$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: gmXvvm86l8kbDJnxWFr6WzsMrh6YCNmIwy5t+u5f2yU= Subject key identifier: 5E:CE:4E:E2:0C:FE:BE:A7:05:00:1D:CB:3B:D8:CD:A7:90:6C:A0:C0 Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 1926F585B676835D17D131BB7C6743EB7E15775A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 4B Signing time: Tue 12 May 2026 15:24:50 +0000 Manifest this update: Tue 12 May 2026 15:19:50 +0000 Manifest next update: Wed 13 May 2026 18:03:50 +0000 Files and hashes: 1: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: kQQBVxh3QMh1HUzYNeTe0QHfk5HkvPLNyCepUcoyXpw=) 2: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=) 3: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 4: 3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa (hash: nWTO0lpwynwPzlypXWMi8OJsZ+pn3ksbbbieOy6HhBk=) 5: 3137362e3130322e3136392e302f32342d3234203d3e20323130353435.roa (hash: qdweDv/ArUKKn+iSNPlMNOmHnjG+yu3hh6MZ3RuN5Ks=) 6: 3137362e3130322e3137322e302f32322d3232203d3e2032393134.roa (hash: NeWINT0yzxeGbQAkYPSSTlBaATh7hwEdqMyxHoWCi2c=) 7: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (hash: yzeJy7dYT+jl4VhGxOCrUaWlHT1VskDn5phrnOjvQYI=) 8: 3139332e32352e3137312e302f32342d3234203d3e2032393134.roa (hash: arWXT2PubGe9M8bDcOmGqKzDFtv/A2/+wj2Z/kqOP7w=) 9: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 10: 39312e3233332e382e302f32342d3234203d3e20323135313532.roa (hash: QjQW+ZHXaZZs5QWfyh6YzF1NV5fXTeQF/UMJGjS1emY=) 11: 3137362e3130322e3137302e302f32342d3234203d3e20323130353435.roa (hash: iLAOFktgeNi6FXUckFRcsh0irPGm/7n9N5v2nHd4bNg=) 12: 3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa (hash: 6UdWfUX7KBZtt8PfrfenFEunK14genwVi/Drc7lSeRQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:26:f5:85:b6:76:83:5d:17:d1:31:bb:7c:67:43:eb:7e:15:77:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: May 12 15:19:50 2026 GMT Not After : May 13 18:03:50 2026 GMT Subject: CN=5ECE4EE20CFEBEA705001DCB3BD8CDA7906CA0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:f9:00:8f:0f:3a:96:14:73:46:a0:7f:76: 01:b0:c9:ae:d4:8c:3e:3e:10:af:e1:bc:77:93:d4: d7:8b:9d:79:40:f6:9b:14:6d:30:28:d3:50:de:e4: c1:00:f2:a2:59:60:95:3f:71:71:1f:17:25:ea:a6: e7:bd:f5:60:f6:3d:53:6a:3e:cb:80:48:68:dc:62: cf:62:d4:c9:47:9e:22:2d:2d:fe:d3:a7:db:49:c7: f9:cd:e2:fb:b1:d4:05:ea:eb:25:d2:94:81:97:d0: d1:76:ee:63:92:48:78:a2:1f:1b:2f:3a:3c:f9:99: a3:a4:dd:2d:a9:0d:23:e1:64:bb:41:3e:83:1d:d6: e6:f1:4d:31:43:3e:30:1e:5c:72:0a:21:c4:90:b5: 8a:25:0a:6a:59:8d:22:f0:b9:c6:67:68:f0:48:af: eb:c4:7d:06:54:b0:d2:1c:03:fa:bd:fe:13:23:bc: 8d:42:f0:81:3c:16:5f:ad:48:5c:f7:16:df:72:3d: f3:d3:67:f5:8b:0f:59:de:60:4b:5f:93:fb:aa:b4: 85:23:76:fe:2c:65:0a:dd:2d:d1:93:88:00:1e:46: b5:18:64:10:91:7d:7b:2a:49:20:dd:bd:13:88:86: 48:55:20:57:f6:31:dd:dc:2b:df:c6:8f:fc:5c:08: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:4E:E2:0C:FE:BE:A7:05:00:1D:CB:3B:D8:CD:A7:90:6C:A0:C0 X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:dd:fd:14:bc:95:f0:2b:7d:f4:b8:2e:d9:48:1c:90:52:6a: b9:03:f6:b1:70:10:70:58:94:e8:9a:a5:9e:2a:23:9d:27:2c: ff:1a:7f:33:ae:d7:90:dc:bb:6c:e7:4f:64:27:86:e9:de:bf: 6b:30:9f:d7:f7:1a:3b:f3:2b:97:c0:a4:7e:25:97:ac:93:6d: 6d:f7:67:87:b9:29:0f:a3:a3:a0:7e:0c:65:04:49:59:fd:17: d7:be:92:6b:7f:32:7d:d7:47:b7:b3:a3:05:88:04:df:be:dd: 4a:80:f3:a4:a2:11:d4:a2:93:07:ef:58:b1:7a:6f:a3:5f:85: 07:da:c8:6d:3b:ac:7d:b5:57:7b:03:f2:83:9c:93:a9:41:43: c2:a1:e3:bb:74:b7:22:2a:27:21:c9:67:ec:96:76:cb:ed:9b: 31:e7:41:8a:db:7e:95:fc:f9:45:a3:6f:95:96:5d:31:25:52: 92:0e:3c:81:fd:23:0e:83:8c:e2:97:e8:42:53:dd:42:c2:a4: d5:b1:e4:2e:47:50:28:96:3f:f3:1f:66:6b:9e:22:6b:de:f7: e2:21:ce:ce:0c:9d:13:8a:e1:0f:1a:ec:cf:ec:b9:e0:ef:d2: 6f:f9:71:a4:1e:d4:6d:4e:5f:75:60:b8:f4:95:12:f5:8c:5b: 13:1c:64:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGSb1hbZ2g10X0TG7fGdD634Vd1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA1MTIxNTE5NTBaFw0yNjA1MTMxODAzNTBaMDMxMTAvBgNV BAMTKDVFQ0U0RUUyMENGRUJFQTcwNTAwMURDQjNCRDhDREE3OTA2Q0EwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P/kAjw86lhRzRqB/dgGwya7U jD4+EK/hvHeT1NeLnXlA9psUbTAo01De5MEA8qJZYJU/cXEfFyXqpue99WD2PVNq PsuASGjcYs9i1MlHniItLf7Tp9tJx/nN4vux1AXq6yXSlIGX0NF27mOSSHiiHxsv Ojz5maOk3S2pDSPhZLtBPoMd1ubxTTFDPjAeXHIKIcSQtYolCmpZjSLwucZnaPBI r+vEfQZUsNIcA/q9/hMjvI1C8IE8Fl+tSFz3Ft9yPfPTZ/WLD1neYEtfk/uqtIUj dv4sZQrdLdGTiAAeRrUYZBCRfXsqSSDdvROIhkhVIFf2Md3cK9/Gj/xcCNetAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXs5O4gz+vqcFAB3LO9jNp5BsoMAwHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd939FLyV8Ct99Lgu2Ugc kFJquQP2sXAQcFiU6JqlniojnScs/xp/M67XkNy7bOdPZCeG6d6/azCf1/caO/Mr l8CkfiWXrJNtbfdnh7kpD6OjoH4MZQRJWf0X176Sa38yfddHt7OjBYgE377dSoDz pKIR1KKTB+9YsXpvo1+FB9rIbTusfbVXewPyg5yTqUFDwqHju3S3IionIcln7JZ2 y+2bMedBitt+lfz5RaNvlZZdMSVSkg48gf0jDoOM4pfoQlPdQsKk1bHkLkdQKJY/ 8x9ma54ia9734iHOzgydE4rhDxrsz+y54O/Sb/lxpB7UbU5fdWC49JUS9YxbExxk EQ== -----END CERTIFICATE-----Generated at Wed May 13 08:00:29 2026 by rpki-client