$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft File: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft (raw, json) Hash identifier: VfXLZ5M0BOfa4olNKruyH8Rb6tmMdXb9ciUAZJp5ZFM= Subject key identifier: AD:5D:31:F3:E3:23:AA:14:66:D3:3F:87:EB:35:66:B9:3F:A6:9C:FC Authority key identifier: 14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA Certificate issuer: /CN=149C5EDAA1881EA86CB953CBD9AE8276E2D146FA Certificate serial: 58DA5E172533ACA3CF75C3D0D8BA02EABBFC8698 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft Manifest number: 16 Signing time: Thu 23 Jul 2026 20:03:28 +0000 Manifest this update: Thu 23 Jul 2026 19:58:28 +0000 Manifest next update: Fri 24 Jul 2026 20:30:28 +0000 Files and hashes: 1: 149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl (hash: bL3ZjXgta641YU/A7ewmDRB1ZCYvkTwLQyYIwbCHHOg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:da:5e:17:25:33:ac:a3:cf:75:c3:d0:d8:ba:02:ea:bb:fc:86:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149C5EDAA1881EA86CB953CBD9AE8276E2D146FA Validity Not Before: Jul 23 19:58:28 2026 GMT Not After : Jul 24 20:30:28 2026 GMT Subject: CN=AD5D31F3E323AA1466D33F87EB3566B93FA69CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:51:36:83:45:1b:3f:0f:a0:e9:fe:37:e6: 4d:cb:48:77:6b:9e:61:60:58:75:d6:b5:12:86:be: 0a:c4:10:47:f5:c1:46:db:d7:5e:cb:71:0b:cc:1b: 7e:04:72:93:5c:bf:1b:fb:b2:d9:61:d0:32:fe:3c: 67:92:b4:45:b3:54:9a:8c:ae:a0:03:ca:7b:a8:11: 64:b0:76:4c:4c:5a:e2:49:ef:33:2e:a9:ec:f8:c5: bc:16:ae:71:aa:1c:39:b0:ac:ae:70:f0:93:1a:41: e5:e2:25:ca:f0:56:1b:e6:29:d6:ea:db:26:a4:50: 09:4a:20:ba:57:0e:c0:d6:fe:31:dc:1a:19:f0:59: 82:49:b1:d4:3f:47:5d:f1:7d:f3:de:6e:9f:eb:ff: da:ea:98:41:a0:8c:56:56:3f:95:8f:68:49:62:1c: 30:d6:56:0d:c3:0e:82:ed:2b:18:31:6b:82:a6:f1: 49:7e:93:f7:45:a1:30:73:f1:d7:c9:cf:ea:10:53: d0:b9:66:db:01:6e:70:37:91:d0:62:85:be:0d:62: c9:be:00:2e:ac:58:85:36:44:03:26:c6:b6:43:a8: b6:51:ac:a6:7c:37:7e:7f:29:12:56:1d:96:3c:bb: f3:63:14:7c:74:7e:3c:c2:a3:e9:43:f4:b2:87:2d: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:31:F3:E3:23:AA:14:66:D3:3F:87:EB:35:66:B9:3F:A6:9C:FC X509v3 Authority Key Identifier: keyid:14:9C:5E:DA:A1:88:1E:A8:6C:B9:53:CB:D9:AE:82:76:E2:D1:46:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/1/149C5EDAA1881EA86CB953CBD9AE8276E2D146FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b5:70:bb:91:02:ae:e5:23:66:e8:fe:a0:23:fa:3c:10:e4: f8:47:1c:f9:69:eb:f0:ea:3c:f5:9b:db:9f:35:9e:f1:88:1e: 14:a5:38:ec:a6:a4:7e:a1:00:dc:f8:db:46:dd:21:cb:df:1c: eb:3a:24:7f:ce:c2:72:54:6a:41:e2:bc:62:7c:10:9b:89:21: dd:7b:45:77:c9:28:61:5f:46:9d:a6:33:b0:5a:42:9b:1d:ae: 7c:c7:45:1e:51:88:11:d9:2e:c6:aa:a3:f4:b2:5b:52:11:68: 2c:8d:50:d2:0e:ae:34:79:26:a0:01:ae:91:aa:9d:99:63:57: 04:c2:71:38:ac:5e:06:13:0c:29:7d:57:30:a9:d6:b8:87:c3: 51:fd:a4:a0:33:de:21:8a:9d:9a:f8:78:2d:c2:f1:dc:2c:14: df:91:89:6c:92:b5:e9:40:06:8b:2f:08:14:e7:7c:0d:e2:65: ee:b4:09:f1:55:97:67:92:a9:40:51:c3:12:3b:80:74:9c:67: cd:3d:f6:4b:fd:2c:25:bb:3c:14:5e:e3:c7:db:5a:15:3c:67: 14:cf:6e:ec:02:36:d5:8d:db:d1:a3:5c:fe:55:51:a9:89:7f: 59:c3:74:be:d8:e1:7b:41:5a:c1:d3:d6:22:0b:5d:f5:f7:45: be:19:1b:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWNpeFyUzrKPPdcPQ2LoC6rv8hpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5QzVFREFBMTg4MUVBODZDQjk1M0NCRDlBRTgyNzZF MkQxNDZGQTAeFw0yNjA3MjMxOTU4MjhaFw0yNjA3MjQyMDMwMjhaMDMxMTAvBgNV BAMTKEFENUQzMUYzRTMyM0FBMTQ2NkQzM0Y4N0VCMzU2NkI5M0ZBNjlDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTlE2g0UbPw+g6f435k3LSHdr nmFgWHXWtRKGvgrEEEf1wUbb117LcQvMG34EcpNcvxv7stlh0DL+PGeStEWzVJqM rqADynuoEWSwdkxMWuJJ7zMuqez4xbwWrnGqHDmwrK5w8JMaQeXiJcrwVhvmKdbq 2yakUAlKILpXDsDW/jHcGhnwWYJJsdQ/R13xffPebp/r/9rqmEGgjFZWP5WPaEli HDDWVg3DDoLtKxgxa4Km8Ul+k/dFoTBz8dfJz+oQU9C5ZtsBbnA3kdBihb4NYsm+ AC6sWIU2RAMmxrZDqLZRrKZ8N35/KRJWHZY8u/NjFHx0fjzCo+lD9LKHLYrlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrV0x8+MjqhRm0z+H6zVmuT+mnPwwHwYDVR0j BBgwFoAUFJxe2qGIHqhsuVPL2a6CduLRRvowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5 YzI4LzEvMTQ5QzVFREFBMTg4MUVBODZDQjk1M0NCRDlBRTgyNzZFMkQxNDZGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00MDE2LTQ5 NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8xNDlDNUVEQUExODgxRUE4NkNCOTUzQ0JE OUFFODI3NkUyRDE0NkZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZkNTI1NjM4OWMyOC8xLzE0OUM1RURB QTE4ODFFQTg2Q0I5NTNDQkQ5QUU4Mjc2RTJEMTQ2RkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAtXC7 kQKu5SNm6P6gI/o8EOT4Rxz5aevw6jz1m9ufNZ7xiB4UpTjspqR+oQDc+NtG3SHL 3xzrOiR/zsJyVGpB4rxifBCbiSHde0V3yShhX0adpjOwWkKbHa58x0UeUYgR2S7G qqP0sltSEWgsjVDSDq40eSagAa6Rqp2ZY1cEwnE4rF4GEwwpfVcwqda4h8NR/aSg M94hip2a+HgtwvHcLBTfkYlskrXpQAaLLwgU53wN4mXutAnxVZdnkqlAUcMSO4B0 nGfNPfZL/SwluzwUXuPH21oVPGcUz27sAjbVjdvRo1z+VVGpiX9Zw3S+2OF7QVrB 09YiC13190W+GRuN -----END CERTIFICATE-----Generated at Fri Jul 24 13:15:32 2026 by rpki-client