$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft (raw, json) Hash identifier: 65yEFEa4zhLqxfnVThcl9OYyiAn/3T+nmEU+kNYVuiw= Subject key identifier: 2E:DB:4E:EC:ED:7E:E1:58:C7:81:75:95:C4:0C:DF:93:06:88:1C:C4 Authority key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 Certificate issuer: /CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Certificate serial: 3F7D35D282152C5687C1597C42596F1739F05BF8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft Manifest number: A9 Signing time: Tue 21 Jul 2026 16:07:14 +0000 Manifest this update: Tue 21 Jul 2026 16:02:14 +0000 Manifest next update: Thu 23 Jul 2026 04:40:14 +0000 Files and hashes: 1: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl (hash: hzspwCLQ5hBpjxWMd9EHKYjNrLv3WN4oHLKnM9XUFoo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7d:35:d2:82:15:2c:56:87:c1:59:7c:42:59:6f:17:39:f0:5b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8 Validity Not Before: Jul 21 16:02:14 2026 GMT Not After : Jul 23 04:40:14 2026 GMT Subject: CN=2EDB4EECED7EE158C7817595C40CDF9306881CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:df:87:77:31:22:93:8b:97:99:5b:ef:1a: 55:0b:74:40:ff:d8:3c:c7:2f:0a:41:3c:15:71:d7: d7:42:c7:ae:b0:b9:20:b9:e6:16:f8:a7:83:6b:0a: ce:4e:4a:4c:e5:e5:27:65:a6:63:e0:28:8e:dd:cc: 19:1f:25:b2:9a:70:32:eb:6d:01:bc:b5:af:66:04: fb:60:f7:b2:d7:ee:95:a2:68:f9:12:ae:7f:54:b1: 82:24:4a:4e:88:19:39:a3:cd:3b:a5:88:49:6f:2f: 59:a2:6a:7c:f7:e3:0e:94:24:5d:67:a5:51:8a:e8: 4c:ab:42:4d:61:1e:0e:3f:dd:d3:1a:9a:ad:eb:c4: 3a:fe:b2:76:8f:e8:92:85:d5:77:4b:27:ac:98:24: 88:a4:99:bb:2d:07:47:66:ba:45:c6:bf:09:7e:dd: e9:da:71:8e:4b:4b:2f:ee:5a:43:38:22:d1:85:f8: 4a:7b:57:ef:0a:1f:d4:13:72:8f:fb:94:9a:42:90: db:38:77:37:ee:4a:74:29:75:a2:06:76:fd:0a:83: fe:38:b5:5a:40:0f:fc:23:50:ed:87:81:10:9a:3b: c8:22:b6:98:72:66:44:72:79:c5:62:ff:27:37:5d: 9a:f3:ef:37:cf:33:2d:ff:6a:ca:4b:59:64:6e:15: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:4E:EC:ED:7E:E1:58:C7:81:75:95:C4:0C:DF:93:06:88:1C:C4 X509v3 Authority Key Identifier: keyid:10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b3:5c:83:5d:af:88:6d:93:5a:c9:bf:37:47:51:58:d3:3e: 5a:f2:e0:ac:48:04:17:9a:d9:d8:b0:4b:b6:71:06:ba:b7:25: 18:49:f8:9a:f1:34:7e:51:40:62:e5:2e:b5:4d:4a:88:18:09: 69:18:96:52:0d:17:29:19:a6:fd:da:25:de:f0:5b:72:af:df: e9:d8:44:49:f1:06:99:a7:4d:18:f2:00:d2:b1:fa:9e:d7:b3: 2a:a2:eb:be:bb:21:ff:3c:fe:42:da:2b:c8:09:b1:36:d9:84: 35:72:91:04:df:0c:c5:74:f1:91:c5:9a:c0:b7:d3:19:d8:5f: b9:ba:55:b9:c6:98:23:30:7e:f4:53:f2:ea:f4:55:db:7b:bc: b9:6e:70:e2:98:7a:2c:91:d1:55:e8:37:ea:4b:5e:1a:b5:f4: 2c:75:d5:53:77:08:cc:70:04:70:3f:40:bf:3d:90:e7:d4:45: ad:f0:6f:11:17:95:a7:e6:91:d6:63:3e:cd:fc:bc:87:44:27: da:d0:94:fe:a2:fd:d7:51:73:b3:61:ee:5a:fe:04:a5:86:b2: 4c:61:fe:c9:7f:89:b4:8f:72:dc:55:46:2a:13:9e:ea:37:01: 42:dd:8d:bf:54:4e:f5:91:44:6b:5e:bc:87:2b:9c:7b:11:46: cc:d5:72:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP3010oIVLFaHwVl8QllvFznwW/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5 NUUyNTNDODAeFw0yNjA3MjExNjAyMTRaFw0yNjA3MjMwNDQwMTRaMDMxMTAvBgNV BAMTKDJFREI0RUVDRUQ3RUUxNThDNzgxNzU5NUM0MENERjkzMDY4ODFDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRN+HdzEik4uXmVvvGlULdED/ 2DzHLwpBPBVx19dCx66wuSC55hb4p4NrCs5OSkzl5SdlpmPgKI7dzBkfJbKacDLr bQG8ta9mBPtg97LX7pWiaPkSrn9UsYIkSk6IGTmjzTuliElvL1mianz34w6UJF1n pVGK6EyrQk1hHg4/3dMamq3rxDr+snaP6JKF1XdLJ6yYJIikmbstB0dmukXGvwl+ 3enacY5LSy/uWkM4ItGF+Ep7V+8KH9QTco/7lJpCkNs4dzfuSnQpdaIGdv0Kg/44 tVpAD/wjUO2HgRCaO8gitphyZkRyecVi/yc3XZrz7zfPMy3/aspLWWRuFeyHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULttO7O1+4VjHgXWVxAzfkwaIHMQwHwYDVR0j BBgwFoAUEMpiNc+y9MW9ZAsuLhGe+5XiU8gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzMvMTBDQTYyMzVDRkIyRjRDNUJENjQwQjJFMkUxMTlFRkI5NUUyNTNDOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xMENBNjIzNUNGQjJGNEM1QkQ2NDBCMkUy RTExOUVGQjk1RTI1M0M4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8zLzEwQ0E2MjM1 Q0ZCMkY0QzVCRDY0MEIyRTJFMTE5RUZCOTVFMjUzQzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYs1yD Xa+IbZNayb83R1FY0z5a8uCsSAQXmtnYsEu2cQa6tyUYSfia8TR+UUBi5S61TUqI GAlpGJZSDRcpGab92iXe8Ftyr9/p2ERJ8QaZp00Y8gDSsfqe17Mqouu+uyH/PP5C 2ivICbE22YQ1cpEE3wzFdPGRxZrAt9MZ2F+5ulW5xpgjMH70U/Lq9FXbe7y5bnDi mHoskdFV6DfqS14atfQsddVTdwjMcARwP0C/PZDn1EWt8G8RF5Wn5pHWYz7N/LyH RCfa0JT+ov3XUXOzYe5a/gSlhrJMYf7Jf4m0j3LcVUYqE57qNwFC3Y2/VE71kURr XryHK5x7EUbM1XLz -----END CERTIFICATE-----Generated at Tue Jul 21 17:27:00 2026 by rpki-client