$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: CO3xVd/kpOmcYu+FtmG3en9yt/LKLQU0DbgvVQeAGBc= Subject key identifier: 13:9D:3B:56:D4:AD:CD:4A:1F:FB:D8:8B:BE:82:21:18:19:3F:7A:6C Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 7E5C599907C2ABD324DD04C5D997DAB978C24399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 9B Signing time: Thu 23 Jul 2026 14:55:50 +0000 Manifest this update: Thu 23 Jul 2026 14:50:50 +0000 Manifest next update: Fri 24 Jul 2026 16:55:50 +0000 Files and hashes: 1: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) 2: 326131333a633863333a653866653a3a2f34382d3438203d3e20323139323036.roa (hash: cBnuTUV5sq1PGF66jfHFR+8hB6S8u70t9V8V7QlajEI=) 3: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 4: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: qNquaQRaLC8XWS02WpXos08pnhQ8oGw4tJjSa+Oa5jQ=) 5: 326131333a633863333a653866643a3a2f34382d3438203d3e20323139323036.roa (hash: IlN/sUhJSdHCGQX30n3DTb5k4laSmUcUwvlCZ9aHIOo=) 6: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 7: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 8: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (hash: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5c:59:99:07:c2:ab:d3:24:dd:04:c5:d9:97:da:b9:78:c2:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Jul 23 14:50:50 2026 GMT Not After : Jul 24 16:55:50 2026 GMT Subject: CN=139D3B56D4ADCD4A1FFBD88BBE822118193F7A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:40:b5:04:f1:69:6c:1c:6f:29:f8:a5:da: dd:85:e3:be:28:93:1e:ed:f6:90:39:c9:40:e6:b6: 84:41:bd:f9:73:7f:08:c2:56:ae:cb:c7:40:38:50: 10:26:77:af:64:81:e6:ae:f6:87:24:38:a7:27:3b: a0:a3:c2:95:f3:94:da:d5:6b:61:b6:b0:93:ec:1a: 70:5a:d2:ee:d7:84:20:10:8b:c1:10:f1:e1:fc:2c: 87:d0:11:41:9d:81:8c:66:33:f9:11:a0:0c:1e:a1: 93:7d:19:8e:0f:7b:70:55:ed:e9:69:75:57:4a:3a: 1b:79:bf:3d:0f:8c:fc:c8:56:c5:8b:89:7b:d8:ec: cb:e4:3e:35:93:fd:b0:2d:b9:61:65:c3:e0:0d:56: 7a:43:78:18:05:57:75:05:b9:5b:f4:bd:8c:ed:f0: f7:0c:66:71:70:11:3d:a2:12:7e:d1:76:1c:8c:b3: 2c:7b:d9:de:df:e9:59:ec:9c:c0:a2:3d:a2:7d:85: e2:54:ce:9e:e1:53:64:8b:32:1f:36:51:47:99:a4: 31:5e:f2:87:80:b9:78:7e:9e:78:8c:46:45:1c:5d: d4:86:d1:a3:cf:86:09:34:a6:ca:f7:65:86:9c:73: 44:c1:e4:a5:45:9b:f8:6a:44:ea:db:07:cf:f2:6f: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:3B:56:D4:AD:CD:4A:1F:FB:D8:8B:BE:82:21:18:19:3F:7A:6C X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:05:35:ab:b4:46:48:01:8f:09:d0:4c:02:58:7c:a4:d3:f3: a9:e7:13:1b:74:d7:67:e2:4e:27:c7:1a:1c:7f:26:6f:81:f6: 39:68:3d:1b:c3:ec:23:4e:17:9f:26:b6:4c:87:bf:55:ee:53: f3:59:34:a2:2b:37:7f:6a:af:81:48:30:78:ba:84:38:3a:1b: e8:d0:d0:64:8f:5a:bd:a8:cc:c1:b8:07:c4:7a:7f:30:0a:b0: ea:78:e5:aa:06:68:31:57:c8:c7:d8:32:2c:0c:a3:81:dc:f0: d8:de:4a:7d:f4:45:d7:b0:b0:d8:88:ce:ee:10:88:48:43:6c: e9:32:13:3a:d5:e1:1c:d0:7f:3f:99:11:55:45:cd:7b:a0:f7: 22:3a:c8:f5:49:7d:ec:c7:5a:1a:d8:9c:c7:63:f7:c8:69:56: e1:18:c3:25:5b:01:e7:82:60:cc:99:21:0d:2f:a8:d5:80:6c: 0a:d9:c4:31:85:1a:d6:33:da:89:f3:29:f6:c1:a3:78:be:b6: 0c:d8:77:e6:60:7c:b9:fa:47:fa:1a:1e:f0:cf:d4:ae:9c:41: 43:f7:5f:1c:6d:b3:6d:0f:f6:40:6e:f0:d2:37:24:ae:02:7c: 75:9c:f7:71:37:5d:2f:83:6d:e5:40:48:b5:c1:59:01:cd:45: 85:4b:96:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUflxZmQfCq9Mk3QTF2ZfauXjCQ5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA3MjMxNDUwNTBaFw0yNjA3MjQxNjU1NTBaMDMxMTAvBgNV BAMTKDEzOUQzQjU2RDRBRENENEExRkZCRDg4QkJFODIyMTE4MTkzRjdBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E0C1BPFpbBxvKfil2t2F474o kx7t9pA5yUDmtoRBvflzfwjCVq7Lx0A4UBAmd69kgeau9ockOKcnO6CjwpXzlNrV a2G2sJPsGnBa0u7XhCAQi8EQ8eH8LIfQEUGdgYxmM/kRoAweoZN9GY4Pe3BV7elp dVdKOht5vz0PjPzIVsWLiXvY7MvkPjWT/bAtuWFlw+ANVnpDeBgFV3UFuVv0vYzt 8PcMZnFwET2iEn7RdhyMsyx72d7f6VnsnMCiPaJ9heJUzp7hU2SLMh82UUeZpDFe 8oeAuXh+nniMRkUcXdSG0aPPhgk0psr3ZYacc0TB5KVFm/hqROrbB8/yb+7bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUE507VtStzUof+9iLvoIhGBk/emwwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQU1q7RGSAGPCdBMAlh8 pNPzqecTG3TXZ+JOJ8caHH8mb4H2OWg9G8PsI04Xnya2TIe/Ve5T81k0ois3f2qv gUgweLqEODob6NDQZI9avajMwbgHxHp/MAqw6njlqgZoMVfIx9gyLAyjgdzw2N5K ffRF17Cw2IjO7hCISENs6TITOtXhHNB/P5kRVUXNe6D3IjrI9Ul97MdaGticx2P3 yGlW4RjDJVsB54JgzJkhDS+o1YBsCtnEMYUa1jPaifMp9sGjeL62DNh35mB8ufpH +hoe8M/UrpxBQ/dfHG2zbQ/2QG7w0jckrgJ8dZz3cTddL4Nt5UBItcFZAc1FhUuW 5g== -----END CERTIFICATE-----Generated at Thu Jul 23 19:08:00 2026 by rpki-client