$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft File: ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft (raw, json) Hash identifier: s81uu5Bnd7qKFT/PXqFHHFQqKZIxl6OPljmYoCG+haY= Subject key identifier: 6C:CB:C2:4A:74:D6:4E:83:B3:31:74:75:A4:9F:A9:20:D0:42:99:96 Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A Certificate issuer: /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Certificate serial: 5CCC0C2D831ECCB7149413F6410DF253CC4E65BA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft Manifest number: 0E Signing time: Tue 28 Jul 2026 07:39:50 +0000 Manifest this update: Tue 28 Jul 2026 07:34:50 +0000 Manifest next update: Wed 29 Jul 2026 09:02:50 +0000 Files and hashes: 1: AS153376.asa (hash: qSFjPv5Y9UIQey6MGVXcJC9rAEGtqksU46nadpOYLLw=) 2: 323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa (hash: T+DNXjQMMXpH68tGwE1BkA1mNFVvRXhA5dKMe9sTdUg=) 3: ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl (hash: gAPXCEkIKl2zitJJb+jvKTfQLtxFg2zPFSwdpgTxKMM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cc:0c:2d:83:1e:cc:b7:14:94:13:f6:41:0d:f2:53:cc:4e:65:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Validity Not Before: Jul 28 07:34:50 2026 GMT Not After : Jul 29 09:02:50 2026 GMT Subject: CN=6CCBC24A74D64E83B3317475A49FA920D0429996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:bd:29:b4:83:3f:4b:b8:c6:d7:66:11:39: 4b:d9:8f:f6:a3:4d:03:a0:cf:31:b4:5d:fc:fb:11: d4:bd:5e:35:f3:bf:80:5e:40:46:f5:a7:58:4d:f5: d5:9a:70:73:7e:3b:fc:24:83:ca:cc:44:99:f6:94: 8f:70:b7:af:ed:8e:bc:22:54:2d:60:12:06:15:d1: fe:88:7e:92:86:77:fc:ed:7c:ea:d1:1e:d2:29:e4: 7b:af:18:e0:7f:69:78:3a:7e:41:98:26:67:7e:b4: b7:1f:38:2a:83:f2:01:72:8e:49:f5:21:42:b4:ad: 5f:ca:38:9d:fa:a9:07:cc:71:a6:18:f3:56:20:55: 31:18:f0:77:3e:ee:6d:b0:15:e6:07:12:27:40:8e: 5a:76:37:17:f7:b9:e0:f5:fc:1a:61:aa:6c:3e:72: f3:39:16:a3:e4:cd:c2:f6:f2:d9:22:76:13:0e:5a: 37:22:d6:85:ad:8f:f4:8f:b1:8a:ca:c0:a3:c4:ef: 80:03:a4:12:d1:6f:09:d6:b7:51:ff:a4:28:d4:81: bd:bb:39:e6:97:ef:d9:e3:db:4d:90:53:8a:78:2f: 84:03:2a:9d:90:d1:af:d5:ae:c3:f7:8b:96:24:42: 62:ed:c7:96:82:ac:85:40:e4:b0:1a:93:e4:83:a3: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:C2:4A:74:D6:4E:83:B3:31:74:75:A4:9F:A9:20:D0:42:99:96 X509v3 Authority Key Identifier: keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:46:ee:e3:f8:be:f3:21:71:ed:df:30:ac:41:55:6a:98:16: 4a:4e:21:12:d8:ac:0e:f3:f4:ba:94:b9:06:2d:a8:f2:d7:0e: 1f:ba:eb:ba:6a:28:9e:33:55:ee:ca:eb:3a:6b:71:19:31:b9: a2:8c:6d:c0:ef:c4:40:82:72:fe:1a:25:4f:39:bc:58:76:41: ce:1d:c0:8a:4c:72:56:0c:76:47:d7:57:6b:44:b6:39:3d:d5: d0:df:4d:11:ee:56:e8:fa:78:fa:3f:53:f8:3a:ff:cb:c6:98: 17:b8:a1:9e:23:4a:36:35:8b:e9:46:b0:66:ef:a4:28:19:18: d1:6a:ed:d0:98:58:44:15:0e:47:f6:02:74:dc:14:67:56:e3: 27:34:ce:21:9b:7f:32:a0:1e:34:ea:80:20:4f:52:44:11:e6: bc:5a:98:21:de:bf:b8:3e:ac:9e:6a:2b:72:46:cd:14:20:f6: 6e:f6:cb:62:fa:84:60:a7:ee:27:0b:2e:08:0a:79:5e:80:f2: f2:bd:3d:8a:2f:cb:21:a6:fe:4f:5d:48:57:74:72:ac:b6:8d: c9:23:a4:83:9a:7c:88:1c:fc:21:87:e7:84:85:88:f0:64:8d: 00:c0:09:46:ca:d1:c8:47:70:fa:15:a2:52:b5:b4:00:6f:33: 9c:f6:50:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXMwMLYMezLcUlBP2QQ3yU8xOZbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdB MzQzMDQxQTAeFw0yNjA3MjgwNzM0NTBaFw0yNjA3MjkwOTAyNTBaMDMxMTAvBgNV BAMTKDZDQ0JDMjRBNzRENjRFODNCMzMxNzQ3NUE0OUZBOTIwRDA0Mjk5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyr0ptIM/S7jG12YROUvZj/aj TQOgzzG0Xfz7EdS9XjXzv4BeQEb1p1hN9dWacHN+O/wkg8rMRJn2lI9wt6/tjrwi VC1gEgYV0f6IfpKGd/ztfOrRHtIp5HuvGOB/aXg6fkGYJmd+tLcfOCqD8gFyjkn1 IUK0rV/KOJ36qQfMcaYY81YgVTEY8Hc+7m2wFeYHEidAjlp2Nxf3ueD1/Bphqmw+ cvM5FqPkzcL28tkidhMOWjci1oWtj/SPsYrKwKPE74ADpBLRbwnWt1H/pCjUgb27 OeaX79nj202QU4p4L4QDKp2Q0a/VrsP3i5YkQmLtx5aCrIVA5LAak+SDoz7rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbMvCSnTWToOzMXR1pJ+pINBCmZYwHwYDVR0j BBgwFoAUq+8MK+G8pyZZbCHtEyZJp6NDBBowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzMvQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdBMzQzMDQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMS9BQkVGMEMyQkUxQkNBNzI2NTk2QzIxRUQx MzI2NDlBN0EzNDMwNDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8zL0FCRUYwQzJC RTFCQ0E3MjY1OTZDMjFFRDEzMjY0OUE3QTM0MzA0MUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5Ru7j +L7zIXHt3zCsQVVqmBZKTiES2KwO8/S6lLkGLajy1w4fuuu6aiieM1Xuyus6a3EZ MbmijG3A78RAgnL+GiVPObxYdkHOHcCKTHJWDHZH11drRLY5PdXQ300R7lbo+nj6 P1P4Ov/LxpgXuKGeI0o2NYvpRrBm76QoGRjRau3QmFhEFQ5H9gJ03BRnVuMnNM4h m38yoB406oAgT1JEEea8Wpgh3r+4PqyeaityRs0UIPZu9sti+oRgp+4nCy4ICnle gPLyvT2KL8shpv5PXUhXdHKsto3JI6SDmnyIHPwhh+eEhYjwZI0AwAlGytHIR3D6 FaJStbQAbzOc9lB5 -----END CERTIFICATE-----Generated at Tue Jul 28 16:39:42 2026 by rpki-client