$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: bcQZzjtnyqjhj6Lm3Q81rtUJPI52rTvda4PR9lu/SEk= Subject key identifier: D8:9A:8C:2C:79:9B:73:E9:66:A2:C9:3B:C5:2E:1E:83:48:6E:F8:A1 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 7EFAC908134835FF8B5F0F063613BCCAECD3BDD7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0413 Signing time: Tue 28 Jul 2026 08:28:37 +0000 Manifest this update: Tue 28 Jul 2026 08:23:37 +0000 Manifest next update: Wed 29 Jul 2026 09:41:37 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=) 2: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=) 3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=) 4: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 6C96rSG32juh5MBuDub/XliI05MwTRiPzzePGi7yQOI=) 5: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=) 6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=) 7: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=) 8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=) 9: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fa:c9:08:13:48:35:ff:8b:5f:0f:06:36:13:bc:ca:ec:d3:bd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jul 28 08:23:37 2026 GMT Not After : Jul 29 09:41:37 2026 GMT Subject: CN=D89A8C2C799B73E966A2C93BC52E1E83486EF8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:de:cf:25:3e:f7:1a:7f:cc:fd:77:d5:9a: 95:92:91:d1:db:6b:d4:72:3d:c4:ab:d4:57:22:ab: 47:5f:e9:44:50:b2:71:01:a5:c2:a0:ab:91:75:38: bd:44:71:7a:76:e9:79:3d:e1:58:7e:fb:da:61:f4: 36:ba:fa:85:52:bc:e2:60:ff:ce:51:d4:da:6b:7d: de:c1:be:a7:17:04:3c:51:32:5a:ee:b5:b3:c2:bb: 24:8e:97:60:a8:90:86:0a:8e:9e:f9:20:4f:29:4b: 7f:ab:7b:dc:f6:bf:68:5a:a9:86:b6:28:9e:f7:e1: 62:af:0b:73:74:cb:65:27:bb:26:9f:6a:38:4a:86: 3a:23:ad:dd:ca:28:47:b3:be:07:eb:b8:57:4d:48: 9f:38:70:12:5e:e1:a0:65:9a:60:f1:38:9c:8e:cc: 71:4a:50:a3:6f:5f:57:6d:69:98:68:f3:02:1b:e1: 39:30:c4:2a:84:a3:f7:af:a5:65:4c:a4:de:2b:72: b5:ec:72:4e:02:25:a5:60:fc:75:97:4b:45:e7:ea: a7:28:c4:4f:f5:e2:85:68:83:c7:d4:8f:d0:94:93: 18:f8:93:c8:df:ac:44:26:c1:e7:f9:70:f8:ab:7f: b2:0c:00:4f:6c:e2:32:52:7e:e3:df:6d:a7:fd:3a: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:8C:2C:79:9B:73:E9:66:A2:C9:3B:C5:2E:1E:83:48:6E:F8:A1 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:45:0e:7b:22:55:af:79:2c:fa:3c:5b:be:a7:a8:b8:87:3b: 89:60:a4:7f:b4:51:4d:b1:e5:c3:90:49:fe:1c:94:d8:82:6d: ee:65:69:00:1c:cc:d0:7e:55:b9:eb:e7:e5:91:8a:13:13:4e: c1:63:9b:e7:5c:e7:5e:7a:69:d5:34:46:73:25:f4:d8:91:38: d1:6c:8e:02:e8:83:39:f9:22:ee:29:eb:4f:b7:fb:f9:77:01: 9c:7c:a2:2b:b4:00:0c:87:19:9d:57:c1:31:0d:dd:b4:5d:e2: 0e:26:4e:05:9a:99:2e:d1:2f:73:89:2a:9c:9a:e1:88:9d:1c: df:c1:9b:f0:43:b5:97:bf:74:cf:39:c5:5d:84:5d:5b:b1:a9: 57:15:0a:e7:9a:8c:a2:57:dc:be:ac:17:89:86:52:29:91:de: 4a:f2:2d:e7:5d:fb:1c:10:3b:cb:99:79:88:d5:a0:96:41:63: f6:10:f6:9f:5c:29:41:d9:d3:0e:ff:50:ef:d0:61:88:81:44: e8:27:61:81:5b:c6:c6:f5:72:c6:14:43:d5:38:90:4d:9f:3d: 0d:f3:ae:ad:de:06:8d:6c:a6:fa:0c:4f:99:00:a1:cf:35:8c: 4e:3a:6b:8f:47:a6:f5:30:e7:42:e0:b4:b4:57:0b:f7:76:90: 38:40:48:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfvrJCBNINf+LXw8GNhO8yuzTvdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA3MjgwODIzMzdaFw0yNjA3MjkwOTQxMzdaMDMxMTAvBgNV BAMTKEQ4OUE4QzJDNzk5QjczRTk2NkEyQzkzQkM1MkUxRTgzNDg2RUY4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9N7PJT73Gn/M/XfVmpWSkdHb a9RyPcSr1Fciq0df6URQsnEBpcKgq5F1OL1EcXp26Xk94Vh++9ph9Da6+oVSvOJg /85R1Nprfd7BvqcXBDxRMlrutbPCuySOl2CokIYKjp75IE8pS3+re9z2v2haqYa2 KJ734WKvC3N0y2UnuyafajhKhjojrd3KKEezvgfruFdNSJ84cBJe4aBlmmDxOJyO zHFKUKNvX1dtaZho8wIb4TkwxCqEo/evpWVMpN4rcrXsck4CJaVg/HWXS0Xn6qco xE/14oVog8fUj9CUkxj4k8jfrEQmwef5cPirf7IMAE9s4jJSfuPfbaf9OqSzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2JqMLHmbc+lmosk7xS4eg0hu+KEwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQRQ57 IlWveSz6PFu+p6i4hzuJYKR/tFFNseXDkEn+HJTYgm3uZWkAHMzQflW56+flkYoT E07BY5vnXOdeemnVNEZzJfTYkTjRbI4C6IM5+SLuKetPt/v5dwGcfKIrtAAMhxmd V8ExDd20XeIOJk4Fmpku0S9ziSqcmuGInRzfwZvwQ7WXv3TPOcVdhF1bsalXFQrn moyiV9y+rBeJhlIpkd5K8i3nXfscEDvLmXmI1aCWQWP2EPafXClB2dMO/1Dv0GGI gUToJ2GBW8bG9XLGFEPVOJBNnz0N866t3gaNbKb6DE+ZAKHPNYxOOmuPR6b1MOdC 4LS0Vwv3dpA4QEh/ -----END CERTIFICATE-----Generated at Wed Jul 29 01:46:47 2026 by rpki-client