$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: Gv/g6orXune7eUEa9A5YirI1r68c5VicnvRjH7/rjDU= Subject key identifier: 15:7A:2D:A5:35:3A:3F:63:A6:17:AA:19:BC:E8:B3:3E:E7:7F:CE:69 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 71683CEAB1BE2D76DCC8D9906C9A28AE4F8988B7 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0330 Signing time: Tue 28 Jul 2026 16:48:12 +0000 Manifest this update: Tue 28 Jul 2026 16:43:12 +0000 Manifest next update: Thu 30 Jul 2026 07:59:12 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 2: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 3: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 4: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 5: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 6: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: koG5sa04STnDd1MyHtoames+QqhZZmRTr0IoMBdv6XY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 16:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:68:3c:ea:b1:be:2d:76:dc:c8:d9:90:6c:9a:28:ae:4f:89:88:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jul 28 16:43:12 2026 GMT Not After : Jul 30 07:59:12 2026 GMT Subject: CN=157A2DA5353A3F63A617AA19BCE8B33EE77FCE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:71:86:79:17:fa:e2:93:a6:9e:e6:a3:f5: a9:dc:8d:6f:ec:2f:a3:c9:14:28:8e:b6:f0:c4:c0: 8c:c3:f9:7b:ee:4a:12:b9:22:45:16:da:1a:80:44: 66:07:9c:99:c8:d6:dd:09:7b:c1:07:4e:d1:19:18: ed:29:a1:94:aa:61:71:1b:d6:c9:59:3f:cd:95:c2: ad:50:15:2a:60:b8:31:f0:fe:91:cd:55:58:7b:7c: ab:a7:e0:85:7c:07:a7:5c:a5:ef:04:6b:c0:44:5b: 7d:03:83:5d:24:b6:98:40:53:c0:25:5a:ec:87:cb: 27:d4:46:9b:a3:bb:c2:11:ba:a7:45:c0:b5:fc:9f: e8:f3:85:e7:72:36:61:0f:68:a5:42:b8:48:09:b9: d4:ab:f0:da:e8:35:0f:fc:68:97:df:d7:52:c1:a0: c9:72:c7:b3:fd:c3:f3:af:33:8f:c4:00:26:1b:8f: ef:b2:d6:e8:37:de:ce:18:9f:b1:6b:f6:ed:bd:f7: ba:2c:07:69:d4:09:4a:1e:27:d5:a9:3a:3c:9b:4a: 4e:a1:72:3c:90:09:01:d0:ae:72:df:aa:a2:09:6b: 1b:60:c2:4b:7a:f0:bc:55:b6:10:fd:1e:cc:a2:1c: b2:7e:b8:58:0f:d9:75:0e:c3:6a:55:ed:a4:53:f1: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:2D:A5:35:3A:3F:63:A6:17:AA:19:BC:E8:B3:3E:E7:7F:CE:69 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:6f:a9:c1:46:3c:9e:5a:bc:ea:5d:83:5b:18:fb:bd:81: bd:23:3a:96:62:f7:01:4d:da:33:f6:44:a0:42:02:16:e7:db: fd:2d:1a:be:5f:40:93:ca:89:29:59:8c:c2:37:d6:70:85:f9: 12:3e:a0:d8:cc:7d:24:84:46:d7:3f:d0:6f:32:3e:ee:fe:b8: 39:53:3c:77:a6:49:e3:d2:c3:0b:aa:42:5e:92:c0:d3:f0:7f: 01:3e:89:ae:ae:1d:2e:ba:bc:7f:2c:04:99:91:5e:d8:91:d1: 52:20:47:48:64:19:9f:7e:00:78:72:a6:67:c9:d2:08:0f:37: 28:78:6a:89:e0:09:e5:9c:b4:15:a4:93:1a:1d:4a:79:8d:b6: 0d:1b:0b:c3:57:1e:e6:55:10:20:ee:aa:f3:a3:aa:1b:9a:8f: 49:da:66:de:4e:77:e4:4d:71:c5:7c:0c:4b:bf:b1:9f:69:ef: 67:e8:80:e6:c6:40:a9:22:18:33:01:18:21:cd:2d:1e:5e:83: 80:3c:9f:70:31:23:57:ac:a4:17:77:fb:45:fe:53:5f:e4:60: 33:d9:e3:b6:c3:70:b7:07:c3:14:eb:50:c3:e7:18:b5:4a:cb: 0d:83:39:99:af:ba:07:af:5f:42:d6:1c:6d:94:a5:e2:bd:a6: a0:8a:26:fa -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcWg86rG+LXbcyNmQbJoork+JiLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA3MjgxNjQzMTJaFw0yNjA3MzAwNzU5MTJaMDMxMTAvBgNV BAMTKDE1N0EyREE1MzUzQTNGNjNBNjE3QUExOUJDRThCMzNFRTc3RkNFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJHGGeRf64pOmnuaj9ancjW/s L6PJFCiOtvDEwIzD+XvuShK5IkUW2hqARGYHnJnI1t0Je8EHTtEZGO0poZSqYXEb 1slZP82Vwq1QFSpguDHw/pHNVVh7fKun4IV8B6dcpe8Ea8BEW30Dg10ktphAU8Al WuyHyyfURpuju8IRuqdFwLX8n+jzhedyNmEPaKVCuEgJudSr8NroNQ/8aJff11LB oMlyx7P9w/OvM4/EACYbj++y1ug33s4Yn7Fr9u2997osB2nUCUoeJ9WpOjybSk6h cjyQCQHQrnLfqqIJaxtgwkt68LxVthD9HsyiHLJ+uFgP2XUOw2pV7aRT8QdRAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUFXotpTU6P2OmF6oZvOizPud/zmkwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMpvqcFGPJ5avOpdg1sY +72BvSM6lmL3AU3aM/ZEoEICFufb/S0avl9Ak8qJKVmMwjfWcIX5Ej6g2Mx9JIRG 1z/QbzI+7v64OVM8d6ZJ49LDC6pCXpLA0/B/AT6Jrq4dLrq8fywEmZFe2JHRUiBH SGQZn34AeHKmZ8nSCA83KHhqieAJ5Zy0FaSTGh1KeY22DRsLw1ce5lUQIO6q86Oq G5qPSdpm3k535E1xxXwMS7+xn2nvZ+iA5sZAqSIYMwEYIc0tHl6DgDyfcDEjV6yk F3f7Rf5TX+RgM9njtsNwtwfDFOtQw+cYtUrLDYM5ma+6B69fQtYcbZSl4r2moIom +g== -----END CERTIFICATE-----Generated at Wed Jul 29 01:40:53 2026 by rpki-client