cf:a3:19:b6:f3:69:4b:c3:ad:8f: 73:4d:82:19 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUckoflfNizYiLs1mu3Rb9LL8PN8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA4MDQxMjE5MTBaFw0yNjA4MDUxNTA0MTBaMDMxMTAvBgNV BAMTKEU0NUFENEY4QjlEOTQyOERFNDE4NUQxMzdBMTFGRERCMkRENzdGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuk642c/edN1A2fCcdUxlLTxi MOlB3hw3u3Mr2jRe3X/4MA8wy4Ry5OWJUjZL68KMDuoYS1wxHignOAIcOjQ/XQQv lk34dPhumDff65ZC1RzEnSSwomWuUrn4X6VrDALVl45DfIpOranR636JRy002uam 3cZQhjgUnlVOUD0krQkshw1FwcCdX/kph2BGZVntyPL6soe0ZzyBi3HyoEU/Sgi0 o/aNLBe73nhMj/fOK7ZzISzG3qYS9xjbLny5YEVq3OHe5fYADPxcXdoGIwb5+LKW 224/srsTW+ZtjfEp8Hhk+g737TsnBwEW+FGuImEzaWt/XOibDey8w8iME3a3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU5FrU+LnZQo3kGF0TehH92y3XfxowHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObBDxEhMws4J0mLGR+dD ZDHboph6ENHZtS0oYB7YRBzg4ZBHGsMOvLvVn5cqf6oCld9omBE6ZjEaz/pvypiQ JBt7ndxFElQXbExKX4dLHNA996ZDvigKQE5zhLL3A6rfBzJ1boSelfuPLahUHLyy 6kmHBZLF9Igw8Phue5pp2Hy1RTyFVa0FPvdf/t6NZSoz9UIwnuh2sYK2FWRA6SWf LUDzxNrItMZ3YwRbpLx/xK1DMYUi0vZppxF1vYeenp2w24DbDITS5Ba06Dwi2sT/ KH9jwotwK/3dus219W5D/Xoo7xIFtyudr5L1XG7ZPHi46sjPoxm282lLw62Pc02C GQ== -----END CERTIFICATE-----Generated at Tue Aug 4 18:56:09 2026 by rpki-client