$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: 09YgXNHkJl+xky+8AZbMxJXe4fT2jUZlkHSUsTva0eg= Subject key identifier: 2F:52:CE:44:0D:4E:F5:41:CE:37:BD:1F:F5:2F:3A:90:DA:BB:D0:EB Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 449D98CD204848F1FEF64A1496CA1F38F6F64F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0296 Signing time: Tue 28 Jul 2026 05:02:13 +0000 Manifest this update: Tue 28 Jul 2026 04:57:13 +0000 Manifest next update: Wed 29 Jul 2026 08:52:13 +0000 Files and hashes: 1: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 2: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 3: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 4: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: g0W1fO/K6RFqq7MPsz5G4eZuv45qp8DLZc7jdxm8KZQ=) 5: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 6: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 7: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 8: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 9: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9d:98:cd:20:48:48:f1:fe:f6:4a:14:96:ca:1f:38:f6:f6:4f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jul 28 04:57:13 2026 GMT Not After : Jul 29 08:52:13 2026 GMT Subject: CN=2F52CE440D4EF541CE37BD1FF52F3A90DABBD0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:6a:a3:4a:78:4f:b7:cb:c9:8f:1e:8b:69: 79:c3:81:b6:82:2c:ea:ad:21:4d:28:a0:9a:18:a3: 8e:6b:e2:c5:c8:44:7c:d3:da:32:32:d7:a8:59:b5: 1e:d2:a6:bd:6b:c1:5d:03:9c:22:17:49:4d:94:cf: 30:52:51:9b:30:53:78:2e:8c:ff:6a:60:fc:68:21: b2:3a:3f:12:92:a9:f2:b5:5a:92:eb:7c:15:39:c1: d9:9e:93:cb:a1:58:8e:d8:53:27:65:1f:62:33:c2: 55:da:69:55:a2:76:05:9a:6d:04:c4:17:3c:7c:43: 5d:4a:12:e1:c6:db:f7:b6:1f:ce:79:7c:8d:80:10: 14:56:95:e6:8a:69:d5:b4:39:cd:41:53:4d:07:df: be:1c:15:c0:7b:c5:ba:41:a7:ad:3f:87:e5:2e:ea: 5b:37:6e:f1:1a:d9:6c:f4:47:5c:fe:e3:38:e9:ba: 97:bd:fc:db:04:22:a7:37:2b:fd:b0:df:ed:e3:dd: d2:5c:cc:37:24:a9:95:09:58:81:52:ec:19:b3:64: 02:0b:b0:b6:95:0b:9d:3c:61:ef:9f:d9:47:f8:6d: ac:b5:d7:2b:ac:09:31:58:71:c5:eb:a3:0f:19:f4: 9e:d8:4e:f2:d9:4c:be:4a:3a:a8:fa:89:d4:e3:6c: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:CE:44:0D:4E:F5:41:CE:37:BD:1F:F5:2F:3A:90:DA:BB:D0:EB X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:44:47:e0:d1:57:6e:67:b9:1a:88:0f:cc:32:ff:53:8e:10: 40:0e:a5:f6:6f:8c:b9:e7:56:86:51:2f:2f:a4:f4:0a:d7:0f: c3:d7:7f:11:d2:d1:b0:c5:1d:e0:a6:d4:8c:5b:9a:83:6b:fd: df:be:0b:5b:bb:12:8b:ed:f9:b6:77:d8:f8:a5:22:e2:b3:f2: 0e:f4:89:46:2c:6a:7c:60:4a:87:17:e2:3e:31:3c:39:81:43: d4:0c:6e:c4:43:ae:b8:c5:8c:43:ea:8f:3d:5d:d8:9e:a7:59: 66:d4:53:3e:6c:5e:d7:80:a3:cc:72:5b:0c:51:c9:6b:2e:c8: 8d:e5:b6:08:5a:5a:9a:ee:4b:8f:ca:dd:eb:ff:a4:26:4c:8f: aa:cb:b5:50:91:e9:e2:71:e4:e2:48:20:cf:04:ff:dc:94:22: 80:b4:30:e5:3a:98:f4:c6:19:a7:fa:1a:54:36:32:a4:7c:a6: 5c:b8:f2:d3:bf:ee:49:18:ed:f6:40:ae:df:32:a9:ac:90:5b: 3d:c5:04:da:59:a6:fc:4b:55:40:0c:8c:30:9d:26:41:78:7e: c6:96:53:64:1d:88:d1:c3:6e:c0:fc:d5:09:4b:a3:9a:61:ee: de:99:98:39:ea:01:e2:f1:4b:0d:a3:00:29:ad:a3:65:5b:01: b1:f2:19:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURJ2YzSBISPH+9koUlsofOPb2T3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA3MjgwNDU3MTNaFw0yNjA3MjkwODUyMTNaMDMxMTAvBgNV BAMTKDJGNTJDRTQ0MEQ0RUY1NDFDRTM3QkQxRkY1MkYzQTkwREFCQkQwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYWqjSnhPt8vJjx6LaXnDgbaC LOqtIU0ooJoYo45r4sXIRHzT2jIy16hZtR7Spr1rwV0DnCIXSU2UzzBSUZswU3gu jP9qYPxoIbI6PxKSqfK1WpLrfBU5wdmek8uhWI7YUydlH2IzwlXaaVWidgWabQTE Fzx8Q11KEuHG2/e2H855fI2AEBRWleaKadW0Oc1BU00H374cFcB7xbpBp60/h+Uu 6ls3bvEa2Wz0R1z+4zjpupe9/NsEIqc3K/2w3+3j3dJczDckqZUJWIFS7BmzZAIL sLaVC508Ye+f2Uf4bay11yusCTFYccXrow8Z9J7YTvLZTL5KOqj6idTjbGLBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL1LORA1O9UHON70f9S86kNq70OswHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtURH4NFXbme5GogPzDL/ U44QQA6l9m+MuedWhlEvL6T0CtcPw9d/EdLRsMUd4KbUjFuag2v9374LW7sSi+35 tnfY+KUi4rPyDvSJRixqfGBKhxfiPjE8OYFD1AxuxEOuuMWMQ+qPPV3YnqdZZtRT Pmxe14CjzHJbDFHJay7IjeW2CFpamu5Lj8rd6/+kJkyPqsu1UJHp4nHk4kggzwT/ 3JQigLQw5TqY9MYZp/oaVDYypHymXLjy07/uSRjt9kCu3zKprJBbPcUE2lmm/EtV QAyMMJ0mQXh+xpZTZB2I0cNuwPzVCUujmmHu3pmYOeoB4vFLDaMAKa2jZVsBsfIZ DQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:43:24 2026 by rpki-client