$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft File: AD29F7F191997039ACFD9760F915FEE62892E578.mft (raw, json) Hash identifier: mHqekefUUdbmDgNEsHD+Pgvqbbh13nWvOav+kpF5d38= Subject key identifier: 9B:CD:E7:4A:B9:3F:BD:B7:30:BE:EF:A2:A4:45:D6:F4:77:DD:5A:D0 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 3BFFF1EAA9F5D674614D9137394AAE5FB8096C70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft Manifest number: 2B Signing time: Sat 11 Jul 2026 23:20:27 +0000 Manifest this update: Sat 11 Jul 2026 23:15:27 +0000 Manifest next update: Mon 13 Jul 2026 02:32:27 +0000 Files and hashes: 1: 326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa (hash: EglxgVjZeYL21zAN5f1qTpSdvc9u/IUyk5p/E9eciNM=) 2: 326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa (hash: +Bzn0imBvQ3Dm0XfkE2a2wG1dPY04xOf0M1OUTVWvjc=) 3: AD29F7F191997039ACFD9760F915FEE62892E578.crl (hash: PpLX/KiFoF0alZg0TseFNtoO9QcgvJkLLhgn0brbbDw=) 4: 326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa (hash: TspdqNLxsfL6dp4xdPseIhhfwq7xkWofsgu2VL8cf5s=) 5: 326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa (hash: D74S6x+CX7pIkmyrYc8C0iPdqtxDPmFuGT9pYsyXb5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 15:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ff:f1:ea:a9:f5:d6:74:61:4d:91:37:39:4a:ae:5f:b8:09:6c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 11 23:15:27 2026 GMT Not After : Jul 13 02:32:27 2026 GMT Subject: CN=9BCDE74AB93FBDB730BEEFA2A445D6F477DD5AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:36:df:bd:43:98:d4:14:f2:1f:97:91:f2: 07:ab:1f:0c:b2:d3:46:46:b7:6c:a9:bd:14:b6:56: 2d:21:9a:b1:fe:b9:ec:d3:8f:2a:92:25:b4:41:ac: 40:2b:03:bb:27:83:ec:b5:28:dc:00:0f:df:a1:4f: 96:bd:41:90:27:c2:39:56:3a:2f:93:17:7b:58:b9: 60:28:06:0a:97:06:7d:09:db:bb:1a:ff:c9:06:a4: 72:1c:d0:8a:f0:76:51:7c:eb:69:c7:bb:94:2d:0f: fd:7a:f8:39:b8:e1:72:ac:c9:ef:94:f9:8d:fd:61: 66:d0:10:80:d2:3c:e5:75:6f:e4:ee:eb:f3:31:46: dd:ca:2a:d6:5b:20:ef:8a:cc:26:2e:cc:11:ad:21: 40:0a:ea:a8:8b:94:c0:64:9c:1f:92:c8:74:f6:1a: 13:29:a6:81:2f:39:b9:f4:78:7c:d1:11:48:7e:17: 79:78:66:04:7c:f2:a2:a2:74:05:11:75:34:70:7b: 91:5f:20:5e:14:7e:2f:04:d3:ba:d6:9c:ef:fc:84: 22:46:59:26:d0:4f:d4:83:30:5b:20:d9:34:11:ed: 93:22:d6:07:13:a5:e9:fb:65:da:8f:7e:c6:49:cc: 9b:8e:6d:4d:e8:ec:25:63:d0:16:c0:93:8a:8e:2b: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:E7:4A:B9:3F:BD:B7:30:BE:EF:A2:A4:45:D6:F4:77:DD:5A:D0 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:cd:35:67:58:bf:d8:02:5b:21:4b:cc:5d:f1:47:fe:77: db:8c:5c:08:e6:e6:4b:04:00:af:76:bf:8d:f6:de:82:02:a7: 45:1b:76:5f:12:63:80:85:66:c4:76:c0:34:06:2d:21:24:76: 80:fd:ef:df:54:62:36:e8:d5:4a:c2:8f:4d:a0:c2:f2:0d:c4: fe:a0:c3:a2:b3:98:1f:89:e0:dd:68:4f:3b:4e:96:5f:3b:d8: bd:6e:93:08:49:2f:79:04:2b:28:16:fb:03:8a:59:94:ef:28: 6c:1d:af:72:de:ad:0e:1d:04:56:6a:5a:e6:40:43:e3:fa:78: 94:9a:e4:6a:80:e0:2f:49:55:23:12:7a:67:bc:1c:16:a8:5a: 78:5b:9a:6e:bc:4a:ed:23:b8:ec:fb:72:4f:78:0f:ad:f3:b5: 45:71:11:59:53:87:47:40:b3:fc:19:fd:f4:a3:c7:c5:5e:48: 9d:13:fe:c4:89:8d:af:fa:26:1c:9b:14:4e:89:0c:28:44:04: ff:6d:d2:6c:4f:0b:f2:71:99:81:d0:0e:43:3a:71:9a:8f:02: 7e:fb:bb:e4:f5:b5:c0:04:c7:ca:05:86:88:90:8f:07:99:21: 59:23:2e:4f:ed:94:8b:e8:90:61:10:37:1e:7d:97:68:06:7e: 0c:e9:97:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO//x6qn11nRhTZE3OUquX7gJbHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MTEyMzE1MjdaFw0yNjA3MTMwMjMyMjdaMDMxMTAvBgNV BAMTKDlCQ0RFNzRBQjkzRkJEQjczMEJFRUZBMkE0NDVENkY0NzdERDVBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjTbfvUOY1BTyH5eR8gerHwyy 00ZGt2ypvRS2Vi0hmrH+uezTjyqSJbRBrEArA7sng+y1KNwAD9+hT5a9QZAnwjlW Oi+TF3tYuWAoBgqXBn0J27sa/8kGpHIc0IrwdlF862nHu5QtD/16+Dm44XKsye+U +Y39YWbQEIDSPOV1b+Tu6/MxRt3KKtZbIO+KzCYuzBGtIUAK6qiLlMBknB+SyHT2 GhMppoEvObn0eHzREUh+F3l4ZgR88qKidAURdTRwe5FfIF4Ufi8E07rWnO/8hCJG WSbQT9SDMFsg2TQR7ZMi1gcTpen7ZdqPfsZJzJuObU3o7CVj0BbAk4qOKxd7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUm83nSrk/vbcwvu+ipEXW9HfdWtAwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QyNTUwY2FhLWUzOTItNDg0OC05MmZiLWEzZDU4MjhlMzY5NS8xL0FEMjlGN0Yx OTE5OTcwMzlBQ0ZEOTc2MEY5MTVGRUU2Mjg5MkU1NzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqM01 Z1i/2AJbIUvMXfFH/nfbjFwI5uZLBACvdr+N9t6CAqdFG3ZfEmOAhWbEdsA0Bi0h JHaA/e/fVGI26NVKwo9NoMLyDcT+oMOis5gfieDdaE87TpZfO9i9bpMISS95BCso FvsDilmU7yhsHa9y3q0OHQRWalrmQEPj+niUmuRqgOAvSVUjEnpnvBwWqFp4W5pu vErtI7js+3JPeA+t87VFcRFZU4dHQLP8Gf30o8fFXkidE/7EiY2v+iYcmxROiQwo RAT/bdJsTwvycZmB0A5DOnGajwJ++7vk9bXABMfKBYaIkI8HmSFZIy5P7ZSL6JBh EDcefZdoBn4M6Zd1 -----END CERTIFICATE-----Generated at Sun Jul 12 06:53:42 2026 by rpki-client