$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json) Hash identifier: hEHvUYrO0A+lW5lfrk2E4xLLfGTtpbhsU02FReUuR6A= Subject key identifier: 45:85:1F:5E:9F:4A:6F:B7:8F:AC:0A:B6:8B:3B:CE:95:49:6E:AC:FB Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 2DAFED14D50011C52F68016064204853B8A1E86E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft Manifest number: 0585 Signing time: Tue 28 Jul 2026 01:36:50 +0000 Manifest this update: Tue 28 Jul 2026 01:31:50 +0000 Manifest next update: Wed 29 Jul 2026 04:59:50 +0000 Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: qDV1T9cFHn9X9ibP0ir97gVygbmb6/85g9wUdux5Zxs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 04:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:af:ed:14:d5:00:11:c5:2f:68:01:60:64:20:48:53:b8:a1:e8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Jul 28 01:31:50 2026 GMT Not After : Jul 29 04:59:50 2026 GMT Subject: CN=45851F5E9F4A6FB78FAC0AB68B3BCE95496EACFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:f2:96:25:84:dc:06:da:3e:0b:22:ac:1d: 9d:10:5e:44:91:53:2e:59:fd:89:ef:51:1c:da:ac: ca:07:41:85:c5:ae:69:5a:bb:6a:55:94:e4:f8:d9: e6:69:89:56:b1:ef:60:17:20:8c:5a:db:60:67:93: 92:1b:94:e6:12:75:01:ca:8d:ee:01:d3:b2:34:33: fb:9f:4a:ce:3d:81:d6:e4:12:36:ab:2c:29:66:e1: 9f:b8:4c:ad:e3:e3:91:89:ac:77:15:48:8b:1f:1f: ae:5e:a5:b8:dc:60:23:f6:d3:47:61:c9:95:d4:e9: cf:c5:44:5f:7a:72:59:01:cb:70:67:57:6a:ad:5d: f3:89:a7:08:92:67:41:f9:56:44:2c:5a:6c:da:e6: b6:d9:12:e4:e7:c5:da:c2:20:52:74:15:f3:43:8c: c8:89:0b:90:69:35:6e:ab:f8:46:b1:36:0e:27:7f: 10:ff:52:02:ee:5a:24:71:16:cd:34:67:df:7e:94: 89:f7:15:71:e9:f4:f9:e7:bc:07:ac:1f:99:e0:82: 14:7a:6d:68:ac:f1:5c:63:bb:23:d3:6c:7d:40:70: 4a:1d:28:8b:2e:14:32:ce:71:59:2c:61:35:a5:1f: e9:77:8d:37:18:7e:91:53:10:10:f7:c2:39:0d:d5: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:85:1F:5E:9F:4A:6F:B7:8F:AC:0A:B6:8B:3B:CE:95:49:6E:AC:FB X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e7:3b:42:35:09:aa:71:b3:be:1b:19:d8:01:06:65:40:21: 99:a1:55:24:e7:b1:23:a3:be:5e:68:4a:75:91:26:23:bf:a6: d3:12:c7:af:30:36:50:f2:57:15:d7:19:28:1f:25:29:c6:fa: 41:9b:f3:74:0a:c2:bb:84:b4:11:c7:d6:70:3c:59:e4:c2:77: b8:25:b2:6c:6f:c5:2b:61:7e:3c:a9:2b:99:ba:a6:de:f2:16: 75:bd:59:69:40:f7:a6:bf:47:6a:81:30:f6:5e:b9:45:c7:60: b7:e1:7f:cd:9d:c4:6d:63:37:28:fb:72:7c:23:20:3e:ff:b2: c3:11:30:f2:c8:b4:fc:fe:73:7d:37:29:0b:d8:e6:42:25:4e: 54:08:70:f0:24:7f:50:32:1d:9f:78:78:c7:ae:99:73:af:4c: 27:ee:15:1f:b5:7c:53:9e:42:ca:86:b5:92:71:fd:f8:5d:38: ef:d4:a0:16:56:d5:46:d9:eb:4b:c8:f3:12:ae:b0:0d:f7:7f: 8b:65:0f:77:79:04:29:0c:ae:4f:04:81:e5:de:89:b0:0f:08: f3:1a:85:5e:32:f3:1a:e6:00:52:ff:6b:76:92:af:7e:67:14: 91:93:00:99:ff:94:38:cb:39:aa:c1:95:21:74:b3:4a:99:80: 90:77:ae:14 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULa/tFNUAEcUvaAFgZCBIU7ih6G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjA3MjgwMTMxNTBaFw0yNjA3MjkwNDU5NTBaMDMxMTAvBgNV BAMTKDQ1ODUxRjVFOUY0QTZGQjc4RkFDMEFCNjhCM0JDRTk1NDk2RUFDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgd/KWJYTcBto+CyKsHZ0QXkSR Uy5Z/YnvURzarMoHQYXFrmlau2pVlOT42eZpiVax72AXIIxa22Bnk5IblOYSdQHK je4B07I0M/ufSs49gdbkEjarLClm4Z+4TK3j45GJrHcVSIsfH65epbjcYCP200dh yZXU6c/FRF96clkBy3BnV2qtXfOJpwiSZ0H5VkQsWmza5rbZEuTnxdrCIFJ0FfND jMiJC5BpNW6r+EaxNg4nfxD/UgLuWiRxFs00Z99+lIn3FXHp9PnnvAesH5ngghR6 bWis8VxjuyPTbH1AcEodKIsuFDLOcVksYTWlH+l3jTcYfpFTEBD3wjkN1VKlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURYUfXp9Kb7ePrAq2izvOlUlurPswHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8xLzMwRUMzNDFD QzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+5ztC NQmqcbO+GxnYAQZlQCGZoVUk57Ejo75eaEp1kSYjv6bTEsevMDZQ8lcV1xkoHyUp xvpBm/N0CsK7hLQRx9ZwPFnkwne4JbJsb8UrYX48qSuZuqbe8hZ1vVlpQPemv0dq gTD2XrlFx2C34X/NncRtYzco+3J8IyA+/7LDETDyyLT8/nN9NykL2OZCJU5UCHDw JH9QMh2feHjHrplzr0wn7hUftXxTnkLKhrWScf34XTjv1KAWVtVG2etLyPMSrrAN 93+LZQ93eQQpDK5PBIHl3omwDwjzGoVeMvMa5gBS/2t2kq9+ZxSRkwCZ/5Q4yzmq wZUhdLNKmYCQd64U -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:51 2026 by rpki-client