$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: 8h4hbjkhD/WIv3OT+pfbJBprDAsW4G1rHla4eW2h35o= Subject key identifier: 00:F5:48:30:23:24:77:0B:BE:1E:EF:56:A4:06:9C:82:70:DB:03:CF Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 54F24575BD1AD94E3B74CBA0A3A0D2C12507946D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: C1 Signing time: Fri 24 Jul 2026 08:36:07 +0000 Manifest this update: Fri 24 Jul 2026 08:31:07 +0000 Manifest next update: Sat 25 Jul 2026 11:36:07 +0000 Files and hashes: 1: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: amnB9D7rEzMPxaLuR+PioLN3eOFaDoQ/TcAZ/vxf7qA=) 2: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 3: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 4: 3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa (hash: sCqFG2YhCHeDqaJvV17HVBO8NLNwKmROgfeEU+mI+Xw=) 5: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 6: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 7: 3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa (hash: T/dMaaeSvp1LggvFA92KZdLKggY6N7VrSw4p19VRscU=) 8: 3137362e3130322e3137352e302f32342d3234203d3e20343031373736.roa (hash: mLkML/nX8BEbBGPjQmndoRU210mLsv1F9QROUnH+NoY=) 9: 3137362e3130322e3136382e302f32322d3234203d3e20383334.roa (hash: lsKgEvd0X56tIc1W7FgfOLqz5Dci/6tXpwN26SD9kjg=) 10: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f2:45:75:bd:1a:d9:4e:3b:74:cb:a0:a3:a0:d2:c1:25:07:94:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Jul 24 08:31:07 2026 GMT Not After : Jul 25 11:36:07 2026 GMT Subject: CN=00F548302324770BBE1EEF56A4069C8270DB03CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:81:a5:f3:4f:be:b2:29:35:6f:92:e7:b1: 15:5b:7c:4e:66:c9:c1:ca:79:44:84:94:eb:c8:ff: 16:f3:98:24:a6:1a:5f:fc:dc:49:6c:bd:49:77:9e: 4b:79:d6:f4:76:99:32:5b:46:2b:41:07:b3:8f:44: 3f:42:66:25:0d:b8:91:44:3a:8b:28:8d:e5:75:a3: 9e:02:e3:a5:91:27:4b:4b:4f:9d:4e:ab:a9:ac:53: a6:4b:eb:95:09:f0:b8:92:b3:47:f6:4c:e6:81:50: 75:f1:5d:c7:a7:a4:7e:47:fb:63:02:97:ab:df:6a: 73:ba:09:92:5c:d6:47:8e:57:2f:2d:5d:a9:7f:1d: 4e:11:6a:77:89:8b:2d:c8:cb:40:43:82:7f:3f:1f: 43:8a:31:7c:39:18:d8:03:a8:5c:50:b2:73:55:f4: 56:f3:b7:4d:e2:f0:9c:6b:81:ec:de:83:7a:cc:e2: 09:1f:d5:9e:36:ef:2e:f8:9d:35:60:74:55:cb:1e: be:ab:1b:7a:61:43:5e:e2:ec:c0:8b:e7:0e:90:82: 0c:f0:cf:b3:d2:e6:bb:c8:35:8b:33:c5:62:fd:2e: 9f:10:15:50:67:82:e3:7d:ac:f8:f2:75:6b:74:5c: b0:d2:a3:2d:78:1f:df:9a:29:27:70:61:70:b2:23: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F5:48:30:23:24:77:0B:BE:1E:EF:56:A4:06:9C:82:70:DB:03:CF X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:82:38:35:b4:74:df:0c:b3:11:8b:b2:72:ac:d4:33:41:67: 88:8d:ba:5a:82:3d:8e:46:5e:79:29:e0:89:47:0a:f7:7f:74: ee:84:73:5c:97:62:b0:83:f6:62:cd:b8:a8:da:d4:1d:8a:f0: 35:94:05:f1:f8:0b:62:51:ec:d5:a5:34:f4:3c:84:d9:39:23: d9:99:1b:ed:0f:60:10:74:4e:f3:32:31:af:10:88:9f:dc:e9: 48:2b:77:fe:9f:87:c0:9b:a0:25:31:21:78:f2:c1:bf:2e:6b: 24:7a:43:73:10:22:9c:da:50:3f:aa:ac:53:e4:2a:4c:4c:81: f4:37:74:df:d1:8e:0d:a0:13:20:30:28:c6:62:7f:e4:6c:ff: 6d:e9:77:8d:f9:fc:93:30:8c:c6:94:56:a9:63:4e:b3:98:42: 62:f7:14:c0:da:46:ff:9e:fc:14:16:8a:6f:8a:83:02:37:b1: 94:44:74:24:bd:75:46:68:59:9e:a8:0a:25:74:de:72:58:af: 2d:67:74:9c:8e:2a:e0:8f:85:13:88:e1:73:8f:cb:7b:df:34: 72:54:ea:0f:0c:60:1f:25:56:c8:2b:c7:cc:ce:17:16:a2:39: 32:03:1d:4e:01:73:6f:68:ee:b2:7e:f5:33:35:86:54:27:eb: 8c:57:7c:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVPJFdb0a2U47dMugo6DSwSUHlG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA3MjQwODMxMDdaFw0yNjA3MjUxMTM2MDdaMDMxMTAvBgNV BAMTKDAwRjU0ODMwMjMyNDc3MEJCRTFFRUY1NkE0MDY5QzgyNzBEQjAzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVsoGl80++sik1b5LnsRVbfE5m ycHKeUSElOvI/xbzmCSmGl/83ElsvUl3nkt51vR2mTJbRitBB7OPRD9CZiUNuJFE OosojeV1o54C46WRJ0tLT51Oq6msU6ZL65UJ8LiSs0f2TOaBUHXxXcenpH5H+2MC l6vfanO6CZJc1keOVy8tXal/HU4RaneJiy3Iy0BDgn8/H0OKMXw5GNgDqFxQsnNV 9Fbzt03i8Jxrgezeg3rM4gkf1Z427y74nTVgdFXLHr6rG3phQ17i7MCL5w6Qggzw z7PS5rvINYszxWL9Lp8QFVBnguN9rPjydWt0XLDSoy14H9+aKSdwYXCyIwtJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAPVIMCMkdwu+Hu9WpAacgnDbA88wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABII4NbR03wyzEYuycqzU M0FniI26WoI9jkZeeSngiUcK93907oRzXJdisIP2Ys24qNrUHYrwNZQF8fgLYlHs 1aU09DyE2Tkj2Zkb7Q9gEHRO8zIxrxCIn9zpSCt3/p+HwJugJTEhePLBvy5rJHpD cxAinNpQP6qsU+QqTEyB9Dd039GODaATIDAoxmJ/5Gz/bel3jfn8kzCMxpRWqWNO s5hCYvcUwNpG/578FBaKb4qDAjexlER0JL11RmhZnqgKJXTeclivLWd0nI4q4I+F E4jhc4/Le980clTqDwxgHyVWyCvHzM4XFqI5MgMdTgFzb2jusn71MzWGVCfrjFd8 Pg== -----END CERTIFICATE-----Generated at Fri Jul 24 18:31:41 2026 by rpki-client