$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: R1TCt+pd57GNbR0CDB1XKTGQ8RG0IzXw//QBNeQkCN0= Subject key identifier: B6:C4:64:44:FA:AC:D6:78:34:36:91:56:8F:61:38:B0:87:3E:97:16 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 446ADCDCED92428E8C5F6C333C23D8ECF0A8EBF5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 85 Signing time: Tue 21 Jul 2026 09:21:14 +0000 Manifest this update: Tue 21 Jul 2026 09:16:14 +0000 Manifest next update: Wed 22 Jul 2026 12:37:14 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: RabAvrtmSQYRDKFIMXRliwwJ6DFrfXt9BEbKa5yvBp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6a:dc:dc:ed:92:42:8e:8c:5f:6c:33:3c:23:d8:ec:f0:a8:eb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Jul 21 09:16:14 2026 GMT Not After : Jul 22 12:37:14 2026 GMT Subject: CN=B6C46444FAACD678343691568F6138B0873E9716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:f0:bc:f7:48:c0:09:b1:7b:d9:35:43:f2: bd:1e:3b:d6:05:87:6f:27:22:6c:b3:79:79:2a:89: d0:c8:51:52:c5:28:5b:81:57:0b:98:d8:9c:ce:a0: 80:da:14:71:ce:da:44:17:ca:5d:8a:9b:c0:7e:a1: 0c:58:f6:bf:0b:f7:6f:86:1b:de:db:6f:ed:ca:66: f3:c2:8a:14:59:7e:4d:f9:e6:95:b4:d1:4c:9b:72: 64:d8:81:dc:5a:b7:c0:83:77:3c:40:6f:1f:88:2e: d5:15:98:6b:ed:4f:b5:4a:94:27:98:63:d3:ce:0a: 1e:16:e7:8d:57:b2:a4:57:47:ff:6a:1d:a2:5e:61: d3:5f:58:01:cc:21:e0:0c:be:b7:3b:9f:43:18:2e: 69:99:b6:8a:ba:6e:df:84:36:26:75:ec:c1:7b:68: 54:38:61:86:98:22:5f:1f:0f:b2:ae:e3:8d:33:43: 92:9e:f7:81:96:a0:21:cf:56:21:b3:56:1b:48:df: d6:ed:40:0b:1b:c3:54:6c:0d:35:12:b3:4f:9e:0a: f5:7d:e5:1d:5a:88:2f:ee:d6:15:58:75:6d:4f:eb: 1f:0e:c8:64:f9:07:42:32:59:f9:db:b4:86:ee:0a: c1:ac:e1:44:8a:2b:d4:9a:2e:75:58:4d:24:8a:48: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C4:64:44:FA:AC:D6:78:34:36:91:56:8F:61:38:B0:87:3E:97:16 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:74:01:47:ef:6c:63:69:70:8c:58:d5:50:1c:dd:08:56:a3: bb:74:b2:47:b8:6a:80:ec:68:a6:d6:73:5c:e7:33:24:29:e5: e6:56:f8:61:1c:c8:63:d4:95:05:91:5a:72:f7:49:fb:53:29: c4:68:59:c4:02:a1:fd:65:53:8d:c5:7b:7e:eb:b4:55:6e:f9: 68:ec:8c:3e:f6:71:1f:28:d7:c5:8b:7e:fd:33:2b:7e:c3:86: 7c:5c:e2:29:5f:39:d3:05:4b:bf:bf:76:c2:78:cf:9c:3b:99: 00:73:b8:4b:9b:65:9a:6e:e7:1b:29:3c:da:37:4d:b5:30:d3: 70:3c:72:2c:89:34:3c:85:c4:48:e1:91:cd:ba:17:e5:82:7e: 1c:ba:49:2d:41:af:11:ea:86:7f:25:fe:3d:1e:21:89:ca:02: ed:de:91:26:ac:13:f1:50:9c:be:80:d2:5d:51:36:5d:dd:64: ae:57:9e:c8:e2:36:97:0c:ab:85:2e:bf:ee:bc:e1:5d:84:58: 18:06:33:b1:80:92:08:ff:79:ba:7c:aa:37:d6:85:2d:06:f5: 2f:0a:66:83:ad:17:5a:51:95:1e:21:10:f3:18:4b:54:0d:2c: 44:79:e5:8f:d0:b2:89:39:0b:7e:26:2e:53:d4:23:ee:08:83: 93:72:fb:ed -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURGrc3O2SQo6MX2wzPCPY7PCo6/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA3MjEwOTE2MTRaFw0yNjA3MjIxMjM3MTRaMDMxMTAvBgNV BAMTKEI2QzQ2NDQ0RkFBQ0Q2NzgzNDM2OTE1NjhGNjEzOEIwODczRTk3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7T/C890jACbF72TVD8r0eO9YF h28nImyzeXkqidDIUVLFKFuBVwuY2JzOoIDaFHHO2kQXyl2Km8B+oQxY9r8L92+G G97bb+3KZvPCihRZfk355pW00UybcmTYgdxat8CDdzxAbx+ILtUVmGvtT7VKlCeY Y9POCh4W541XsqRXR/9qHaJeYdNfWAHMIeAMvrc7n0MYLmmZtoq6bt+ENiZ17MF7 aFQ4YYaYIl8fD7Ku440zQ5Ke94GWoCHPViGzVhtI39btQAsbw1RsDTUSs0+eCvV9 5R1aiC/u1hVYdW1P6x8OyGT5B0IyWfnbtIbuCsGs4USKK9SaLnVYTSSKSLcfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtsRkRPqs1ng0NpFWj2E4sIc+lxYwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrdAFH 72xjaXCMWNVQHN0IVqO7dLJHuGqA7Gim1nNc5zMkKeXmVvhhHMhj1JUFkVpy90n7 UynEaFnEAqH9ZVONxXt+67RVbvlo7Iw+9nEfKNfFi379Myt+w4Z8XOIpXznTBUu/ v3bCeM+cO5kAc7hLm2WabucbKTzaN021MNNwPHIsiTQ8hcRI4ZHNuhflgn4cukkt Qa8R6oZ/Jf49HiGJygLt3pEmrBPxUJy+gNJdUTZd3WSuV57I4jaXDKuFLr/uvOFd hFgYBjOxgJII/3m6fKo31oUtBvUvCmaDrRdaUZUeIRDzGEtUDSxEeeWP0LKJOQt+ Ji5T1CPuCIOTcvvt -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:27 2026 by rpki-client