$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft File: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft (raw, json) Hash identifier: Ker7ytjPl2PL3mLhCsSmiHDaPeDYP/2UOF+K7woZPVU= Subject key identifier: 29:6F:2A:A8:AB:84:6C:2E:13:B5:82:56:59:1C:7B:9F:69:09:74:42 Authority key identifier: 01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 Certificate issuer: /CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Certificate serial: 3E25DDE6B7263D5FB4DA2C6E8B3F3B64ED05209F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft Manifest number: B1 Signing time: Wed 26 Aug 2026 12:11:46 +0000 Manifest this update: Wed 26 Aug 2026 12:06:46 +0000 Manifest next update: Thu 27 Aug 2026 15:37:46 +0000 Files and hashes: 1: 326131333a376663303a313031663a3a2f34382d3438203d3e20323134353837.roa (hash: NILQ8/k8RWx9Jp9dOJ2tdW/rwY6dVyE3d3RQvgfQQ7Q=) 2: AS213216.asa (hash: E44tygSJlhvbcH//RusbDcWbj+tZTXOnGQ3XzZ2jCqQ=) 3: 326131333a376663303a313031303a3a2f34382d3438203d3e20323134353837.roa (hash: qkAnu8n5ZwhWIiFOozTwrJIaIzyzsrR64v/E5gw6fnU=) 4: 3139342e36312e302e302f32342d3234203d3e20323133323136.roa (hash: cDv+tCpd/eaVv7HBUSB+v0knElafCYH9RP9hQp1KhK8=) 5: 326131333a376663303a613432613a3a2f34382d3438203d3e20323133323136.roa (hash: lt17UYcjIOUOPLVOK/FWXABZZQuRCYc0AYsajAWcNG0=) 6: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl (hash: P+d+yjgT1zvWu+bOka242uo5vPk92dSLLkJ95m30kO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:dd:e6:b7:26:3d:5f:b4:da:2c:6e:8b:3f:3b:64:ed:05:20:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Validity Not Before: Aug 26 12:06:46 2026 GMT Not After : Aug 27 15:37:46 2026 GMT Subject: CN=296F2AA8AB846C2E13B58256591C7B9F69097442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:05:97:dd:91:49:b0:64:a4:24:c1:5d:1a: 50:ec:4d:d7:1f:da:47:8f:a3:ec:b3:24:7e:b5:88: 4d:a6:37:45:7a:d5:e2:8d:eb:c1:16:37:05:eb:48: 0f:b2:7f:51:94:b2:7a:5d:69:d1:20:d2:45:2f:61: b9:2f:6a:1f:09:f2:a7:1d:21:a4:e4:d9:2e:db:d4: d3:8d:b7:15:96:08:5a:98:b0:2c:f4:0c:fe:a7:a0: ee:90:38:f5:08:70:24:ec:1e:10:90:fc:cc:d0:f1: 29:1b:e5:cb:66:d5:ee:d3:19:ba:ed:23:02:4e:32: 0a:a1:06:87:c4:0b:f0:ca:da:a3:d5:ed:07:f1:4a: 9d:41:91:e2:79:dc:7a:19:5b:e9:72:7d:ca:4a:dd: 7f:77:d4:9b:df:19:85:f8:be:24:31:a7:ae:58:fe: 83:4b:bc:aa:33:30:ef:58:54:23:c5:cb:f6:bf:b3: 91:d9:27:da:fa:4e:3b:38:27:b3:e1:87:f9:3f:af: d1:48:4e:9d:ff:23:52:b8:36:8f:47:1f:85:47:06: fd:c2:19:ed:f4:f6:23:40:41:d2:2a:10:e7:39:cf: 0f:d9:2e:20:30:57:dd:90:d2:b8:2e:79:1e:31:7c: 0b:2b:22:4b:dd:fa:26:e3:68:84:93:30:ed:db:4c: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:2A:A8:AB:84:6C:2E:13:B5:82:56:59:1C:7B:9F:69:09:74:42 X509v3 Authority Key Identifier: keyid:01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1a:0c:d6:5c:a1:1b:18:aa:8b:b9:56:c4:d4:7f:81:24:f5: 04:c1:01:ee:69:2e:4c:0e:0f:27:7a:b1:1b:0c:89:84:f0:1c: 28:3f:4a:3c:6c:fa:0f:49:f3:b6:61:b7:5c:1e:e3:02:f0:a3: 13:39:9a:ff:5e:a3:28:71:4b:e2:66:5d:0e:4c:c8:94:43:b7: 39:bf:36:27:19:d7:dd:98:54:5a:1e:9d:4f:b6:1b:e4:f8:02: d2:fb:ba:21:f5:dd:ec:9e:41:66:fa:42:fa:4d:fb:48:ee:27: b9:7e:3d:fb:99:24:a0:34:f5:76:93:73:15:3c:96:a8:58:23: 85:39:4e:21:be:fa:5d:74:5e:26:2d:94:18:59:5d:02:d0:8c: e0:62:03:78:27:bb:26:3b:5a:bd:7a:48:b8:e2:f1:39:c1:63: 0f:50:4c:5e:ac:7a:bf:9d:66:b8:88:8b:bd:f7:d6:fe:da:9b: 12:93:9f:b1:11:19:44:04:c1:42:eb:6f:d3:a6:3a:46:f1:6f: e1:37:fb:0c:e0:64:2b:f7:ef:19:ae:dd:bb:b5:b2:ca:a4:3b: d0:f4:5c:a4:c6:04:07:45:4f:9e:f0:0e:20:13:d0:6f:37:5c: ee:cd:0b:e5:30:c9:2b:2c:20:2c:0c:e5:82:4a:7d:cf:00:33: 13:60:96:84 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPiXd5rcmPV+02ixuiz87ZO0FIJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3N2RjZDdiZWUxMTkwNjI5NDM3Y2E0YzhhYjgzZTNh ZDE1YzdhOTAeFw0yNjA4MjYxMjA2NDZaFw0yNjA4MjcxNTM3NDZaMDMxMTAvBgNV BAMTKDI5NkYyQUE4QUI4NDZDMkUxM0I1ODI1NjU5MUM3QjlGNjkwOTc0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaKAWX3ZFJsGSkJMFdGlDsTdcf 2kePo+yzJH61iE2mN0V61eKN68EWNwXrSA+yf1GUsnpdadEg0kUvYbkvah8J8qcd IaTk2S7b1NONtxWWCFqYsCz0DP6noO6QOPUIcCTsHhCQ/MzQ8Skb5ctm1e7TGbrt IwJOMgqhBofEC/DK2qPV7QfxSp1BkeJ53HoZW+lyfcpK3X931JvfGYX4viQxp65Y /oNLvKozMO9YVCPFy/a/s5HZJ9r6Tjs4J7Phh/k/r9FITp3/I1K4No9HH4VHBv3C Ge309iNAQdIqEOc5zw/ZLiAwV92Q0rgueR4xfAsrIkvd+ibjaISTMO3bTHVnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKW8qqKuEbC4TtYJWWRx7n2kJdEIwHwYDVR0j BBgwFoAUAXfc177hGQYpQ3ykyKuD460Vx6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBlNDhkYTItYmYzZC00Zjk0LTljMTMtYzA4YzExOTBk ZTE4LzAvMDE3N0RDRDdCRUUxMTkwNjI5NDM3Q0E0QzhBQjgzRTNBRDE1QzdBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FYZmMxNzdoR1FZcFEzeWt5S3VENDYw Vng2ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGU0OGRhMi1i ZjNkLTRmOTQtOWMxMy1jMDhjMTE5MGRlMTgvMC8wMTc3RENEN0JFRTExOTA2Mjk0 MzdDQTRDOEFCODNFM0FEMTVDN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhoM1lyhGxiqi7lWxNR/ gST1BMEB7mkuTA4PJ3qxGwyJhPAcKD9KPGz6D0nztmG3XB7jAvCjEzma/16jKHFL 4mZdDkzIlEO3Ob82JxnX3ZhUWh6dT7Yb5PgC0vu6IfXd7J5BZvpC+k37SO4nuX49 +5kkoDT1dpNzFTyWqFgjhTlOIb76XXReJi2UGFldAtCM4GIDeCe7JjtavXpIuOLx OcFjD1BMXqx6v51muIiLvffW/tqbEpOfsREZRATBQutv06Y6RvFv4Tf7DOBkK/fv Ga7du7WyyqQ70PRcpMYEB0VPnvAOIBPQbzdc7s0L5TDJKywgLAzlgkp9zwAzE2CW hA== -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:22 2026 by rpki-client