$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: V2YVV5ziWEeX/JpczQ9Igr54y7jBZ3m/RiUaAA51rSs= Subject key identifier: 57:34:E7:BF:DA:6F:23:3F:54:B7:21:82:C8:63:D1:15:03:E2:7B:96 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 4A30E7E5E1DD647BFE17EA8E62E12DC3F7E55775 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 02B4 Signing time: Thu 23 Jul 2026 12:20:06 +0000 Manifest this update: Thu 23 Jul 2026 12:15:06 +0000 Manifest next update: Fri 24 Jul 2026 12:45:06 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: GIGhkMrQwYrYc2e+LFncfBkWFUwOJUEBS3LJjaMVTow=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:30:e7:e5:e1:dd:64:7b:fe:17:ea:8e:62:e1:2d:c3:f7:e5:57:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Jul 23 12:15:06 2026 GMT Not After : Jul 24 12:45:06 2026 GMT Subject: CN=5734E7BFDA6F233F54B72182C863D11503E27B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:24:d7:86:10:6c:82:de:30:e4:ee:b1:e0:fb: d8:37:55:46:68:a2:84:d5:99:67:12:f9:f2:ee:02: 48:46:1d:b9:48:fb:73:01:a8:da:41:f6:0c:e1:72: ab:73:25:76:fe:49:99:26:3b:da:24:55:27:20:80: bf:8d:4d:b2:75:85:3b:d4:d2:35:2f:8e:56:0f:dc: a6:91:2f:b6:1b:57:bb:45:8d:84:79:5e:87:ad:49: d6:88:40:ba:be:56:55:66:c0:22:16:b3:f2:9e:3f: fb:bd:b4:36:07:0d:d1:29:e5:d5:e0:b4:ea:36:52: 1b:bc:a2:6d:7e:6a:79:62:9f:3c:31:c3:ef:8b:2f: 1c:b6:64:29:3d:f6:d7:59:28:a5:38:09:4a:f7:90: 9d:ae:6d:5a:04:9d:0f:a5:ee:ba:e3:e5:da:2a:73: a2:08:44:da:b1:85:32:40:1d:3f:f9:b1:0b:d1:3c: b5:b2:7d:03:6c:6a:98:e5:38:93:23:b4:3a:54:ce: 8b:68:92:b3:b9:b7:cf:26:7e:ad:27:b4:9f:b6:01: 1a:79:05:bd:0f:26:ca:61:cf:4d:60:9d:c9:1e:e1: 10:80:6d:53:99:77:6d:0a:c8:55:50:a6:df:a3:f9: d7:8c:73:3d:2d:9e:53:a8:97:f9:dc:56:40:5e:e9: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:E7:BF:DA:6F:23:3F:54:B7:21:82:C8:63:D1:15:03:E2:7B:96 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ca:a7:1c:dc:17:e0:b0:14:52:e7:26:b1:88:0a:12:4b:5d: e7:2c:15:2c:56:fd:b4:dd:8f:71:82:94:f4:20:68:32:38:98: 8e:ea:3f:33:32:d5:22:74:27:15:a7:0f:67:0a:18:21:a0:eb: 3f:3d:c8:0e:9e:c0:9a:a1:49:71:5d:69:13:5d:4c:d4:f6:3b: f3:6f:ac:4c:ac:5b:c9:2c:46:ec:cf:55:84:c3:28:ea:27:e2: f8:86:9e:86:55:ac:df:41:22:cd:ef:35:eb:c8:a4:87:9b:06: 18:b7:7a:18:67:81:62:12:30:2a:c3:58:52:4d:09:16:cf:78: be:e4:16:53:5f:e7:dc:57:39:b2:9f:c5:c9:09:12:b7:49:76: e7:02:96:35:4a:f2:78:50:53:29:ad:f8:e9:95:38:5f:db:c8: fd:cd:b3:7b:9e:51:0f:f1:bd:de:90:39:48:2e:c1:cd:f1:1c: e2:d6:08:01:a9:3e:b4:8a:07:26:ad:eb:4f:86:e9:41:5b:5a: 03:1d:95:df:13:ff:bd:b4:75:ea:87:0c:89:32:89:bf:ee:da: db:1c:a7:07:3f:15:0e:b8:40:ee:f0:36:b0:57:fa:bd:ef:76: 9b:7e:48:02:41:72:f8:8a:4d:fa:a6:d5:b4:22:5e:a1:54:03: fd:12:85:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSjDn5eHdZHv+F+qOYuEtw/flV3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA3MjMxMjE1MDZaFw0yNjA3MjQxMjQ1MDZaMDMxMTAvBgNV BAMTKDU3MzRFN0JGREE2RjIzM0Y1NEI3MjE4MkM4NjNEMTE1MDNFMjdCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJNeGEGyC3jDk7rHg+9g3VUZo ooTVmWcS+fLuAkhGHblI+3MBqNpB9gzhcqtzJXb+SZkmO9okVScggL+NTbJ1hTvU 0jUvjlYP3KaRL7YbV7tFjYR5XoetSdaIQLq+VlVmwCIWs/KeP/u9tDYHDdEp5dXg tOo2Uhu8om1+anlinzwxw++LLxy2ZCk99tdZKKU4CUr3kJ2ubVoEnQ+l7rrj5doq c6IIRNqxhTJAHT/5sQvRPLWyfQNsapjlOJMjtDpUzotokrO5t88mfq0ntJ+2ARp5 Bb0PJsphz01gncke4RCAbVOZd20KyFVQpt+j+deMcz0tnlOol/ncVkBe6TxPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVzTnv9pvIz9UtyGCyGPRFQPie5YwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2yqcc 3BfgsBRS5yaxiAoSS13nLBUsVv203Y9xgpT0IGgyOJiO6j8zMtUidCcVpw9nChgh oOs/PcgOnsCaoUlxXWkTXUzU9jvzb6xMrFvJLEbsz1WEwyjqJ+L4hp6GVazfQSLN 7zXryKSHmwYYt3oYZ4FiEjAqw1hSTQkWz3i+5BZTX+fcVzmyn8XJCRK3SXbnApY1 SvJ4UFMprfjplThf28j9zbN7nlEP8b3ekDlILsHN8Rzi1ggBqT60igcmretPhulB W1oDHZXfE/+9tHXqhwyJMom/7trbHKcHPxUOuEDu8DawV/q973abfkgCQXL4ik36 ptW0Il6hVAP9EoVU -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:02 2026 by rpki-client