$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft (raw, json) Hash identifier: MFOrp0V1JoeZ15bPVjAJotVpl19Ywfa1v0SU6AfxWwA= Subject key identifier: 03:F3:2D:9B:51:50:86:84:F1:71:15:FF:19:F2:00:FC:BB:DD:B3:F2 Authority key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 Certificate issuer: /CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Certificate serial: 3289176857A7375F689D1160A08560F806980A02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft Manifest number: 22 Signing time: Tue 28 Jul 2026 17:14:56 +0000 Manifest this update: Tue 28 Jul 2026 17:09:56 +0000 Manifest next update: Wed 29 Jul 2026 20:35:56 +0000 Files and hashes: 1: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl (hash: sOEhheHPtOfhwp734Z0dUg73lakXJLD4J490ZSD/Xyo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 20:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:89:17:68:57:a7:37:5f:68:9d:11:60:a0:85:60:f8:06:98:0a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Validity Not Before: Jul 28 17:09:56 2026 GMT Not After : Jul 29 20:35:56 2026 GMT Subject: CN=03F32D9B51508684F17115FF19F200FCBBDDB3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:d3:96:aa:37:fa:b8:48:3c:ec:21:d9:fb: 3d:44:96:42:fb:67:de:87:ad:33:7a:fd:a0:77:21: 3c:50:7c:01:08:5f:7b:a4:53:b5:59:45:9a:a6:e8: c2:62:0f:35:eb:f8:90:ab:b5:a1:76:7b:ad:7a:4a: e8:ef:a1:40:a7:a9:af:62:97:8b:bd:14:6d:0c:f4: 1b:55:46:36:8c:bf:f4:08:a1:f7:c2:85:70:26:96: 9e:0a:0b:87:c4:8f:14:26:b0:70:82:01:83:a0:be: 18:8f:17:66:1b:e4:64:79:46:68:72:30:f6:b5:f8: 95:7a:37:34:1a:ac:2a:bd:96:01:65:9c:bd:ae:da: 77:c9:b6:be:6c:3d:a5:30:54:78:d3:8b:16:ac:dc: fd:3b:10:05:40:09:a4:0e:e8:bd:e6:ea:91:90:ef: 89:31:51:da:08:38:16:e1:62:13:ef:f9:f1:22:d5: 19:99:3e:7b:af:97:5f:5b:1e:4d:56:fc:9f:d0:a8: b9:25:f2:a4:64:0c:71:a6:f1:94:d8:e1:5f:d0:92: 7e:be:50:a2:c7:c8:9e:3d:c2:80:12:97:22:43:55: c9:db:bf:04:03:1a:bb:90:be:d4:50:69:7e:8e:59: 26:e3:40:3c:83:ec:a7:a6:2c:86:10:d2:9a:bc:3d: 50:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:2D:9B:51:50:86:84:F1:71:15:FF:19:F2:00:FC:BB:DD:B3:F2 X509v3 Authority Key Identifier: keyid:57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:03:76:89:86:98:4d:42:89:c0:78:a3:86:c3:ac:d0:29:e8: e1:2a:b9:fe:a4:35:53:89:0d:2c:19:be:97:87:8d:12:1a:da: 23:b6:78:bc:12:95:29:ba:4b:b0:46:2c:57:3f:aa:be:71:14: 55:df:ae:de:23:6c:93:fd:2e:52:53:3e:88:36:88:da:8c:b1: e5:05:69:45:82:48:99:6f:e8:54:01:08:65:9c:7e:fa:79:40: 08:c6:fe:ba:61:55:30:31:df:e8:0c:47:de:64:c0:97:ab:d9: 76:fe:21:0e:7e:17:7b:16:82:dd:4e:ce:29:98:8e:b1:88:d3: 49:81:5b:d4:79:50:62:07:36:72:d0:49:5f:9d:86:f6:f7:d7: 7d:5c:de:8a:b7:d2:19:59:03:de:68:ec:8f:ad:87:20:41:c2: 30:c7:0a:69:3f:ed:d0:4e:e8:82:8d:de:b3:2d:ba:54:53:77: 5e:7d:18:b0:4f:24:b3:ca:a8:85:ef:51:d3:bd:6b:af:fa:d7: 8b:de:3a:d8:1b:a5:0c:bb:9b:bd:47:6c:2f:70:ff:77:94:61: 69:1f:7b:29:19:45:b2:18:ab:4d:84:9e:32:41:6b:e3:3d:0d: cf:85:39:01:1d:23:6c:78:35:8d:6f:a6:6f:ac:ed:76:0c:6a: 8f:35:f8:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMokXaFenN19onRFgoIVg+AaYCgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0 MTYzMUVBMjAeFw0yNjA3MjgxNzA5NTZaFw0yNjA3MjkyMDM1NTZaMDMxMTAvBgNV BAMTKDAzRjMyRDlCNTE1MDg2ODRGMTcxMTVGRjE5RjIwMEZDQkJEREIzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65NOWqjf6uEg87CHZ+z1ElkL7 Z96HrTN6/aB3ITxQfAEIX3ukU7VZRZqm6MJiDzXr+JCrtaF2e616SujvoUCnqa9i l4u9FG0M9BtVRjaMv/QIoffChXAmlp4KC4fEjxQmsHCCAYOgvhiPF2Yb5GR5Rmhy MPa1+JV6NzQarCq9lgFlnL2u2nfJtr5sPaUwVHjTixas3P07EAVACaQO6L3m6pGQ 74kxUdoIOBbhYhPv+fEi1RmZPnuvl19bHk1W/J/QqLkl8qRkDHGm8ZTY4V/Qkn6+ UKLHyJ49woASlyJDVcnbvwQDGruQvtRQaX6OWSbjQDyD7KemLIYQ0pq8PVBvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA/Mtm1FQhoTxcRX/GfIA/Lvds/IwHwYDVR0j BBgwFoAUVw54SKMoRYLNbw8MA199m0FjHqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQz NjIyLzEvNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0MTYzMUVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMw MzVGN0Q5QjQxNjMxRUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBiNjU0NWZjLTllYWMtNGZkYy1hMmVjLWM3MDJkNzRkMzYyMi8xLzU3MEU3ODQ4 QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtA3aJ hphNQonAeKOGw6zQKejhKrn+pDVTiQ0sGb6Xh40SGtojtni8EpUpukuwRixXP6q+ cRRV367eI2yT/S5SUz6INojajLHlBWlFgkiZb+hUAQhlnH76eUAIxv66YVUwMd/o DEfeZMCXq9l2/iEOfhd7FoLdTs4pmI6xiNNJgVvUeVBiBzZy0ElfnYb299d9XN6K t9IZWQPeaOyPrYcgQcIwxwppP+3QTuiCjd6zLbpUU3defRiwTySzyqiF71HTvWuv +teL3jrYG6UMu5u9R2wvcP93lGFpH3spGUWyGKtNhJ4yQWvjPQ3PhTkBHSNseDWN b6ZvrO12DGqPNfgx -----END CERTIFICATE-----Generated at Wed Jul 29 07:22:34 2026 by rpki-client