$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: AeDEX7TxL3HOhE7HiZ/IBEB/iQDdk+yifJ6c608U/ZA= Subject key identifier: E9:5D:F6:9E:11:DA:AC:5F:7F:B7:B1:89:7F:71:6F:4C:08:30:E4:7C Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 3C474A0B23E9D6C46FEAFB94E7C834F814E217E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0656 Signing time: Fri 14 Aug 2026 20:09:44 +0000 Manifest this update: Fri 14 Aug 2026 20:04:44 +0000 Manifest next update: Sat 15 Aug 2026 21:41:44 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: ZCdMfY14R5x7kcjTCGpBpG1F21ITW+SgJB5zMJGGDZc=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:47:4a:0b:23:e9:d6:c4:6f:ea:fb:94:e7:c8:34:f8:14:e2:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Aug 14 20:04:44 2026 GMT Not After : Aug 15 21:41:44 2026 GMT Subject: CN=E95DF69E11DAAC5F7FB7B1897F716F4C0830E47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:b3:b7:e8:63:ae:be:c4:77:f8:e4:87:4d: 0d:f1:ea:17:61:f7:5d:8d:64:cb:13:c5:e6:19:fb: 8f:5b:fb:db:04:d4:da:b8:8b:be:81:5a:53:ac:f6: 69:5c:1a:a6:8b:4b:0c:85:77:98:75:d6:d5:c6:b0: 53:41:2f:4d:5c:19:18:38:af:e8:66:f9:ee:fe:6d: 81:67:cf:11:83:5c:3d:8a:e9:7e:18:44:bd:b5:42: 85:2e:c2:28:77:92:da:e5:bd:2d:c7:9b:92:ce:31: 5d:fa:02:1c:91:fd:cc:d2:87:45:19:5f:8b:a3:87: 5a:7f:c5:be:d1:bf:9b:a2:28:57:f7:55:be:75:ce: 74:15:1b:ce:0e:b7:2b:d4:d4:73:ef:87:ad:64:83: b3:88:bb:7f:93:cb:19:6c:d0:2d:cd:fa:06:df:bc: 63:d5:38:bb:dc:7f:86:e8:a0:40:1c:83:ce:9f:63: b0:ee:c0:73:a9:6e:f9:e2:7b:c5:ea:a1:82:6d:2c: 8a:da:c3:b5:65:d6:cf:ba:a5:25:07:35:ee:5e:b0: cd:fd:62:e4:4e:0f:4c:95:3d:22:a7:c4:e3:4e:41: e6:b9:64:99:bc:2b:fa:ea:2c:82:4c:ec:54:1a:da: 93:ce:0e:cd:6e:45:c9:df:07:01:ba:93:92:0c:53: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5D:F6:9E:11:DA:AC:5F:7F:B7:B1:89:7F:71:6F:4C:08:30:E4:7C X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:44:bd:71:8d:db:d7:e0:00:b9:2d:ff:f1:bb:8e:f5:27:78: 4c:eb:5a:43:0a:d5:59:ea:ed:c0:c4:fc:b0:96:c3:2c:32:e4: 61:a1:66:d6:4c:65:24:ae:e5:b8:59:aa:2f:9d:19:8a:e7:2c: 06:9c:e8:36:fe:47:ba:b6:8b:b5:82:0a:80:88:48:b4:ad:44: 27:a1:e8:f1:f2:d2:1e:cc:a0:50:57:b3:8f:1f:89:1d:06:84: 10:7e:c0:9f:e7:46:d6:76:32:a6:da:2f:48:25:4c:96:fc:87: be:08:31:31:34:e8:c5:bc:d4:5f:d7:62:35:d5:6a:64:54:c6: c0:46:ea:1b:0d:32:78:27:9b:a3:c3:19:02:ef:c2:57:34:4b: 02:9c:97:f9:36:44:41:c6:c8:80:0f:b4:1f:a9:d6:fa:fd:d9: 23:0c:7f:8c:0e:b1:04:98:ef:49:01:dd:13:1c:01:11:f9:36: 91:d1:3a:75:70:20:89:8b:14:d4:70:09:17:93:29:b1:67:4c: 87:8f:bf:24:54:45:f5:c3:5d:47:f4:9c:71:70:28:de:97:66: 33:ed:e0:fb:19:46:3b:50:52:03:20:c3:55:d2:ad:9b:d6:15: f6:28:63:05:fd:08:a9:f5:0f:e1:70:7e:c6:1e:31:f1:8a:1f: 1f:55:fa:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPEdKCyPp1sRv6vuU58g0+BTiF+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA4MTQyMDA0NDRaFw0yNjA4MTUyMTQxNDRaMDMxMTAvBgNV BAMTKEU5NURGNjlFMTFEQUFDNUY3RkI3QjE4OTdGNzE2RjRDMDgzMEU0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWLO36GOuvsR3+OSHTQ3x6hdh 912NZMsTxeYZ+49b+9sE1Nq4i76BWlOs9mlcGqaLSwyFd5h11tXGsFNBL01cGRg4 r+hm+e7+bYFnzxGDXD2K6X4YRL21QoUuwih3ktrlvS3Hm5LOMV36AhyR/czSh0UZ X4ujh1p/xb7Rv5uiKFf3Vb51znQVG84OtyvU1HPvh61kg7OIu3+Tyxls0C3N+gbf vGPVOLvcf4booEAcg86fY7DuwHOpbvnie8XqoYJtLIraw7Vl1s+6pSUHNe5esM39 YuROD0yVPSKnxONOQea5ZJm8K/rqLIJM7FQa2pPODs1uRcnfBwG6k5IMUypjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6V32nhHarF9/t7GJf3FvTAgw5HwwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkS9cY3b1+AAuS3/8buO 9Sd4TOtaQwrVWertwMT8sJbDLDLkYaFm1kxlJK7luFmqL50ZiucsBpzoNv5HuraL tYIKgIhItK1EJ6Ho8fLSHsygUFezjx+JHQaEEH7An+dG1nYyptovSCVMlvyHvggx MTToxbzUX9diNdVqZFTGwEbqGw0yeCebo8MZAu/CVzRLApyX+TZEQcbIgA+0H6nW +v3ZIwx/jA6xBJjvSQHdExwBEfk2kdE6dXAgiYsU1HAJF5MpsWdMh4+/JFRF9cNd R/SccXAo3pdmM+3g+xlGO1BSAyDDVdKtm9YV9ihjBf0IqfUP4XB+xh4x8YofH1X6 8w== -----END CERTIFICATE-----Generated at Fri Aug 14 23:27:34 2026 by rpki-client