$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json) Hash identifier: UUgEypu7IilSoXfIbiz2YiDT8OvgkdJdvcsnYNjEFlI= Subject key identifier: 0A:1D:25:84:E0:5F:21:08:E2:E5:6D:0C:46:D7:1B:DD:01:0E:93:96 Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 4852AF48BF70F9AED8FD6E9D96B0844FFDDEFE29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft Manifest number: CE Signing time: Tue 28 Jul 2026 20:28:09 +0000 Manifest this update: Tue 28 Jul 2026 20:23:09 +0000 Manifest next update: Wed 29 Jul 2026 23:21:09 +0000 Files and hashes: 1: 326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa (hash: tY8TMn7RDjLhbLt1O8dtAl/92Jm+pyNOMcVZs74ZJhM=) 2: 326130363a613030323a666631303a3a2f34342d3438203d3e20323034303835.roa (hash: kZHoaU7lwxYhm4X+ikDPygqNY13KpFbZKfWyepSjLVQ=) 3: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: 4OlgVOG+l/q8HqqgrkRssKTtQDsjxh90oWLuLJEwuOg=) 4: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=) 5: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=) 6: 326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa (hash: /ueeiuIrHkj1UebpJT499/7uExjS/xhzsRdxFHL+OLs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:52:af:48:bf:70:f9:ae:d8:fd:6e:9d:96:b0:84:4f:fd:de:fe:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Jul 28 20:23:09 2026 GMT Not After : Jul 29 23:21:09 2026 GMT Subject: CN=0A1D2584E05F2108E2E56D0C46D71BDD010E9396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:19:79:90:44:78:cd:bb:c0:5b:56:39:3d: bf:53:c4:27:85:17:1c:aa:18:a7:d1:88:5b:3d:ec: 5d:36:5a:31:88:bf:84:30:6c:0d:e5:59:e4:4b:30: 57:51:c8:86:b6:41:4a:44:33:bb:42:33:8a:c4:02: b7:60:ab:7a:a2:72:db:35:64:07:d0:07:b0:da:a6: 25:5e:97:51:70:bb:bc:43:01:d1:84:ef:cd:7d:4b: 42:47:0f:e1:ab:06:f6:c5:6b:82:48:df:85:53:e2: 00:8c:89:1c:f1:cd:0a:90:3f:c9:c1:bc:dc:54:9b: 93:a4:ee:71:dc:69:3a:61:43:0e:d0:3c:1a:35:8e: fc:71:31:4c:65:0d:6c:1d:fa:0a:e6:ab:5c:87:1f: f4:16:5c:9a:41:42:7a:38:d7:9a:bf:af:90:55:54: a1:ba:45:12:d3:a9:07:3d:0a:1b:0a:e3:e2:d9:ad: 82:78:fc:45:78:50:e4:d2:65:e2:71:9e:59:de:81: fe:bf:9d:0b:98:01:84:74:e2:24:b9:b3:ef:9b:84: 63:f2:36:d0:0a:47:4b:20:eb:3e:08:c8:a4:dc:7a: 55:16:01:f6:e3:e1:be:43:aa:dd:14:cb:99:19:78: 51:41:d1:32:d9:94:0e:6f:fe:c2:99:bf:f2:f6:bf: 8b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:25:84:E0:5F:21:08:E2:E5:6D:0C:46:D7:1B:DD:01:0E:93:96 X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b2:96:fb:bb:26:a4:10:a8:9b:83:dc:d1:b8:b1:67:52:bc: 8a:d2:5d:40:93:44:46:b0:d6:0d:4b:49:62:33:67:a2:6a:24: e1:37:35:0e:dd:a8:13:6e:f8:31:52:54:c6:1d:3f:09:a1:a2: d2:db:4f:f2:cb:d4:3e:b6:b8:80:4b:0e:2f:2d:12:0b:28:9e: 10:b8:9d:08:6d:3e:f2:74:65:26:b8:3c:57:ad:a1:61:fc:a4: be:85:d1:ff:32:a4:c3:7c:b9:aa:c2:2b:6b:bb:d4:a1:6c:61: 2a:01:2f:5b:32:6a:d5:6c:86:b0:d5:52:8c:4d:16:d8:42:a8: 26:b8:69:60:9b:ea:9d:4f:86:9c:a7:ac:ed:14:12:d6:10:00: d7:0e:7d:d8:12:f0:67:29:c4:12:37:c6:2f:39:41:3a:1b:9b: a6:7e:07:dc:b8:59:3a:cf:88:ce:91:cf:a1:7e:00:34:6e:35: e5:b8:09:03:08:b4:dc:e8:eb:43:de:8a:e8:e6:6c:ac:7a:d4: 59:60:2b:66:83:7a:46:19:c5:ba:70:18:86:8a:10:56:14:97: 6c:38:0f:4f:74:f0:4d:60:07:d2:d5:05:23:e6:90:66:83:67: 1f:44:cd:09:27:e0:af:39:63:a2:ce:1a:61:9d:46:d2:61:ce: 75:f2:57:ec -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSFKvSL9w+a7Y/W6dlrCET/3e/ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjA3MjgyMDIzMDlaFw0yNjA3MjkyMzIxMDlaMDMxMTAvBgNV BAMTKDBBMUQyNTg0RTA1RjIxMDhFMkU1NkQwQzQ2RDcxQkREMDEwRTkzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmBl5kER4zbvAW1Y5Pb9TxCeF FxyqGKfRiFs97F02WjGIv4QwbA3lWeRLMFdRyIa2QUpEM7tCM4rEArdgq3qicts1 ZAfQB7DapiVel1Fwu7xDAdGE7819S0JHD+GrBvbFa4JI34VT4gCMiRzxzQqQP8nB vNxUm5Ok7nHcaTphQw7QPBo1jvxxMUxlDWwd+grmq1yHH/QWXJpBQno415q/r5BV VKG6RRLTqQc9ChsK4+LZrYJ4/EV4UOTSZeJxnlnegf6/nQuYAYR04iS5s++bhGPy NtAKR0sg6z4IyKTcelUWAfbj4b5Dqt0Uy5kZeFFB0TLZlA5v/sKZv/L2v4sRAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUCh0lhOBfIQji5W0MRtcb3QEOk5YwHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3 QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLKW+7smpBCom4Pc0bix Z1K8itJdQJNERrDWDUtJYjNnomok4Tc1Dt2oE274MVJUxh0/CaGi0ttP8svUPra4 gEsOLy0SCyieELidCG0+8nRlJrg8V62hYfykvoXR/zKkw3y5qsIra7vUoWxhKgEv WzJq1WyGsNVSjE0W2EKoJrhpYJvqnU+GnKes7RQS1hAA1w592BLwZynEEjfGLzlB Ohubpn4H3LhZOs+IzpHPoX4ANG415bgJAwi03OjrQ96K6OZsrHrUWWArZoN6RhnF unAYhooQVhSXbDgPT3TwTWAH0tUFI+aQZoNnH0TNCSfgrzljos4aYZ1G0mHOdfJX 7A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:46:39 2026 by rpki-client