$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft (raw, json) Hash identifier: Wyph9HeASuFGPaCIiKw8qEoTzFU4oE8nszXGhECYcjc= Subject key identifier: C0:C0:96:A3:E1:D3:39:4A:36:F3:EC:7E:78:AC:9C:E2:06:82:7B:5E Authority key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Certificate issuer: /CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Certificate serial: 541D70E7F6620D8527A00510DCA5603250301337 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft Manifest number: 7C Signing time: Tue 21 Jul 2026 11:44:39 +0000 Manifest this update: Tue 21 Jul 2026 11:39:39 +0000 Manifest next update: Wed 22 Jul 2026 11:46:39 +0000 Files and hashes: 1: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl (hash: o/UW4+ZhXLiY9msOmYkWtbMT2bkRsxdsaY7uJsVbthw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 11:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1d:70:e7:f6:62:0d:85:27:a0:05:10:dc:a5:60:32:50:30:13:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Validity Not Before: Jul 21 11:39:39 2026 GMT Not After : Jul 22 11:46:39 2026 GMT Subject: CN=C0C096A3E1D3394A36F3EC7E78AC9CE206827B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:46:de:5c:2d:32:ee:6f:77:c0:2f:d8:2e: 63:11:df:6b:92:fa:52:f9:23:32:cd:66:8b:fa:a5: 88:fd:1e:bb:d9:47:d5:2e:fd:cb:d9:27:8a:c8:6c: e1:52:01:f5:a6:ba:8e:be:53:a4:c5:e5:96:e7:77: 0d:07:e4:7f:3c:11:1d:4f:61:d1:b5:a9:1a:98:5b: 7e:f8:19:b5:3b:e0:95:59:c8:81:54:8c:71:8b:0d: d0:ea:72:0e:7b:3e:67:1e:65:32:c2:23:ce:be:df: 71:3f:61:4b:e6:9c:85:21:89:86:90:86:cc:82:71: 08:6f:d3:7c:38:1b:87:6d:22:95:65:ca:b1:15:e7: 6f:f8:14:45:da:a0:84:17:d4:98:1e:e5:7e:62:33: df:e3:17:0a:87:f7:ef:d2:dc:d3:67:1c:ad:47:ec: 9b:0a:8e:e7:61:10:72:c4:0b:c8:d0:f2:f5:2c:bf: 9d:2b:f9:e2:d6:9d:87:85:c6:d4:24:26:d7:49:af: af:cf:c9:ee:30:0f:10:92:d8:f4:12:4e:80:d5:6f: 9e:6c:63:e8:ad:75:0f:04:25:a2:6c:84:88:df:04: 5e:b9:a0:1a:3c:b5:c2:bb:6f:af:74:15:a5:43:b0: ea:3d:96:a8:6c:5b:09:17:49:8e:55:60:7e:79:ff: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C0:96:A3:E1:D3:39:4A:36:F3:EC:7E:78:AC:9C:E2:06:82:7B:5E X509v3 Authority Key Identifier: keyid:20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:73:10:f0:8e:ec:16:e8:e2:bf:a4:5c:76:06:db:46:0f:3d: 60:f8:70:4a:63:c7:fe:f3:c8:d4:96:7c:90:a4:96:3e:b7:3e: 7b:dc:68:55:61:04:a6:ad:1f:e7:8a:7a:f6:9c:42:4c:53:75: 24:34:ab:b3:60:b6:61:03:0a:b6:f1:b3:18:94:ff:f0:32:c6: 6a:97:3a:62:d3:66:70:36:42:d4:94:dc:f3:e4:2b:c7:04:3f: 12:04:20:1e:af:68:99:ab:b5:82:79:e2:0f:2f:3f:d2:38:8e: c4:9c:31:52:d3:a7:16:2e:71:87:ce:90:bf:83:e1:dc:c6:c7: 5c:b1:a5:5c:39:12:bb:80:ef:9b:ec:8d:97:3a:7a:29:57:ce: 13:d0:fe:f2:53:f1:d6:be:bc:66:69:c4:17:69:1f:ee:ce:13: da:4a:b6:b9:d8:81:ab:62:57:fd:31:01:20:7c:91:b4:f5:27: 57:1f:c6:f9:97:68:fc:2c:5d:56:13:f9:10:b1:ca:f6:e6:ad: 53:eb:72:08:f3:f0:00:8e:8a:d0:4c:d3:a8:5c:4d:31:3c:98: b5:ca:2e:a0:09:22:3c:6a:5c:a9:85:b0:62:4c:e8:88:f2:fe: bf:68:ef:89:9a:5d:cb:da:f2:a9:89:0f:6b:94:fe:d5:96:af: 07:c1:d0:22 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVB1w5/ZiDYUnoAUQ3KVgMlAwEzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdG QzA2RjRCNzAeFw0yNjA3MjExMTM5MzlaFw0yNjA3MjIxMTQ2MzlaMDMxMTAvBgNV BAMTKEMwQzA5NkEzRTFEMzM5NEEzNkYzRUM3RTc4QUM5Q0UyMDY4MjdCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjUbeXC0y7m93wC/YLmMR32uS +lL5IzLNZov6pYj9HrvZR9Uu/cvZJ4rIbOFSAfWmuo6+U6TF5Zbndw0H5H88ER1P YdG1qRqYW374GbU74JVZyIFUjHGLDdDqcg57PmceZTLCI86+33E/YUvmnIUhiYaQ hsyCcQhv03w4G4dtIpVlyrEV52/4FEXaoIQX1Jge5X5iM9/jFwqH9+/S3NNnHK1H 7JsKjudhEHLEC8jQ8vUsv50r+eLWnYeFxtQkJtdJr6/Pye4wDxCS2PQSToDVb55s Y+itdQ8EJaJshIjfBF65oBo8tcK7b690FaVDsOo9lqhsWwkXSY5VYH55/9DvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwMCWo+HTOUo28+x+eKyc4gaCe14wHwYDVR0j BBgwFoAUIAnJywUzPnrQfWUdhepd1/wG9LcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzMvMjAwOUM5Q0IwNTMzM0U3QUQwN0Q2NTFEODVFQTVERDdGQzA2RjRCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4 NUVBNUREN0ZDMDZGNEI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8zLzIwMDlDOUNC MDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANcxDw juwW6OK/pFx2BttGDz1g+HBKY8f+88jUlnyQpJY+tz573GhVYQSmrR/ninr2nEJM U3UkNKuzYLZhAwq28bMYlP/wMsZqlzpi02ZwNkLUlNzz5CvHBD8SBCAer2iZq7WC eeIPLz/SOI7EnDFS06cWLnGHzpC/g+HcxsdcsaVcORK7gO+b7I2XOnopV84T0P7y U/HWvrxmacQXaR/uzhPaSra52IGrYlf9MQEgfJG09SdXH8b5l2j8LF1WE/kQscr2 5q1T63II8/AAjorQTNOoXE0xPJi1yi6gCSI8alyphbBiTOiI8v6/aO+Jml3L2vKp iQ9rlP7Vlq8HwdAi -----END CERTIFICATE-----Generated at Tue Jul 21 17:49:37 2026 by rpki-client