$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: iQUWCJG66uj3e2ONUKfZ59MUv4lQzcltIwlf30bvbIo= Subject key identifier: 52:13:7E:D5:7C:29:5E:90:25:79:1F:E8:65:EE:98:4E:F2:DF:89:46 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 715C1F9C4929E2749B7CE763CFAEC66250621673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 0152 Signing time: Thu 23 Jul 2026 12:29:33 +0000 Manifest this update: Thu 23 Jul 2026 12:24:33 +0000 Manifest next update: Fri 24 Jul 2026 15:00:33 +0000 Files and hashes: 1: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 2: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 3: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 4: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 5: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: 0TBypXHf5rwNMWVEWUdOPwUD0+FSb0LPlfL5VeKL8Po=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5c:1f:9c:49:29:e2:74:9b:7c:e7:63:cf:ae:c6:62:50:62:16:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Jul 23 12:24:33 2026 GMT Not After : Jul 24 15:00:33 2026 GMT Subject: CN=52137ED57C295E9025791FE865EE984EF2DF8946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:06:e0:ad:d9:fe:c4:16:b0:ae:4f:89:22: 39:ad:4d:f8:7b:6f:a5:48:4b:0a:30:f5:25:7b:6c: 7e:c8:b9:66:c4:4a:24:8e:cf:0c:ad:e4:00:75:37: 36:65:df:d3:0d:1a:b0:ee:b4:62:b9:c5:0c:81:c4: 10:3a:2b:e5:c9:5b:12:3e:5f:41:95:52:38:29:ad: 3a:12:43:07:1f:b2:b2:bd:fc:59:c8:2e:b2:63:35: 16:df:8c:ae:ce:f0:58:0c:00:e2:e3:0a:28:86:4e: ce:3b:d0:50:35:ed:c3:a3:04:55:45:af:a1:b6:54: 7a:35:04:21:8c:cd:6b:e8:cd:da:69:a9:21:c8:d9: b0:0a:84:e8:4a:e4:06:93:3a:de:b1:82:69:31:dc: 91:57:85:22:d4:ac:96:11:42:1e:0f:d9:fa:7b:cc: a2:83:93:36:0f:f1:d4:92:41:f3:de:02:15:75:f6: 2a:73:57:b3:4b:8b:18:ce:05:d3:0e:34:e9:34:95: 25:09:d4:58:85:60:a8:b2:fc:98:ce:6e:96:ff:50: 72:d8:56:32:d6:13:1b:8a:4d:11:03:17:c1:bc:e8: 1d:96:54:4e:22:ac:a3:53:a8:08:f9:d1:2b:94:4c: 6b:d2:c1:80:30:00:c1:c4:58:37:44:f8:0a:8f:57: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:7E:D5:7C:29:5E:90:25:79:1F:E8:65:EE:98:4E:F2:DF:89:46 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:b5:03:68:dd:23:52:12:ed:75:7b:7a:8e:9d:79:3f:50: f7:49:81:06:95:06:31:df:1c:50:07:b7:82:e0:cc:f2:38:cf: bd:a9:93:12:16:12:55:6b:b0:4a:c1:17:af:bb:a2:9d:0e:62: 2c:db:47:d1:7c:8c:67:d2:7f:cb:44:26:1d:83:a9:3c:ef:a7: 40:39:14:48:ca:dc:e7:c4:f3:eb:4f:e4:d3:58:70:12:df:08: d5:d8:20:42:9f:1e:af:76:33:b1:ad:b6:3f:3e:c9:3d:9d:30: 31:95:53:c9:d5:49:fa:95:90:67:34:3e:40:57:e0:e9:0c:d7: af:bb:f3:24:36:4d:83:31:1b:b7:68:37:ea:d0:a4:56:74:e5: 78:1a:5d:41:25:65:70:e2:57:d9:ff:34:bc:ae:6b:12:6c:27: 98:84:72:b2:79:67:1e:c8:f5:27:2a:8b:83:44:ee:57:c8:d4: 85:d2:a9:2d:df:21:c9:fe:39:73:b0:e8:0e:15:2c:09:8a:26: 80:19:69:8b:bb:8e:99:1b:4f:33:cb:50:b9:0a:79:ab:99:16: 1b:11:83:9a:11:16:a4:f3:fc:4d:5b:9a:85:9f:df:ff:e7:b7: 28:f9:25:5e:5f:22:f8:13:a9:76:dd:09:0b:69:d8:51:66:4e: f1:56:d2:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcVwfnEkp4nSbfOdjz67GYlBiFnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA3MjMxMjI0MzNaFw0yNjA3MjQxNTAwMzNaMDMxMTAvBgNV BAMTKDUyMTM3RUQ1N0MyOTVFOTAyNTc5MUZFODY1RUU5ODRFRjJERjg5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1Abgrdn+xBawrk+JIjmtTfh7 b6VISwow9SV7bH7IuWbESiSOzwyt5AB1NzZl39MNGrDutGK5xQyBxBA6K+XJWxI+ X0GVUjgprToSQwcfsrK9/FnILrJjNRbfjK7O8FgMAOLjCiiGTs470FA17cOjBFVF r6G2VHo1BCGMzWvozdppqSHI2bAKhOhK5AaTOt6xgmkx3JFXhSLUrJYRQh4P2fp7 zKKDkzYP8dSSQfPeAhV19ipzV7NLixjOBdMONOk0lSUJ1FiFYKiy/JjObpb/UHLY VjLWExuKTREDF8G86B2WVE4irKNTqAj50SuUTGvSwYAwAMHEWDdE+AqPVx+5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUhN+1XwpXpAleR/oZe6YTvLfiUYwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkta1A2jdI1IS7XV7eo6d eT9Q90mBBpUGMd8cUAe3guDM8jjPvamTEhYSVWuwSsEXr7uinQ5iLNtH0XyMZ9J/ y0QmHYOpPO+nQDkUSMrc58Tz60/k01hwEt8I1dggQp8er3Yzsa22Pz7JPZ0wMZVT ydVJ+pWQZzQ+QFfg6QzXr7vzJDZNgzEbt2g36tCkVnTleBpdQSVlcOJX2f80vK5r EmwnmIRysnlnHsj1JyqLg0TuV8jUhdKpLd8hyf45c7DoDhUsCYomgBlpi7uOmRtP M8tQuQp5q5kWGxGDmhEWpPP8TVuahZ/f/+e3KPklXl8i+BOpdt0JC2nYUWZO8VbS bw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:41 2026 by rpki-client