$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: lL+Os9S/+cG4bWDa479dMLZSJ2ToIgv/kF5oQWBAbrA= Subject key identifier: 2B:B6:DA:FA:C2:57:37:1B:02:F3:27:4B:60:23:9D:8B:09:16:87:A7 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 70AC813BEFC215084680977230369FCE4B8665F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 0109 Signing time: Tue 11 Aug 2026 21:42:13 +0000 Manifest this update: Tue 11 Aug 2026 21:37:13 +0000 Manifest next update: Thu 13 Aug 2026 00:08:13 +0000 Files and hashes: 1: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 2: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 3: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 4: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 5: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 6: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=) 7: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 8: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 9: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: Slawv1EirvkDLDb5RJExeIMPA18bjGs/2peWzO2/URQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 00:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:81:3b:ef:c2:15:08:46:80:97:72:30:36:9f:ce:4b:86:65:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Aug 11 21:37:13 2026 GMT Not After : Aug 13 00:08:13 2026 GMT Subject: CN=2BB6DAFAC257371B02F3274B60239D8B091687A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:d1:62:0e:c0:b7:3d:e9:36:3c:36:fe:cd: ee:ef:8d:ff:7a:1e:dc:c7:66:d2:01:3f:51:86:c8: 67:f8:ce:35:2e:1f:8f:cd:e1:ec:ad:87:51:e1:c4: 9d:b8:35:f1:f6:2a:c5:52:db:7d:db:36:4a:30:8b: 40:77:12:64:bd:08:c4:b5:20:11:02:4b:c7:80:0d: 02:b2:37:b1:84:e6:0e:89:ee:55:38:44:a3:24:f0: f3:2b:27:47:b5:c4:96:9b:7b:6b:1a:a4:62:34:0f: c7:3e:91:d0:e3:6c:2c:a4:2a:60:4a:12:2c:84:96: 46:72:45:88:dd:7e:80:92:d7:37:20:ab:c5:d1:d5: f1:6c:4e:8f:f5:a3:3b:cd:ff:e1:f5:5f:2e:c9:c2: 70:ac:d9:73:77:dd:ed:55:55:3f:e3:e4:f4:32:5e: 0b:c5:de:b9:39:9b:17:f5:bf:5b:02:c5:9e:7d:f5: 34:ef:df:7f:7e:a1:f7:7d:25:2c:58:43:bf:d8:e5: 83:53:81:d5:5f:fc:dd:bb:43:5f:c9:6d:80:86:3c: 60:fc:52:b8:bf:9b:e0:1c:8d:de:9a:93:2d:f9:72: 58:2f:d2:81:95:81:03:7e:80:00:67:e0:ed:17:7c: b5:e8:53:09:5b:09:df:d2:7a:54:d5:b5:e4:00:29: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B6:DA:FA:C2:57:37:1B:02:F3:27:4B:60:23:9D:8B:09:16:87:A7 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:56:40:74:b1:d8:16:4f:b5:42:98:4f:6a:be:f1:c1:43:5d: 1e:b1:f1:18:0a:4e:07:f6:d0:89:21:41:54:fc:4a:8d:31:15: f5:48:2c:4d:d1:68:60:4a:2f:72:fd:3c:fd:af:4c:ba:72:36: ef:0c:f1:c3:bf:a1:11:12:e7:2e:a1:3d:e3:35:b0:d7:d7:a3: 14:54:c6:61:13:81:cc:fa:28:b3:9a:29:ee:81:76:2c:30:56: 17:23:6e:93:10:f9:1b:e0:4f:ed:5e:6f:b1:47:97:4d:fe:48: fd:94:d6:6d:77:a4:b9:fb:b0:83:cc:b8:e7:02:fd:d4:a1:e6: d1:e7:4a:2f:6e:b1:72:65:11:bd:4b:08:19:d4:b9:48:da:7e: 2e:9e:7e:64:c8:90:61:c4:0c:4a:e0:04:a2:30:58:65:24:36: 8b:95:f0:9b:c9:72:21:9b:be:2b:50:44:c6:ea:83:38:41:60: 0d:5f:35:e9:f4:90:d4:d0:8f:d1:13:54:89:3a:fc:d6:32:41: e7:15:99:2c:25:a2:07:1c:6d:22:53:d6:98:56:cd:2e:19:0e: db:1d:33:d2:cc:b8:7a:e4:62:99:44:c3:f6:fe:7a:a9:19:37: 9d:97:c1:b4:d6:0d:96:62:a1:5e:10:3a:cb:1f:17:61:ba:60: dd:d3:6f:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcKyBO+/CFQhGgJdyMDafzkuGZfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA4MTEyMTM3MTNaFw0yNjA4MTMwMDA4MTNaMDMxMTAvBgNV BAMTKDJCQjZEQUZBQzI1NzM3MUIwMkYzMjc0QjYwMjM5RDhCMDkxNjg3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIdFiDsC3Pek2PDb+ze7vjf96 HtzHZtIBP1GGyGf4zjUuH4/N4eyth1HhxJ24NfH2KsVS233bNkowi0B3EmS9CMS1 IBECS8eADQKyN7GE5g6J7lU4RKMk8PMrJ0e1xJabe2sapGI0D8c+kdDjbCykKmBK EiyElkZyRYjdfoCS1zcgq8XR1fFsTo/1ozvN/+H1Xy7JwnCs2XN33e1VVT/j5PQy XgvF3rk5mxf1v1sCxZ599TTv339+ofd9JSxYQ7/Y5YNTgdVf/N27Q1/JbYCGPGD8 Uri/m+Acjd6aky35clgv0oGVgQN+gABn4O0XfLXoUwlbCd/SelTVteQAKdfZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK7ba+sJXNxsC8ydLYCOdiwkWh6cwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJVkB0 sdgWT7VCmE9qvvHBQ10esfEYCk4H9tCJIUFU/EqNMRX1SCxN0WhgSi9y/Tz9r0y6 cjbvDPHDv6EREucuoT3jNbDX16MUVMZhE4HM+iizminugXYsMFYXI26TEPkb4E/t Xm+xR5dN/kj9lNZtd6S5+7CDzLjnAv3UoebR50ovbrFyZRG9SwgZ1LlI2n4unn5k yJBhxAxK4ASiMFhlJDaLlfCbyXIhm74rUETG6oM4QWANXzXp9JDU0I/RE1SJOvzW MkHnFZksJaIHHG0iU9aYVs0uGQ7bHTPSzLh65GKZRMP2/nqpGTedl8G01g2WYqFe EDrLHxdhumDd02+6 -----END CERTIFICATE-----Generated at Wed Aug 12 10:30:24 2026 by rpki-client