$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: omQ9tvHecEhlyrXNijiHzsb1BDxR5S7207/E3YjFrn4= Subject key identifier: 48:6D:E0:24:DC:06:A0:5B:69:D8:3F:46:57:6D:67:B4:88:81:E9:E2 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 2141AAA9320CF388A6E8484EDEBAD8ED09F6FB87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: F9 Signing time: Fri 10 Jul 2026 05:42:39 +0000 Manifest this update: Fri 10 Jul 2026 05:37:39 +0000 Manifest next update: Sat 11 Jul 2026 09:40:39 +0000 Files and hashes: 1: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: F1KsWlWx8FZ49vTC29vAiPNNDt2mA5r3eJVT04M3WYc=) 2: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 3: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM=) 4: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 5: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 09:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:41:aa:a9:32:0c:f3:88:a6:e8:48:4e:de:ba:d8:ed:09:f6:fb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Jul 10 05:37:39 2026 GMT Not After : Jul 11 09:40:39 2026 GMT Subject: CN=486DE024DC06A05B69D83F46576D67B48881E9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:42:4e:ef:48:fc:9c:5b:72:bf:7e:44:22: cb:46:8a:9d:25:aa:06:36:b6:3f:38:2e:5c:ef:b4: 73:90:e1:7d:52:bc:1f:65:15:1d:66:e6:a3:e2:7f: a0:fb:8d:c0:e6:77:f2:e5:a1:9b:65:98:e7:1d:0a: 82:70:f9:52:6a:20:9f:6b:e7:1e:35:b1:90:e4:1b: 25:b9:a3:fa:0c:11:6d:74:0e:0f:80:a7:e0:f0:eb: 4e:f8:d4:6a:7f:63:f3:a9:40:ce:90:25:cf:18:6f: 4a:20:8f:e6:62:7c:35:42:59:e8:f5:5f:9b:53:68: 13:5e:63:76:f0:1f:1a:ea:be:eb:74:aa:3b:a9:36: b8:6c:b3:17:e4:a0:ba:76:56:c9:90:ca:f6:9f:0a: ef:d0:7c:32:e7:53:6d:45:43:ac:80:fd:7b:32:99: fe:96:76:e9:b2:e1:ca:85:4d:61:63:2f:da:ce:9e: ae:37:49:3e:28:dc:0e:74:73:c7:cf:51:53:c0:e9: 3f:99:ea:38:8b:b0:8e:f6:e0:ea:ab:65:59:18:01: 54:aa:70:14:ea:8a:85:ef:88:28:dc:62:1e:3f:ef: 3d:ff:fb:8e:61:f6:f8:63:cb:b4:5f:db:2e:46:59: 4f:d4:a5:51:5a:f9:66:f4:a9:30:8a:36:77:ae:38: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:E0:24:DC:06:A0:5B:69:D8:3F:46:57:6D:67:B4:88:81:E9:E2 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:80:19:e8:e9:6f:04:06:63:10:49:a4:3f:cd:06:22:f3:1c: 2c:ed:aa:99:88:01:06:a4:ab:a8:6a:15:6f:87:43:68:2e:c0: 4e:87:f2:c8:81:11:11:20:8b:61:a0:60:7f:b1:c1:50:0b:5f: 5e:82:fa:51:1f:ea:53:d0:1f:0d:70:ef:d7:c1:da:53:ac:f3: 0a:1b:0b:b7:a9:4f:eb:12:f5:3c:c2:6d:3b:44:dc:a1:cc:3b: e3:3e:b0:5c:5f:d9:c1:bb:1b:1c:61:58:74:b6:73:21:92:79: 4c:c7:22:e4:d0:92:80:01:30:79:aa:d5:82:51:48:dc:39:37: 66:45:61:24:4d:4b:d9:68:03:35:b2:4b:81:db:be:bc:81:db: 4f:6d:4f:cb:ef:e7:43:e6:12:85:71:11:aa:af:9d:4f:04:22: 1f:fa:70:81:92:46:a4:60:4e:64:81:19:6c:94:a2:19:f3:9e: 58:8f:ed:ab:7a:03:62:87:98:34:3f:8e:80:57:77:95:87:94: 69:15:8c:f9:f4:10:da:df:8b:b7:8d:c6:6e:43:f5:d4:a0:67: 8b:85:08:d5:10:a9:2e:b0:0e:05:b9:f2:7f:54:2d:e7:30:67: a6:65:ed:52:9b:41:15:72:cb:5b:37:87:9d:5b:f1:0c:48:77: 37:ed:98:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIUGqqTIM84im6EhO3rrY7Qn2+4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA3MTAwNTM3MzlaFw0yNjA3MTEwOTQwMzlaMDMxMTAvBgNV BAMTKDQ4NkRFMDI0REMwNkEwNUI2OUQ4M0Y0NjU3NkQ2N0I0ODg4MUU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOkJO70j8nFtyv35EIstGip0l qgY2tj84LlzvtHOQ4X1SvB9lFR1m5qPif6D7jcDmd/LloZtlmOcdCoJw+VJqIJ9r 5x41sZDkGyW5o/oMEW10Dg+Ap+Dw60741Gp/Y/OpQM6QJc8Yb0ogj+ZifDVCWej1 X5tTaBNeY3bwHxrqvut0qjupNrhssxfkoLp2VsmQyvafCu/QfDLnU21FQ6yA/Xsy mf6Wdumy4cqFTWFjL9rOnq43ST4o3A50c8fPUVPA6T+Z6jiLsI724OqrZVkYAVSq cBTqioXviCjcYh4/7z3/+45h9vhjy7Rf2y5GWU/UpVFa+Wb0qTCKNneuOMY7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSG3gJNwGoFtp2D9GV21ntIiB6eIwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdgBno 6W8EBmMQSaQ/zQYi8xws7aqZiAEGpKuoahVvh0NoLsBOh/LIgRERIIthoGB/scFQ C19egvpRH+pT0B8NcO/XwdpTrPMKGwu3qU/rEvU8wm07RNyhzDvjPrBcX9nBuxsc YVh0tnMhknlMxyLk0JKAATB5qtWCUUjcOTdmRWEkTUvZaAM1skuB2768gdtPbU/L 7+dD5hKFcRGqr51PBCIf+nCBkkakYE5kgRlslKIZ855Yj+2regNih5g0P46AV3eV h5RpFYz59BDa34u3jcZuQ/XUoGeLhQjVEKkusA4FufJ/VC3nMGemZe1Sm0EVcstb N4edW/EMSHc37ZjY -----END CERTIFICATE-----Generated at Fri Jul 10 18:52:10 2026 by rpki-client