$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: j7ZWqAPYDZ67tOjKLuvAFeDcGWBtxaVNnD/FfJOvtS0= Subject key identifier: 4C:0B:EB:C4:89:2A:25:90:90:2B:D5:29:5F:4A:92:F4:6E:DB:5B:8A Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 5A61046A4E9C9C41509CB4147DF60387116B7B85 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 01DB Signing time: Sun 12 Jul 2026 22:59:04 +0000 Manifest this update: Sun 12 Jul 2026 22:54:04 +0000 Manifest next update: Tue 14 Jul 2026 00:33:04 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: SHkE0kz9U9BrqtQ7tnwewYDJp33VXR080XOmgdGYzSg=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: j5br/GzphTQPxHdz6wWlCvxPk1jfU3XuzXYyfWFWBPA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Jul 2026 00:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:61:04:6a:4e:9c:9c:41:50:9c:b4:14:7d:f6:03:87:11:6b:7b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Jul 12 22:54:04 2026 GMT Not After : Jul 14 00:33:04 2026 GMT Subject: CN=4C0BEBC4892A2590902BD5295F4A92F46EDB5B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:45:c8:21:08:6c:27:0b:ec:56:32:da:c1: e1:bd:62:98:01:7c:47:0f:b8:b8:41:c9:bd:76:06: 11:5f:70:a2:c3:8a:dd:b5:01:64:4b:bf:31:a1:30: 4c:48:88:6b:17:24:b0:d5:58:94:3d:71:96:31:1b: b3:8a:40:bc:73:7c:f4:05:73:2b:54:97:32:02:00: e0:16:7a:4c:e8:18:74:b4:e9:e8:b5:3a:c7:8e:42: 28:26:61:f3:d7:0f:42:32:4f:0c:e6:39:aa:a0:a3: a6:0c:88:21:18:6c:29:dc:ff:6d:55:2b:b8:20:f8: 04:cf:f4:28:8d:98:e7:03:94:e8:7c:97:ac:c7:28: bb:98:92:12:3f:ff:d9:44:58:5a:50:22:b7:6f:da: be:1c:5c:df:4a:14:91:99:fc:5d:79:31:e6:b9:3d: 0e:c6:3e:a2:4e:d4:d5:7c:b0:9e:49:76:cd:94:b9: e0:5e:58:99:48:16:17:db:4e:f4:d6:c5:79:3f:bb: 7d:99:ee:5b:6e:e3:9d:ca:d5:9f:96:59:30:2d:f2: 51:77:b6:d3:4b:cb:98:e1:49:2d:0a:5f:1a:63:80: be:f7:e5:ae:1e:6a:b2:28:a3:3c:c8:eb:62:a4:63: 09:49:5f:1b:1c:f6:63:0d:63:b3:2b:44:f6:7a:45: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:EB:C4:89:2A:25:90:90:2B:D5:29:5F:4A:92:F4:6E:DB:5B:8A X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a1:40:0f:28:94:68:32:4a:f2:6c:a8:c0:6d:1d:36:24:32: 26:c6:db:92:10:c7:75:f1:fa:31:d7:46:bb:e4:d3:0d:63:df: af:fa:7e:41:7b:9a:1a:36:ff:58:1d:ef:03:d8:0e:1e:3c:66: 6c:b8:65:76:4b:d8:0f:ae:b7:a2:5a:cc:31:25:6b:6a:c6:8d: ad:f2:e3:60:a2:46:7e:7c:d5:5f:3c:5f:58:d0:40:c6:78:4c: 8a:26:90:22:b3:bf:67:c1:8b:7a:f9:8d:b8:01:36:6b:32:1d: 2d:55:25:3f:05:90:24:95:94:f8:b6:4b:dc:fd:31:6b:cc:b8: 52:09:a2:ca:6a:f0:5d:1c:3c:64:6e:77:8a:40:bb:03:f5:26: 6f:44:d5:42:c3:a9:b2:8d:17:11:92:cc:15:a5:88:04:61:c1: 74:0e:9e:30:c0:6a:15:1a:c1:cb:cf:a2:d4:10:56:48:5c:47: 0d:70:1d:c6:b7:da:51:f3:03:44:a9:28:82:31:d4:f5:91:ad: e3:68:1d:04:ba:d6:ae:48:f8:21:74:1b:b9:d4:c0:8e:a2:c5: 1d:c5:83:bf:02:20:5a:8c:08:b3:4a:9d:4c:84:0f:46:f4:00: e3:b7:0b:63:b9:26:28:db:6b:03:36:2d:39:45:24:f8:22:b6: ba:ba:78:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWmEEak6cnEFQnLQUffYDhxFre4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA3MTIyMjU0MDRaFw0yNjA3MTQwMDMzMDRaMDMxMTAvBgNV BAMTKDRDMEJFQkM0ODkyQTI1OTA5MDJCRDUyOTVGNEE5MkY0NkVEQjVCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzukXIIQhsJwvsVjLaweG9YpgB fEcPuLhByb12BhFfcKLDit21AWRLvzGhMExIiGsXJLDVWJQ9cZYxG7OKQLxzfPQF cytUlzICAOAWekzoGHS06ei1OseOQigmYfPXD0IyTwzmOaqgo6YMiCEYbCnc/21V K7gg+ATP9CiNmOcDlOh8l6zHKLuYkhI//9lEWFpQIrdv2r4cXN9KFJGZ/F15Mea5 PQ7GPqJO1NV8sJ5Jds2UueBeWJlIFhfbTvTWxXk/u32Z7ltu453K1Z+WWTAt8lF3 ttNLy5jhSS0KXxpjgL735a4earIoozzI62KkYwlJXxsc9mMNY7MrRPZ6RbFLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTAvrxIkqJZCQK9UpX0qS9G7bW4owHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADoUAP KJRoMkrybKjAbR02JDImxtuSEMd18fox10a75NMNY9+v+n5Be5oaNv9YHe8D2A4e PGZsuGV2S9gPrreiWswxJWtqxo2t8uNgokZ+fNVfPF9Y0EDGeEyKJpAis79nwYt6 +Y24ATZrMh0tVSU/BZAklZT4tkvc/TFrzLhSCaLKavBdHDxkbneKQLsD9SZvRNVC w6myjRcRkswVpYgEYcF0Dp4wwGoVGsHLz6LUEFZIXEcNcB3Gt9pR8wNEqSiCMdT1 ka3jaB0EutauSPghdBu51MCOosUdxYO/AiBajAizSp1MhA9G9ADjtwtjuSYo22sD Ni05RST4Ira6unj5 -----END CERTIFICATE-----Generated at Mon Jul 13 12:02:18 2026 by rpki-client