$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: 1SWLwN5zUaT03EaOKOXDR8HWfXEOHEfPzfwB2diSb1E= Subject key identifier: EA:C0:F3:DF:0B:F8:B8:D3:77:DD:16:9A:4F:4D:FB:E6:70:B2:14:2E Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 41011C081B776BECF30914B47F959731665BAD32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0290 Signing time: Thu 23 Jul 2026 16:13:56 +0000 Manifest this update: Thu 23 Jul 2026 16:08:56 +0000 Manifest next update: Fri 24 Jul 2026 16:18:56 +0000 Files and hashes: 1: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 2: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 3: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 5: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 6: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: c9oEd+qF31UOcxmisdmJZaUPClJsSNSyJToBP3+LeOU=) 7: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 8: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 9: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:01:1c:08:1b:77:6b:ec:f3:09:14:b4:7f:95:97:31:66:5b:ad:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jul 23 16:08:56 2026 GMT Not After : Jul 24 16:18:56 2026 GMT Subject: CN=EAC0F3DF0BF8B8D377DD169A4F4DFBE670B2142E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:87:56:88:1e:70:49:4c:b9:b6:ee:08:01: 93:1d:9f:cb:f1:84:38:37:c9:5c:d9:08:63:95:ec: 77:c8:4d:b6:c5:64:1e:b6:9f:fc:b1:01:2f:ef:99: e4:cb:01:c7:4c:fb:f6:c5:70:77:9a:9c:4a:a3:51: 9a:4d:3a:12:7d:8c:cf:67:31:6c:df:e1:1c:9e:1c: 53:df:5f:fd:46:b7:73:4f:87:d2:11:f5:6d:52:bc: 01:92:b6:2c:2a:7a:ee:1b:ef:65:43:e9:55:97:2d: 35:e2:a1:f1:19:89:b9:ee:a8:fc:0c:84:b2:6b:c2: bd:f4:64:6c:a5:4b:c9:1e:88:04:f0:92:5e:6d:a4: 28:40:d1:04:a5:20:b1:31:83:bb:20:e3:6b:64:83: fe:39:f1:65:3d:89:a4:7d:eb:bf:81:0e:49:cc:e0: 62:3a:1e:34:aa:3b:9c:7a:48:e4:6e:d4:c0:57:22: 9b:69:61:f5:c5:c8:2f:d5:5c:9c:ec:80:96:b5:c3: 47:70:8a:53:39:85:dc:48:75:57:cf:f6:f4:62:32: ae:15:af:ea:17:93:96:79:50:59:35:5c:3a:16:3e: 1f:40:60:37:98:a0:f2:88:12:45:e0:48:0c:f8:f7: 0d:c9:2b:64:5c:2e:ec:c1:e0:15:85:1d:e7:6d:64: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:F3:DF:0B:F8:B8:D3:77:DD:16:9A:4F:4D:FB:E6:70:B2:14:2E X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:56:68:77:6d:74:c1:b9:11:49:4b:66:97:1c:47:2e:bc: 55:40:1e:a4:fe:11:51:88:bd:eb:ae:85:a5:71:a4:fd:45:f2: a8:4f:bc:e4:85:b9:2a:68:c0:0c:b1:5a:8b:19:26:96:e9:06: db:dd:0f:0f:44:0e:e4:a2:5f:a4:a9:60:97:de:e2:81:b4:77: ab:c0:66:69:45:64:8e:bd:ab:e5:13:8d:b8:42:ae:46:0c:c3: d7:b2:d4:b0:58:f7:9c:ac:e6:46:fa:78:02:5b:c9:40:dc:b2: d2:86:8f:41:3c:fa:3d:e1:be:4b:83:94:c4:c4:23:0f:5f:2f: 82:8c:45:7e:11:23:00:06:74:14:f0:02:38:ea:54:94:8f:b8: 63:99:30:c5:7d:09:1e:04:e9:b0:02:c3:f3:75:c7:7c:f2:54: 18:1f:f6:bf:10:5b:38:54:af:dd:fc:6c:d0:d0:63:b6:5d:a3: 86:81:83:dc:91:bb:db:79:bc:6f:70:e8:68:7e:98:79:9a:3d: fe:16:09:64:ff:b3:a7:3b:8f:d5:11:3d:7f:c4:d1:25:70:5d: 6d:ee:0a:d1:c8:d7:5f:cf:8d:e5:aa:23:9e:60:ef:b2:04:bc: 7c:69:f2:c5:40:a0:29:88:f8:c5:71:0f:37:63:71:7d:ad:40: 66:65:1c:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQQEcCBt3a+zzCRS0f5WXMWZbrTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA3MjMxNjA4NTZaFw0yNjA3MjQxNjE4NTZaMDMxMTAvBgNV BAMTKEVBQzBGM0RGMEJGOEI4RDM3N0REMTY5QTRGNERGQkU2NzBCMjE0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIR4dWiB5wSUy5tu4IAZMdn8vx hDg3yVzZCGOV7HfITbbFZB62n/yxAS/vmeTLAcdM+/bFcHeanEqjUZpNOhJ9jM9n MWzf4RyeHFPfX/1Gt3NPh9IR9W1SvAGStiwqeu4b72VD6VWXLTXiofEZibnuqPwM hLJrwr30ZGylS8keiATwkl5tpChA0QSlILExg7sg42tkg/458WU9iaR967+BDknM 4GI6HjSqO5x6SORu1MBXIptpYfXFyC/VXJzsgJa1w0dwilM5hdxIdVfP9vRiMq4V r+oXk5Z5UFk1XDoWPh9AYDeYoPKIEkXgSAz49w3JK2RcLuzB4BWFHedtZFFpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6sDz3wv4uNN33RaaT0375nCyFC4wHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDBWaHdtdMG5EUlLZpcc Ry68VUAepP4RUYi9666FpXGk/UXyqE+85IW5KmjADLFaixkmlukG290PD0QO5KJf pKlgl97igbR3q8BmaUVkjr2r5RONuEKuRgzD17LUsFj3nKzmRvp4AlvJQNyy0oaP QTz6PeG+S4OUxMQjD18vgoxFfhEjAAZ0FPACOOpUlI+4Y5kwxX0JHgTpsALD83XH fPJUGB/2vxBbOFSv3fxs0NBjtl2jhoGD3JG723m8b3DoaH6YeZo9/hYJZP+zpzuP 1RE9f8TRJXBdbe4K0cjXX8+N5aojnmDvsgS8fGnyxUCgKYj4xXEPN2Nxfa1AZmUc Ng== -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:36 2026 by rpki-client