$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: nhAMj6stw4XwJBYVP5fHlm1GS1gPCzQJWZwcTcd+SJ0= Subject key identifier: A8:66:A4:F6:97:E1:47:16:6A:4B:33:8B:7C:ED:6F:3D:3A:F4:5F:72 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 79D4671A2C9988BA991BC5E2105FF07963E46578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0714 Signing time: Tue 11 Aug 2026 21:12:08 +0000 Manifest this update: Tue 11 Aug 2026 21:07:08 +0000 Manifest next update: Wed 12 Aug 2026 23:19:08 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: cOJbxIVNEiaKsACdPzaMrx53gOeXlRywfACNpBB0qY0=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Aug 2026 23:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d4:67:1a:2c:99:88:ba:99:1b:c5:e2:10:5f:f0:79:63:e4:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Aug 11 21:07:08 2026 GMT Not After : Aug 12 23:19:08 2026 GMT Subject: CN=A866A4F697E147166A4B338B7CED6F3D3AF45F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:03:ca:b6:d9:2a:12:ca:b8:06:4d:13:d0: 12:35:2e:0d:f5:89:db:74:83:f0:ca:d4:2d:aa:45: 3f:c5:b9:e7:58:3b:80:ab:62:f8:cf:fc:ab:b2:69: a1:13:a5:c6:b9:71:49:23:39:e5:ab:78:6d:8e:d0: 5e:7b:87:98:b7:5e:ad:7d:a2:8a:8f:b7:bc:eb:bc: 1f:39:39:bc:3f:3a:56:77:37:19:f9:da:89:3d:77: e9:ae:e3:ed:21:4d:57:22:fc:83:d9:30:c7:09:c9: 0e:de:17:67:50:8c:a4:f3:83:bd:e8:32:1f:71:b2: 95:2d:e0:ae:57:9a:ec:16:f7:28:09:23:19:b4:54: 81:fd:f6:36:36:d6:f6:94:11:b4:39:25:4b:0a:13: af:1e:e9:57:81:d1:6c:63:57:03:93:73:1f:8e:01: 93:f9:46:c2:69:45:3b:1f:2c:03:35:2b:72:c7:e8: 6a:5e:44:89:f6:d2:e7:ad:44:09:b1:89:2e:6b:f1: 00:78:d4:2a:39:f7:23:05:36:f3:e6:82:71:78:ab: 4a:11:d4:71:5f:96:d8:e4:17:4c:71:1c:42:1a:68: ab:31:be:3e:f3:aa:ea:55:a9:5f:1f:7d:6b:ac:5e: 5c:75:d6:c3:11:93:74:8d:bc:5a:24:0b:9e:22:20: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:A4:F6:97:E1:47:16:6A:4B:33:8B:7C:ED:6F:3D:3A:F4:5F:72 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:42:1b:16:e5:59:ae:20:66:34:0e:98:0f:f4:e1:d2:2f: 51:4b:d4:de:de:85:fa:f9:a3:e0:67:f9:7d:f2:7d:a8:58:bd: 4b:fe:33:0e:c4:7e:af:7b:9c:f2:9c:36:24:75:7a:8d:1a:f0: a4:b0:09:fc:24:db:6b:ad:c2:be:4c:29:64:a1:98:73:2a:87: 74:1a:70:d1:b9:f9:0c:a7:cb:8b:d0:1c:11:32:8a:68:e9:2d: 51:db:f4:38:e9:f6:fc:4a:e8:98:ad:33:f6:ac:65:ba:58:46: d8:05:84:23:e5:91:6d:31:2e:9e:0a:35:8f:dd:d7:0c:29:2b: 92:ba:8e:ec:00:fb:56:01:87:d1:ad:67:d2:5a:85:a3:78:3a: 14:26:b1:ee:e9:be:0f:f8:d4:d8:ae:b1:ad:20:3e:ac:7d:77: 03:c6:bc:98:d7:ec:90:25:b4:c2:bf:2c:c5:e1:0f:f0:77:c1: 46:d3:76:11:20:93:40:39:32:f9:3c:1f:e6:43:85:4e:12:bc: 47:01:94:2a:5b:72:54:21:4b:3f:78:d7:24:41:06:ae:b4:98: 71:8a:e7:b8:27:54:68:0d:f5:9a:dd:07:0a:0d:2e:c1:25:05: b4:f3:4f:a6:24:45:45:2f:01:91:5f:7a:f5:ef:a5:53:03:b2: 33:36:1c:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUedRnGiyZiLqZG8XiEF/weWPkZXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA4MTEyMTA3MDhaFw0yNjA4MTIyMzE5MDhaMDMxMTAvBgNV BAMTKEE4NjZBNEY2OTdFMTQ3MTY2QTRCMzM4QjdDRUQ2RjNEM0FGNDVGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZwPKttkqEsq4Bk0T0BI1Lg31 idt0g/DK1C2qRT/FuedYO4CrYvjP/KuyaaETpca5cUkjOeWreG2O0F57h5i3Xq19 ooqPt7zrvB85Obw/OlZ3Nxn52ok9d+mu4+0hTVci/IPZMMcJyQ7eF2dQjKTzg73o Mh9xspUt4K5XmuwW9ygJIxm0VIH99jY21vaUEbQ5JUsKE68e6VeB0WxjVwOTcx+O AZP5RsJpRTsfLAM1K3LH6GpeRIn20uetRAmxiS5r8QB41Co59yMFNvPmgnF4q0oR 1HFfltjkF0xxHEIaaKsxvj7zqupVqV8ffWusXlx11sMRk3SNvFokC54iIAPVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqGak9pfhRxZqSzOLfO1vPTr0X3IwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpZCGxblWa4gZjQOmA/0 4dIvUUvU3t6F+vmj4Gf5ffJ9qFi9S/4zDsR+r3uc8pw2JHV6jRrwpLAJ/CTba63C vkwpZKGYcyqHdBpw0bn5DKfLi9AcETKKaOktUdv0OOn2/EromK0z9qxlulhG2AWE I+WRbTEungo1j93XDCkrkrqO7AD7VgGH0a1n0lqFo3g6FCax7um+D/jU2K6xrSA+ rH13A8a8mNfskCW0wr8sxeEP8HfBRtN2ESCTQDky+Twf5kOFThK8RwGUKltyVCFL P3jXJEEGrrSYcYrnuCdUaA31mt0HCg0uwSUFtPNPpiRFRS8BkV969e+lUwOyMzYc qg== -----END CERTIFICATE-----Generated at Wed Aug 12 10:15:18 2026 by rpki-client