$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: 0ZdQV0k9GHIAPwuhS7wCPqJeA647e66kW9+6bxTRFI4= Subject key identifier: 02:2A:82:3F:D7:CD:DF:95:88:47:F0:D2:FF:28:0D:CB:B6:F8:BB:D3 Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 25DBDCA26AC5DB3AE07A56D17A38E411D6086EC7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 0180 Signing time: Tue 28 Jul 2026 05:13:14 +0000 Manifest this update: Tue 28 Jul 2026 05:08:14 +0000 Manifest next update: Wed 29 Jul 2026 08:37:14 +0000 Files and hashes: 1: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=) 2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=) 3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=) 4: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) 5: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: UyLoRl9W5DwVkSIj7thDV7szlnPqJtBUvPDl2zc1Hk0=) 6: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:db:dc:a2:6a:c5:db:3a:e0:7a:56:d1:7a:38:e4:11:d6:08:6e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Jul 28 05:08:14 2026 GMT Not After : Jul 29 08:37:14 2026 GMT Subject: CN=022A823FD7CDDF958847F0D2FF280DCBB6F8BBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:dc:03:b9:29:21:a5:dc:26:b3:06:96:2d: 44:b8:53:00:73:74:b5:7c:86:3b:a2:8d:5f:44:f8: 3e:37:fe:48:4c:df:17:8e:92:44:12:2b:17:e4:a6: 05:7f:7b:84:e1:fc:5c:a1:2c:18:39:41:93:55:b0: 0e:f1:b9:03:5b:92:02:d9:3e:3a:10:b4:f3:54:2d: 4d:b9:33:97:2e:dd:64:3f:ee:64:3c:41:ed:fd:a2: f1:c6:7a:23:2a:8a:4c:b2:10:b1:30:0d:65:e7:af: 1d:c5:0b:d8:f5:33:6b:93:de:2e:01:08:42:ee:5f: fb:18:3f:26:dd:f7:81:69:fc:3a:47:e6:f7:29:36: 00:c0:54:69:3a:83:bb:54:63:19:5b:97:ca:4a:86: 92:38:09:cc:c4:ae:1e:74:75:a7:7b:be:ac:63:b0: 74:bd:07:fe:77:c6:00:e1:0f:c4:44:67:11:10:f7: 4e:d2:e7:2d:32:f6:49:2f:95:3a:b9:4d:8e:06:a1: 22:fa:f8:d8:23:28:03:14:6b:e0:27:0f:2d:8f:fc: d6:f9:99:68:40:6e:c0:8b:de:eb:8d:95:ed:36:8f: 4f:2f:9c:e0:ec:32:69:56:7e:da:c3:b3:cb:7b:87: bc:ec:e8:aa:bc:15:ec:26:28:03:91:db:73:29:87: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:82:3F:D7:CD:DF:95:88:47:F0:D2:FF:28:0D:CB:B6:F8:BB:D3 X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:ff:6e:95:3a:05:a6:16:b9:16:cc:0d:41:d1:90:95:c6: 82:40:3e:da:e2:df:44:0e:c7:7e:d8:08:96:5f:7d:5a:9e:bc: e8:3c:9c:87:61:c1:68:c7:f9:8a:4c:7c:40:a2:6c:5f:bf:0b: c8:c1:fc:5e:f7:52:b2:f1:d3:90:e3:6d:ec:45:83:52:92:f6: fd:ad:bf:d2:64:7e:c3:f9:ad:de:67:8f:16:b8:ac:3c:97:b7: e0:f9:df:90:ae:9b:11:dc:68:4c:61:bf:f9:e9:82:a4:80:c8: 9d:04:83:96:ab:72:cf:e3:b9:c7:95:d6:a5:2b:04:6b:72:ce: 86:cb:cf:89:a4:65:47:87:dd:09:10:92:0b:ce:f1:9f:c2:44: 5d:ea:39:8c:83:da:fe:bb:9e:a6:c5:7b:38:aa:db:ac:32:bb: d8:05:7e:1f:c5:1a:76:f2:93:30:af:eb:41:26:c2:6f:d6:8a: c8:c4:71:48:35:3a:12:25:0d:8c:a6:79:69:aa:07:65:fa:83: 3c:7f:df:07:7b:a4:d3:61:fc:7b:8e:ad:13:dd:b9:be:85:93: 65:f3:cc:79:8d:41:22:e3:38:79:20:4b:cd:e4:a6:d6:41:81: ca:b8:68:f2:08:7b:cd:06:bd:95:28:ca:b0:e3:a8:a7:95:52: 18:c2:47:09 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJdvcomrF2zrgelbRejjkEdYIbscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNjA3MjgwNTA4MTRaFw0yNjA3MjkwODM3MTRaMDMxMTAvBgNV BAMTKDAyMkE4MjNGRDdDRERGOTU4ODQ3RjBEMkZGMjgwRENCQjZGOEJCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv79wDuSkhpdwmswaWLUS4UwBz dLV8hjuijV9E+D43/khM3xeOkkQSKxfkpgV/e4Th/FyhLBg5QZNVsA7xuQNbkgLZ PjoQtPNULU25M5cu3WQ/7mQ8Qe39ovHGeiMqikyyELEwDWXnrx3FC9j1M2uT3i4B CELuX/sYPybd94Fp/DpH5vcpNgDAVGk6g7tUYxlbl8pKhpI4CczErh50dad7vqxj sHS9B/53xgDhD8REZxEQ907S5y0y9kkvlTq5TY4GoSL6+NgjKAMUa+AnDy2P/Nb5 mWhAbsCL3uuNle02j08vnODsMmlWftrDs8t7h7zs6Kq8FewmKAOR23Mph+d3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUAiqCP9fN35WIR/DS/ygNy7b4u9MwHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEP/bpU6BaYWuRbMDUHR kJXGgkA+2uLfRA7HftgIll99Wp686Dych2HBaMf5ikx8QKJsX78LyMH8XvdSsvHT kONt7EWDUpL2/a2/0mR+w/mt3mePFrisPJe34PnfkK6bEdxoTGG/+emCpIDInQSD lqtyz+O5x5XWpSsEa3LOhsvPiaRlR4fdCRCSC87xn8JEXeo5jIPa/ruepsV7OKrb rDK72AV+H8UadvKTMK/rQSbCb9aKyMRxSDU6EiUNjKZ5aaoHZfqDPH/fB3uk02H8 e46tE925voWTZfPMeY1BIuM4eSBLzeSm1kGByrho8gh7zQa9lSjKsOOop5VSGMJH CQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:57 2026 by rpki-client