$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: KxiPW+qhERFykdfpSxUhpXBM7H4JUuM5cAdzjpI1WkE= Subject key identifier: 42:FD:4D:9F:5B:AD:3B:25:A4:8A:47:0C:FA:B3:D4:96:F4:F1:3A:3E Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 49929F48069E8AD1B9D69838C83B13406B9A0D00 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 01CC Signing time: Thu 23 Jul 2026 05:25:55 +0000 Manifest this update: Thu 23 Jul 2026 05:20:55 +0000 Manifest next update: Fri 24 Jul 2026 09:16:55 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 2: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 3: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 4: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 7: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: 07F/1UXG3teFql3ymHTjHAVBPwiIT9bhDbNfCN4GO1I=) 8: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:92:9f:48:06:9e:8a:d1:b9:d6:98:38:c8:3b:13:40:6b:9a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jul 23 05:20:55 2026 GMT Not After : Jul 24 09:16:55 2026 GMT Subject: CN=42FD4D9F5BAD3B25A48A470CFAB3D496F4F13A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:48:77:d2:21:b2:97:87:74:d6:2b:22:5f: a7:6b:40:ea:b0:93:fa:f6:93:21:c4:e9:68:b3:e8: e3:ab:d0:87:99:46:cd:41:67:37:68:31:21:e1:e0: ae:2c:e1:6d:ac:5e:e6:08:a4:8d:4b:43:55:11:cd: 7d:b0:e1:e5:14:82:9b:0b:d9:f4:8c:8d:fb:18:9c: 6f:c5:57:a0:c7:a4:ab:19:04:46:d6:67:20:4e:00: 38:b0:56:b0:dd:0a:79:f3:16:07:10:35:a9:40:06: ff:26:b7:dc:99:d4:78:9e:81:0f:e1:20:2a:6b:a0: 9a:97:b9:6a:35:16:fc:53:3a:f8:a8:69:2c:7a:32: c5:a8:e5:6e:a5:bd:16:9d:c2:83:d0:6d:04:c8:f5: 3f:1f:e7:9d:28:68:1a:65:0c:f1:87:84:b8:cd:9a: c1:59:15:02:28:1b:9c:49:ce:ea:d8:72:6a:6b:58: 4d:85:ee:3d:b8:89:09:51:47:36:0c:d0:d4:58:e6: 20:8e:df:b0:df:a3:9e:cf:93:b1:d6:de:14:f3:87: b9:a5:40:00:40:1e:0b:2b:a9:ff:01:af:03:ed:be: ad:8b:b1:7b:10:a6:42:49:91:87:e8:5a:94:79:2c: b9:7c:a6:89:17:c9:95:73:f4:bc:e2:af:5e:d4:a8: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:4D:9F:5B:AD:3B:25:A4:8A:47:0C:FA:B3:D4:96:F4:F1:3A:3E X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:10:23:f2:96:90:2f:87:ac:eb:9f:ba:95:56:60:11:01:36: ea:fe:81:53:71:5f:51:52:22:dc:a8:05:91:0a:11:9e:d0:24: f6:a6:53:e8:43:bc:ec:cc:c9:da:62:89:14:6d:56:a0:08:a6: 17:6e:3d:4e:1d:8f:f0:f4:bf:67:83:b4:f4:1c:c7:28:ca:9f: bc:6d:e4:34:c4:44:0d:d1:9e:9d:46:8d:90:4e:0f:a6:87:29: 91:fd:91:e0:9b:18:09:5f:1a:a7:4b:f7:20:ef:13:03:7b:22: 11:4e:f7:57:da:ff:3a:9c:c4:50:b7:e2:46:ea:98:94:60:17: 83:03:bd:b9:94:25:ce:83:00:0d:e6:4b:8d:a7:e4:fe:d2:be: 29:75:6a:59:01:f0:f4:97:0f:65:2d:8e:ea:d8:6d:ba:53:7c: d4:8f:d6:5c:3b:3e:e5:1b:c9:87:48:31:1d:09:89:09:bc:24: dc:e8:9f:08:c6:a9:49:f8:71:34:a2:11:2e:cb:92:dd:06:36: e9:f6:a1:90:c9:b0:27:99:43:ab:3f:8f:9f:fe:d2:43:f0:f9: 80:2b:6b:e2:9a:43:30:76:9f:d8:29:c9:00:34:ca:f4:7b:06: 63:7a:7f:ef:66:a5:f6:c3:2f:a1:fe:ab:01:1a:39:3b:37:39: c5:21:ac:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSZKfSAaeitG51pg4yDsTQGuaDQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA3MjMwNTIwNTVaFw0yNjA3MjQwOTE2NTVaMDMxMTAvBgNV BAMTKDQyRkQ0RDlGNUJBRDNCMjVBNDhBNDcwQ0ZBQjNENDk2RjRGMTNBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/kh30iGyl4d01isiX6drQOqw k/r2kyHE6Wiz6OOr0IeZRs1BZzdoMSHh4K4s4W2sXuYIpI1LQ1URzX2w4eUUgpsL 2fSMjfsYnG/FV6DHpKsZBEbWZyBOADiwVrDdCnnzFgcQNalABv8mt9yZ1HiegQ/h ICproJqXuWo1FvxTOvioaSx6MsWo5W6lvRadwoPQbQTI9T8f550oaBplDPGHhLjN msFZFQIoG5xJzurYcmprWE2F7j24iQlRRzYM0NRY5iCO37Dfo57Pk7HW3hTzh7ml QABAHgsrqf8BrwPtvq2LsXsQpkJJkYfoWpR5LLl8pokXyZVz9Lzir17UqO/pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQv1Nn1utOyWkikcM+rPUlvTxOj4wHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+ECPy lpAvh6zrn7qVVmARATbq/oFTcV9RUiLcqAWRChGe0CT2plPoQ7zszMnaYokUbVag CKYXbj1OHY/w9L9ng7T0HMcoyp+8beQ0xEQN0Z6dRo2QTg+mhymR/ZHgmxgJXxqn S/cg7xMDeyIRTvdX2v86nMRQt+JG6piUYBeDA725lCXOgwAN5kuNp+T+0r4pdWpZ AfD0lw9lLY7q2G26U3zUj9ZcOz7lG8mHSDEdCYkJvCTc6J8IxqlJ+HE0ohEuy5Ld Bjbp9qGQybAnmUOrP4+f/tJD8PmAK2vimkMwdp/YKckANMr0ewZjen/vZqX2wy+h /qsBGjk7NznFIax9 -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:42 2026 by rpki-client