$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: knIiuWPkYNlIPEmdkTdCjU8CmDACvdSXoBJ8UlGN5Ik= Subject key identifier: 34:1B:C7:4E:FF:8C:B9:62:C7:C6:D3:2A:54:5E:27:0A:43:BC:12:5A Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 509332410477418410C4176027C4E801C20A683E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 060C Signing time: Tue 30 Jun 2026 10:25:28 +0000 Manifest this update: Tue 30 Jun 2026 10:20:28 +0000 Manifest next update: Wed 01 Jul 2026 11:34:28 +0000 Files and hashes: 1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: UU10d24hidkOMuXil+8LLyTt/MpG5iBoYBxNZiPq9pg=) 2: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 3: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 11:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:93:32:41:04:77:41:84:10:c4:17:60:27:c4:e8:01:c2:0a:68:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jun 30 10:20:28 2026 GMT Not After : Jul 1 11:34:28 2026 GMT Subject: CN=341BC74EFF8CB962C7C6D32A545E270A43BC125A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:e8:4b:c7:c5:31:a8:db:a4:45:93:68:64: 00:9c:44:cb:e8:79:d2:50:bb:32:b2:ac:a5:e2:f5: d6:a6:a8:ae:55:33:01:ed:0d:d1:e7:df:09:bd:bd: 8a:8d:7b:9d:1a:47:23:0f:c2:8f:2b:e3:2b:82:01: 68:7b:f7:46:9d:a0:a4:45:df:72:8a:93:74:f7:77: 40:2d:21:e4:41:e6:59:8e:f9:fe:96:b3:6b:3b:a4: e2:e8:ca:35:63:71:ba:fb:81:b7:68:9e:23:8b:31: b6:02:ee:da:49:51:83:4b:8f:df:dd:d8:9a:e4:59: c5:b8:b8:da:5d:d1:87:10:98:c9:cd:66:ab:ee:c7: 29:a3:02:6a:6b:6a:75:1b:30:aa:74:0e:3d:a9:b0: 73:b9:3c:59:5a:3b:5b:aa:eb:63:61:08:fd:0a:89: 60:63:fd:72:bc:9c:e0:52:a5:f4:35:46:8c:35:bd: 36:10:37:c0:0f:b0:96:58:2a:0d:39:01:77:be:52: 8b:6e:43:45:74:7b:3b:a2:5e:91:f2:47:29:d0:c2: 55:9d:7e:c7:9e:0d:1f:7e:5b:e8:92:6c:aa:09:77: f0:15:f9:a1:b7:97:17:6f:03:0e:40:7e:be:0c:02: e2:0a:73:ce:40:f2:61:8c:59:41:5a:6c:d3:71:57: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:C7:4E:FF:8C:B9:62:C7:C6:D3:2A:54:5E:27:0A:43:BC:12:5A X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b6:10:bf:5f:4c:38:1e:7c:76:72:1a:0c:5e:53:86:7a:97: 35:e3:64:b7:8b:d4:e1:b4:8f:10:cb:d0:8c:27:d8:4e:8c:b9: da:1a:e8:fa:88:2e:89:ac:d3:6f:46:ac:71:52:65:b3:b0:56: ed:4d:1d:15:f4:5d:5b:d3:d0:b6:d5:5b:91:f6:40:1d:50:04: ae:5b:a2:5f:4e:10:dd:5e:19:49:ec:37:d5:a2:fc:db:24:ad: 85:68:d5:9d:d5:1e:13:69:44:58:fc:d5:9e:fc:6c:e1:2e:a9: 71:95:ae:8f:28:32:95:f6:11:c0:ea:51:8f:ea:16:dc:c3:cf: 35:b6:e8:89:ca:5d:86:ef:c2:42:9e:07:be:a4:9e:35:81:6a: 01:3d:6c:68:ca:37:9d:97:e0:80:6e:80:59:c0:b0:2e:a3:11: 43:eb:ca:7e:b8:26:d8:25:ee:4c:7a:06:a6:01:06:f0:64:df: a7:4e:8d:9f:86:01:45:07:b5:8d:3f:2d:55:53:c3:c5:7d:17: 10:2a:97:54:8b:a6:6f:b3:33:c7:0c:b7:f7:69:24:6f:9c:aa: e3:e6:59:95:17:fe:d9:78:63:8b:cf:ef:ea:bf:d1:ef:88:57: ff:fe:ae:ee:f9:6d:8b:fb:39:f6:96:ca:24:1e:b7:85:5d:bd: 6b:45:ef:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUJMyQQR3QYQQxBdgJ8ToAcIKaD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA2MzAxMDIwMjhaFw0yNjA3MDExMTM0MjhaMDMxMTAvBgNV BAMTKDM0MUJDNzRFRkY4Q0I5NjJDN0M2RDMyQTU0NUUyNzBBNDNCQzEyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYOhLx8UxqNukRZNoZACcRMvo edJQuzKyrKXi9damqK5VMwHtDdHn3wm9vYqNe50aRyMPwo8r4yuCAWh790adoKRF 33KKk3T3d0AtIeRB5lmO+f6Ws2s7pOLoyjVjcbr7gbdoniOLMbYC7tpJUYNLj9/d 2JrkWcW4uNpd0YcQmMnNZqvuxymjAmpranUbMKp0Dj2psHO5PFlaO1uq62NhCP0K iWBj/XK8nOBSpfQ1Row1vTYQN8APsJZYKg05AXe+UotuQ0V0ezuiXpHyRynQwlWd fseeDR9+W+iSbKoJd/AV+aG3lxdvAw5Afr4MAuIKc85A8mGMWUFabNNxV2sDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNBvHTv+MuWLHxtMqVF4nCkO8ElowHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbYQv19MOB58dnIaDF5T hnqXNeNkt4vU4bSPEMvQjCfYToy52hro+oguiazTb0ascVJls7BW7U0dFfRdW9PQ ttVbkfZAHVAErluiX04Q3V4ZSew31aL82ySthWjVndUeE2lEWPzVnvxs4S6pcZWu jygylfYRwOpRj+oW3MPPNbboicpdhu/CQp4HvqSeNYFqAT1saMo3nZfggG6AWcCw LqMRQ+vKfrgm2CXuTHoGpgEG8GTfp06Nn4YBRQe1jT8tVVPDxX0XECqXVIumb7Mz xwy392kkb5yq4+ZZlRf+2Xhji8/v6r/R74hX//6u7vlti/s59pbKJB63hV29a0Xv ew== -----END CERTIFICATE-----Generated at Tue Jun 30 19:25:00 2026 by rpki-client