$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: NwJiveK3cQYTGNEN7DAhfNESmtsgd4W3nrtxzn/BMBs= Subject key identifier: 73:C0:38:D5:B9:AA:B3:7E:22:3F:DE:26:A9:C3:48:07:FD:87:BB:F6 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 3DBB98C819B7F881E3289AA0D1EF817A01FAC6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 05FA Signing time: Tue 18 Aug 2026 19:34:38 +0000 Manifest this update: Tue 18 Aug 2026 19:29:38 +0000 Manifest next update: Wed 19 Aug 2026 21:52:38 +0000 Files and hashes: 1: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=) 2: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: qO3aRcnr9Gi4CFBaVLgLXOBcRxl6o1fmjalyJkadHQ8=) 3: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: RhOarzjbzannXSp5iT4H//E19jFxENFr3k1RH9wI878=) 4: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 5: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: MbZniZRQMpujnB5CTF7VLJsyV8yR9CJ1rSdo27cUHsc=) 6: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: CARYe+8m35x6yuJ4IaE8NVFGHHdS99rzbE18vdTuqeE=) 7: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=) 8: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=) 9: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=) 10: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: f5jZj4JC0foqvsXEp/t8cL+4DDB8KHSRlH5lZoBmeIE=) 11: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: q7oLAxgs51TKBPSOh3FzVwGR8YT0xHlaz5+7M646uzM=) 12: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: vDAXuGHyeNY2jD5RhCiD3jAqscVMZeED2yLzuLCQIEU=) 13: AS48070.asa (hash: MjFrTclEELXOguGG/2LlpmtJVA/msWfcUwYlhsF6xj4=) 14: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: ZiP1RqWlSsPpzjrVI9qMysHcBXHAbQz79mPayejmjY4=) 15: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: 5M9PhoHWZtTCIttnGnOPTWJk0l05a+jK+fOM58i5dqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Aug 2026 21:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bb:98:c8:19:b7:f8:81:e3:28:9a:a0:d1:ef:81:7a:01:fa:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Aug 18 19:29:38 2026 GMT Not After : Aug 19 21:52:38 2026 GMT Subject: CN=73C038D5B9AAB37E223FDE26A9C34807FD87BBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:aa:d4:fc:2d:30:d6:b4:c9:5a:cc:8f:5b: c7:4f:96:61:0d:28:bc:38:64:d2:1b:28:f5:ad:33: 3e:cc:d7:13:b9:16:47:a8:d1:a3:11:79:a9:23:eb: a3:8f:c4:ee:7a:fa:0b:a8:21:c7:77:cc:9d:09:de: 2d:71:e5:a4:b9:e3:d7:94:df:4a:2a:dd:7f:83:75: 23:99:28:9f:71:b4:db:8c:9b:50:de:b5:95:8b:93: 51:dc:d7:b0:16:9b:c6:61:91:86:e8:c5:27:b1:a3: 9c:d5:c9:c2:cb:af:4b:9d:07:d5:61:c6:69:db:83: 31:41:41:26:cb:06:a1:a9:fb:ea:fc:81:f7:14:0c: e7:81:87:75:5c:93:1e:20:38:62:46:66:b7:02:6e: 6e:97:60:d6:43:00:0b:34:d5:9d:dc:75:73:2a:05: c5:11:f2:16:78:69:d4:9c:ba:81:21:ff:98:f5:c4: 20:82:9e:cc:39:d3:0b:55:16:a4:0f:39:b6:bb:81: f8:e9:ad:8f:0e:ba:6b:d4:88:c6:9a:a8:9d:11:f4: 31:32:50:67:ac:77:81:0d:32:4d:a0:8b:aa:19:5d: 71:38:af:8c:a4:2f:97:10:45:96:1b:47:0f:88:c3: d2:bc:8f:c6:c5:20:f5:02:00:93:9c:de:96:0e:f0: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:38:D5:B9:AA:B3:7E:22:3F:DE:26:A9:C3:48:07:FD:87:BB:F6 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:53:46:5f:06:5d:c2:d3:fa:54:3c:bf:de:b1:df:f0:90: 5b:4e:e1:f0:4c:b7:77:43:8a:81:d3:cc:5b:51:cf:60:8a:0f: 51:6a:9c:2c:7e:8d:32:2b:7b:6c:8b:49:96:53:48:c9:35:16: 28:91:c0:f1:e6:5a:13:90:b8:c3:bb:36:49:8a:92:fd:e9:18: eb:17:b0:f9:23:d1:73:1e:80:f2:9b:e4:c0:8c:e9:8f:f5:b7: 16:ac:3f:07:46:d2:67:1e:e2:bf:ce:4e:97:5b:a9:f6:43:c2: e6:46:76:20:51:16:b9:01:c0:10:4e:ab:39:39:c8:f9:e5:2a: e5:80:4a:bc:19:0e:7f:2f:a9:c9:f4:ba:b0:55:c0:7b:1e:aa: 12:84:87:52:9f:4d:06:43:b9:d8:39:ba:86:ca:b4:65:3c:b4: e6:ff:81:6e:9a:76:14:7d:89:15:a6:a7:ea:03:eb:be:f4:e1: 75:9b:4a:82:a4:3e:36:90:fb:40:d9:5b:da:7f:18:f6:03:15: b9:7b:02:79:51:46:63:22:c4:ed:a0:dc:f2:07:a3:b5:0f:ca: 38:45:0f:ff:07:f9:ba:37:6f:93:ae:b0:a6:f4:68:8c:20:30: 53:7b:9e:02:c0:7e:39:9a:fc:5f:7d:8f:1e:2c:0d:80:36:5a: e6:42:2d:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPbuYyBm3+IHjKJqg0e+BegH6xv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjA4MTgxOTI5MzhaFw0yNjA4MTkyMTUyMzhaMDMxMTAvBgNV BAMTKDczQzAzOEQ1QjlBQUIzN0UyMjNGREUyNkE5QzM0ODA3RkQ4N0JCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+6rU/C0w1rTJWsyPW8dPlmEN KLw4ZNIbKPWtMz7M1xO5Fkeo0aMReakj66OPxO56+guoIcd3zJ0J3i1x5aS549eU 30oq3X+DdSOZKJ9xtNuMm1DetZWLk1Hc17AWm8ZhkYboxSexo5zVycLLr0udB9Vh xmnbgzFBQSbLBqGp++r8gfcUDOeBh3Vckx4gOGJGZrcCbm6XYNZDAAs01Z3cdXMq BcUR8hZ4adScuoEh/5j1xCCCnsw50wtVFqQPOba7gfjprY8OumvUiMaaqJ0R9DEy UGesd4ENMk2gi6oZXXE4r4ykL5cQRZYbRw+Iw9K8j8bFIPUCAJOc3pYO8KUZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc8A41bmqs34iP94mqcNIB/2Hu/YwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe1TRl8GXcLT+lQ8v96x 3/CQW07h8Ey3d0OKgdPMW1HPYIoPUWqcLH6NMit7bItJllNIyTUWKJHA8eZaE5C4 w7s2SYqS/ekY6xew+SPRcx6A8pvkwIzpj/W3Fqw/B0bSZx7iv85Ol1up9kPC5kZ2 IFEWuQHAEE6rOTnI+eUq5YBKvBkOfy+pyfS6sFXAex6qEoSHUp9NBkO52Dm6hsq0 ZTy05v+Bbpp2FH2JFaan6gPrvvThdZtKgqQ+NpD7QNlb2n8Y9gMVuXsCeVFGYyLE 7aDc8gejtQ/KOEUP/wf5ujdvk66wpvRojCAwU3ueAsB+OZr8X32PHiwNgDZa5kIt qg== -----END CERTIFICATE-----Generated at Wed Aug 19 05:14:59 2026 by rpki-client