$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: G1s5PkTCpwh38RYrXmVkFrNDHn3LXD18kYMgsqr99kA= Subject key identifier: 06:7F:71:65:08:1D:E2:75:CC:0A:9C:0E:E4:4B:15:9B:D6:1F:66:65 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 54701668370C4D4869D3A072C770ED1FB132441F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 9F Signing time: Tue 28 Jul 2026 12:13:27 +0000 Manifest this update: Tue 28 Jul 2026 12:08:27 +0000 Manifest next update: Wed 29 Jul 2026 14:53:27 +0000 Files and hashes: 1: 34362e31382e39322e302f32322d3234203d3e20323134343332.roa (hash: NyXurW1DFDhqL0gW2AhubSlX8l+W/Em/ZT/cZ6caczo=) 2: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: i4J5fi4/ki9gpiPZ1WeNXoJ5Dkev+co9+mR0nmWAo0Q=) 3: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 4: 3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa (hash: +DN809AlaoX5+Lv+NqMgfBEbnjnBdEJgPi7MDj2sR/8=) 5: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: Jj/i4C4RR8q3szSulxhHmcvRulmcUKhYE2Rq/mkvHmE=) 6: 34362e31382e38392e302f32342d3234203d3e20313532313739.roa (hash: Kqt2451/MqA9B3Vp+PsIiw7Utk6sIOx+LpIh/6dBd1k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:70:16:68:37:0c:4d:48:69:d3:a0:72:c7:70:ed:1f:b1:32:44:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Jul 28 12:08:27 2026 GMT Not After : Jul 29 14:53:27 2026 GMT Subject: CN=067F7165081DE275CC0A9C0EE44B159BD61F6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:a7:9a:05:3d:b3:eb:f9:30:21:27:2f:0b: e8:1e:e4:6a:d0:e5:81:f1:08:0d:3f:73:ef:f9:c6: a3:47:dd:99:9b:27:53:83:ea:54:26:71:3e:e4:88: d3:0c:d5:89:5d:0f:b9:56:c0:4f:cf:03:67:6e:5b: b1:60:36:78:72:79:d0:6d:21:98:4b:42:21:d1:8d: a0:1c:60:34:71:68:6b:da:54:a5:df:6d:bf:f3:eb: 8a:27:09:df:76:1c:ec:72:73:95:b3:5f:e6:60:85: 7d:59:9e:f0:34:d9:52:5b:5b:09:cc:08:35:83:59: 7c:29:95:56:d9:7a:a1:df:00:c1:c6:72:25:98:63: c8:0f:0a:7f:dc:c3:ca:1a:d5:56:a0:85:53:f7:24: 41:44:d6:77:bd:c0:e0:b1:ef:d1:86:66:f6:8e:b3: 92:ab:3c:01:79:b0:c9:7c:34:cf:6b:ca:09:09:a2: ff:19:15:e9:72:23:cd:68:5a:77:89:40:bc:83:a4: 02:82:5d:81:14:55:04:82:c7:b3:7c:d0:9f:e1:a8: 5f:d7:8c:25:69:b9:98:72:5c:23:3c:cc:20:97:a6: 4b:ee:09:0e:a3:09:a6:9d:f0:ea:3e:53:7b:22:9a: 11:1a:cf:e5:32:aa:70:34:11:9e:7d:9a:a4:b9:dc: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:71:65:08:1D:E2:75:CC:0A:9C:0E:E4:4B:15:9B:D6:1F:66:65 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9b:c8:d0:4f:a4:8c:29:51:4f:7c:5a:04:a8:d7:3b:31:8e: 80:8c:4c:50:bb:c5:a4:f1:e6:db:99:bb:10:cf:a4:11:cd:f7: c9:5e:01:f6:56:16:0c:a9:ee:86:df:53:d6:fd:15:a8:34:98: be:ea:5a:50:40:ea:00:e5:16:28:c6:87:9a:f8:b8:4c:f4:9b: 7e:12:ff:f2:36:76:ea:7f:a1:b1:7d:0d:da:13:84:29:d3:dc: 5f:78:2d:4f:1e:1d:3a:0d:37:fb:a1:a6:18:8c:cf:a1:e6:ce: f2:a8:19:34:47:af:66:33:05:46:66:bd:6a:41:6a:c8:a7:9b: 03:0d:4b:e9:14:a5:4e:ad:c3:6d:1f:d4:c6:5b:b1:68:d5:b5: f0:6b:e2:9d:91:85:72:9d:ec:d2:52:4e:9a:d4:67:74:80:98: ef:79:a9:e8:6f:92:e8:03:1b:16:8d:88:b1:36:f7:3e:56:ea: 40:2e:d4:66:87:39:5e:26:ca:67:be:cb:50:cf:3b:28:02:93: b7:72:67:4d:aa:b7:99:65:4d:e3:57:e2:c8:f9:11:38:49:37: cf:b8:a7:45:a2:2e:fa:8c:06:93:d8:95:48:dd:cd:9d:ac:1a: 86:18:fc:3e:64:35:18:31:f3:65:63:33:91:46:89:16:74:53: 5a:42:b3:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVHAWaDcMTUhp06Byx3DtH7EyRB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA3MjgxMjA4MjdaFw0yNjA3MjkxNDUzMjdaMDMxMTAvBgNV BAMTKDA2N0Y3MTY1MDgxREUyNzVDQzBBOUMwRUU0NEIxNTlCRDYxRjY2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU6eaBT2z6/kwIScvC+ge5GrQ 5YHxCA0/c+/5xqNH3ZmbJ1OD6lQmcT7kiNMM1YldD7lWwE/PA2duW7FgNnhyedBt IZhLQiHRjaAcYDRxaGvaVKXfbb/z64onCd92HOxyc5WzX+ZghX1ZnvA02VJbWwnM CDWDWXwplVbZeqHfAMHGciWYY8gPCn/cw8oa1VaghVP3JEFE1ne9wOCx79GGZvaO s5KrPAF5sMl8NM9rygkJov8ZFelyI81oWneJQLyDpAKCXYEUVQSCx7N80J/hqF/X jCVpuZhyXCM8zCCXpkvuCQ6jCaad8Oo+U3simhEaz+UyqnA0EZ59mqS53HaZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBn9xZQgd4nXMCpwO5EsVm9YfZmUwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5vI0E+kjClRT3xaBKjX OzGOgIxMULvFpPHm25m7EM+kEc33yV4B9lYWDKnuht9T1v0VqDSYvupaUEDqAOUW KMaHmvi4TPSbfhL/8jZ26n+hsX0N2hOEKdPcX3gtTx4dOg03+6GmGIzPoebO8qgZ NEevZjMFRma9akFqyKebAw1L6RSlTq3DbR/UxluxaNW18GvinZGFcp3s0lJOmtRn dICY73mp6G+S6AMbFo2IsTb3PlbqQC7UZoc5XibKZ77LUM87KAKTt3JnTaq3mWVN 41fiyPkROEk3z7inRaIu+owGk9iVSN3Nnawahhj8PmQ1GDHzZWMzkUaJFnRTWkKz sA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:56 2026 by rpki-client