$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: lQpAK3848EtHNGQbSstezUgGoezM8gD3wygr3iwI1TA= Subject key identifier: 4C:21:1B:3E:85:89:14:0C:61:A8:F6:29:B3:EE:1F:30:9D:7E:1F:65 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 2ECB00C2C5E9D30191E0858B30A72C1D5A79E632 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: F7 Signing time: Thu 23 Jul 2026 15:38:25 +0000 Manifest this update: Thu 23 Jul 2026 15:33:25 +0000 Manifest next update: Fri 24 Jul 2026 19:15:25 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (hash: GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=) 2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: oMELBFN2iTQuT58O37A/xlKw6rKWXVd+68LSFb/9Oxo=) 3: 326131343a373538303a6163613a3a2f34382d3438203d3e203438323636.roa (hash: m0JZIjGPbuRcNff74X1PNepaT8iUZ69LeXHnRPJt/AQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cb:00:c2:c5:e9:d3:01:91:e0:85:8b:30:a7:2c:1d:5a:79:e6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Jul 23 15:33:25 2026 GMT Not After : Jul 24 19:15:25 2026 GMT Subject: CN=4C211B3E8589140C61A8F629B3EE1F309D7E1F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:df:22:a9:58:67:c2:9c:3c:58:d2:ce:98: 37:c2:3d:b3:c5:11:85:94:84:14:b6:ba:f9:69:99: 4b:f6:e1:1e:38:00:d7:03:52:0e:96:3b:59:74:98: f3:63:00:6b:5d:7e:ac:21:a6:60:8f:36:31:9a:2f: 7e:7a:1a:36:10:db:d9:db:31:24:e9:a2:c5:f0:92: 49:93:74:b2:48:cd:2a:12:33:9e:40:8e:31:b1:fc: 25:b2:71:0e:d0:dc:ff:55:53:14:05:ae:a6:e2:f6: fa:d4:30:fe:e1:6e:45:45:db:dd:59:b6:97:42:55: 5d:33:c2:ef:33:6c:ba:a3:d3:8a:22:ba:8f:f9:2f: e6:53:73:95:43:8e:4f:9e:c5:69:9e:26:b1:be:aa: 3c:43:a6:7c:b9:7c:4b:58:ea:f8:7a:da:d6:6e:74: 91:e0:7b:23:5b:93:2c:c8:ee:51:87:21:83:df:f8: 81:14:2c:90:1f:a0:88:72:6d:b4:f4:f6:d6:8f:1b: 25:f6:64:88:d5:73:cf:c5:2b:d8:ea:41:68:a3:63: cd:c3:06:b5:cd:6f:d6:51:f0:f9:d6:49:67:14:18: fc:c9:a3:74:cc:a1:e2:a4:0f:77:fc:d6:5d:9d:53: 36:f8:07:2c:e8:93:1a:bc:4b:d8:18:78:32:ce:ff: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:1B:3E:85:89:14:0C:61:A8:F6:29:B3:EE:1F:30:9D:7E:1F:65 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:22:9b:81:4b:27:7a:8e:36:45:13:a9:00:21:c7:6f:4c: dd:91:7a:45:12:d5:4a:31:24:ca:07:b0:6d:1b:da:3a:31:c4: ab:89:70:b5:f0:29:32:12:7d:90:29:4d:f3:57:f6:f9:1a:c3: a2:10:a0:68:6a:ab:b8:8e:37:12:84:76:3d:99:2d:cc:0e:f8: 17:ef:f1:82:f9:ed:ad:f9:6e:35:28:de:33:cb:54:1a:b9:55: 62:9e:15:59:33:89:a8:40:95:13:6e:af:fa:34:c9:35:cf:9d: 9f:4c:26:ba:7b:8a:0c:9d:c9:6b:bd:78:f8:46:03:79:ec:ca: 08:63:51:89:54:9e:e0:b4:1a:0c:c7:c4:66:76:a4:9e:4e:18: c6:14:fb:91:b5:f4:c0:ff:e5:45:d2:a7:2c:17:49:7c:79:3c: 9b:54:38:a7:2a:76:b2:43:24:11:d1:a2:fb:d8:33:43:5a:8d: e9:6b:01:18:fd:c8:f1:67:bf:4c:82:41:b5:83:ca:b4:6b:c9: a5:53:69:70:ac:cc:b1:9c:73:f7:e3:43:0e:af:a0:1a:44:c7: 32:de:2b:d3:ab:ed:27:db:4b:71:37:d3:52:f4:9f:05:f9:b1: 30:16:a9:01:0d:f4:6e:e7:2d:5a:b5:25:a0:36:df:40:5b:f3: 4c:94:e7:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULssAwsXp0wGR4IWLMKcsHVp55jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNjA3MjMxNTMzMjVaFw0yNjA3MjQxOTE1MjVaMDMxMTAvBgNV BAMTKDRDMjExQjNFODU4OTE0MEM2MUE4RjYyOUIzRUUxRjMwOUQ3RTFGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAl98iqVhnwpw8WNLOmDfCPbPF EYWUhBS2uvlpmUv24R44ANcDUg6WO1l0mPNjAGtdfqwhpmCPNjGaL356GjYQ29nb MSTposXwkkmTdLJIzSoSM55AjjGx/CWycQ7Q3P9VUxQFrqbi9vrUMP7hbkVF291Z tpdCVV0zwu8zbLqj04oiuo/5L+ZTc5VDjk+exWmeJrG+qjxDpny5fEtY6vh62tZu dJHgeyNbkyzI7lGHIYPf+IEULJAfoIhybbT09taPGyX2ZIjVc8/FK9jqQWijY83D BrXNb9ZR8PnWSWcUGPzJo3TMoeKkD3f81l2dUzb4Byzokxq8S9gYeDLO/xPjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTCEbPoWJFAxhqPYps+4fMJ1+H2UwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGyCKb gUsneo42RROpACHHb0zdkXpFEtVKMSTKB7BtG9o6McSriXC18CkyEn2QKU3zV/b5 GsOiEKBoaqu4jjcShHY9mS3MDvgX7/GC+e2t+W41KN4zy1QauVVinhVZM4moQJUT bq/6NMk1z52fTCa6e4oMnclrvXj4RgN57MoIY1GJVJ7gtBoMx8RmdqSeThjGFPuR tfTA/+VF0qcsF0l8eTybVDinKnayQyQR0aL72DNDWo3pawEY/cjxZ79MgkG1g8q0 a8mlU2lwrMyxnHP340MOr6AaRMcy3ivTq+0n20txN9NS9J8F+bEwFqkBDfRu5y1a tSWgNt9AW/NMlOeu -----END CERTIFICATE-----Generated at Fri Jul 24 00:23:15 2026 by rpki-client