$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json) Hash identifier: 0aDlKiCE/vl0AAGS5z3iYyX8oPzJbais4V8wl+ZZWdM= Subject key identifier: 7B:D0:CA:53:0A:57:B8:DF:7D:7B:8C:9F:B3:1E:C6:8F:E0:97:D2:EA Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Certificate serial: 2BAB1F3B422AEEAB6E7D160E028E5592C3DFC695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft Manifest number: 02E2 Signing time: Fri 03 Jul 2026 09:15:00 +0000 Manifest this update: Fri 03 Jul 2026 09:10:00 +0000 Manifest next update: Sat 04 Jul 2026 10:52:00 +0000 Files and hashes: 1: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=) 2: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: t26ANIkWc8ShQwh4xQBOpL+5KUzan4lneEIsW30CI/Y=) 3: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Jul 2026 10:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ab:1f:3b:42:2a:ee:ab:6e:7d:16:0e:02:8e:55:92:c3:df:c6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9 Validity Not Before: Jul 3 09:10:00 2026 GMT Not After : Jul 4 10:52:00 2026 GMT Subject: CN=7BD0CA530A57B8DF7D7B8C9FB31EC68FE097D2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:92:8a:73:cf:06:0d:22:78:eb:80:11:4f: 08:30:f5:c5:c9:77:bf:e5:f7:47:08:82:cb:82:96: 8e:e0:91:90:c8:78:e4:ae:3a:3f:36:28:5b:87:91: 2f:1e:af:53:9e:a5:8c:94:43:93:fe:dc:a8:4e:4e: 36:de:12:ab:d5:f1:2a:e9:25:73:f5:09:c8:8e:c1: 71:1c:96:b4:c3:cf:f1:c5:59:7d:d1:37:d0:4b:c9: bf:99:7f:82:0a:0d:46:b5:d7:54:8d:02:70:3a:37: 8d:b3:ba:bc:fd:e8:61:28:3e:04:0c:a6:f8:d1:ff: 4d:63:56:3c:3e:27:6c:00:ff:0e:f0:e9:d2:99:27: 95:3b:cc:f1:4a:13:00:a0:05:c8:e7:e2:74:ef:1c: 97:7f:03:09:c8:7a:76:72:df:cf:ea:bc:76:80:c3: 63:99:c7:10:09:6f:fe:1b:5a:f2:ad:4b:e7:30:b5: a9:da:72:3b:ff:fa:f2:61:15:2e:68:1a:3a:8c:98: 1c:83:8b:95:00:19:db:5c:b3:f8:c3:25:4c:08:ea: 60:a3:87:62:46:8f:f0:47:bf:3b:03:e2:b9:40:44: ef:ef:4a:77:44:dc:b6:52:a4:2a:01:9e:4a:21:32: ed:18:da:a4:0c:bb:e1:ce:62:9c:c8:9a:1c:bb:08: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:CA:53:0A:57:B8:DF:7D:7B:8C:9F:B3:1E:C6:8F:E0:97:D2:EA X509v3 Authority Key Identifier: keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:14:94:3e:ef:e5:1b:8e:68:ec:df:4d:58:d4:27:24:10:d5: 64:44:f1:62:d0:09:93:cb:8c:36:a8:38:dc:2a:44:cf:33:47: e9:33:f7:49:5d:74:0f:5a:db:fa:9f:2b:45:9a:97:d7:7e:85: 70:64:20:4b:fd:6e:3e:01:c5:5f:b0:c4:d7:15:50:a6:3e:2c: 96:45:c6:74:95:af:bc:5c:d5:76:9f:df:c7:6e:a4:e7:8d:d0: fb:31:84:c5:f3:be:67:58:48:53:46:68:7a:29:6e:71:85:3d: fa:1f:23:2e:9f:65:cf:84:f7:f3:fc:f5:c2:aa:a3:a1:c1:b4: 1c:05:ee:81:bf:77:a5:19:7d:c7:a9:d3:83:28:fa:6f:e0:23: 4c:f9:79:c4:13:28:cb:d7:d9:12:34:d1:0d:4e:18:c6:71:77: 55:5c:02:fa:de:22:96:41:f6:91:f4:c1:05:7a:3e:8c:01:35: e5:8f:bd:81:84:14:0b:28:95:f0:ea:57:9e:87:f3:e3:44:93: c4:1d:e5:44:60:66:99:42:20:1d:6e:17:43:34:8a:7c:87:c6: 45:7c:21:e6:c1:1b:87:04:34:6e:32:eb:c9:b0:59:66:85:5d: 16:cd:db:2c:f1:a3:a6:84:6f:a0:dd:56:86:b2:05:c8:bb:d9: ad:e2:2d:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK6sfO0Iq7qtufRYOAo5VksPfxpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBhOTdlNDNjZmRjMTViMDJhMzE0MWYwYWQwOTdiY2Qw NzljMmVkOTAeFw0yNjA3MDMwOTEwMDBaFw0yNjA3MDQxMDUyMDBaMDMxMTAvBgNV BAMTKDdCRDBDQTUzMEE1N0I4REY3RDdCOEM5RkIzMUVDNjhGRTA5N0QyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqJKKc88GDSJ464ARTwgw9cXJ d7/l90cIgsuClo7gkZDIeOSuOj82KFuHkS8er1OepYyUQ5P+3KhOTjbeEqvV8Srp JXP1CciOwXEclrTDz/HFWX3RN9BLyb+Zf4IKDUa111SNAnA6N42zurz96GEoPgQM pvjR/01jVjw+J2wA/w7w6dKZJ5U7zPFKEwCgBcjn4nTvHJd/AwnIenZy38/qvHaA w2OZxxAJb/4bWvKtS+cwtanacjv/+vJhFS5oGjqMmByDi5UAGdtcs/jDJUwI6mCj h2JGj/BHvzsD4rlARO/vSndE3LZSpCoBnkohMu0Y2qQMu+HOYpzImhy7CLdRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUe9DKUwpXuN99e4yfsx7Gj+CX0uowHwYDVR0j BBgwFoAUoKl+Q8/cFbAqMUHwrQl7zQecLtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzEvQTBBOTdFNDNDRkRDMTVCMDJBMzE0MUYwQUQwOTdCQ0QwNzlDMkVEOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29LbC1ROF9jRmJBcU1VSHdyUWw3elFl Y0x0ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMS9BMEE5N0U0M0NGREMxNUIwMkEz MTQxRjBBRDA5N0JDRDA3OUMyRUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshSUPu/lG45o7N9NWNQn JBDVZETxYtAJk8uMNqg43CpEzzNH6TP3SV10D1rb+p8rRZqX136FcGQgS/1uPgHF X7DE1xVQpj4slkXGdJWvvFzVdp/fx26k543Q+zGExfO+Z1hIU0ZoeilucYU9+h8j Lp9lz4T38/z1wqqjocG0HAXugb93pRl9x6nTgyj6b+AjTPl5xBMoy9fZEjTRDU4Y xnF3VVwC+t4ilkH2kfTBBXo+jAE15Y+9gYQUCyiV8OpXnofz40STxB3lRGBmmUIg HW4XQzSKfIfGRXwh5sEbhwQ0bjLrybBZZoVdFs3bLPGjpoRvoN1WhrIFyLvZreIt mA== -----END CERTIFICATE-----Generated at Fri Jul 3 21:45:24 2026 by rpki-client