$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: Qe1GfeoEMap+h8m1cBtyMcXtsvIX7zBFP7klrEOFVgg= Subject key identifier: 59:E2:75:26:23:ED:A9:5C:A9:A0:A3:45:7E:57:DF:AF:1E:7B:1A:C3 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 2A35E763B62385B90779342C746010A3B6EBBFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 99 Signing time: Fri 24 Jul 2026 02:20:18 +0000 Manifest this update: Fri 24 Jul 2026 02:15:18 +0000 Manifest next update: Sat 25 Jul 2026 02:48:18 +0000 Files and hashes: 1: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: Ezqbvk6ESw9AT212y6cH9DOdSH+81utcedJkTIzuHd8=) 2: 34362e31382e38392e302f32342d3234203d3e20313532313739.roa (hash: Kqt2451/MqA9B3Vp+PsIiw7Utk6sIOx+LpIh/6dBd1k=) 3: 3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa (hash: +DN809AlaoX5+Lv+NqMgfBEbnjnBdEJgPi7MDj2sR/8=) 4: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 5: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: i4J5fi4/ki9gpiPZ1WeNXoJ5Dkev+co9+mR0nmWAo0Q=) 6: 34362e31382e39322e302f32322d3234203d3e20323134343332.roa (hash: NyXurW1DFDhqL0gW2AhubSlX8l+W/Em/ZT/cZ6caczo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:35:e7:63:b6:23:85:b9:07:79:34:2c:74:60:10:a3:b6:eb:bf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Jul 24 02:15:18 2026 GMT Not After : Jul 25 02:48:18 2026 GMT Subject: CN=59E2752623EDA95CA9A0A3457E57DFAF1E7B1AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:69:3b:d6:d4:42:a5:64:8f:6f:17:d7:b5: 73:8a:4f:35:85:d0:20:7e:78:36:bf:7c:93:8a:6d: da:14:00:71:3c:ed:fe:3d:b6:0f:c1:0d:7e:b9:9f: 60:80:27:8e:6f:c9:13:b7:bd:8c:a5:07:60:4d:00: 62:d1:f7:b7:61:c6:8d:31:e9:ee:80:3b:c4:0d:ec: ac:8d:92:90:58:da:8a:85:dc:cd:1c:85:ca:26:28: 60:ac:fb:e6:d2:3b:07:71:99:de:1c:a4:83:c3:e7: f4:0e:a7:ee:af:8f:c0:1e:67:74:76:ec:ff:07:ec: d8:a1:26:71:64:c8:8e:1d:ec:ab:48:1b:65:cb:7f: 21:2e:b0:95:9d:9d:19:8f:54:b8:5e:c9:ad:23:7a: 53:98:14:07:5a:f3:2d:ff:6a:93:96:66:01:e1:d4: 6e:97:e1:18:45:5e:fd:db:b3:4d:b3:52:81:1a:69: ec:d2:98:f9:75:d3:d2:17:c6:a3:bf:33:dd:86:d0: 1f:58:a2:f5:e0:18:04:99:5e:0c:9d:3d:14:cd:56: fb:3c:db:30:e5:aa:8c:79:2d:ea:36:24:52:37:25: 4d:aa:8d:9c:a6:de:f3:36:47:0f:07:81:66:8f:f4: 0c:5c:bc:5f:9a:e7:04:c2:6d:63:45:49:aa:c9:e5: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E2:75:26:23:ED:A9:5C:A9:A0:A3:45:7E:57:DF:AF:1E:7B:1A:C3 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:35:13:78:0e:e7:51:29:7b:85:2c:98:4e:28:19:49:ca:80: 77:ad:40:93:2c:7f:2c:7d:4a:e1:eb:d0:f2:61:3a:42:b6:e7: b8:19:0a:db:33:32:e1:36:11:5c:0b:ce:39:41:d7:2f:2c:6c: 93:71:43:0b:a2:69:c6:5f:31:ed:5e:c8:37:04:69:a1:92:e6: c1:18:94:93:4d:81:97:95:0c:29:20:b0:6d:7c:78:ea:e1:b3: 13:e9:e2:03:2e:c2:16:9d:ef:b9:bd:43:0e:75:3e:0e:ba:4a: 30:6e:ec:5f:9a:93:9a:8c:30:f6:02:e8:4b:13:14:61:07:02: 15:d1:6f:d3:25:d8:d1:b8:97:78:53:f9:83:f4:01:4b:b7:d5: f5:8a:a9:e0:f5:a4:a8:bd:1d:e9:1b:28:6f:18:8e:48:46:5c: 15:52:71:9b:d4:ee:29:fe:60:d1:bc:4d:cc:09:9c:8a:8b:dd: 08:89:29:3e:71:e1:3b:26:f7:92:df:0f:55:fb:53:c4:14:23: 0a:c5:f9:d1:80:19:65:73:ba:32:fa:a8:08:b7:ab:7a:2f:f2: c5:93:16:90:44:d4:66:88:06:fe:ab:b2:33:cf:47:27:fb:60: bc:a9:7b:39:4c:4d:ae:37:b5:bf:11:3f:f2:6a:d0:63:fe:65: fa:ff:51:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKjXnY7YjhbkHeTQsdGAQo7brv6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA3MjQwMjE1MThaFw0yNjA3MjUwMjQ4MThaMDMxMTAvBgNV BAMTKDU5RTI3NTI2MjNFREE5NUNBOUEwQTM0NTdFNTdERkFGMUU3QjFBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWhGk71tRCpWSPbxfXtXOKTzWF 0CB+eDa/fJOKbdoUAHE87f49tg/BDX65n2CAJ45vyRO3vYylB2BNAGLR97dhxo0x 6e6AO8QN7KyNkpBY2oqF3M0chcomKGCs++bSOwdxmd4cpIPD5/QOp+6vj8AeZ3R2 7P8H7NihJnFkyI4d7KtIG2XLfyEusJWdnRmPVLheya0jelOYFAda8y3/apOWZgHh 1G6X4RhFXv3bs02zUoEaaezSmPl109IXxqO/M92G0B9YovXgGASZXgydPRTNVvs8 2zDlqox5Leo2JFI3JU2qjZym3vM2Rw8HgWaP9AxcvF+a5wTCbWNFSarJ5RJFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWeJ1JiPtqVypoKNFflffrx57GsMwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODUTeA7nUSl7hSyYTigZ ScqAd61Akyx/LH1K4evQ8mE6QrbnuBkK2zMy4TYRXAvOOUHXLyxsk3FDC6Jpxl8x 7V7INwRpoZLmwRiUk02Bl5UMKSCwbXx46uGzE+niAy7CFp3vub1DDnU+DrpKMG7s X5qTmoww9gLoSxMUYQcCFdFv0yXY0biXeFP5g/QBS7fV9Yqp4PWkqL0d6RsobxiO SEZcFVJxm9TuKf5g0bxNzAmciovdCIkpPnHhOyb3kt8PVftTxBQjCsX50YAZZXO6 MvqoCLerei/yxZMWkETUZogG/quyM89HJ/tgvKl7OUxNrje1vxE/8mrQY/5l+v9R 5A== -----END CERTIFICATE-----Generated at Fri Jul 24 07:06:15 2026 by rpki-client