$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json) Hash identifier: V6MxNxSaqUIceIEI+N0ieFcbwGgNn+hpHF8rngjAvHg= Subject key identifier: EC:E2:F9:6D:4F:CD:AA:52:23:8E:6B:BF:C4:4B:B8:C7:18:21:AC:CD Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 3DAE0BAD52021F238B9779817564B6A1006AF80C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft Manifest number: DD Signing time: Tue 21 Jul 2026 18:30:22 +0000 Manifest this update: Tue 21 Jul 2026 18:25:22 +0000 Manifest next update: Wed 22 Jul 2026 20:52:22 +0000 Files and hashes: 1: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=) 2: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=) 3: 326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa (hash: zvjx/yTCTWO3kCoZu0S8S/X09AzIBk5JMwyuFagXb+o=) 4: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: ZK3cbhORDcBKgqs5yDST6MjOJxnkioGtppyj0bnzPHA=) 5: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=) 6: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ae:0b:ad:52:02:1f:23:8b:97:79:81:75:64:b6:a1:00:6a:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: Jul 21 18:25:22 2026 GMT Not After : Jul 22 20:52:22 2026 GMT Subject: CN=ECE2F96D4FCDAA52238E6BBFC44BB8C71821ACCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:7f:e3:4b:28:d5:95:35:8d:eb:0f:36:5d: 75:69:66:92:66:85:72:e3:6f:cf:9d:0b:c3:25:d8: 9a:df:a5:78:a3:8e:08:3f:21:d4:3d:5d:67:99:35: 17:8f:8c:2e:49:89:1a:4d:f6:31:e6:db:49:78:f2: c1:a2:8c:17:94:0f:b0:2e:18:4a:a4:86:f8:e3:53: 93:6b:23:8e:b2:25:60:85:44:f7:70:21:2a:59:12: 59:5b:d1:ee:1a:7d:1a:e6:5e:be:76:94:03:14:34: 57:11:ee:12:1c:13:b5:06:f2:b6:4f:2d:c3:9f:c2: 88:62:ec:80:3e:4a:86:41:28:59:bf:fd:43:df:7a: 11:61:65:1f:15:c3:a5:0b:0d:eb:3b:51:26:39:ce: 63:0b:0d:65:1c:cc:ae:c4:53:32:d4:07:44:df:65: 0f:f7:d7:b0:ea:ea:b0:84:19:64:f8:ed:c6:48:dd: 34:e5:da:80:c5:d1:94:28:16:61:b6:48:97:72:3e: 8e:bc:c9:b6:82:20:f9:d5:8d:d3:5c:9f:3b:d9:57: 5a:0a:92:a2:82:d8:aa:01:f5:27:7c:a2:59:a4:57: c0:41:bd:05:6f:54:38:1f:4f:54:d9:68:55:04:51: 4d:7d:1a:55:75:f0:a4:0b:14:a4:ca:54:c5:2f:c6: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:F9:6D:4F:CD:AA:52:23:8E:6B:BF:C4:4B:B8:C7:18:21:AC:CD X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ab:f5:7c:dc:b4:5a:d1:6c:90:64:77:e3:3f:c9:b1:9b:2a: 68:e3:2c:b4:d0:1e:44:5c:8a:e7:9b:ac:9c:fe:7d:ac:32:1f: bb:47:62:14:ed:9b:ea:f7:5a:4b:dd:44:7b:03:6f:9f:f0:77: 0f:3a:8c:24:de:c4:61:a3:e1:25:ee:1a:0b:a8:10:fe:43:04: 38:b8:de:86:be:45:37:f6:aa:fe:96:20:32:32:a6:e7:73:6f: f7:f2:d4:b2:b8:e6:2b:95:78:d8:06:fb:56:cd:95:5d:81:0d: dc:1c:a3:e0:1e:13:73:b1:57:e7:8d:5d:d2:1d:9b:02:f3:33: f6:88:06:0a:66:7f:e3:a5:c3:7b:81:10:1a:28:ee:86:7b:da: a6:59:3d:aa:7b:5c:ab:88:da:37:83:03:3e:77:ae:62:b1:c2: 10:a6:67:0f:0d:37:b7:98:6e:33:79:23:e0:f8:23:34:e9:7c: 74:0d:f3:d1:72:f6:94:c7:c5:4d:c9:05:0f:f9:cd:c1:20:6f: 24:81:76:2c:eb:b8:42:63:44:81:8a:e7:e0:b8:5d:89:d0:2f: bb:e4:c3:43:fa:4b:06:ec:ea:cf:6d:4a:b3:b0:a5:e1:82:9d: 26:58:4d:68:1a:d8:cc:05:a2:c0:44:b7:8a:f9:87:fa:20:78: 55:02:b5:44 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPa4LrVICHyOLl3mBdWS2oQBq+AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjA3MjExODI1MjJaFw0yNjA3MjIyMDUyMjJaMDMxMTAvBgNV BAMTKEVDRTJGOTZENEZDREFBNTIyMzhFNkJCRkM0NEJCOEM3MTgyMUFDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gX/jSyjVlTWN6w82XXVpZpJm hXLjb8+dC8Ml2JrfpXijjgg/IdQ9XWeZNRePjC5JiRpN9jHm20l48sGijBeUD7Au GEqkhvjjU5NrI46yJWCFRPdwISpZEllb0e4afRrmXr52lAMUNFcR7hIcE7UG8rZP LcOfwohi7IA+SoZBKFm//UPfehFhZR8Vw6ULDes7USY5zmMLDWUczK7EUzLUB0Tf ZQ/317Dq6rCEGWT47cZI3TTl2oDF0ZQoFmG2SJdyPo68ybaCIPnVjdNcnzvZV1oK kqKC2KoB9Sd8olmkV8BBvQVvVDgfT1TZaFUEUU19GlV18KQLFKTKVMUvxoMnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU7OL5bU/NqlIjjmu/xEu4xxghrM0wHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZjE2OWE3YS1l MDQzLTQzMzctYWVlYy0yNGQyYWI5MWYxMzgvMS83OUFBMTJCQUQ3RTJDNTAyNzg4 OTBGMkRGOUNDRTAyQjg4RTE4NDg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKv1fNy0WtFskGR34z/J sZsqaOMstNAeRFyK55usnP59rDIfu0diFO2b6vdaS91EewNvn/B3DzqMJN7EYaPh Je4aC6gQ/kMEOLjehr5FN/aq/pYgMjKm53Nv9/LUsrjmK5V42Ab7Vs2VXYEN3Byj 4B4Tc7FX541d0h2bAvMz9ogGCmZ/46XDe4EQGijuhnvaplk9qntcq4jaN4MDPneu YrHCEKZnDw03t5huM3kj4PgjNOl8dA3z0XL2lMfFTckFD/nNwSBvJIF2LOu4QmNE gYrn4LhdidAvu+TDQ/pLBuzqz21Ks7Cl4YKdJlhNaBrYzAWiwES3ivmH+iB4VQK1 RA== -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:30 2026 by rpki-client