$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft File: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft (raw, json) Hash identifier: wKXUplJo9O1ltJmJP7sGjLNg/7hG1yg+uxzoa41MxqI= Subject key identifier: 07:B1:A2:63:44:1E:CD:36:41:24:BE:DA:D5:CA:99:B5:3D:D1:1E:29 Authority key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 Certificate issuer: /CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Certificate serial: 1D9F9E9D3BC603A8A89B8BCDFAE2B2DA0060A22F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft Manifest number: 10 Signing time: Wed 26 Aug 2026 05:02:39 +0000 Manifest this update: Wed 26 Aug 2026 04:57:39 +0000 Manifest next update: Thu 27 Aug 2026 19:52:39 +0000 Files and hashes: 1: 326131343a373538313a6663313a3a2f34382d3438203d3e20323134333434.roa (hash: NgLXi6WSDkggy7r7WkuuC7KsW1goj6kdQLJDuE6oUvM=) 2: 326131343a373538313a6663323a3a2f34382d3438203d3e20323134333434.roa (hash: x43CoykFWOIiS9UUfapppEIMCAXPJ8ptcilMdOgS7JY=) 3: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl (hash: WFIXCJt5npmRwxkisVXxXnt+W5IMk6JNiS+GsiHleR4=) 4: 326131343a373538313a6663303a3a2f34382d3438203d3e20323134333434.roa (hash: UltyaMScBuYdJeR2Xu8A1kmWI3QQ39lmb0XVapFcCh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9f:9e:9d:3b:c6:03:a8:a8:9b:8b:cd:fa:e2:b2:da:00:60:a2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Validity Not Before: Aug 26 04:57:39 2026 GMT Not After : Aug 27 19:52:39 2026 GMT Subject: CN=07B1A263441ECD364124BEDAD5CA99B53DD11E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:60:f0:27:a7:5b:59:4a:f2:7b:11:c7:aa: fa:c6:84:a8:04:50:6d:24:8c:11:0e:b9:52:36:b8: 30:cf:76:2d:40:f0:e4:5b:7d:d3:09:f3:6a:19:55: 71:66:15:f1:91:fe:80:a0:3b:21:87:91:bc:0a:0b: 4d:af:4e:07:c7:50:8e:b9:aa:63:f6:c7:5f:4d:c4: da:ff:2f:b4:0e:3c:f0:7c:d4:46:a7:6c:3e:80:10: d0:7a:28:a2:2a:ca:da:02:f2:1f:99:09:d6:a8:97: ad:55:fe:94:9c:28:3d:53:db:4c:5d:3a:8d:11:ab: 15:9e:65:8d:97:28:ab:51:54:d9:16:83:fa:58:6e: 8d:b3:d4:e4:07:e1:b4:0a:1c:29:44:49:88:08:37: f1:86:e7:28:23:90:f3:76:a5:42:24:0a:6d:85:1e: 89:94:e5:5c:a8:b8:cc:a3:a4:6b:b3:5c:cf:25:6d: 7e:45:86:7b:43:24:d9:c1:04:9b:6f:72:9c:17:cb: 58:af:70:df:a9:93:09:a0:72:58:f1:5d:b5:31:08: 6b:74:83:1b:d7:8b:6a:41:a9:6c:e1:3c:f5:92:ca: a0:30:69:7f:c6:6b:42:ac:f7:fd:92:e3:6b:d3:5a: ee:f2:a1:2f:d1:46:b1:61:a0:a9:5e:6e:5d:85:20: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:A2:63:44:1E:CD:36:41:24:BE:DA:D5:CA:99:B5:3D:D1:1E:29 X509v3 Authority Key Identifier: keyid:6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:a9:78:08:f8:e0:c5:e8:93:bd:52:c5:44:31:fa:8b:6c: 8a:e1:e7:aa:84:50:9d:8c:47:e7:ea:16:23:5b:8f:52:72:a5: e4:b4:64:0b:a6:61:36:be:63:ba:0a:e0:ef:c3:23:e7:90:9c: 72:ee:43:66:ea:4f:02:7c:e9:61:c4:97:41:06:e4:f2:9f:8e: ec:d0:f5:68:51:3e:5c:31:92:e3:0f:60:12:18:20:fa:8e:d6: bf:7c:d4:2b:30:e6:90:a1:09:f9:db:87:eb:da:dd:2c:f5:cf: e0:1c:e4:26:d8:22:f9:a1:dd:cc:38:ae:ee:b4:81:3f:76:37: 7d:75:f2:93:24:83:53:8c:e8:2e:bb:e8:3d:3e:52:61:8c:51: ca:28:c3:5d:4b:b8:6b:c0:a9:fd:dc:1b:87:14:88:33:d3:0f: 45:b3:1b:d4:1a:08:a6:f0:6e:51:ee:c8:09:27:c0:f8:a0:f4: e7:d3:a6:68:50:c5:08:7b:47:92:6c:94:db:8d:0d:2e:e5:96: bb:b1:9b:6a:ec:92:60:b4:f6:4f:7d:04:17:0f:4f:1a:dc:12: f7:b5:e0:31:0a:ff:64:0f:ab:c2:d2:b6:9d:95:36:d8:04:f3: 7f:a4:c7:04:e2:68:ee:e9:b9:a2:e2:95:11:09:76:3c:4a:d4: f7:a1:50:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHZ+enTvGA6iom4vN+uKy2gBgoi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJG NzMxNDI3OTAeFw0yNjA4MjYwNDU3MzlaFw0yNjA4MjcxOTUyMzlaMDMxMTAvBgNV BAMTKDA3QjFBMjYzNDQxRUNEMzY0MTI0QkVEQUQ1Q0E5OUI1M0REMTFFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTx2DwJ6dbWUryexHHqvrGhKgE UG0kjBEOuVI2uDDPdi1A8ORbfdMJ82oZVXFmFfGR/oCgOyGHkbwKC02vTgfHUI65 qmP2x19NxNr/L7QOPPB81EanbD6AENB6KKIqytoC8h+ZCdaol61V/pScKD1T20xd Oo0RqxWeZY2XKKtRVNkWg/pYbo2z1OQH4bQKHClESYgIN/GG5ygjkPN2pUIkCm2F HomU5VyouMyjpGuzXM8lbX5FhntDJNnBBJtvcpwXy1ivcN+pkwmgcljxXbUxCGt0 gxvXi2pBqWzhPPWSyqAwaX/Ga0Ks9/2S42vTWu7yoS/RRrFhoKlebl2FIPkBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUB7GiY0QezTZBJL7a1cqZtT3RHikwHwYDVR0j BBgwFoAUbRILbYUb04xp5dNZn9jA+/cxQnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzIvNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJGNzMxNDI3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RDEyMEI2RDg1MUJEMzhDNjlFNUQzNTk5 RkQ4QzBGQkY3MzE0Mjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2EyZTI1N2RmLTk5MzAtNDRlNi04NjZlLTQxYTQ4OTg2NTIzMi8yLzZEMTIwQjZE ODUxQkQzOEM2OUU1RDM1OTlGRDhDMEZCRjczMTQyNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAScal4 CPjgxeiTvVLFRDH6i2yK4eeqhFCdjEfn6hYjW49ScqXktGQLpmE2vmO6CuDvwyPn kJxy7kNm6k8CfOlhxJdBBuTyn47s0PVoUT5cMZLjD2ASGCD6jta/fNQrMOaQoQn5 24fr2t0s9c/gHOQm2CL5od3MOK7utIE/djd9dfKTJINTjOguu+g9PlJhjFHKKMNd S7hrwKn93BuHFIgz0w9FsxvUGgim8G5R7sgJJ8D4oPTn06ZoUMUIe0eSbJTbjQ0u 5Za7sZtq7JJgtPZPfQQXD08a3BL3teAxCv9kD6vC0radlTbYBPN/pMcE4mju6bmi 4pURCXY8StT3oVDZ -----END CERTIFICATE-----Generated at Wed Aug 26 13:53:45 2026 by rpki-client