$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: urL8EDYCVu4oHJ37FQXXjwuRioF8htxl1J1xt3VphKk= Subject key identifier: 60:A5:7D:75:7B:82:2B:35:15:E7:2B:5A:CA:85:1A:2A:C3:94:3D:A6 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 0415039BABF25431F01BA22CB6F9140BE84EED1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 040D Signing time: Thu 23 Jul 2026 17:58:25 +0000 Manifest this update: Thu 23 Jul 2026 17:53:25 +0000 Manifest next update: Fri 24 Jul 2026 18:20:25 +0000 Files and hashes: 1: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=) 2: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=) 3: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=) 4: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=) 5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=) 6: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=) 7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: /5ZcNVQOzJ19YlwnSvzhPZFEUjNUBkCrwoJq3q46eUk=) 8: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=) 9: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:15:03:9b:ab:f2:54:31:f0:1b:a2:2c:b6:f9:14:0b:e8:4e:ed:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jul 23 17:53:25 2026 GMT Not After : Jul 24 18:20:25 2026 GMT Subject: CN=60A57D757B822B3515E72B5ACA851A2AC3943DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:dc:13:35:01:c4:27:1a:ce:b2:c5:72:be: 7b:cf:fd:db:c0:e8:d5:eb:26:ef:00:2d:6e:8c:a9: 76:03:32:43:2c:0e:67:36:4f:b7:6e:92:ea:40:33: 4d:df:5b:eb:24:e6:6a:6c:b0:e7:08:c0:2b:25:67: a1:52:ad:be:58:b7:2a:65:31:b9:1b:eb:d2:d1:f8: d0:5f:f1:de:e8:48:5c:29:7a:56:b1:1f:45:03:d0: 2b:ee:bb:95:7c:2b:40:54:63:a5:d5:c8:fb:e0:86: ea:bd:29:a6:02:28:e3:24:45:38:6d:b6:2f:2f:3e: 7a:d2:b0:d0:27:bc:26:af:12:fd:f1:a2:9c:a4:98: 8e:8e:b8:be:9f:b3:fd:2b:e6:e2:4f:f5:73:c9:72: 78:2a:13:47:cd:96:54:d4:e2:fc:1f:28:a3:79:34: c5:22:cb:36:a7:b4:3f:d8:73:1c:dc:4d:9d:2a:c9: e6:c0:a5:b0:21:eb:de:89:ea:30:86:f2:eb:93:f0: ac:f5:f3:8a:59:ba:d7:45:f7:bb:87:e7:b7:bb:95: e5:10:3b:3b:13:a8:8e:b4:d9:d1:f9:98:4f:63:99: 9d:c2:64:39:3c:d7:d2:3d:94:c8:91:77:92:92:35: 5c:cf:c6:32:9e:9b:d4:30:88:41:9b:fc:46:2d:4f: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:7D:75:7B:82:2B:35:15:E7:2B:5A:CA:85:1A:2A:C3:94:3D:A6 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:20:f8:46:b0:3f:6f:db:ed:84:ca:58:ca:1b:b0:59:04: 5f:96:16:aa:05:82:3b:69:dc:64:49:15:54:ad:7f:86:d5:40: 04:fb:df:80:4d:f7:43:25:bb:a4:8e:23:83:eb:3c:c0:61:c8: 61:18:c0:41:99:40:e7:67:22:37:33:ce:ce:52:8e:21:43:b8: 7e:ee:e2:fa:e2:3c:58:d5:ea:c0:74:81:f4:ab:62:b0:8d:03: c9:5f:bc:d6:94:f3:3f:5f:60:1e:94:7f:b7:45:6e:41:82:9e: bd:c3:eb:59:8d:e1:2a:07:ef:fd:3d:f5:f4:1d:d7:91:09:9c: 44:d9:fb:95:a0:d6:bc:ec:7e:53:04:78:e2:f5:46:89:09:5e: 69:72:da:d1:67:e7:2b:dc:91:8c:04:91:04:06:43:06:ea:9e: 32:5f:ca:62:1b:14:60:12:2a:e5:8d:72:7f:70:c3:90:7d:61: a8:c5:ad:df:67:35:ee:30:6d:3f:d0:2d:93:b4:0b:a5:2f:57: 6a:f4:67:38:22:d2:b5:05:5e:c6:58:01:93:4f:44:29:40:7c: 67:e1:ba:31:19:2f:f3:19:3b:cd:eb:2c:a2:8f:dd:a0:34:f6: 8f:51:26:50:50:f7:64:bb:61:1a:b0:00:21:85:d0:47:93:8b: 9b:c1:08:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBBUDm6vyVDHwG6IstvkUC+hO7RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA3MjMxNzUzMjVaFw0yNjA3MjQxODIwMjVaMDMxMTAvBgNV BAMTKDYwQTU3RDc1N0I4MjJCMzUxNUU3MkI1QUNBODUxQTJBQzM5NDNEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgtwTNQHEJxrOssVyvnvP/dvA 6NXrJu8ALW6MqXYDMkMsDmc2T7dukupAM03fW+sk5mpssOcIwCslZ6FSrb5Ytypl Mbkb69LR+NBf8d7oSFwpelaxH0UD0Cvuu5V8K0BUY6XVyPvghuq9KaYCKOMkRTht ti8vPnrSsNAnvCavEv3xopykmI6OuL6fs/0r5uJP9XPJcngqE0fNllTU4vwfKKN5 NMUiyzantD/YcxzcTZ0qyebApbAh696J6jCG8uuT8Kz184pZutdF97uH57e7leUQ OzsTqI602dH5mE9jmZ3CZDk819I9lMiRd5KSNVzPxjKem9QwiEGb/EYtT2cBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYKV9dXuCKzUV5ytayoUaKsOUPaYwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSniD4 RrA/b9vthMpYyhuwWQRflhaqBYI7adxkSRVUrX+G1UAE+9+ATfdDJbukjiOD6zzA YchhGMBBmUDnZyI3M87OUo4hQ7h+7uL64jxY1erAdIH0q2KwjQPJX7zWlPM/X2Ae lH+3RW5Bgp69w+tZjeEqB+/9PfX0HdeRCZxE2fuVoNa87H5TBHji9UaJCV5pctrR Z+cr3JGMBJEEBkMG6p4yX8piGxRgEirljXJ/cMOQfWGoxa3fZzXuMG0/0C2TtAul L1dq9Gc4ItK1BV7GWAGTT0QpQHxn4boxGS/zGTvN6yyij92gNPaPUSZQUPdku2Ea sAAhhdBHk4ubwQh1 -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:52 2026 by rpki-client