$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: 8M8EHtSYGR0IIQm4mE5s8ClSuWzYjWFFQwLi69HJU4g= Subject key identifier: 8A:15:E0:DB:23:F4:86:18:F5:CC:C1:DA:89:F1:AD:63:9F:0C:EB:8D Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 126CE88701CE5E422EB13670F5464D2ED41E3BCA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 045F Signing time: Tue 28 Jul 2026 16:31:17 +0000 Manifest this update: Tue 28 Jul 2026 16:26:17 +0000 Manifest next update: Wed 29 Jul 2026 16:37:17 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: RBBu1eqMOSOMhaYwJOK+HpHkllEyZpBeEvUiB9h5hBw=) 2: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6c:e8:87:01:ce:5e:42:2e:b1:36:70:f5:46:4d:2e:d4:1e:3b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jul 28 16:26:17 2026 GMT Not After : Jul 29 16:37:17 2026 GMT Subject: CN=8A15E0DB23F48618F5CCC1DA89F1AD639F0CEB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:40:77:d3:bb:7e:ac:20:95:9b:a1:db:2c: af:09:b9:f0:ec:a0:9e:22:29:38:3d:fd:9e:d1:9a: bd:c0:89:9c:49:c0:d3:b7:ad:e6:cd:2d:77:bf:f1: 87:0b:c7:99:a7:1f:0f:0e:9b:ab:7f:e6:db:6b:49: fa:72:cf:eb:b8:54:89:93:a7:33:f8:2d:f7:fb:13: 57:d5:0f:a1:8c:c0:d4:2b:5b:27:85:18:e3:7a:39: b4:bf:9d:b2:b7:81:43:29:a2:0d:47:6b:9f:0b:56: 66:af:55:fe:d8:0a:d7:ac:a6:55:e1:2e:dc:2b:7d: ad:42:a8:59:e9:11:62:7d:6f:9f:bc:f6:8e:b7:14: f5:c5:a8:11:7d:65:a4:45:65:1a:bb:d6:ea:bd:f7: 3d:89:27:cd:0d:d2:8f:4e:05:4f:78:fa:d9:f5:0c: 1e:8a:e0:57:f9:aa:f3:64:04:2a:ee:15:84:7b:40: c9:3c:b9:65:7a:a6:f1:66:96:79:44:50:15:88:07: 73:d2:76:00:59:15:12:9e:a5:77:86:c3:e1:55:91: 0c:1a:d9:35:e1:fa:34:c8:58:98:a5:2a:d8:3d:a9: 35:eb:70:0a:ef:60:1f:34:ce:a9:62:cf:e7:6c:e6: 78:7f:ed:a3:da:b7:fe:06:65:74:24:89:0c:3f:a4: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:15:E0:DB:23:F4:86:18:F5:CC:C1:DA:89:F1:AD:63:9F:0C:EB:8D X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a8:41:08:4b:6a:7f:19:ee:07:dd:2e:cf:77:c6:16:cd:9e: 30:9b:82:b3:fb:84:f9:8b:3b:24:b0:3f:25:8c:ee:22:17:33: e4:79:d9:cf:7f:7f:4d:12:d6:5c:d5:e4:8c:8b:2e:dd:1a:a9: 73:dc:cf:30:51:ab:03:b7:e7:ea:7c:f3:b0:53:62:7d:d8:b8: ab:3a:82:b9:f5:ce:e4:9c:05:22:f1:cc:c3:51:ed:45:32:17: c7:e9:9c:f6:fa:97:c6:1b:3d:74:63:51:56:82:1f:dd:af:17: ee:50:ee:82:cc:5b:33:c2:03:df:9f:b6:87:0a:b1:58:ba:e5: 98:cb:09:79:4e:73:34:7c:c8:e3:8d:ea:f5:10:74:fc:a1:df: 8a:62:ab:4d:91:79:16:f3:1a:03:71:eb:5d:6e:aa:87:7f:8b: ba:14:14:f8:12:f5:ab:5b:cb:7f:61:5b:53:4e:f6:2f:37:ad: 5d:6f:3b:a6:90:18:27:bf:9f:30:7e:2b:9e:85:d3:b2:60:ba: 94:8e:de:a4:62:60:26:ef:b8:56:3e:cb:d8:b2:0a:ff:b7:7e: 00:ac:1c:0d:3c:ea:b5:8a:0b:97:81:69:29:7d:af:2b:62:eb: bf:12:3c:25:db:b3:bf:e9:6b:47:69:f1:d4:c1:00:c1:9a:d1: 59:99:16:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEmzohwHOXkIusTZw9UZNLtQeO8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA3MjgxNjI2MTdaFw0yNjA3MjkxNjM3MTdaMDMxMTAvBgNV BAMTKDhBMTVFMERCMjNGNDg2MThGNUNDQzFEQTg5RjFBRDYzOUYwQ0VCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbI0B307t+rCCVm6HbLK8JufDs oJ4iKTg9/Z7Rmr3AiZxJwNO3rebNLXe/8YcLx5mnHw8Om6t/5ttrSfpyz+u4VImT pzP4Lff7E1fVD6GMwNQrWyeFGON6ObS/nbK3gUMpog1Ha58LVmavVf7YCtesplXh Ltwrfa1CqFnpEWJ9b5+89o63FPXFqBF9ZaRFZRq71uq99z2JJ80N0o9OBU94+tn1 DB6K4Ff5qvNkBCruFYR7QMk8uWV6pvFmlnlEUBWIB3PSdgBZFRKepXeGw+FVkQwa 2TXh+jTIWJilKtg9qTXrcArvYB80zqliz+ds5nh/7aPat/4GZXQkiQw/pNr1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUihXg2yP0hhj1zMHaifGtY58M640wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdqEEI S2p/Ge4H3S7Pd8YWzZ4wm4Kz+4T5izsksD8ljO4iFzPkednPf39NEtZc1eSMiy7d Gqlz3M8wUasDt+fqfPOwU2J92LirOoK59c7knAUi8czDUe1FMhfH6Zz2+pfGGz10 Y1FWgh/drxfuUO6CzFszwgPfn7aHCrFYuuWYywl5TnM0fMjjjer1EHT8od+KYqtN kXkW8xoDcetdbqqHf4u6FBT4EvWrW8t/YVtTTvYvN61dbzumkBgnv58wfiuehdOy YLqUjt6kYmAm77hWPsvYsgr/t34ArBwNPOq1iguXgWkpfa8rYuu/Ejwl27O/6WtH afHUwQDBmtFZmRY+ -----END CERTIFICATE-----Generated at Wed Jul 29 02:21:06 2026 by rpki-client