$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: UPVSrmWKRL/0K98JDocklaJp+gF50kLaO+EScbwgtaU= Subject key identifier: 30:12:9E:0F:BC:54:F7:52:CC:C5:B3:AF:7C:5B:D5:B5:6D:A6:B9:7E Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 1B0A12ACBC1210CBF278DA9AF2C5766E5C49E858 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 01D3 Signing time: Tue 28 Jul 2026 14:34:37 +0000 Manifest this update: Tue 28 Jul 2026 14:29:37 +0000 Manifest next update: Wed 29 Jul 2026 17:11:37 +0000 Files and hashes: 1: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: uVmjm6XSO0XsoILCrF3p/CmQ3jP2ucMbEGmAFgVzrBg=) 2: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 7: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 8: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0a:12:ac:bc:12:10:cb:f2:78:da:9a:f2:c5:76:6e:5c:49:e8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jul 28 14:29:37 2026 GMT Not After : Jul 29 17:11:37 2026 GMT Subject: CN=30129E0FBC54F752CCC5B3AF7C5BD5B56DA6B97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:81:ab:f5:6d:41:d3:cc:51:d7:cb:a5:10: 2b:44:cc:8c:a2:b5:8d:a0:ff:13:be:b1:10:15:95: 63:93:b7:31:77:b5:77:8d:a8:d9:f0:0e:90:8b:e3: 47:ae:fb:c1:e2:93:f8:d9:c3:d9:3c:52:07:82:3a: 5a:25:f4:e5:20:97:f4:87:11:0a:02:cd:e3:e9:cf: a1:69:40:6f:aa:31:2c:08:11:25:5e:09:9d:b8:d8: 12:0e:e2:1c:55:a5:1d:c5:bd:16:97:7c:35:d7:20: 10:66:17:99:12:fb:d4:a4:30:95:d8:0f:32:1d:8c: f7:32:94:46:a5:01:ac:5f:bc:91:dc:c2:88:c2:97: 3d:78:fb:ca:5c:de:a1:db:0c:89:0f:ba:02:6d:62: 8a:8d:4f:fb:46:ec:4d:a2:52:d4:23:93:11:f8:bb: 01:07:11:eb:dc:67:8c:40:6b:b7:a1:67:d3:b0:81: 20:23:80:6a:b3:f6:fd:72:a8:db:b0:35:f2:1b:42: dc:36:e1:82:36:0d:fd:e7:99:a3:78:75:80:47:d1: 49:ec:6a:24:85:e7:6c:94:b4:ec:9c:8d:91:81:74: ba:43:dd:00:03:bc:61:78:1d:3f:24:9d:2d:1c:a5: 9a:03:b6:2d:a1:af:3e:bd:74:81:05:70:85:78:59: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:9E:0F:BC:54:F7:52:CC:C5:B3:AF:7C:5B:D5:B5:6D:A6:B9:7E X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1f:97:8f:e5:90:fe:a3:0f:69:c2:21:dc:d4:0d:7f:fb:d9: ac:51:fb:3c:66:bd:85:eb:2b:78:63:7c:84:45:eb:eb:58:46: 65:3b:b5:e9:5a:0e:dc:8f:f5:55:31:0f:ae:83:b1:f4:1c:51: e2:f8:bd:00:da:47:e2:28:95:7a:d1:98:5e:76:fd:89:8a:08: 14:c4:e0:7c:71:f4:15:96:4d:7d:23:8b:e5:3e:81:a8:30:1f: 0b:83:3f:10:e0:48:b8:2b:3a:2b:3e:06:9e:ba:4a:22:8e:9c: 86:e3:78:d3:58:79:46:ed:f8:02:c0:67:c4:45:a9:dd:c6:20: 4c:74:c3:a4:cd:dc:d2:97:0c:51:1a:5a:41:77:30:d8:b6:26: ef:44:26:32:92:cb:65:07:f5:82:2c:2a:e7:0e:43:07:f2:85: 72:7b:83:f9:4d:e1:fe:38:00:dd:0b:57:46:2b:2d:a3:a8:16: bd:e0:00:ef:d4:92:5b:c9:bd:51:bf:c5:11:09:2e:32:84:9c: 3c:ef:a8:78:ef:e3:14:1b:4e:0b:1c:f2:14:4b:ed:e3:7c:6f: cf:f5:ae:0a:8c:00:d3:f4:40:0b:01:38:ed:5b:57:0b:f9:3d: 6a:7e:9c:94:42:16:1b:c7:83:f7:02:6c:2c:6b:59:ce:b3:e1: f0:d9:94:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGwoSrLwSEMvyeNqa8sV2blxJ6FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA3MjgxNDI5MzdaFw0yNjA3MjkxNzExMzdaMDMxMTAvBgNV BAMTKDMwMTI5RTBGQkM1NEY3NTJDQ0M1QjNBRjdDNUJENUI1NkRBNkI5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkIGr9W1B08xR18ulECtEzIyi tY2g/xO+sRAVlWOTtzF3tXeNqNnwDpCL40eu+8Hik/jZw9k8UgeCOlol9OUgl/SH EQoCzePpz6FpQG+qMSwIESVeCZ242BIO4hxVpR3FvRaXfDXXIBBmF5kS+9SkMJXY DzIdjPcylEalAaxfvJHcwojClz14+8pc3qHbDIkPugJtYoqNT/tG7E2iUtQjkxH4 uwEHEevcZ4xAa7ehZ9OwgSAjgGqz9v1yqNuwNfIbQtw24YI2Df3nmaN4dYBH0Uns aiSF52yUtOycjZGBdLpD3QADvGF4HT8knS0cpZoDti2hrz69dIEFcIV4WbCrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMBKeD7xU91LMxbOvfFvVtW2muX4wHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArH5eP 5ZD+ow9pwiHc1A1/+9msUfs8Zr2F6yt4Y3yERevrWEZlO7XpWg7cj/VVMQ+ug7H0 HFHi+L0A2kfiKJV60Zhedv2JiggUxOB8cfQVlk19I4vlPoGoMB8Lgz8Q4Ei4Kzor PgaeukoijpyG43jTWHlG7fgCwGfERandxiBMdMOkzdzSlwxRGlpBdzDYtibvRCYy kstlB/WCLCrnDkMH8oVye4P5TeH+OADdC1dGKy2jqBa94ADv1JJbyb1Rv8URCS4y hJw876h47+MUG04LHPIUS+3jfG/P9a4KjADT9EALATjtW1cL+T1qfpyUQhYbx4P3 Amwsa1nOs+Hw2ZSE -----END CERTIFICATE-----Generated at Tue Jul 28 19:47:03 2026 by rpki-client