$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: yNoCtRh9H0vCRqC2/UB40cv4z3uIzR294koifDKLVyo= Subject key identifier: 70:C5:E6:80:4B:BF:37:75:E7:37:87:E1:AD:6C:43:0A:E0:BA:5E:1A Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 0168AC170D0B54C55A5437E9A490FBB6A7615889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 061B Signing time: Sun 26 Jul 2026 19:07:56 +0000 Manifest this update: Sun 26 Jul 2026 19:02:56 +0000 Manifest next update: Mon 27 Jul 2026 19:08:56 +0000 Files and hashes: 1: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 2: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 3: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 4: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 5: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 6: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 7: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 8: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 10: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 11: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 12: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: sYv99QC5bOcwhTv/LDtwNg5VtMfK/F6FATPWD3mRkXE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 19:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:68:ac:17:0d:0b:54:c5:5a:54:37:e9:a4:90:fb:b6:a7:61:58:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jul 26 19:02:56 2026 GMT Not After : Jul 27 19:08:56 2026 GMT Subject: CN=70C5E6804BBF3775E73787E1AD6C430AE0BA5E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:b9:25:04:d6:c9:87:3e:fb:aa:98:71:ea: c6:80:5f:53:3c:ed:0c:03:0c:d1:db:21:f4:dc:26: 62:df:cd:a9:5e:d5:08:b6:05:5a:b7:ef:e6:73:00: 68:d8:82:1d:e1:d8:de:7f:88:02:b7:5f:bf:29:86: 3b:5a:ee:a8:40:11:5c:ec:67:c4:5b:f9:df:73:4c: 98:43:16:22:d5:c2:07:ad:9e:43:41:29:d2:a9:e9: 32:72:ea:a1:40:b0:fc:a0:66:76:7a:dd:c8:6f:0d: 32:5c:15:6a:e2:48:c5:c0:7a:28:9e:05:13:a3:ef: c6:b7:18:a3:db:5e:00:8d:86:d8:cc:0b:de:04:e2: df:02:15:49:d2:28:70:ec:92:01:b6:f8:cb:6e:91: f4:d5:ce:f5:1c:f6:f5:c3:c5:f6:aa:74:cf:fd:4c: 99:2e:d8:80:41:30:46:ee:3e:34:9e:fc:0a:d9:77: 37:40:3c:77:29:ff:18:3d:bf:79:7c:b1:82:88:d6: 38:f6:f1:bb:7e:b4:9d:e6:a7:62:ac:0b:88:a9:92: 6a:28:4f:da:9b:e1:14:e7:0e:96:05:29:f0:62:3b: 3e:c7:e5:1f:64:3b:90:74:d4:97:19:dc:a1:7c:3c: 8f:f2:b4:96:ca:2f:08:4b:56:a7:eb:cf:13:ff:60: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:E6:80:4B:BF:37:75:E7:37:87:E1:AD:6C:43:0A:E0:BA:5E:1A X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:33:6b:1e:ef:d3:e0:19:12:00:7b:b3:4f:6f:a5:2f:2d: 8f:ab:77:f2:ca:42:17:40:21:6f:3e:49:bf:00:23:71:fd:92: e5:e8:33:9d:15:e6:ca:34:1e:42:0f:d4:af:68:23:42:5d:96: c0:19:b1:e6:22:ef:75:7d:1e:fd:a0:5c:f8:32:1c:df:12:b6: 73:bf:20:44:a6:d7:e3:c1:1b:b7:cd:46:b3:2c:61:76:05:c4: 93:c5:de:5c:c8:f6:35:57:ba:42:65:64:46:57:10:da:13:5f: 36:09:97:fa:95:19:d0:84:f5:17:7f:de:ea:35:df:3d:5d:6e: 57:e2:f0:1b:e0:61:9f:45:06:2d:5e:16:23:cb:45:e2:30:c5: c6:69:b9:8f:da:d5:3e:5c:78:28:8c:13:5a:d9:6d:e5:40:19: 08:12:a4:98:16:c4:bb:fd:a4:8f:f8:25:e9:8a:55:07:8d:10: 7b:4b:2c:ef:67:36:9e:0e:13:86:48:84:5f:8a:30:37:fd:d3: 6a:3a:ff:b0:9b:35:b0:8b:ec:0f:c7:16:e6:51:03:7d:80:f2: 50:30:55:bc:16:bc:19:cd:c7:44:3c:e9:0f:53:9b:48:fa:b6: 78:c6:c7:be:8e:e6:fe:49:f6:68:77:59:a1:dd:30:43:28:23: 6a:89:ef:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAWisFw0LVMVaVDfppJD7tqdhWIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjA3MjYxOTAyNTZaFw0yNjA3MjcxOTA4NTZaMDMxMTAvBgNV BAMTKDcwQzVFNjgwNEJCRjM3NzVFNzM3ODdFMUFENkM0MzBBRTBCQTVFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+bklBNbJhz77qphx6saAX1M8 7QwDDNHbIfTcJmLfzale1Qi2BVq37+ZzAGjYgh3h2N5/iAK3X78phjta7qhAEVzs Z8Rb+d9zTJhDFiLVwgetnkNBKdKp6TJy6qFAsPygZnZ63chvDTJcFWriSMXAeiie BROj78a3GKPbXgCNhtjMC94E4t8CFUnSKHDskgG2+MtukfTVzvUc9vXDxfaqdM/9 TJku2IBBMEbuPjSe/ArZdzdAPHcp/xg9v3l8sYKI1jj28bt+tJ3mp2KsC4ipkmoo T9qb4RTnDpYFKfBiOz7H5R9kO5B01JcZ3KF8PI/ytJbKLwhLVqfrzxP/YAqZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcMXmgEu/N3XnN4fhrWxDCuC6XhowHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABkzax7v0+AZEgB7s09v pS8tj6t38spCF0Ahbz5JvwAjcf2S5egznRXmyjQeQg/Ur2gjQl2WwBmx5iLvdX0e /aBc+DIc3xK2c78gRKbX48Ebt81GsyxhdgXEk8XeXMj2NVe6QmVkRlcQ2hNfNgmX +pUZ0IT1F3/e6jXfPV1uV+LwG+Bhn0UGLV4WI8tF4jDFxmm5j9rVPlx4KIwTWtlt 5UAZCBKkmBbEu/2kj/gl6YpVB40Qe0ss72c2ng4ThkiEX4owN/3Tajr/sJs1sIvs D8cW5lEDfYDyUDBVvBa8Gc3HRDzpD1ObSPq2eMbHvo7m/kn2aHdZod0wQygjaonv Cw== -----END CERTIFICATE-----Generated at Mon Jul 27 02:34:17 2026 by rpki-client