$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: CkWPUfPmjVCrZIzuOZcnagMhMx51juX3TS5RUHqD9qM= Subject key identifier: 02:75:23:B1:36:3F:01:F8:14:43:D5:8F:15:3F:F4:34:7B:99:7C:A8 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 2A164248285B69CCB3C6F970091C4A051FA57D56 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0459 Signing time: Fri 24 Jul 2026 02:51:17 +0000 Manifest this update: Fri 24 Jul 2026 02:46:17 +0000 Manifest next update: Sat 25 Jul 2026 03:52:17 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: UYEbs2NDJRR77qwSu5h0KEvu94xJmalLU2zI4/eHLMU=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 02:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:16:42:48:28:5b:69:cc:b3:c6:f9:70:09:1c:4a:05:1f:a5:7d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jul 24 02:46:17 2026 GMT Not After : Jul 25 03:52:17 2026 GMT Subject: CN=027523B1363F01F81443D58F153FF4347B997CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:73:79:1b:97:61:28:33:e9:f8:7d:69:91:85: 9f:eb:df:58:a5:2c:80:c3:37:a0:5f:14:70:4b:b0: a2:8c:95:af:bc:63:7d:a5:de:ad:11:9f:a7:e9:67: 06:47:da:8e:8c:71:05:2b:39:21:4b:47:0d:77:97: b6:40:96:b9:98:20:87:ca:6b:a5:80:27:6e:fc:3e: d6:ae:83:b0:45:50:11:c6:c5:70:eb:cc:39:8b:77: ba:eb:46:5a:d1:1e:ab:b3:2c:62:4c:74:f7:e8:e0: 1d:e8:53:ab:0a:76:91:cd:bf:df:7d:6a:b7:ca:1a: 4b:0b:ee:9c:18:9a:f7:37:b7:af:ee:17:c4:c4:b7: 42:45:c9:fd:22:7b:7e:15:ea:88:24:51:62:ab:09: 5c:cc:8a:11:c7:0b:e7:df:20:d2:13:d2:7a:a6:d7: 01:bd:fe:18:ee:34:a4:07:d8:a1:0c:b8:1c:30:83: d9:25:38:d2:60:0c:4d:88:28:ce:6a:d6:f3:db:09: 22:40:cd:77:86:89:d5:64:18:09:56:c2:cc:4d:c6: 2f:cc:46:fe:9e:63:73:be:2e:45:f4:f3:89:53:37: fc:3a:25:b0:00:c6:3b:05:77:5a:bc:fc:64:db:9a: f8:55:9d:a2:f5:f4:ca:eb:eb:c6:fd:a5:d0:f3:3b: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:23:B1:36:3F:01:F8:14:43:D5:8F:15:3F:F4:34:7B:99:7C:A8 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:a5:a5:a6:2e:3d:af:24:f0:df:9a:a3:1d:37:88:a3:a3: 0e:61:eb:4e:53:12:d8:74:34:07:39:2c:b0:8d:e0:e2:3d:57: 82:12:88:9a:48:5c:44:a2:1c:e4:ae:47:a7:3d:4c:9d:56:90: e0:e9:ef:ee:14:6b:8d:a2:00:56:30:f0:95:a3:bf:a9:f9:00: 7a:5b:1f:d8:09:3f:d7:28:25:7f:6f:3f:4a:69:e4:0b:2c:53: 2d:19:e8:12:02:bc:40:e8:1b:61:3e:2f:d0:93:66:27:4f:6c: 8f:4d:05:5f:44:76:0a:bf:2b:ad:69:ed:cd:6d:e1:0d:1c:b5: 21:1d:1a:08:61:74:1b:00:a7:37:30:57:b2:43:8d:78:da:c1: 97:d5:7a:1a:51:14:c3:23:1b:41:0f:94:e4:9f:99:23:ad:c2: d8:2d:9c:8c:b4:6c:31:f1:6d:d3:a1:c1:72:21:10:1f:c7:15: 6c:3b:84:e4:06:57:17:d3:8e:60:a6:af:61:65:32:09:bd:d6: 99:a0:6e:f4:fc:b7:3a:db:06:2c:31:6a:87:3e:33:03:d8:37: 03:ce:2e:27:47:1d:87:44:31:10:90:84:94:54:e4:c4:ba:a4: e8:ac:f4:54:54:cf:53:51:06:b3:cc:c2:50:1f:ce:7c:5a:26: 1f:d4:95:ee -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKhZCSChbacyzxvlwCRxKBR+lfVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA3MjQwMjQ2MTdaFw0yNjA3MjUwMzUyMTdaMDMxMTAvBgNV BAMTKDAyNzUyM0IxMzYzRjAxRjgxNDQzRDU4RjE1M0ZGNDM0N0I5OTdDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2c3kbl2EoM+n4fWmRhZ/r31il LIDDN6BfFHBLsKKMla+8Y32l3q0Rn6fpZwZH2o6McQUrOSFLRw13l7ZAlrmYIIfK a6WAJ278Ptaug7BFUBHGxXDrzDmLd7rrRlrRHquzLGJMdPfo4B3oU6sKdpHNv999 arfKGksL7pwYmvc3t6/uF8TEt0JFyf0ie34V6ogkUWKrCVzMihHHC+ffINIT0nqm 1wG9/hjuNKQH2KEMuBwwg9klONJgDE2IKM5q1vPbCSJAzXeGidVkGAlWwsxNxi/M Rv6eY3O+LkX084lTN/w6JbAAxjsFd1q8/GTbmvhVnaL19Mrr68b9pdDzOy29AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAnUjsTY/AfgUQ9WPFT/0NHuZfKgwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCI4aWl pi49ryTw35qjHTeIo6MOYetOUxLYdDQHOSywjeDiPVeCEoiaSFxEohzkrkenPUyd VpDg6e/uFGuNogBWMPCVo7+p+QB6Wx/YCT/XKCV/bz9KaeQLLFMtGegSArxA6Bth Pi/Qk2YnT2yPTQVfRHYKvyutae3NbeENHLUhHRoIYXQbAKc3MFeyQ4142sGX1Xoa URTDIxtBD5Tkn5kjrcLYLZyMtGwx8W3TocFyIRAfxxVsO4TkBlcX045gpq9hZTIJ vdaZoG70/Lc62wYsMWqHPjMD2DcDzi4nRx2HRDEQkISUVOTEuqTorPRUVM9TUQaz zMJQH858WiYf1JXu -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:42 2026 by rpki-client