$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft (raw, json) Hash identifier: Bu37Dw/GVMWsPbl66VTlMUFIKUnfdbSqFd2zKHeF194= Subject key identifier: DA:89:4B:DA:73:B9:D9:7A:D0:E1:E3:28:1B:E3:3E:E7:82:81:9B:52 Authority key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 Certificate issuer: /CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Certificate serial: 2AF9BAD74284849FD879CB127EAB5D71C0FFCE2E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft Manifest number: 1B Signing time: Thu 23 Jul 2026 15:29:34 +0000 Manifest this update: Thu 23 Jul 2026 15:24:34 +0000 Manifest next update: Fri 24 Jul 2026 15:34:34 +0000 Files and hashes: 1: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl (hash: EWH2yiqzqqQtsq90AVaO7wAQG8udb906WU2lJGVKwgo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 15:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:ba:d7:42:84:84:9f:d8:79:cb:12:7e:ab:5d:71:c0:ff:ce:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Validity Not Before: Jul 23 15:24:34 2026 GMT Not After : Jul 24 15:34:34 2026 GMT Subject: CN=DA894BDA73B9D97AD0E1E3281BE33EE782819B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:16:c4:61:30:50:b9:73:2e:11:68:43:16: c8:78:96:41:8d:2c:8f:65:f9:03:81:11:dd:f1:a4: 73:0d:d8:6c:72:3c:7f:dc:38:e6:f7:74:77:50:8c: 63:54:8f:7d:25:7e:ae:00:f0:71:6a:4f:60:2a:23: 72:0a:5f:1d:ef:07:34:45:20:ef:8d:27:b3:04:57: 88:f6:c1:da:a1:d7:97:7d:e2:e9:0f:58:90:0c:85: 88:5f:4e:80:bd:6a:54:04:d9:07:db:4f:79:b1:a8: 8f:50:4a:50:9f:84:71:e1:63:54:06:e2:f9:1f:d9: 21:02:4b:4f:9a:66:e2:ab:ce:ca:a2:fd:e1:4b:80: f4:3a:f0:a8:ec:67:6e:3e:13:e7:be:22:d1:fe:e8: 7d:f9:65:d1:70:ab:2f:23:c1:67:2b:ec:6f:ac:64: ae:06:a5:20:fa:73:8a:41:9c:e7:f1:ba:f7:b3:ed: b1:7d:eb:ff:86:18:5e:9b:e1:05:fe:8d:a5:4d:b8: 89:28:23:8d:56:e5:19:53:05:76:06:45:db:14:34: 9d:ed:f8:af:ba:be:df:aa:1c:f8:e8:54:2c:36:78: 38:f3:71:02:ee:c4:fe:cb:8f:6c:58:3f:76:d3:1b: 97:cd:c4:a1:4f:da:5c:48:c1:df:9e:33:b9:0a:26: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:4B:DA:73:B9:D9:7A:D0:E1:E3:28:1B:E3:3E:E7:82:81:9B:52 X509v3 Authority Key Identifier: keyid:57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:24:f9:89:f3:72:61:87:ea:49:95:b8:d1:17:2e:d0:eb:a8: 59:0f:c9:70:70:78:7f:32:f9:49:88:fc:ba:0b:b6:fe:d5:ed: 1a:ce:13:b4:d8:7d:ec:10:3a:8f:51:1b:ce:d1:ab:c5:55:3d: bc:a0:d7:f6:cf:fb:dc:ed:fa:bb:fa:65:8b:c0:0a:0d:cb:74: 95:b0:0c:eb:06:b0:5c:05:df:da:df:90:c5:79:14:c4:9a:4f: 7a:f6:77:4b:b0:96:bd:05:91:67:ba:14:43:cb:6a:78:a9:54: c8:44:d0:bd:15:9a:57:28:ed:29:be:7d:ea:54:27:9e:96:29: e6:a6:80:38:b9:d3:7a:8b:61:90:66:fa:9c:6f:c2:0e:e4:3c: 96:a9:c4:14:82:f0:bc:a9:4a:38:0c:15:f1:72:9e:cb:5a:bb: 05:5c:54:16:50:1d:8d:2c:6e:d0:b7:b9:d2:0c:d4:a7:f7:a6: 78:a7:98:13:1c:b1:8d:d2:4f:5e:c2:3e:2b:e3:2e:b7:bb:1c: b2:dd:eb:e7:43:5b:23:2b:79:89:de:84:47:6b:ce:33:06:07: 61:81:16:d8:97:1d:5d:93:e5:16:93:7b:da:1a:2c:9b:0e:0e: 70:05:7e:7a:d4:f1:c6:ef:34:46:72:01:18:47:23:f8:b2:25: 8e:3d:96:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKvm610KEhJ/YecsSfqtdccD/zi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0 MTYzMUVBMjAeFw0yNjA3MjMxNTI0MzRaFw0yNjA3MjQxNTM0MzRaMDMxMTAvBgNV BAMTKERBODk0QkRBNzNCOUQ5N0FEMEUxRTMyODFCRTMzRUU3ODI4MTlCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQHRbEYTBQuXMuEWhDFsh4lkGN LI9l+QOBEd3xpHMN2GxyPH/cOOb3dHdQjGNUj30lfq4A8HFqT2AqI3IKXx3vBzRF IO+NJ7MEV4j2wdqh15d94ukPWJAMhYhfToC9alQE2QfbT3mxqI9QSlCfhHHhY1QG 4vkf2SECS0+aZuKrzsqi/eFLgPQ68KjsZ24+E+e+ItH+6H35ZdFwqy8jwWcr7G+s ZK4GpSD6c4pBnOfxuvez7bF96/+GGF6b4QX+jaVNuIkoI41W5RlTBXYGRdsUNJ3t +K+6vt+qHPjoVCw2eDjzcQLuxP7Lj2xYP3bTG5fNxKFP2lxIwd+eM7kKJqZLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2olL2nO52XrQ4eMoG+M+54KBm1IwHwYDVR0j BBgwFoAUVw54SKMoRYLNbw8MA199m0FjHqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQz NjIyLzEvNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0MTYzMUVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMw MzVGN0Q5QjQxNjMxRUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBiNjU0NWZjLTllYWMtNGZkYy1hMmVjLWM3MDJkNzRkMzYyMi8xLzU3MEU3ODQ4 QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWJPmJ 83Jhh+pJlbjRFy7Q66hZD8lwcHh/MvlJiPy6C7b+1e0azhO02H3sEDqPURvO0avF VT28oNf2z/vc7fq7+mWLwAoNy3SVsAzrBrBcBd/a35DFeRTEmk969ndLsJa9BZFn uhRDy2p4qVTIRNC9FZpXKO0pvn3qVCeelinmpoA4udN6i2GQZvqcb8IO5DyWqcQU gvC8qUo4DBXxcp7LWrsFXFQWUB2NLG7Qt7nSDNSn96Z4p5gTHLGN0k9ewj4r4y63 uxyy3evnQ1sjK3mJ3oRHa84zBgdhgRbYlx1dk+UWk3vaGiybDg5wBX561PHG7zRG cgEYRyP4siWOPZYg -----END CERTIFICATE-----Generated at Fri Jul 24 05:15:10 2026 by rpki-client