$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: wPjfsTujKF7+KYgReKWNz8zEyb3MqvH3yF2V3uoYC6Q= Subject key identifier: 15:01:69:97:4E:BD:22:17:57:E5:0B:B5:67:3E:2F:F0:AB:EB:C0:55 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 75B7B16A194D268B49212EFCADC96B5EEA40583C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 011C Signing time: Thu 23 Jul 2026 10:09:30 +0000 Manifest this update: Thu 23 Jul 2026 10:04:30 +0000 Manifest next update: Fri 24 Jul 2026 10:46:30 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: e32J36idOHFopqA5mbakItdHJ56M29j5i0XvrR9cLw8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b7:b1:6a:19:4d:26:8b:49:21:2e:fc:ad:c9:6b:5e:ea:40:58:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jul 23 10:04:30 2026 GMT Not After : Jul 24 10:46:30 2026 GMT Subject: CN=150169974EBD221757E50BB5673E2FF0ABEBC055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:8b:99:ed:c7:07:ae:e8:41:c4:f4:95:4f: 8a:e6:a2:98:29:8b:db:4f:50:48:7d:7a:6a:98:65: 87:dd:d3:37:11:fd:9d:30:59:ee:29:3c:2a:0c:54: 5a:18:ab:e3:7a:b8:4e:01:f8:8f:41:24:16:d9:f4: 8e:45:1c:6f:10:c5:14:f1:8f:9d:db:b4:6c:99:e9: 60:fa:4c:8d:b2:a9:52:f8:73:d5:21:be:e7:5b:9f: 70:27:f2:66:32:a5:b1:ce:e0:23:6f:3b:10:ff:cf: 5c:11:ec:d9:75:af:72:ba:9e:94:4c:32:87:de:a6: 86:92:7a:e4:18:bf:ab:39:23:6e:5c:00:67:5e:40: 08:ac:2c:cb:32:cb:7a:23:a5:e5:ff:58:d1:e7:54: e5:f7:d6:6b:1f:b5:6c:fa:ac:2d:05:55:e7:ad:ab: 1d:b2:c1:11:0a:70:92:57:03:cd:1e:98:fe:6e:81: 0a:f4:6d:3c:10:2a:37:83:e4:56:66:2d:e2:cf:58: e7:29:c1:5a:67:3b:e6:32:5c:6c:93:a4:be:72:3d: 2d:86:53:f0:6f:32:0f:ce:88:a8:f4:78:64:a1:fe: 43:58:e7:d3:b9:fe:ca:36:5a:eb:cf:0e:2b:45:af: c4:37:96:98:77:de:6d:60:06:51:97:cb:64:85:77: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:01:69:97:4E:BD:22:17:57:E5:0B:B5:67:3E:2F:F0:AB:EB:C0:55 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:77:f2:b6:96:4d:d2:e2:ad:3e:56:88:66:58:bd:8a:0c:2e: 87:f6:57:8b:23:97:19:eb:9f:ad:ba:3f:3a:7c:f2:58:06:7c: 3a:9c:2a:97:95:f7:f3:c2:ed:14:6f:3e:f7:f6:74:7d:2d:2e: 8c:73:2c:06:43:9f:3e:84:c9:69:a3:c4:67:b5:47:6b:a4:3e: 3d:8a:25:4c:2d:f0:01:77:d3:3c:ec:de:74:61:42:1e:71:c8: c6:0f:65:d8:f2:b6:1c:bb:5b:07:ef:e6:bc:a2:43:2b:da:0b: 23:f3:f7:6c:e3:65:48:55:c0:5a:ba:e7:5c:7f:39:91:f7:09: ca:c7:c0:c3:2e:b6:64:17:67:71:e2:33:e8:08:8c:ae:da:35: a2:dc:c8:10:7d:1f:41:dc:41:de:cb:3c:26:ee:30:b6:08:b3: e5:d1:94:18:8d:b0:21:5e:ee:91:16:87:7c:44:20:2a:8d:7f: ab:4f:d5:f7:d5:10:9d:e0:fa:3c:85:c6:32:93:3f:8e:20:12: bb:75:b7:26:72:01:aa:0a:45:50:7b:92:bf:84:a2:31:9a:66: 8c:f5:37:f2:69:31:be:f0:3f:db:ac:c2:b3:b4:73:16:4c:90: 28:ac:b9:bb:2c:f6:a7:1a:40:d5:1b:6f:e6:58:1e:ce:14:74: 55:3d:37:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdbexahlNJotJIS78rclrXupAWDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA3MjMxMDA0MzBaFw0yNjA3MjQxMDQ2MzBaMDMxMTAvBgNV BAMTKDE1MDE2OTk3NEVCRDIyMTc1N0U1MEJCNTY3M0UyRkYwQUJFQkMwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qouZ7ccHruhBxPSVT4rmopgp i9tPUEh9emqYZYfd0zcR/Z0wWe4pPCoMVFoYq+N6uE4B+I9BJBbZ9I5FHG8QxRTx j53btGyZ6WD6TI2yqVL4c9Uhvudbn3An8mYypbHO4CNvOxD/z1wR7Nl1r3K6npRM MofepoaSeuQYv6s5I25cAGdeQAisLMsyy3ojpeX/WNHnVOX31msftWz6rC0FVeet qx2ywREKcJJXA80emP5ugQr0bTwQKjeD5FZmLeLPWOcpwVpnO+YyXGyTpL5yPS2G U/BvMg/OiKj0eGSh/kNY59O5/so2WuvPDitFr8Q3lph33m1gBlGXy2SFd9CTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFQFpl069IhdX5Qu1Zz4v8KvrwFUwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsd/K2 lk3S4q0+VohmWL2KDC6H9leLI5cZ65+tuj86fPJYBnw6nCqXlffzwu0Ubz739nR9 LS6McywGQ58+hMlpo8RntUdrpD49iiVMLfABd9M87N50YUIeccjGD2XY8rYcu1sH 7+a8okMr2gsj8/ds42VIVcBauudcfzmR9wnKx8DDLrZkF2dx4jPoCIyu2jWi3MgQ fR9B3EHeyzwm7jC2CLPl0ZQYjbAhXu6RFod8RCAqjX+rT9X31RCd4Po8hcYykz+O IBK7dbcmcgGqCkVQe5K/hKIxmmaM9TfyaTG+8D/brMKztHMWTJAorLm7LPanGkDV G2/mWB7OFHRVPTf1 -----END CERTIFICATE-----Generated at Fri Jul 24 02:03:33 2026 by rpki-client