$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: dygWlvqjPRU+QpNJEAq2ljbWIbaBqN1rGohI/dwySak= Subject key identifier: 80:68:F8:EF:B5:EE:CB:A2:9F:88:15:81:11:34:FD:2F:25:C3:38:14 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 4D86D444DDE5636F4E0B6B89094A0E720AC906A4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 013E Signing time: Fri 10 Jul 2026 13:19:05 +0000 Manifest this update: Fri 10 Jul 2026 13:14:05 +0000 Manifest next update: Sat 11 Jul 2026 15:08:05 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: 8XfNSrcB4up1aSDyGD64LoA3AM220fWJmgUJ29oDyTo=) 3: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:86:d4:44:dd:e5:63:6f:4e:0b:6b:89:09:4a:0e:72:0a:c9:06:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Jul 10 13:14:05 2026 GMT Not After : Jul 11 15:08:05 2026 GMT Subject: CN=8068F8EFB5EECBA29F8815811134FD2F25C33814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:e6:ff:58:27:2b:6b:35:8a:00:86:5a:87: 97:89:36:6f:61:c4:98:2c:49:4f:62:b6:de:71:33: ca:70:cb:29:15:9d:39:b1:c1:7b:db:7b:5b:0e:cb: d8:ba:b7:6b:ea:d4:cc:62:62:c2:3b:4e:7a:fb:c6: 9d:f5:9a:ba:aa:eb:54:43:63:c1:cb:8c:8a:a1:f1: 57:f6:01:6a:3f:90:28:fc:af:8a:96:24:a4:b3:6e: ae:9e:2b:91:1b:75:9b:c4:e7:89:c9:b4:11:9a:32: a6:ab:f5:2e:da:72:42:18:6a:3b:94:8c:e8:73:cd: ef:7f:0d:7d:9d:b0:c5:02:66:cd:79:82:be:62:27: 2c:33:b7:08:08:bc:09:e8:80:75:c3:5c:4a:c9:f4: a6:53:eb:e4:d1:7a:88:74:6a:21:6e:14:26:99:8f: d4:f9:51:1e:1d:65:31:da:52:d1:1a:bb:37:05:55: eb:b9:2d:6f:3a:70:fe:72:3c:58:b8:05:65:36:e0: eb:05:75:88:96:fe:c9:5f:f2:60:bc:d4:73:3f:f0: 45:dc:78:7d:30:9a:57:e3:4f:68:15:4d:a4:e6:e9: 82:a9:f7:f0:a4:79:a0:90:52:c9:39:ce:fe:6a:67: 14:bc:36:0c:30:9e:88:cf:96:d9:d8:a6:d0:2c:ec: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:68:F8:EF:B5:EE:CB:A2:9F:88:15:81:11:34:FD:2F:25:C3:38:14 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ea:ca:8c:c1:84:8e:19:56:4d:74:38:42:21:70:43:14:0d: 4d:11:09:9f:1c:fb:26:c5:8b:1f:2a:7e:e3:5a:cf:99:f6:23: 09:0c:90:4d:cc:a3:8e:05:10:ef:a5:55:a5:bd:00:f8:1e:b9: 0e:d1:05:73:8b:ea:f2:95:aa:cc:30:a7:e6:c0:a0:6d:11:b4: 83:a4:b4:59:58:04:f7:cd:c6:c8:21:b3:db:ae:aa:68:63:6e: 13:68:d3:72:f0:f3:b3:2c:85:98:f0:b0:4f:e4:b9:6b:86:45: a9:a6:10:80:e5:bf:ed:09:d6:12:9e:bb:74:45:5a:19:4a:5b: 19:8c:00:36:2e:47:99:fe:2d:25:cd:7e:bc:44:b1:76:bc:40: 62:60:12:52:3b:fb:ec:45:c7:95:d7:64:cc:6a:01:55:68:37: 98:7f:04:87:c2:c8:04:25:fa:72:e9:db:d0:d7:f0:c7:6f:6f: fd:3d:52:04:af:f6:16:9c:ae:9b:35:ee:d2:12:c0:24:0e:0d: 64:53:64:97:b0:d4:66:63:8e:50:39:ed:9a:b4:c4:4b:a0:d1: a8:11:9c:77:f4:15:b6:46:3e:e1:bf:c5:5a:3c:6c:15:5c:22: 08:5a:b8:cb:0a:3b:8d:ca:2b:0d:8b:89:27:4c:79:87:9a:39: ad:5e:4d:4a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTYbURN3lY29OC2uJCUoOcgrJBqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA3MTAxMzE0MDVaFw0yNjA3MTExNTA4MDVaMDMxMTAvBgNV BAMTKDgwNjhGOEVGQjVFRUNCQTI5Rjg4MTU4MTExMzRGRDJGMjVDMzM4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDeb/WCcrazWKAIZah5eJNm9h xJgsSU9itt5xM8pwyykVnTmxwXvbe1sOy9i6t2vq1MxiYsI7Tnr7xp31mrqq61RD Y8HLjIqh8Vf2AWo/kCj8r4qWJKSzbq6eK5EbdZvE54nJtBGaMqar9S7ackIYajuU jOhzze9/DX2dsMUCZs15gr5iJywztwgIvAnogHXDXErJ9KZT6+TReoh0aiFuFCaZ j9T5UR4dZTHaUtEauzcFVeu5LW86cP5yPFi4BWU24OsFdYiW/slf8mC81HM/8EXc eH0wmlfjT2gVTaTm6YKp9/CkeaCQUsk5zv5qZxS8NgwwnojPltnYptAs7OhLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUgGj477Xuy6KfiBWBETT9LyXDOBQwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAherKjMGEjhlWTXQ4QiFw QxQNTREJnxz7JsWLHyp+41rPmfYjCQyQTcyjjgUQ76VVpb0A+B65DtEFc4vq8pWq zDCn5sCgbRG0g6S0WVgE983GyCGz266qaGNuE2jTcvDzsyyFmPCwT+S5a4ZFqaYQ gOW/7QnWEp67dEVaGUpbGYwANi5Hmf4tJc1+vESxdrxAYmASUjv77EXHlddkzGoB VWg3mH8Eh8LIBCX6cunb0Nfwx29v/T1SBK/2FpyumzXu0hLAJA4NZFNkl7DUZmOO UDntmrTES6DRqBGcd/QVtkY+4b/FWjxsFVwiCFq4ywo7jcorDYuJJ0x5h5o5rV5N Sg== -----END CERTIFICATE-----Generated at Fri Jul 10 15:13:06 2026 by rpki-client