$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: Jis4rzrPoNvjCBkt+gk0PQs+RHBwwHKNM6VdiVyOVSw= Subject key identifier: 84:CB:02:1C:6F:59:3E:D5:93:BE:F0:59:F1:CB:2A:7B:B4:36:80:C3 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 500A8FDA689016BE4EA51D4BB0443D2350C06348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 03EA Signing time: Tue 28 Jul 2026 00:51:45 +0000 Manifest this update: Tue 28 Jul 2026 00:46:45 +0000 Manifest next update: Wed 29 Jul 2026 02:22:45 +0000 Files and hashes: 1: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: lwtoE3i3fBwBy5FCKzSoef9n2+zoIU9bdzH/MsZWvg8=) 2: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 3: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=) 4: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) 5: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 6: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 7: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 8: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 9: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 10: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 11: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 12: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 13: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 02:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0a:8f:da:68:90:16:be:4e:a5:1d:4b:b0:44:3d:23:50:c0:63:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Jul 28 00:46:45 2026 GMT Not After : Jul 29 02:22:45 2026 GMT Subject: CN=84CB021C6F593ED593BEF059F1CB2A7BB43680C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:43:07:25:ee:36:92:b5:91:d8:5b:7d:1e: 01:05:d3:08:84:72:e5:38:83:a2:aa:0c:9b:b0:3d: af:fa:bd:e3:65:bf:09:76:e9:c4:a0:b4:20:e7:e8: 20:a6:17:7e:0f:7f:c3:ec:21:28:ee:32:0d:df:55: e1:66:1a:52:0e:64:60:35:60:ab:2e:77:93:6f:f5: f1:6a:3e:20:44:34:3f:a9:17:9f:d1:c6:f2:6b:bb: 82:3f:0e:39:4d:6a:0f:19:77:6b:5d:2b:70:1c:f3: a4:87:df:f7:6c:06:41:09:c8:73:e3:62:13:31:db: b7:6f:67:74:61:d6:ea:0c:50:89:b6:d8:83:12:16: 89:3c:c3:0c:97:5d:81:d8:72:b9:d5:eb:c7:cb:59: 54:ad:ca:34:4b:51:6b:02:98:28:f3:06:75:41:55: 50:4b:65:e4:aa:d8:c9:43:de:89:5e:29:71:6e:f1: 20:29:5d:b6:ea:fa:17:4a:7f:f8:41:91:36:41:b2: ff:57:b8:ca:ea:be:5a:d5:02:50:e3:7b:4a:fb:bf: 85:70:5d:16:b0:ed:b5:81:72:0a:16:67:7b:ee:6b: bf:84:e9:52:96:70:21:93:8b:74:f5:0e:45:54:01: 17:c9:79:53:3c:87:7f:30:b5:ee:2b:18:6d:e0:ba: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:02:1C:6F:59:3E:D5:93:BE:F0:59:F1:CB:2A:7B:B4:36:80:C3 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:63:b0:92:b1:2d:c6:af:10:06:ca:50:26:5d:6d:b5:2c: 98:c5:0d:e9:66:ba:46:34:65:fe:92:93:54:58:13:06:b4:8e: f5:db:1b:bb:c9:2f:ba:f8:61:98:7d:fb:a3:39:67:f7:d4:28: 11:fd:d5:7e:ed:f2:51:af:7a:9a:8d:bd:1d:7e:0f:03:07:a9: 62:05:74:70:72:91:d6:f0:a9:38:40:e6:e2:98:e8:b5:dd:9f: 80:e2:b5:36:61:e6:3a:40:81:61:23:a6:28:0b:c0:8d:af:3b: 1f:3d:0a:4d:5b:cd:e5:5c:eb:92:f3:2a:9a:4d:f7:7e:09:2f: c4:57:2d:01:8b:66:a7:c1:3a:fd:d1:fe:db:56:cc:ae:f2:82: c0:d6:81:42:8e:fc:bc:43:d2:6a:40:68:8c:98:f3:e8:29:91: 45:ce:23:f6:cd:cc:97:44:95:5f:c1:43:2c:6a:a6:02:81:84: 75:37:58:d7:52:54:4e:88:37:40:d0:e1:5d:93:08:4e:49:19: d1:51:9e:6e:29:c0:69:65:31:eb:41:2c:83:6a:fb:51:3b:70: 50:07:d5:7d:a9:1f:76:af:0a:69:72:e3:e0:65:db:6f:2d:75: 37:13:53:3f:b4:6b:6e:1d:dc:a1:4f:32:eb:f8:99:8f:39:bd: 8d:0d:f1:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUAqP2miQFr5OpR1LsEQ9I1DAY0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjA3MjgwMDQ2NDVaFw0yNjA3MjkwMjIyNDVaMDMxMTAvBgNV BAMTKDg0Q0IwMjFDNkY1OTNFRDU5M0JFRjA1OUYxQ0IyQTdCQjQzNjgwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoo0MHJe42krWR2Ft9HgEF0wiE cuU4g6KqDJuwPa/6veNlvwl26cSgtCDn6CCmF34Pf8PsISjuMg3fVeFmGlIOZGA1 YKsud5Nv9fFqPiBEND+pF5/RxvJru4I/DjlNag8Zd2tdK3Ac86SH3/dsBkEJyHPj YhMx27dvZ3Rh1uoMUIm22IMSFok8wwyXXYHYcrnV68fLWVStyjRLUWsCmCjzBnVB VVBLZeSq2MlD3oleKXFu8SApXbbq+hdKf/hBkTZBsv9XuMrqvlrVAlDje0r7v4Vw XRaw7bWBcgoWZ3vua7+E6VKWcCGTi3T1DkVUARfJeVM8h38wte4rGG3gulzFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhMsCHG9ZPtWTvvBZ8csqe7Q2gMMwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjxjsJKxLcavEAbKUCZd bbUsmMUN6Wa6RjRl/pKTVFgTBrSO9dsbu8kvuvhhmH37ozln99QoEf3Vfu3yUa96 mo29HX4PAwepYgV0cHKR1vCpOEDm4pjotd2fgOK1NmHmOkCBYSOmKAvAja87Hz0K TVvN5VzrkvMqmk33fgkvxFctAYtmp8E6/dH+21bMrvKCwNaBQo78vEPSakBojJjz 6CmRRc4j9s3Ml0SVX8FDLGqmAoGEdTdY11JUTog3QNDhXZMITkkZ0VGebinAaWUx 60Esg2r7UTtwUAfVfakfdq8KaXLj4GXbby11NxNTP7Rrbh3coU8y6/iZjzm9jQ3x kg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:06 2026 by rpki-client