$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: d6O9MX15y5eau+Mp/KP3usHXLiRqpU6nPIWd98khhKE= Subject key identifier: 7A:4E:2C:72:EC:DF:E4:2E:28:1B:0D:3E:B4:B0:47:1B:8A:96:21:81 Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 41D9F3AC69303783A4FEF8DE94B3070C8D602C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: C6 Signing time: Tue 28 Jul 2026 03:01:56 +0000 Manifest this update: Tue 28 Jul 2026 02:56:56 +0000 Manifest next update: Wed 29 Jul 2026 05:13:56 +0000 Files and hashes: 1: 3137362e3130322e3136382e302f32322d3234203d3e20383334.roa (hash: lsKgEvd0X56tIc1W7FgfOLqz5Dci/6tXpwN26SD9kjg=) 2: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 3: 3137362e3130322e3137352e302f32342d3234203d3e20343031373736.roa (hash: mLkML/nX8BEbBGPjQmndoRU210mLsv1F9QROUnH+NoY=) 4: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 5: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: 7Lw98SXyMRaInDibpwNhbp+a9KDqDj8fkHytuBdYxzI=) 6: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 7: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 8: 3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa (hash: T/dMaaeSvp1LggvFA92KZdLKggY6N7VrSw4p19VRscU=) 9: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) 10: 3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa (hash: sCqFG2YhCHeDqaJvV17HVBO8NLNwKmROgfeEU+mI+Xw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d9:f3:ac:69:30:37:83:a4:fe:f8:de:94:b3:07:0c:8d:60:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Jul 28 02:56:56 2026 GMT Not After : Jul 29 05:13:56 2026 GMT Subject: CN=7A4E2C72ECDFE42E281B0D3EB4B0471B8A962181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:ec:94:30:8c:49:71:1b:1a:58:5f:56:5d: 0f:6a:28:7e:f7:b1:9b:43:c2:31:4a:27:00:dc:7a: fb:dc:44:4b:68:84:ec:e7:92:c3:3a:f2:88:ca:94: 1b:9e:08:4c:d9:ed:a8:3f:f3:f0:7a:44:75:4c:67: 0c:e5:0b:b2:00:cc:63:ff:69:ff:cf:fc:8d:4a:88: 7f:16:00:30:13:94:f0:70:c5:35:83:0e:43:c5:b2: 85:3a:63:b9:52:d8:4c:fb:11:b5:f7:52:0f:1a:fa: 35:bb:e1:f0:ce:5e:87:82:82:8e:85:05:f4:49:9d: b4:b5:c9:81:90:c1:7d:30:31:1b:43:e6:f6:ab:00: fd:eb:41:50:41:83:17:25:0c:6e:da:c5:60:45:c7: b1:aa:67:ce:00:1e:aa:a2:88:82:c9:0a:d2:38:e7: f4:24:a2:09:36:d8:72:81:14:38:e4:db:4c:47:a2: d5:39:23:2a:cb:49:9b:aa:b4:eb:8c:e0:cc:06:98: 7f:5b:96:12:11:1f:2a:e1:f5:3f:e2:17:a5:fb:96: 16:51:e6:7c:be:1c:65:10:44:b9:4a:85:b2:d9:9a: 0e:d6:ae:57:cc:52:b0:a4:25:43:d1:e5:bc:81:ff: be:18:3a:aa:84:76:ce:52:c2:d9:fa:5f:94:51:8c: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4E:2C:72:EC:DF:E4:2E:28:1B:0D:3E:B4:B0:47:1B:8A:96:21:81 X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:36:97:71:cc:94:92:86:21:f0:af:27:46:07:b4:68:a5:90: ca:46:b8:bc:ee:cc:7f:9c:69:87:86:30:48:f2:64:eb:55:35: 0f:74:bb:d1:d1:87:56:0a:18:a1:85:d1:57:a7:09:c3:58:d8: 29:78:d3:d0:e2:da:d0:8c:8c:d4:e7:50:95:04:73:0e:1e:e5: 20:00:cf:c9:19:5e:6e:e3:8e:e5:0c:65:1c:e7:28:d4:38:b8: b8:ca:bc:38:ed:6b:bd:83:62:9a:50:84:2f:93:f7:e9:ca:e7: b7:90:dd:d3:70:a8:14:60:a2:13:c2:6a:9e:6d:1e:b4:5f:cf: 0f:b6:fa:2b:c4:48:cd:30:fc:a0:b6:6f:8f:06:d0:cc:92:45: d2:18:79:32:20:a0:43:96:dc:92:90:db:0a:dd:4f:7c:f6:be: b6:1f:9d:47:1c:b2:78:0a:4d:40:87:67:b6:b4:42:e6:34:83: 0e:0f:57:c6:5e:f4:a8:0e:91:bd:66:e2:a5:9a:a2:69:d4:89: c0:b7:8c:df:1b:2d:40:67:3a:de:ec:8c:d7:c1:f6:44:99:18: 3c:e4:2a:65:fe:65:a5:fd:75:86:d3:10:60:1b:4c:59:13:db: 27:84:45:06:39:21:2b:5b:ee:e8:72:5a:78:43:7a:3d:38:3d: 15:11:b6:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITQdnzrGkwN4Ok/vjelLMHDI1gLDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxOTljZGQxNGMyN2ZiZjZiMDA1YTBhZGEwMDRkNTNjYmNi OTY2N2ZmMB4XDTI2MDcyODAyNTY1NloXDTI2MDcyOTA1MTM1NlowMzExMC8GA1UE AxMoN0E0RTJDNzJFQ0RGRTQyRTI4MUIwRDNFQjRCMDQ3MUI4QTk2MjE4MTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK217JQwjElxGxpYX1ZdD2oofvex m0PCMUonANx6+9xES2iE7OeSwzryiMqUG54ITNntqD/z8HpEdUxnDOULsgDMY/9p /8/8jUqIfxYAMBOU8HDFNYMOQ8WyhTpjuVLYTPsRtfdSDxr6Nbvh8M5eh4KCjoUF 9EmdtLXJgZDBfTAxG0Pm9qsA/etBUEGDFyUMbtrFYEXHsapnzgAeqqKIgskK0jjn 9CSiCTbYcoEUOOTbTEei1TkjKstJm6q064zgzAaYf1uWEhEfKuH1P+IXpfuWFlHm fL4cZRBEuUqFstmaDtauV8xSsKQlQ9HlvIH/vhg6qoR2zlLC2fpflFGMOyMCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBR6Tixy7N/kLigbDT60sEcbipYhgTAfBgNVHSME GDAWgBQZnN0Uwn+/awBaCtoATVPLy5Zn/zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0xODRiLTQ4NGItYjY3Ni01OThmNjRkODhm MjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1QTBBREEwMDRENTNDQkNCOTY2N0ZGLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvR1p6ZEZNSl92MnNBV2dyYUFFMVR5OHVX Wl84LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2MyMDIzYzUzLTE4 NGItNDg0Yi1iNjc2LTU5OGY2NGQ4OGYyMi8wLzE5OUNERDE0QzI3RkJGNkIwMDVB MEFEQTAwNEQ1M0NCQ0I5NjY3RkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQNpdxzJSShiHwrydGB7Ro pZDKRri87sx/nGmHhjBI8mTrVTUPdLvR0YdWChihhdFXpwnDWNgpeNPQ4trQjIzU 51CVBHMOHuUgAM/JGV5u447lDGUc5yjUOLi4yrw47Wu9g2KaUIQvk/fpyue3kN3T cKgUYKITwmqebR60X88PtvorxEjNMPygtm+PBtDMkkXSGHkyIKBDltySkNsK3U98 9r62H51HHLJ4Ck1Ah2e2tELmNIMOD1fGXvSoDpG9ZuKlmqJp1InAt4zfGy1AZzre 7IzXwfZEmRg85Cpl/mWl/XWG0xBgG0xZE9snhEUGOSErW+7oclp4Q3o9OD0VEbYZ -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:52 2026 by rpki-client