$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft File: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft (raw, json) Hash identifier: Hxn4JQNhb6UYMJTaBCb1KOWjbxJCX8lmrA1Ccsb3gkU= Subject key identifier: 38:D8:0A:30:3B:47:01:55:BB:E1:42:B7:7E:B0:D7:00:A0:3B:E8:32 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 2D83569B192594F081BFC0D39603D7044D61045C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft Manifest number: 74 Signing time: Tue 21 Jul 2026 05:28:04 +0000 Manifest this update: Tue 21 Jul 2026 05:23:04 +0000 Manifest next update: Wed 22 Jul 2026 08:47:04 +0000 Files and hashes: 1: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (hash: eBx6CYbDRTosurIDDB+KoSblZBSgp+vUq6zMeiKzypk=) 2: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: vYGonux44s3TgewlYrrqNYb7AvM/5XVRjdpid9S48+w=) 3: 326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa (hash: laI5Q0pzbwM0SFktw07XD+6OjZd2N3daUYCWjZILC6M=) 4: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl (hash: jLQz+dKJw+pVrxDe705dEghlz7V4omSyVc4OefEj2uw=) 5: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (hash: TmQ0le/l8ws1Wb4HrTMvMEVGRgkcyqYl6oMiV7FPUPY=) 6: AD29F7F191997039ACFD9760F915FEE62892E578.cer (hash: UaT2T+A+1mEnEGFNa0ifcwWPDZ4pmnvM/DYRoddIiqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:83:56:9b:19:25:94:f0:81:bf:c0:d3:96:03:d7:04:4d:61:04:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jul 21 05:23:04 2026 GMT Not After : Jul 22 08:47:04 2026 GMT Subject: CN=38D80A303B470155BBE142B77EB0D700A03BE832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:45:e8:59:1f:f1:c3:00:ec:1e:db:e2:91: c6:cc:af:23:9a:3d:b7:10:43:5c:5e:e7:a3:3d:1c: 6d:25:14:33:88:6c:08:40:0e:54:39:99:62:75:e0: bc:d7:5f:4d:1c:2e:f0:5f:e7:df:64:53:9f:51:5a: 56:db:b9:55:65:76:80:e2:d1:77:ad:b9:62:90:61: 0e:10:77:4e:43:79:64:33:9f:00:89:24:96:fb:f7: 03:d4:43:96:90:54:d4:7c:34:1c:24:a7:ac:cc:ea: 38:60:34:3a:39:45:5e:1e:f3:a7:95:68:50:20:f6: 55:3e:39:b6:3e:3e:01:94:3f:3a:94:f0:13:db:19: 2d:73:ac:99:e0:ac:cf:17:b5:df:d1:27:cc:e1:ba: 30:4d:4f:c1:66:3c:10:76:02:6b:cb:51:22:8e:35: f1:d1:b4:c3:54:f7:3a:30:de:2b:f1:84:7e:f2:0e: 61:dc:d6:e7:eb:76:e3:01:ba:d6:39:24:e1:fd:af: 14:0c:85:26:00:9b:06:90:7f:1c:48:67:33:4f:e9: f9:a5:d6:9e:14:ab:dd:2b:fb:f4:c0:c5:fb:b3:22: 14:52:1a:06:d1:53:d7:f2:ab:d6:0f:c4:02:78:ef: 62:3c:ac:0f:62:f8:11:fb:1b:6f:ad:53:8b:a2:54: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:0A:30:3B:47:01:55:BB:E1:42:B7:7E:B0:D7:00:A0:3B:E8:32 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:a6:12:3c:4c:92:a0:24:52:93:df:c4:d6:20:42:2b:9f: 04:71:b7:56:e5:89:07:da:82:79:e8:fd:48:f8:43:a4:13:68: 0b:cd:5a:d7:e1:ca:51:3a:85:9c:18:95:2e:97:98:9d:e1:ec: 7c:72:c8:9b:df:d9:c3:d6:91:5a:e2:93:66:8c:49:51:d3:c8: bb:03:63:6f:bf:9f:fa:08:96:d1:73:20:78:6c:44:bf:f7:b1: 5f:2f:a8:46:62:7e:97:76:bf:e7:2a:60:b2:9d:6b:a0:d8:7d: c2:cf:94:a5:73:f7:30:aa:ea:1b:d1:d2:63:23:6a:b3:eb:83: 1f:e2:88:e1:b9:a4:5c:49:ea:14:4a:d1:7c:81:72:a0:06:98: 2e:5a:73:b9:b7:65:62:88:b2:a8:c5:0b:10:18:93:f4:bf:c9: 5c:54:15:7e:35:5c:ec:95:8a:5b:b6:66:3e:9e:1c:c3:f4:b6: 49:74:cc:c9:32:d0:70:e6:27:c0:54:96:8f:30:3a:78:6e:da: 55:0b:5d:5a:d3:ed:07:53:fb:bc:ae:08:f1:7f:4a:59:43:2e: 3e:fc:90:06:3e:52:75:78:48:74:b3:33:f5:53:b6:a8:15:62: 01:db:05:57:85:46:de:59:e9:e0:17:e0:d9:d2:2a:fd:54:63: 57:19:ad:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULYNWmxkllPCBv8DTlgPXBE1hBFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA3MjEwNTIzMDRaFw0yNjA3MjIwODQ3MDRaMDMxMTAvBgNV BAMTKDM4RDgwQTMwM0I0NzAxNTVCQkUxNDJCNzdFQjBENzAwQTAzQkU4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj0XoWR/xwwDsHtvikcbMryOa PbcQQ1xe56M9HG0lFDOIbAhADlQ5mWJ14LzXX00cLvBf599kU59RWlbbuVVldoDi 0XetuWKQYQ4Qd05DeWQznwCJJJb79wPUQ5aQVNR8NBwkp6zM6jhgNDo5RV4e86eV aFAg9lU+ObY+PgGUPzqU8BPbGS1zrJngrM8Xtd/RJ8zhujBNT8FmPBB2AmvLUSKO NfHRtMNU9zow3ivxhH7yDmHc1ufrduMButY5JOH9rxQMhSYAmwaQfxxIZzNP6fml 1p4Uq90r+/TAxfuzIhRSGgbRU9fyq9YPxAJ472I8rA9i+BH7G2+tU4uiVMlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUONgKMDtHAVW74UK3frDXAKA76DIwHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS81LzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfpKYS PEySoCRSk9/E1iBCK58EcbdW5YkH2oJ56P1I+EOkE2gLzVrX4cpROoWcGJUul5id 4ex8csib39nD1pFa4pNmjElR08i7A2Nvv5/6CJbRcyB4bES/97FfL6hGYn6Xdr/n KmCynWug2H3Cz5Slc/cwquob0dJjI2qz64Mf4ojhuaRcSeoUStF8gXKgBpguWnO5 t2ViiLKoxQsQGJP0v8lcVBV+NVzslYpbtmY+nhzD9LZJdMzJMtBw5ifAVJaPMDp4 btpVC11a0+0HU/u8rgjxf0pZQy4+/JAGPlJ1eEh0szP1U7aoFWIB2wVXhUbeWeng F+DZ0ir9VGNXGa1b -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:57 2026 by rpki-client