$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: KqU8UGwhRbkopqY3zGu8PwNz2AT1BZ2e96Hqbj1dBl0= Subject key identifier: 1A:82:B1:1B:45:1A:31:47:59:E4:FA:79:39:19:C1:C9:23:8E:2D:AC Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 4615AD52172185B0519C425AD2138A61993C94D0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 017A Signing time: Thu 23 Jul 2026 18:38:14 +0000 Manifest this update: Thu 23 Jul 2026 18:33:14 +0000 Manifest next update: Fri 24 Jul 2026 19:00:14 +0000 Files and hashes: 1: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=) 2: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) 3: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: iUHrd2CR44RVRTTcU7cutv3VfviFQPjgKk8ERDQDg18=) 4: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) 5: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=) 6: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:15:ad:52:17:21:85:b0:51:9c:42:5a:d2:13:8a:61:99:3c:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Jul 23 18:33:14 2026 GMT Not After : Jul 24 19:00:14 2026 GMT Subject: CN=1A82B11B451A314759E4FA793919C1C9238E2DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:12:cd:bd:df:be:49:05:2f:00:d6:d7:a6: 4b:36:f4:0f:7a:c2:ba:f8:b6:5f:db:67:a6:0a:3b: 63:c9:58:44:4b:65:3b:f3:54:74:24:29:41:ac:f8: ed:63:b2:7f:cd:d7:2f:a2:50:2e:b7:2a:b8:6b:11: b9:86:a2:a1:6c:cb:57:85:fd:c1:c7:fd:b6:7a:72: b8:8c:67:7d:b3:45:d8:27:32:2d:14:fc:25:0f:33: cc:7a:d5:e8:da:92:58:cf:f4:ee:db:cb:8a:f1:2e: b4:79:83:67:e7:58:71:c9:a6:0f:dd:a7:e6:da:c2: 14:3c:cd:ca:8d:8c:ed:89:3b:6f:bb:21:40:be:8c: 7f:f4:6c:73:fb:bb:36:6d:12:43:f3:7a:13:9d:a4: a6:57:de:4f:dc:69:d2:e7:c1:52:7b:74:4a:bf:04: 3d:7a:82:80:1c:52:11:d8:6c:26:b2:8f:32:94:92: db:88:e1:db:34:fc:8f:bc:9a:ba:c0:ba:15:43:e1: ac:22:09:6c:cc:4d:07:79:50:dd:45:f3:df:e6:1d: 4f:8f:1a:01:bc:57:10:32:9b:04:15:2f:4a:e5:27: 23:4e:c6:4a:4b:28:d6:a5:a4:e6:3f:be:a5:8d:03: 7a:27:bd:46:60:62:70:94:62:e6:26:76:5c:27:f8: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:B1:1B:45:1A:31:47:59:E4:FA:79:39:19:C1:C9:23:8E:2D:AC X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f8:ab:d9:d7:7c:02:85:37:cb:54:75:4a:93:1d:bc:82:49: 1c:92:42:af:af:9f:58:0a:75:5d:f3:59:f7:10:c1:fd:49:e6: 6f:a9:80:c1:44:6c:73:fa:59:3e:fd:54:3a:8a:19:e8:36:2a: e7:36:d0:16:0e:37:e4:9a:37:e0:7b:e1:00:fe:9d:3d:0c:29: 4c:a3:31:16:0d:20:01:bb:b4:ba:ac:d1:03:58:6e:df:0d:04: 7e:f2:17:85:e1:51:37:e7:1a:47:a7:85:79:15:1b:a3:fc:0d: 77:0d:e2:7d:93:b6:9d:97:c8:c3:c7:80:c3:17:ee:0c:31:a6: 55:7f:01:38:34:3e:ac:d1:1c:d2:a9:60:1e:47:ee:84:28:6f: 94:31:b2:0b:af:9c:0f:e5:1c:ac:a8:61:33:1f:28:8d:7c:55: c1:d8:9e:b1:a4:7e:d3:76:fe:2e:1c:c4:51:55:65:11:fa:92: 08:24:50:cc:67:59:5d:13:ce:b0:71:71:54:6d:33:6c:78:98: fe:cf:25:a3:5f:de:5d:88:94:12:68:34:07:ec:b9:a5:c1:39: 9f:4b:43:f4:6d:52:f3:7e:4b:63:7d:37:53:29:97:b0:11:a9: c4:72:b9:1e:bc:ab:98:6b:c1:e3:16:21:55:23:1d:14:86:16: 87:2f:a8:39 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURhWtUhchhbBRnEJa0hOKYZk8lNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNjA3MjMxODMzMTRaFw0yNjA3MjQxOTAwMTRaMDMxMTAvBgNV BAMTKDFBODJCMTFCNDUxQTMxNDc1OUU0RkE3OTM5MTlDMUM5MjM4RTJEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyRLNvd++SQUvANbXpks29A96 wrr4tl/bZ6YKO2PJWERLZTvzVHQkKUGs+O1jsn/N1y+iUC63KrhrEbmGoqFsy1eF /cHH/bZ6criMZ32zRdgnMi0U/CUPM8x61ejakljP9O7by4rxLrR5g2fnWHHJpg/d p+bawhQ8zcqNjO2JO2+7IUC+jH/0bHP7uzZtEkPzehOdpKZX3k/cadLnwVJ7dEq/ BD16goAcUhHYbCayjzKUktuI4ds0/I+8mrrAuhVD4awiCWzMTQd5UN1F89/mHU+P GgG8VxAymwQVL0rlJyNOxkpLKNalpOY/vqWNA3onvUZgYnCUYuYmdlwn+PNVAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUGoKxG0UaMUdZ5Pp5ORnBySOOLawwHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/ir2dd8AoU3y1R1SpMd vIJJHJJCr6+fWAp1XfNZ9xDB/Unmb6mAwURsc/pZPv1UOooZ6DYq5zbQFg435Jo3 4HvhAP6dPQwpTKMxFg0gAbu0uqzRA1hu3w0EfvIXheFRN+caR6eFeRUbo/wNdw3i fZO2nZfIw8eAwxfuDDGmVX8BODQ+rNEc0qlgHkfuhChvlDGyC6+cD+UcrKhhMx8o jXxVwdiesaR+03b+LhzEUVVlEfqSCCRQzGdZXRPOsHFxVG0zbHiY/s8lo1/eXYiU Emg0B+y5pcE5n0tD9G1S835LY303UymXsBGpxHK5HryrmGvB4xYhVSMdFIYWhy+o OQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:53 2026 by rpki-client