$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft File: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft (raw, json) Hash identifier: yNF+uTKJ9p62BH5z8F5BlDmmNLNLI/7pe7PY0Th/HTc= Subject key identifier: EE:D8:D9:C3:52:E8:14:FB:F1:2B:8D:B4:AD:DA:93:89:FF:D7:26:63 Authority key identifier: 14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA Certificate issuer: /CN=149C5EDAA1881EA86CB953CBD9AE8276E2D146FA Certificate serial: 3B16B99E76BED11BC6EDB5907D7CB84B800CC44C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft Manifest number: 1D Signing time: Tue 28 Jul 2026 21:26:23 +0000 Manifest this update: Tue 28 Jul 2026 21:21:23 +0000 Manifest next update: Wed 29 Jul 2026 22:27:23 +0000 Files and hashes: 1: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl (hash: +yXUduMrACRT1p+21RPgcmjNM3CCtbOgWkWEiWcl9HI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:b9:9e:76:be:d1:1b:c6:ed:b5:90:7d:7c:b8:4b:80:0c:c4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149C5EDAA1881EA86CB953CBD9AE8276E2D146FA Validity Not Before: Jul 28 21:21:23 2026 GMT Not After : Jul 29 22:27:23 2026 GMT Subject: CN=EED8D9C352E814FBF12B8DB4ADDA9389FFD72663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:85:5e:49:90:75:1c:3c:79:84:1e:83:0e: 43:c8:2c:ed:07:dd:03:da:27:31:cd:61:88:a2:1d: f5:47:dc:82:19:12:26:2d:83:1a:07:7c:7c:37:87: dc:7a:84:2b:87:ca:f2:76:7a:2d:b3:fe:d8:bc:9b: f0:be:dd:3e:61:e5:df:c5:e4:9a:10:87:74:f0:ea: ad:a1:7b:dd:ed:0f:cc:82:45:76:d6:cd:f7:e2:ba: e0:18:fe:47:bb:97:74:16:a1:68:c7:5f:3c:5b:6f: 06:20:aa:91:c5:26:b3:c9:23:92:29:a7:ac:0c:c4: e0:40:ff:bf:6f:dd:f3:8d:1e:12:4c:07:1e:fc:1f: f0:21:50:11:20:2b:ab:92:c5:a8:72:2f:6e:5c:d4: be:30:42:17:c2:46:bd:91:13:69:af:1a:7b:09:f3: 4a:a8:d9:b8:52:fb:68:f7:a1:46:34:80:5a:0d:a2: 5d:00:a1:01:3a:7d:22:c6:c9:ec:d5:3e:2c:f4:90: 4a:9e:8c:89:9b:a5:56:1d:5a:98:1e:46:19:6d:c7: 64:69:fd:53:2e:3d:03:72:7a:87:ce:3f:cb:3b:04: 63:d3:a9:6e:f2:fa:7d:60:c1:35:b7:4a:db:43:56: 68:6a:84:48:08:ba:2a:40:46:d0:c7:80:38:40:08: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D8:D9:C3:52:E8:14:FB:F1:2B:8D:B4:AD:DA:93:89:FF:D7:26:63 X509v3 Authority Key Identifier: keyid:14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:10:1b:12:7a:3b:c4:90:9a:be:87:a9:bf:da:10:07:dd:49: 5c:f5:74:01:b7:66:94:04:00:6f:59:7f:ca:75:5f:01:10:8e: 88:c6:ed:3a:ad:a2:e5:7f:7e:77:21:63:08:51:02:1c:94:a2: c4:fe:2c:1a:39:19:56:fb:af:76:15:1b:79:bf:e1:f9:fe:a3: 07:40:ed:7f:d0:df:b9:10:5a:4e:b8:b4:0c:30:ae:1f:50:27: 45:ac:e2:e9:09:36:6b:aa:91:03:7b:b7:a7:f5:72:bf:81:78: 88:54:f9:8f:aa:e9:14:8f:2f:c3:b0:bf:42:88:23:79:3a:72: 5b:c2:16:66:58:84:07:73:31:95:75:13:d3:36:60:62:ca:fa: 6b:63:08:bd:7d:7b:30:03:98:4f:2c:c2:94:d9:05:13:24:c3: bc:c5:d3:3b:83:3a:89:3b:10:f1:a3:47:04:b5:c1:97:65:72: da:ce:1a:ad:9f:71:a3:e6:ff:cd:8a:bb:25:3f:78:cd:23:6c: f7:2b:dd:5f:14:3c:3c:f9:d9:2d:a4:bd:43:57:29:cf:89:f2: 2c:df:15:6e:b1:35:96:b0:32:48:fc:66:5c:14:a8:b9:09:87: de:f6:59:c1:08:be:7a:99:fb:7a:37:ca:99:f9:d8:1a:0f:b6: 5f:40:71:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOxa5nna+0RvG7bWQfXy4S4AMxEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5QzVFREFBMTg4MUVBODZDQjk1M0NCRDlBRTgyNzZF MkQxNDZGQTAeFw0yNjA3MjgyMTIxMjNaFw0yNjA3MjkyMjI3MjNaMDMxMTAvBgNV BAMTKEVFRDhEOUMzNTJFODE0RkJGMTJCOERCNEFEREE5Mzg5RkZENzI2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQToVeSZB1HDx5hB6DDkPILO0H 3QPaJzHNYYiiHfVH3IIZEiYtgxoHfHw3h9x6hCuHyvJ2ei2z/ti8m/C+3T5h5d/F 5JoQh3Tw6q2he93tD8yCRXbWzffiuuAY/ke7l3QWoWjHXzxbbwYgqpHFJrPJI5Ip p6wMxOBA/79v3fONHhJMBx78H/AhUBEgK6uSxahyL25c1L4wQhfCRr2RE2mvGnsJ 80qo2bhS+2j3oUY0gFoNol0AoQE6fSLGyezVPiz0kEqejImbpVYdWpgeRhltx2Rp /VMuPQNyeofOP8s7BGPTqW7y+n1gwTW3SttDVmhqhEgIuipARtDHgDhACFjDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7tjZw1LoFPvxK420rdqTif/XJmMwHwYDVR0j BBgwFoAUFJxe2qGIHqhsuVPL2a6CduLRRvowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5 YzI4LzEvMTQ5QzVFREFBMTg4MUVBODZDQjk1M0NCRDlBRTgyNzZFMkQxNDZGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00MDE2LTQ5 NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8xNDlDNUVEQUExODgxRUE4NkNCOTUzQ0JE OUFFODI3NkUyRDE0NkZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZkNTI1NjM4OWMyOC8xLzE0OUM1RURB QTE4ODFFQTg2Q0I5NTNDQkQ5QUU4Mjc2RTJEMTQ2RkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByEBsS ejvEkJq+h6m/2hAH3Ulc9XQBt2aUBABvWX/KdV8BEI6Ixu06raLlf353IWMIUQIc lKLE/iwaORlW+692FRt5v+H5/qMHQO1/0N+5EFpOuLQMMK4fUCdFrOLpCTZrqpED e7en9XK/gXiIVPmPqukUjy/DsL9CiCN5OnJbwhZmWIQHczGVdRPTNmBiyvprYwi9 fXswA5hPLMKU2QUTJMO8xdM7gzqJOxDxo0cEtcGXZXLazhqtn3Gj5v/NirslP3jN I2z3K91fFDw8+dktpL1DVynPifIs3xVusTWWsDJI/GZcFKi5CYfe9lnBCL56mft6 N8qZ+dgaD7ZfQHHX -----END CERTIFICATE-----Generated at Wed Jul 29 14:06:11 2026 by rpki-client