$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft File: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json) Hash identifier: NAHqArhfBk4uH4XJY5ThlTvVGDCcdYmsivih2p3YSb0= Subject key identifier: 69:15:B2:74:82:B1:7D:BC:25:7C:2A:5D:41:5F:EC:21:6F:06:F2:AC Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 319A3E4677B39D6589F9067B4399314B0B3AD6C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft Manifest number: A2 Signing time: Fri 10 Jul 2026 12:51:08 +0000 Manifest this update: Fri 10 Jul 2026 12:46:08 +0000 Manifest next update: Sun 12 Jul 2026 04:35:08 +0000 Files and hashes: 1: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: 2mInejKYW45nEuHleHsiTUebQU1Cyn+DwyE9WKI8uXs=) 2: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=) 3: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=) 4: 326131343a373538303a666166313a3a2f34382d3438203d3e20323134333434.roa (hash: LkT0ENe1YUFRxlS5aUhx4sNAMJ0+5HjZvFiPqwyHP/c=) 5: 326131343a373538303a666166323a3a2f34382d3438203d3e20323134333434.roa (hash: 2HKFlGEgh4l30gTTpJSrYvRSVMvgqrDNZ7KrLDKUxyY=) 6: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=) 7: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g=) 8: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9a:3e:46:77:b3:9d:65:89:f9:06:7b:43:99:31:4b:0b:3a:d6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: Jul 10 12:46:08 2026 GMT Not After : Jul 12 04:35:08 2026 GMT Subject: CN=6915B27482B17DBC257C2A5D415FEC216F06F2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:46:83:f9:61:00:db:e6:e0:db:11:1f:fb: aa:4d:47:7d:0f:76:ad:75:d6:2f:32:6f:ba:b0:b0: 1d:39:c9:21:29:6e:b4:88:22:d3:83:b9:50:11:d7: d5:7f:91:59:ee:77:82:76:c0:1a:30:16:5d:26:26: f1:a5:d8:8a:d5:77:01:12:45:b7:60:ef:4b:ef:29: 48:3b:c8:67:6f:ba:b4:7a:8d:52:5e:47:84:db:da: 5b:11:e4:cd:73:bf:9e:43:f9:15:76:f7:b3:b0:b1: 66:34:4e:10:ce:23:92:71:c6:ea:26:3f:1b:cb:a2: ef:b3:61:d4:7e:fa:ed:9f:81:60:ac:93:35:60:6e: 31:6f:ff:3b:03:07:29:66:31:7e:c5:29:5c:0a:bd: 85:fb:fb:d4:a3:39:4a:c5:e1:46:98:4a:5f:d0:a5: 55:2b:64:2b:5f:6f:62:34:b3:00:9a:ba:cd:57:d3: 90:3b:8c:ec:5b:d1:f3:94:32:7d:69:89:dd:ae:49: b0:79:6c:bc:de:eb:f1:38:5f:74:21:57:a1:86:4e: 52:5a:4c:f0:60:6d:b9:c2:3d:cc:11:94:5a:f3:c1: 8e:c7:12:46:d2:d5:7b:57:5b:60:c8:88:39:46:15: d7:e9:58:31:f1:3a:76:aa:93:1a:ee:cc:eb:a5:12: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:15:B2:74:82:B1:7D:BC:25:7C:2A:5D:41:5F:EC:21:6F:06:F2:AC X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:04:4e:b6:8f:eb:b4:c3:91:e1:ee:3a:e2:82:6f:ea:5d:81: 6e:e6:79:a5:65:bd:b1:82:a8:f4:4b:47:ee:01:ac:be:b8:cd: d9:48:61:3b:d7:71:07:ac:31:86:ed:16:5b:a0:78:e1:6e:7c: 5e:f7:dd:b6:ba:da:95:99:51:52:b0:4a:60:da:be:c2:da:7a: 45:76:39:d2:04:e7:a7:02:f2:7e:6e:45:eb:a9:92:6d:36:5d: 2c:16:ec:b4:1e:4e:9c:d6:f3:2d:6b:6e:d4:52:b3:f4:20:bc: af:5b:ae:e9:07:a4:bf:b7:b6:79:5d:13:6d:f9:18:2a:de:f9: a9:ff:e2:cc:f3:1e:ad:7b:fc:77:97:6b:fa:ee:57:d5:27:2c: 15:80:1a:52:f8:de:44:b0:89:e4:7c:84:ce:de:1c:c2:a3:6b: fc:b2:8a:35:b3:a8:d7:be:c4:b3:21:7e:6d:1e:95:bc:d4:fa: 88:aa:f5:a1:a2:b7:01:a6:89:45:b3:9d:3d:4f:0d:5e:5a:c3: c7:41:0e:14:dc:5d:ca:d6:d0:0c:e6:3f:23:09:d7:f3:fa:ca: d2:cf:14:20:52:a7:87:cd:cc:85:b2:2b:22:dc:84:39:a8:ef: 11:2b:44:97:b9:0c:37:30:2f:14:72:ca:5c:9c:d9:28:c0:46: 0f:9d:fb:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMZo+RneznWWJ+QZ7Q5kxSws61sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA3MTAxMjQ2MDhaFw0yNjA3MTIwNDM1MDhaMDMxMTAvBgNV BAMTKDY5MTVCMjc0ODJCMTdEQkMyNTdDMkE1RDQxNUZFQzIxNkYwNkYyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKC0aD+WEA2+bg2xEf+6pNR30P dq111i8yb7qwsB05ySEpbrSIItODuVAR19V/kVnud4J2wBowFl0mJvGl2IrVdwES Rbdg70vvKUg7yGdvurR6jVJeR4Tb2lsR5M1zv55D+RV297OwsWY0ThDOI5Jxxuom PxvLou+zYdR++u2fgWCskzVgbjFv/zsDBylmMX7FKVwKvYX7+9SjOUrF4UaYSl/Q pVUrZCtfb2I0swCaus1X05A7jOxb0fOUMn1pid2uSbB5bLze6/E4X3QhV6GGTlJa TPBgbbnCPcwRlFrzwY7HEkbS1XtXW2DIiDlGFdfpWDHxOnaqkxruzOulEm8nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaRWydIKxfbwlfCpdQV/sIW8G8qwwHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8xLzc3RTREMjNE MEZEQUNFRTI5MzNEOUE2RDMwMzNDREY1RUZDM0VEQTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNBE62 j+u0w5Hh7jrigm/qXYFu5nmlZb2xgqj0S0fuAay+uM3ZSGE713EHrDGG7RZboHjh bnxe9922utqVmVFSsEpg2r7C2npFdjnSBOenAvJ+bkXrqZJtNl0sFuy0Hk6c1vMt a27UUrP0ILyvW67pB6S/t7Z5XRNt+Rgq3vmp/+LM8x6te/x3l2v67lfVJywVgBpS +N5EsInkfITO3hzCo2v8soo1s6jXvsSzIX5tHpW81PqIqvWhorcBpolFs509Tw1e WsPHQQ4U3F3K1tAM5j8jCdfz+srSzxQgUqeHzcyFsisi3IQ5qO8RK0SXuQw3MC8U cspcnNkowEYPnfti -----END CERTIFICATE-----Generated at Fri Jul 10 17:04:31 2026 by rpki-client