$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: iO+0fFZaQCR3/gh/rt1d3dfCaAnOeIxeNH7NSbANyxo= Subject key identifier: AA:8E:78:5E:69:E6:77:16:53:F3:7F:F5:75:46:E8:12:1B:2E:23:66 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 32E6F652477CD5D9BB6622989A7BEB5C6A9B06CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0518 Signing time: Tue 28 Jul 2026 14:18:54 +0000 Manifest this update: Tue 28 Jul 2026 14:13:54 +0000 Manifest next update: Wed 29 Jul 2026 16:59:54 +0000 Files and hashes: 1: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 2: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 3: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 4: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: snearTmlAVmbriOIDo3AOt3HzHdEQeKnENPmcL0ch6g=) 5: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 6: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 7: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 8: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 9: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 10: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 11: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e6:f6:52:47:7c:d5:d9:bb:66:22:98:9a:7b:eb:5c:6a:9b:06:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jul 28 14:13:54 2026 GMT Not After : Jul 29 16:59:54 2026 GMT Subject: CN=AA8E785E69E6771653F37FF57546E8121B2E2366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:0b:e0:89:27:df:f4:3d:e8:22:cb:30:4d: e7:e5:b4:53:71:8e:df:45:04:e9:27:2f:41:96:2a: 52:02:14:14:f4:64:fb:d6:35:d8:0a:12:13:23:39: 45:f7:4b:cb:b5:80:39:d6:e1:7b:6e:85:52:8a:ed: 30:d7:29:37:80:9e:1f:e2:9a:95:4a:31:c1:62:6e: 7e:83:c2:3c:35:15:bb:16:79:21:0c:1e:c4:d5:d1: 3f:39:47:ee:f4:6c:9c:ee:c5:78:ed:16:25:37:f9: 80:34:b8:7e:90:24:2d:f4:a1:36:22:21:11:56:27: d6:ac:4b:ed:51:37:9a:43:29:77:6b:c4:86:33:69: 75:37:69:3b:10:10:63:f5:c9:8b:d1:2f:67:cc:3e: 67:49:7b:25:a8:5c:33:53:ff:4e:aa:c6:92:88:e8: 58:d6:05:6c:02:c4:cb:a1:56:eb:b8:9f:f0:ef:e7: 2e:54:5c:60:c5:9b:2b:06:ef:59:63:d6:1a:b9:cd: 63:af:d8:c5:fb:4e:e9:47:4a:0d:9c:0d:f4:41:61: 62:8a:73:bc:d5:97:9b:dd:af:18:d6:9d:3a:6c:4e: 5a:13:4f:cc:53:1d:f7:a9:6c:48:0a:7e:52:7c:4b: 86:4e:c5:89:31:6c:24:d8:14:97:ca:f7:b5:db:e3: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:78:5E:69:E6:77:16:53:F3:7F:F5:75:46:E8:12:1B:2E:23:66 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:13:1f:a1:c6:da:7b:02:e5:35:d2:f8:9c:ab:13:4b:de:df: e0:8a:16:40:9b:96:08:59:d6:ad:90:8d:97:57:f6:8a:34:93: d2:0d:84:4e:c6:5d:84:09:7a:1e:51:4d:12:60:4d:9d:98:b4: 7f:db:33:55:11:3f:49:79:8b:f4:96:cb:03:f7:fd:18:b6:c3: 37:fc:5a:6e:3d:e7:32:c2:b4:dc:be:05:eb:4a:97:8a:e9:29: 17:7f:2d:4a:56:c1:10:31:c7:5d:3b:a7:51:a2:0b:42:5e:e0: c6:5d:83:2a:fb:24:27:f8:9a:8f:30:54:d9:a8:49:e8:59:4a: 80:6d:de:4d:55:f3:10:c9:cc:38:6e:87:b5:2f:7c:69:be:df: f9:60:60:da:f3:bc:c7:8b:6e:b4:a7:82:fb:00:89:db:30:1a: 65:76:ec:a1:4c:f2:2a:da:0e:b9:fc:6b:20:d4:d3:93:1a:a6: 2c:8a:82:1d:a8:17:47:1d:79:d8:ff:98:12:9d:ae:e9:db:15: ed:32:35:30:7d:53:0d:74:a7:3e:bc:8a:00:a4:10:cb:02:7c: ff:52:38:6f:2f:5e:70:4c:1d:02:04:56:7c:5a:39:3e:cf:83: 02:f1:ee:72:e8:b5:a3:8e:c9:e0:0c:43:33:94:72:bf:1b:7f: 1c:85:44:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMub2Ukd81dm7ZiKYmnvrXGqbBs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA3MjgxNDEzNTRaFw0yNjA3MjkxNjU5NTRaMDMxMTAvBgNV BAMTKEFBOEU3ODVFNjlFNjc3MTY1M0YzN0ZGNTc1NDZFODEyMUIyRTIzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7gvgiSff9D3oIsswTefltFNx jt9FBOknL0GWKlICFBT0ZPvWNdgKEhMjOUX3S8u1gDnW4XtuhVKK7TDXKTeAnh/i mpVKMcFibn6Dwjw1FbsWeSEMHsTV0T85R+70bJzuxXjtFiU3+YA0uH6QJC30oTYi IRFWJ9asS+1RN5pDKXdrxIYzaXU3aTsQEGP1yYvRL2fMPmdJeyWoXDNT/06qxpKI 6FjWBWwCxMuhVuu4n/Dv5y5UXGDFmysG71lj1hq5zWOv2MX7TulHSg2cDfRBYWKK c7zVl5vdrxjWnTpsTloTT8xTHfepbEgKflJ8S4ZOxYkxbCTYFJfK97Xb4xu7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqo54XmnmdxZT83/1dUboEhsuI2YwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRMfocbaewLlNdL4nKsT S97f4IoWQJuWCFnWrZCNl1f2ijST0g2ETsZdhAl6HlFNEmBNnZi0f9szVRE/SXmL 9JbLA/f9GLbDN/xabj3nMsK03L4F60qXiukpF38tSlbBEDHHXTunUaILQl7gxl2D KvskJ/iajzBU2ahJ6FlKgG3eTVXzEMnMOG6HtS98ab7f+WBg2vO8x4tutKeC+wCJ 2zAaZXbsoUzyKtoOufxrINTTkxqmLIqCHagXRx152P+YEp2u6dsV7TI1MH1TDXSn PryKAKQQywJ8/1I4by9ecEwdAgRWfFo5Ps+DAvHucui1o47J4AxDM5Ryvxt/HIVE WA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:37:48 2026 by rpki-client