$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: KeKnINWA5geVNpJGjti3YgV7CS7bVlv2IBEG77wczMU= Subject key identifier: A7:24:6B:02:F4:B3:76:03:E5:D4:22:F7:80:89:D7:E9:B3:27:A8:43 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 4F62255CDEB54AD17BF4EB5415AFF2A4030B85FB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0327 Signing time: Thu 23 Jul 2026 13:36:48 +0000 Manifest this update: Thu 23 Jul 2026 13:31:48 +0000 Manifest next update: Sat 25 Jul 2026 05:22:48 +0000 Files and hashes: 1: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 2: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 3: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 4: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 5: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 6: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: g1b3KQzGzdttAhYEiJVZ9nDCGScSjdBmqeQwJNR88Nc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:62:25:5c:de:b5:4a:d1:7b:f4:eb:54:15:af:f2:a4:03:0b:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jul 23 13:31:48 2026 GMT Not After : Jul 25 05:22:48 2026 GMT Subject: CN=A7246B02F4B37603E5D422F78089D7E9B327A843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:04:62:88:5c:08:38:67:58:b0:57:d2:11: fd:23:76:fd:49:f5:34:13:a5:ba:3d:3b:ea:e6:0f: 6c:2f:4c:8f:69:38:77:40:29:de:64:ba:03:6c:49: 44:62:d8:f4:0a:4f:13:63:9c:97:0b:e5:75:a9:3e: 28:dd:8b:86:d1:70:27:05:8c:0b:93:23:7a:7b:19: ae:02:19:e1:6c:1c:ff:f4:80:cf:ab:3d:73:f0:8b: fc:ad:46:aa:19:74:d4:39:1f:a2:7b:a6:45:1c:63: 9d:1a:42:a1:02:01:aa:ef:b5:13:34:1d:60:40:2b: ef:42:88:a7:71:b8:7e:b8:aa:7e:02:19:aa:5a:6d: 9f:41:e8:ca:f4:5d:2a:27:f2:0c:94:8d:fa:b4:51: 0a:bf:64:4f:c7:00:89:2e:cb:ac:b6:ff:ba:5a:df: 57:17:a9:3a:96:4d:d7:a0:e6:89:32:77:f4:e1:e7: 72:89:2a:49:11:62:8b:ac:9e:49:1e:2e:2e:f9:7d: 98:a5:63:bd:c3:1b:3e:a9:94:aa:4d:fa:1e:83:c3: 65:5a:0d:50:0e:99:9c:af:2d:37:f5:01:e2:22:95: 80:f2:77:cb:f3:ef:66:ad:eb:72:7e:83:71:39:26: ea:3b:0f:74:08:57:c6:e3:51:92:ea:ab:13:4c:51: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:24:6B:02:F4:B3:76:03:E5:D4:22:F7:80:89:D7:E9:B3:27:A8:43 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:85:bb:0f:f3:0c:7b:41:ab:cb:23:d5:58:b3:49:13:7d:ae: 5b:ce:ae:9d:01:13:4d:00:37:c5:f1:27:85:c2:70:5a:c0:42: ff:c6:70:0e:a5:43:b2:07:fb:19:d7:cb:96:af:a8:1b:06:02: 0b:9b:bc:6c:b8:5f:d9:2d:40:e8:f6:7c:b8:05:50:6e:95:3c: e1:8d:fd:81:d6:de:5e:6f:e8:3f:3d:0e:21:df:e6:aa:e5:7c: f2:b2:85:fe:77:2f:c7:d1:08:45:e3:c3:46:b6:9c:21:09:16: 23:6b:92:99:1b:07:f4:77:d9:3b:7a:38:59:e4:c9:95:32:5d: 1b:69:39:85:14:2c:80:bd:e1:f9:4e:e6:17:c5:dc:36:56:5a: e7:82:56:80:99:b6:16:05:30:cf:1e:d1:b2:9e:fc:3b:34:c3: e6:e0:3e:93:88:44:dc:d2:d6:25:ed:ec:f5:3b:42:5b:a7:01: e9:e4:f2:57:c4:e6:05:f1:23:84:59:d1:a6:e6:c0:5e:54:ac: 60:07:e4:b2:7c:e0:e0:d6:5d:5a:89:e9:98:4d:4f:19:b0:e6: 69:41:ec:01:e6:61:86:56:7e:d1:54:a4:39:71:0a:fb:70:d0: f3:9c:53:d1:66:27:84:c3:9d:6a:21:18:22:c4:23:89:51:4a: 2d:cb:d7:0e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUT2IlXN61StF79OtUFa/ypAMLhfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA3MjMxMzMxNDhaFw0yNjA3MjUwNTIyNDhaMDMxMTAvBgNV BAMTKEE3MjQ2QjAyRjRCMzc2MDNFNUQ0MjJGNzgwODlEN0U5QjMyN0E4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9gRiiFwIOGdYsFfSEf0jdv1J 9TQTpbo9O+rmD2wvTI9pOHdAKd5kugNsSURi2PQKTxNjnJcL5XWpPijdi4bRcCcF jAuTI3p7Ga4CGeFsHP/0gM+rPXPwi/ytRqoZdNQ5H6J7pkUcY50aQqECAarvtRM0 HWBAK+9CiKdxuH64qn4CGapabZ9B6Mr0XSon8gyUjfq0UQq/ZE/HAIkuy6y2/7pa 31cXqTqWTdeg5okyd/Th53KJKkkRYousnkkeLi75fZilY73DGz6plKpN+h6Dw2Va DVAOmZyvLTf1AeIilYDyd8vz72at63J+g3E5Juo7D3QIV8bjUZLqqxNMUfFhAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpyRrAvSzdgPl1CL3gInX6bMnqEMwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIW7D/MMe0GryyPVWLNJ E32uW86unQETTQA3xfEnhcJwWsBC/8ZwDqVDsgf7GdfLlq+oGwYCC5u8bLhf2S1A 6PZ8uAVQbpU84Y39gdbeXm/oPz0OId/mquV88rKF/ncvx9EIRePDRracIQkWI2uS mRsH9HfZO3o4WeTJlTJdG2k5hRQsgL3h+U7mF8XcNlZa54JWgJm2FgUwzx7Rsp78 OzTD5uA+k4hE3NLWJe3s9TtCW6cB6eTyV8TmBfEjhFnRpubAXlSsYAfksnzg4NZd WonpmE1PGbDmaUHsAeZhhlZ+0VSkOXEK+3DQ85xT0WYnhMOdaiEYIsQjiVFKLcvX Dg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:48 2026 by rpki-client