$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: 6zneZVrsAxCogWSYZmGZIVKCeG4+Y3B1qsSAhtDXU3w= Subject key identifier: 12:06:66:21:FA:5E:65:17:7C:8F:47:2C:A2:2C:18:DA:A0:8A:D1:82 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 338C46CE3A62346416E80212D5AAD7605042DE47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 05F3 Signing time: Thu 13 Aug 2026 19:29:38 +0000 Manifest this update: Thu 13 Aug 2026 19:24:38 +0000 Manifest next update: Fri 14 Aug 2026 20:26:38 +0000 Files and hashes: 1: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 2: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 3: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 4: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 5: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 6: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 7: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 8: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 9: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 10: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 11: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 12: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 13: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 14: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 15: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: PdmE9FdYjJtj454zjwp3MKX6b1n3QdcF99uH8O8OHJw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8c:46:ce:3a:62:34:64:16:e8:02:12:d5:aa:d7:60:50:42:de:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Aug 13 19:24:38 2026 GMT Not After : Aug 14 20:26:38 2026 GMT Subject: CN=12066621FA5E65177C8F472CA22C18DAA08AD182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:cb:f2:c9:d7:24:68:09:91:50:65:e5:ed: b3:ab:24:d3:fd:f3:e4:64:66:4c:8f:7b:45:39:c9: fa:27:ef:bc:c3:1e:6c:01:78:27:7a:c3:c1:32:d4: f9:27:c5:a2:e3:7e:3f:e0:d1:5e:9f:35:fb:17:98: ca:35:23:fe:72:c2:d7:f0:4e:ca:e6:3e:f6:88:5e: c7:14:35:d5:b1:ec:83:d7:53:44:73:c5:9d:3a:10: 63:49:3d:83:48:b5:7f:73:8d:60:bb:26:21:b9:dc: 1c:70:8e:bb:38:7c:e0:d4:68:b4:92:27:b8:f5:6c: 2e:46:04:dc:c0:97:db:39:77:30:e6:1a:7d:62:d4: e2:ac:bf:ae:57:f9:11:d4:1b:80:92:00:15:98:15: 44:dd:e9:a7:fd:b5:1a:02:e1:40:0f:ba:69:b7:7f: 7b:d0:26:16:06:79:eb:12:95:22:ad:3e:fa:64:16: 5f:26:bf:95:8e:e8:74:48:9e:a5:c6:11:36:a7:e6: 01:d2:09:9a:bd:31:cf:92:d0:fd:e4:c0:42:48:d2: 9c:ee:1d:c4:3a:3e:5c:e2:91:7e:34:3f:05:50:4b: 5c:8f:7a:dd:a5:93:80:ce:4a:5f:59:b6:b9:84:03: 6a:93:d8:63:fc:53:25:72:0c:5a:5a:28:b1:fc:56: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:06:66:21:FA:5E:65:17:7C:8F:47:2C:A2:2C:18:DA:A0:8A:D1:82 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ae:fc:c8:0f:dc:0f:33:c9:56:d0:c5:19:c7:f2:49:66:90: 27:39:e4:03:bb:e0:ee:9b:db:ce:84:29:ea:02:ac:5b:c4:6b: 65:e7:74:49:a2:d3:fb:9a:a6:5e:44:16:13:af:c8:53:94:78: ac:a1:b9:23:f4:b7:6f:d4:a8:e6:63:97:fb:06:09:26:71:26: ff:97:fc:6b:58:2d:4a:c0:55:41:bf:7e:a0:52:4d:0f:94:d2: 8c:24:65:e8:0f:ed:b1:3e:60:02:9d:be:b6:87:01:09:a5:f8: 24:29:f3:94:ac:35:03:c5:b0:d4:4e:04:34:f8:ea:ba:c6:a1: b5:c9:30:4b:4b:3f:ab:5a:3a:48:cb:4a:2d:ec:a2:b3:f7:5b: 2e:8c:b8:ce:40:63:4f:8a:60:83:54:1c:14:40:8a:0b:53:77: d8:79:f7:38:29:0d:e8:79:52:48:3e:43:a7:97:90:dd:98:3f: 76:d9:12:ed:dc:59:aa:e6:22:16:54:70:c6:ab:64:95:47:63: 7d:96:02:1c:9d:92:88:90:95:c1:25:4d:a8:33:0e:bb:38:45: b4:91:0e:4c:73:e0:c4:73:8e:d6:a7:ee:09:d2:e3:03:48:df: 83:59:f9:c5:0e:1f:2d:ad:1e:03:41:4a:1d:0e:3a:df:14:2a: e2:75:f5:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM4xGzjpiNGQW6AIS1arXYFBC3kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA4MTMxOTI0MzhaFw0yNjA4MTQyMDI2MzhaMDMxMTAvBgNV BAMTKDEyMDY2NjIxRkE1RTY1MTc3QzhGNDcyQ0EyMkMxOERBQTA4QUQxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJncvyydckaAmRUGXl7bOrJNP9 8+RkZkyPe0U5yfon77zDHmwBeCd6w8Ey1PknxaLjfj/g0V6fNfsXmMo1I/5ywtfw TsrmPvaIXscUNdWx7IPXU0RzxZ06EGNJPYNItX9zjWC7JiG53Bxwjrs4fODUaLSS J7j1bC5GBNzAl9s5dzDmGn1i1OKsv65X+RHUG4CSABWYFUTd6af9tRoC4UAPumm3 f3vQJhYGeesSlSKtPvpkFl8mv5WO6HRInqXGETan5gHSCZq9Mc+S0P3kwEJI0pzu HcQ6PlzikX40PwVQS1yPet2lk4DOSl9ZtrmEA2qT2GP8UyVyDFpaKLH8VuyDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEgZmIfpeZRd8j0csoiwY2qCK0YIwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq78yA/cDzPJVtDFGcfy SWaQJznkA7vg7pvbzoQp6gKsW8RrZed0SaLT+5qmXkQWE6/IU5R4rKG5I/S3b9So 5mOX+wYJJnEm/5f8a1gtSsBVQb9+oFJND5TSjCRl6A/tsT5gAp2+tocBCaX4JCnz lKw1A8Ww1E4ENPjqusahtckwS0s/q1o6SMtKLeyis/dbLoy4zkBjT4pgg1QcFECK C1N32Hn3OCkN6HlSSD5Dp5eQ3Zg/dtkS7dxZquYiFlRwxqtklUdjfZYCHJ2SiJCV wSVNqDMOuzhFtJEOTHPgxHOO1qfuCdLjA0jfg1n5xQ4fLa0eA0FKHQ463xQq4nX1 Pg== -----END CERTIFICATE-----Generated at Fri Aug 14 00:03:01 2026 by rpki-client