$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: jXCJwC8blehRkfq/jsBi/66gAFRPYVsaVhhdCHPWIoI= Subject key identifier: 4F:DB:B2:D1:F7:64:A5:AE:FC:59:23:55:12:A2:D1:07:72:F3:06:83 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 581CFC70D1EA6ADDB2020127CB4F21E96FB45C16 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 0636 Signing time: Thu 23 Jul 2026 11:22:58 +0000 Manifest this update: Thu 23 Jul 2026 11:17:58 +0000 Manifest next update: Fri 24 Jul 2026 13:08:58 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: /E6i3BexrdzAQdwgzN8L+Gmmqzw+w7a2cPYIr8Sw9qU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1c:fc:70:d1:ea:6a:dd:b2:02:01:27:cb:4f:21:e9:6f:b4:5c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Jul 23 11:17:58 2026 GMT Not After : Jul 24 13:08:58 2026 GMT Subject: CN=4FDBB2D1F764A5AEFC59235512A2D10772F30683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:5e:ee:f4:e7:1f:74:b1:a1:df:30:b9:66: 86:f5:40:95:ad:6e:71:ff:78:57:22:09:2d:10:69: 17:46:f8:45:05:81:1d:f6:ea:33:27:66:24:7e:be: be:c4:e8:4a:26:16:9f:e3:8a:54:2c:47:52:aa:5d: ad:95:86:b2:bc:6d:3c:e0:9a:b9:1d:02:be:eb:58: 2d:b2:d8:fb:75:66:84:e0:00:2e:ce:cf:f0:64:ae: 13:5e:c9:59:1b:76:36:09:4a:bf:83:72:ef:70:08: 38:15:03:c0:f4:9a:d5:bc:c2:63:7f:f3:aa:12:53: 08:80:8b:92:4c:7f:92:e4:fe:0d:9a:fe:ac:69:6f: 5c:d2:47:7f:76:50:34:f7:a0:a6:02:58:a2:bf:76: c5:9a:0d:1b:ee:8c:8e:3d:24:e9:ff:db:ae:51:77: 04:2f:09:92:ce:09:f5:58:d5:7f:16:ca:61:54:57: 2d:72:00:26:c2:29:2f:4e:63:d4:5b:76:2f:b1:c7: 26:e9:d0:49:2c:63:c6:75:b2:a0:9e:e4:1c:15:58: 6d:3e:17:63:ff:c3:8c:a1:29:3d:df:ab:7d:13:cb: 42:15:51:65:19:66:bf:57:8d:95:b2:70:0e:78:80: d4:e3:74:de:6b:bc:1a:a0:9d:d1:5e:c7:bc:07:13: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:B2:D1:F7:64:A5:AE:FC:59:23:55:12:A2:D1:07:72:F3:06:83 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f8:38:2d:b1:a5:c2:71:c1:06:7d:6b:3b:0b:e2:f1:ca:ec: 5b:c6:9a:53:d9:dd:f5:15:04:09:72:4e:e1:74:21:f6:23:45: 09:0c:3a:d0:22:00:03:be:27:b1:fe:70:b9:a6:49:62:a6:5b: 31:58:88:91:15:2e:a9:0b:83:da:7a:c4:3c:24:0a:f2:dd:43: b8:1c:c2:63:10:f7:cf:0a:a1:60:55:68:4d:14:6b:c7:23:4a: f3:f8:bd:e3:85:0f:55:f0:3e:dd:17:9a:93:f9:ab:68:d5:a5: e3:8e:d1:0c:30:8b:0c:e9:ea:6d:5c:63:76:80:ff:ff:78:e7: d3:cf:77:85:49:0d:ec:07:20:b1:b1:b2:a3:78:10:a2:7d:6d: 29:e2:2d:ec:9e:5b:4b:ba:9f:81:7e:7a:a5:39:f0:df:42:03: 3b:98:db:b9:60:56:b0:56:e7:45:a1:3a:c7:56:c1:b2:7e:b9: 3e:d9:f5:6e:e7:fb:4f:f2:85:ab:eb:34:ec:ee:27:57:a2:6b: 96:f3:ee:9d:86:3c:68:04:e7:ee:6a:d5:35:32:17:67:9c:b4: cd:1c:c6:6d:b4:26:b0:21:86:e5:65:42:8d:4a:00:ee:fb:49: c2:8d:b8:6a:b1:80:14:6f:cf:5c:bd:8c:43:28:ad:4f:d5:68: 5d:9a:4c:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWBz8cNHqat2yAgEny08h6W+0XBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjA3MjMxMTE3NThaFw0yNjA3MjQxMzA4NThaMDMxMTAvBgNV BAMTKDRGREJCMkQxRjc2NEE1QUVGQzU5MjM1NTEyQTJEMTA3NzJGMzA2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMV7u9OcfdLGh3zC5Zob1QJWt bnH/eFciCS0QaRdG+EUFgR326jMnZiR+vr7E6EomFp/jilQsR1KqXa2VhrK8bTzg mrkdAr7rWC2y2Pt1ZoTgAC7Oz/BkrhNeyVkbdjYJSr+Dcu9wCDgVA8D0mtW8wmN/ 86oSUwiAi5JMf5Lk/g2a/qxpb1zSR392UDT3oKYCWKK/dsWaDRvujI49JOn/265R dwQvCZLOCfVY1X8WymFUVy1yACbCKS9OY9Rbdi+xxybp0EksY8Z1sqCe5BwVWG0+ F2P/w4yhKT3fq30Ty0IVUWUZZr9XjZWycA54gNTjdN5rvBqgndFex7wHE79tAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUT9uy0fdkpa78WSNVEqLRB3LzBoMwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ+Dgt saXCccEGfWs7C+LxyuxbxppT2d31FQQJck7hdCH2I0UJDDrQIgADviex/nC5pkli plsxWIiRFS6pC4PaesQ8JAry3UO4HMJjEPfPCqFgVWhNFGvHI0rz+L3jhQ9V8D7d F5qT+ato1aXjjtEMMIsM6eptXGN2gP//eOfTz3eFSQ3sByCxsbKjeBCifW0p4i3s nltLup+BfnqlOfDfQgM7mNu5YFawVudFoTrHVsGyfrk+2fVu5/tP8oWr6zTs7idX omuW8+6dhjxoBOfuatU1MhdnnLTNHMZttCawIYblZUKNSgDu+0nCjbhqsYAUb89c vYxDKK1P1WhdmkzM -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:45 2026 by rpki-client