$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: Y/u2SDbCImEcljDKWu6q8h43pdbGx8UPKi+z68/hQCw= Subject key identifier: 0A:DF:C6:A8:41:57:1D:1C:0D:7E:5A:CE:AE:4A:F3:FE:1D:80:86:81 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 56CD051A54E5C02638B1863B7960EFDDE6A17A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: A1 Signing time: Tue 28 Jul 2026 03:40:55 +0000 Manifest this update: Tue 28 Jul 2026 03:35:55 +0000 Manifest next update: Wed 29 Jul 2026 03:52:55 +0000 Files and hashes: 1: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 2: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 3: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 4: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: DDgHslczAvJCSzUnS07jK4Uadib1u1eu82L5vlKxghE=) 5: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 6: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 7: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) 8: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cd:05:1a:54:e5:c0:26:38:b1:86:3b:79:60:ef:dd:e6:a1:7a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Jul 28 03:35:55 2026 GMT Not After : Jul 29 03:52:55 2026 GMT Subject: CN=0ADFC6A841571D1C0D7E5ACEAE4AF3FE1D808681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:8c:c2:f6:fc:73:f4:53:1c:e9:0f:f3:57: 8b:81:d6:3d:46:ea:30:68:11:64:c8:e3:fb:9e:d0: fc:02:34:db:00:f3:bd:00:5a:33:b0:90:ba:02:fa: fd:ff:d8:9a:3f:33:67:b5:fd:2b:aa:fa:54:9d:4b: 3a:c6:f1:8b:9e:1e:81:ca:4d:f4:a0:60:6a:f9:17: c8:ac:72:9d:d9:ba:c0:43:c4:2f:48:ef:11:a7:24: cd:b6:5a:83:1d:d0:3e:21:73:05:d7:83:52:f3:4a: f4:89:5c:e8:0c:bb:3c:a4:5d:c4:f3:dd:80:05:80: a7:41:19:50:dc:f8:a2:6a:2a:58:bb:4b:ea:f8:fc: 17:d4:df:b8:47:67:2d:a0:74:53:c9:61:c3:48:d6: 8c:a7:aa:c1:fa:a4:a4:e6:ba:f2:1f:fe:ec:d2:c7: e2:c3:83:d4:e2:73:80:e3:f3:e5:71:36:47:56:69: 2f:a2:a0:da:d3:4e:e2:c4:7c:a5:53:c8:94:9d:b5: 9b:69:88:ed:69:23:bf:40:75:74:c9:c4:8c:2c:77: ad:b1:0e:e5:c3:b1:8a:7e:d6:77:35:4e:49:b9:82: e8:c3:af:6d:65:05:2d:a2:67:78:32:b7:33:a1:a8: 79:fd:01:ec:d1:bd:a3:db:70:b9:88:61:90:39:39: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DF:C6:A8:41:57:1D:1C:0D:7E:5A:CE:AE:4A:F3:FE:1D:80:86:81 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b9:e2:09:94:7b:a9:a4:be:b3:ea:eb:eb:d2:86:92:40:ed: 7b:dd:9d:a8:f0:b7:69:85:cf:4e:93:6a:fc:f2:0b:fd:82:a8: d5:ce:3a:b8:90:7b:0d:80:a0:34:60:ba:c7:7e:5e:bf:48:07: 20:a7:1e:7d:df:fe:81:4b:59:bd:77:b3:54:d9:59:63:56:5e: 1a:83:27:8c:e8:c9:50:84:3c:f3:8d:37:0c:4e:b7:ca:32:49: 95:5e:a8:db:36:7b:d4:ae:ff:5e:bc:bb:1d:4c:dc:6a:1a:1c: 08:32:1e:5e:fb:ea:04:8c:7e:c7:15:db:7b:f8:c5:89:58:be: 69:ba:2b:bd:83:c5:d3:a3:65:44:fa:05:37:d8:1b:f5:b2:03: 9e:9c:ff:7f:62:da:4f:c8:4e:a7:2c:83:b7:a2:a7:ee:04:04: 98:74:31:6b:89:68:65:d3:48:30:a0:f0:ef:fb:6f:0b:82:f1: d1:d7:4b:14:d5:bc:02:2f:0f:3b:b4:dc:35:22:e7:cf:de:c7: 59:d8:d3:78:be:24:b5:d3:cd:4b:63:bc:01:4c:74:2a:3f:65: cd:85:bc:80:49:b0:a6:a0:73:dc:be:41:6f:70:a7:c1:a0:70: 5c:89:cb:d2:f6:92:72:0d:88:29:ea:16:c6:49:6a:1b:7d:39: b9:46:9e:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVs0FGlTlwCY4sYY7eWDv3eahehswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA3MjgwMzM1NTVaFw0yNjA3MjkwMzUyNTVaMDMxMTAvBgNV BAMTKDBBREZDNkE4NDE1NzFEMUMwRDdFNUFDRUFFNEFGM0ZFMUQ4MDg2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMYzC9vxz9FMc6Q/zV4uB1j1G 6jBoEWTI4/ue0PwCNNsA870AWjOwkLoC+v3/2Jo/M2e1/Suq+lSdSzrG8YueHoHK TfSgYGr5F8iscp3ZusBDxC9I7xGnJM22WoMd0D4hcwXXg1LzSvSJXOgMuzykXcTz 3YAFgKdBGVDc+KJqKli7S+r4/BfU37hHZy2gdFPJYcNI1oynqsH6pKTmuvIf/uzS x+LDg9Tic4Dj8+VxNkdWaS+ioNrTTuLEfKVTyJSdtZtpiO1pI79AdXTJxIwsd62x DuXDsYp+1nc1Tkm5gujDr21lBS2iZ3gytzOhqHn9AezRvaPbcLmIYZA5OSirAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCt/GqEFXHRwNflrOrkrz/h2AhoEwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLniCZR7qaS+s+rr69KG kkDte92dqPC3aYXPTpNq/PIL/YKo1c46uJB7DYCgNGC6x35ev0gHIKcefd/+gUtZ vXezVNlZY1ZeGoMnjOjJUIQ88403DE63yjJJlV6o2zZ71K7/Xry7HUzcahocCDIe XvvqBIx+xxXbe/jFiVi+aborvYPF06NlRPoFN9gb9bIDnpz/f2LaT8hOpyyDt6Kn 7gQEmHQxa4loZdNIMKDw7/tvC4Lx0ddLFNW8Ai8PO7TcNSLnz97HWdjTeL4ktdPN S2O8AUx0Kj9lzYW8gEmwpqBz3L5Bb3CnwaBwXInL0vaScg2IKeoWxklqG305uUae ww== -----END CERTIFICATE-----Generated at Tue Jul 28 14:46:09 2026 by rpki-client