$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: MtvH5da2uMzjaP2SHnTQdd3q8uD+Wm3SHGoM8TG33RA= Subject key identifier: 16:D5:AC:DB:BB:61:F0:2D:80:50:9C:C1:D2:3C:FB:5A:21:80:D7:79 Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 7258DDCBD80CB059CDFCC1057E424C25AAAF8D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 28 Signing time: Thu 16 Apr 2026 06:44:41 +0000 Manifest this update: Thu 16 Apr 2026 06:39:41 +0000 Manifest next update: Fri 17 Apr 2026 10:34:41 +0000 Files and hashes: 1: 3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa (hash: nWTO0lpwynwPzlypXWMi8OJsZ+pn3ksbbbieOy6HhBk=) 2: 3137362e3130322e3137322e302f32322d3232203d3e2032393134.roa (hash: NeWINT0yzxeGbQAkYPSSTlBaATh7hwEdqMyxHoWCi2c=) 3: 3137362e3130322e3136392e302f32342d3234203d3e20323130353435.roa (hash: qdweDv/ArUKKn+iSNPlMNOmHnjG+yu3hh6MZ3RuN5Ks=) 4: 3139332e32352e3137312e302f32342d3234203d3e2032393134.roa (hash: arWXT2PubGe9M8bDcOmGqKzDFtv/A2/+wj2Z/kqOP7w=) 5: 3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa (hash: 6UdWfUX7KBZtt8PfrfenFEunK14genwVi/Drc7lSeRQ=) 6: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 7: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 8: 3137362e3130322e3137302e302f32342d3234203d3e20323130353435.roa (hash: iLAOFktgeNi6FXUckFRcsh0irPGm/7n9N5v2nHd4bNg=) 9: 39312e3233332e382e302f32342d3234203d3e20323135313532.roa (hash: QjQW+ZHXaZZs5QWfyh6YzF1NV5fXTeQF/UMJGjS1emY=) 10: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (hash: yzeJy7dYT+jl4VhGxOCrUaWlHT1VskDn5phrnOjvQYI=) 11: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=) 12: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: UUP6P9PAdK8Lh/aAn3JcSXmyoBk67Mv0EPHfZzBIB+A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 10:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:58:dd:cb:d8:0c:b0:59:cd:fc:c1:05:7e:42:4c:25:aa:af:8d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Apr 16 06:39:41 2026 GMT Not After : Apr 17 10:34:41 2026 GMT Subject: CN=16D5ACDBBB61F02D80509CC1D23CFB5A2180D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:fc:54:f4:94:79:5b:72:e9:d4:60:f9:d4: a8:f4:b3:ea:19:9c:64:2c:04:47:da:d0:57:45:4c: 23:9d:a7:9d:4c:f4:09:04:ac:1e:4f:a3:5d:fd:90: 05:77:f1:a2:9f:db:b1:8f:e7:ec:06:9c:95:08:ad: 76:89:39:32:ff:26:75:cf:d0:52:c3:6f:41:97:7b: 84:7c:ba:13:e8:d5:f6:04:f4:40:ca:1d:d3:af:58: 62:76:ca:2a:f8:9c:a8:93:75:29:06:59:c1:e7:33: 4b:ea:6c:7c:94:29:eb:03:13:73:a2:22:9d:bb:d5: 46:10:ad:2b:07:34:ac:28:4b:ec:18:8a:ec:0a:ea: ae:2e:50:29:55:23:4d:19:30:46:0b:d5:fd:4a:a0: 34:93:de:86:3f:e6:4f:e5:c4:03:38:72:5c:37:f9: 66:80:63:f4:db:a3:33:36:2d:1f:ee:5f:bd:9c:c2: 4e:37:50:8d:ad:70:79:67:41:b8:14:f1:e4:1f:9c: b6:80:05:d0:47:0d:51:36:d9:a1:90:dd:23:21:7e: d1:5d:f1:f6:56:fe:42:36:60:3c:23:35:ad:72:91: 3b:72:08:f1:52:25:5b:81:0a:7c:05:ca:b3:bb:e1: ed:95:d3:d7:3a:eb:9c:ef:b8:e9:c3:03:5a:6e:38: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D5:AC:DB:BB:61:F0:2D:80:50:9C:C1:D2:3C:FB:5A:21:80:D7:79 X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:28:b4:4f:71:65:6e:fc:a8:95:27:6c:69:78:28:74:47:c4: 46:97:e5:c8:12:fc:34:17:d7:bd:cc:e4:b9:6d:27:3c:43:14: e0:15:56:2c:5a:8e:f7:8b:f4:90:be:0b:86:75:02:af:59:c0: 21:39:76:1c:8b:1c:8b:89:5f:9d:b7:86:14:21:97:33:4d:70: b5:ea:23:91:bb:a2:13:6c:5c:17:00:20:bc:2a:32:b8:08:11: 3f:13:38:eb:c0:d5:5d:38:ed:56:51:9a:bd:ca:be:83:42:d3: cb:ff:7f:0a:b6:89:a9:ff:51:5e:49:0e:d7:3c:2e:6f:84:b0: af:44:a0:32:fc:d0:a6:18:dd:0a:5b:bd:a7:4d:74:e9:2e:16: 03:58:aa:de:a3:84:2d:d7:27:30:89:19:0f:15:8e:13:3a:f5: d2:1b:d5:e6:1c:b3:b5:5d:ba:00:3f:bf:8b:02:a2:74:62:25: 93:6e:ce:10:df:53:1d:11:d4:15:94:17:75:41:77:cc:7e:12: cd:5f:f9:3a:6d:41:b9:90:0c:22:6a:e1:46:3a:30:9d:fa:53: 34:06:92:d3:c1:13:6a:d1:e6:05:4b:63:35:a6:3f:55:5f:44: 63:88:92:57:5b:cf:9a:bd:93:d9:fe:32:cc:75:1d:aa:0c:78: d0:60:fe:33 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcljdy9gMsFnN/MEFfkJMJaqvjZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA0MTYwNjM5NDFaFw0yNjA0MTcxMDM0NDFaMDMxMTAvBgNV BAMTKDE2RDVBQ0RCQkI2MUYwMkQ4MDUwOUNDMUQyM0NGQjVBMjE4MEQ3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTfxU9JR5W3Lp1GD51Kj0s+oZ nGQsBEfa0FdFTCOdp51M9AkErB5Po139kAV38aKf27GP5+wGnJUIrXaJOTL/JnXP 0FLDb0GXe4R8uhPo1fYE9EDKHdOvWGJ2yir4nKiTdSkGWcHnM0vqbHyUKesDE3Oi Ip271UYQrSsHNKwoS+wYiuwK6q4uUClVI00ZMEYL1f1KoDST3oY/5k/lxAM4clw3 +WaAY/TbozM2LR/uX72cwk43UI2tcHlnQbgU8eQfnLaABdBHDVE22aGQ3SMhftFd 8fZW/kI2YDwjNa1ykTtyCPFSJVuBCnwFyrO74e2V09c665zvuOnDA1puOEftAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFtWs27th8C2AUJzB0jz7WiGA13kwHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSi0T3FlbvyolSdsaXgo dEfERpflyBL8NBfXvczkuW0nPEMU4BVWLFqO94v0kL4LhnUCr1nAITl2HIsci4lf nbeGFCGXM01wteojkbuiE2xcFwAgvCoyuAgRPxM468DVXTjtVlGavcq+g0LTy/9/ CraJqf9RXkkO1zwub4Swr0SgMvzQphjdClu9p0106S4WA1iq3qOELdcnMIkZDxWO Ezr10hvV5hyztV26AD+/iwKidGIlk27OEN9THRHUFZQXdUF3zH4SzV/5Om1BuZAM ImrhRjownfpTNAaS08ETatHmBUtjNaY/VV9EY4iSV1vPmr2T2f4yzHUdqgx40GD+ Mw== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:14 2026 by rpki-client