$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: rjC7uP3G1irRQp6gegH9YYk/TRyfl6ZxV5t52xZlNU8= Subject key identifier: 0D:E8:E1:C7:0B:48:2C:BC:89:5A:0F:2D:AA:18:72:97:FB:62:A6:22 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 4845B007A3B37F779484DBDC8C5BF3559AD9F0F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0511 Signing time: Thu 23 Jul 2026 13:48:28 +0000 Manifest this update: Thu 23 Jul 2026 13:43:28 +0000 Manifest next update: Fri 24 Jul 2026 14:34:28 +0000 Files and hashes: 1: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 2: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 4: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 5: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 7: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: bRCSAmwm0e2hF1VnXp8qr5YK8TYMleG0BXxjG/WBcMc=) 8: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 9: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 10: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 11: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:45:b0:07:a3:b3:7f:77:94:84:db:dc:8c:5b:f3:55:9a:d9:f0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jul 23 13:43:28 2026 GMT Not After : Jul 24 14:34:28 2026 GMT Subject: CN=0DE8E1C70B482CBC895A0F2DAA187297FB62A622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9e:ea:9a:90:b6:02:a8:d8:f3:af:90:86:56: 15:4c:ac:8a:96:1f:f3:82:8a:30:fd:93:64:ab:f2: f1:b3:b0:b2:df:42:b2:ff:ee:fb:56:7c:54:09:89: 37:51:1f:fc:2b:9a:53:8c:83:48:26:e9:03:68:74: 36:64:5d:01:fd:ce:c6:4a:4b:16:71:2b:26:42:eb: 31:e9:81:49:67:aa:ad:f5:34:7e:e8:e0:54:ac:da: 34:f9:1f:ab:a3:83:f1:ea:ab:68:c6:a8:cf:de:63: 05:a1:77:2a:e1:82:35:7e:c9:d9:d8:b4:60:a0:14: ef:bd:44:8b:a8:e5:b7:08:be:e2:28:31:cb:cf:d5: 00:41:f4:3f:91:1c:63:4b:57:68:d8:58:15:75:fb: a2:bd:4a:d9:98:8b:35:0c:fc:a3:0d:9a:9b:48:2a: 50:d0:7b:98:fc:ca:81:61:b7:6a:4e:b0:4b:1b:48: 0d:02:42:eb:8f:23:71:b4:3a:d3:60:ec:7e:7f:c0: b4:f0:ea:99:ce:2d:79:cb:de:9a:63:81:fe:c7:0c: bc:62:a3:44:60:54:57:ee:20:e8:f6:36:79:e2:be: 95:d4:8c:e7:4d:e9:17:ac:6b:8a:7d:c3:df:21:b0: 4e:19:01:c7:a2:41:7b:58:87:42:09:c8:41:7b:21: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E8:E1:C7:0B:48:2C:BC:89:5A:0F:2D:AA:18:72:97:FB:62:A6:22 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:54:4c:1d:90:5c:79:3a:1f:4e:29:d7:76:5b:82:0f:d1: 1d:9b:47:91:c6:09:e0:ed:d0:a1:75:44:5b:3c:e7:27:57:70: 28:9d:d4:79:74:d2:3c:26:e1:1c:ce:3f:c5:d4:a5:8e:18:20: 9a:2c:ba:72:fe:f7:8d:2d:59:2e:30:a5:35:86:d2:47:fe:a9: 1e:9a:c7:83:e9:d1:63:04:d6:03:5c:ef:ee:36:fe:e7:64:89: b9:da:7e:63:4a:a7:5f:07:fc:76:36:c8:e5:48:f3:9b:34:66: fa:66:d8:b7:0c:77:3b:50:ff:0d:12:4a:24:4f:45:45:77:9d: e8:05:ad:c1:c2:70:ae:33:bf:0f:f2:73:db:d1:c7:51:4d:a8: ad:2e:bf:56:c4:db:97:38:df:dd:1b:ac:74:b0:67:01:fa:a3: 88:4f:83:42:7e:70:8f:16:96:cc:3d:5c:fe:09:7b:9a:48:3a: d8:5a:2e:94:9b:19:77:3d:1c:02:56:4b:fc:5a:73:f7:78:67: 6a:f0:4e:c5:45:b4:ce:43:84:fb:ae:e2:56:a2:71:03:ca:1e: 34:22:40:e7:24:4b:24:29:94:72:df:c9:1b:e9:e8:b1:e3:27: 7d:37:70:61:de:a7:1a:e9:0f:d3:65:fe:0c:53:78:20:a3:e9: 7e:c3:51:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSEWwB6Ozf3eUhNvcjFvzVZrZ8PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA3MjMxMzQzMjhaFw0yNjA3MjQxNDM0MjhaMDMxMTAvBgNV BAMTKDBERThFMUM3MEI0ODJDQkM4OTVBMEYyREFBMTg3Mjk3RkI2MkE2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnnuqakLYCqNjzr5CGVhVMrIqW H/OCijD9k2Sr8vGzsLLfQrL/7vtWfFQJiTdRH/wrmlOMg0gm6QNodDZkXQH9zsZK SxZxKyZC6zHpgUlnqq31NH7o4FSs2jT5H6ujg/Hqq2jGqM/eYwWhdyrhgjV+ydnY tGCgFO+9RIuo5bcIvuIoMcvP1QBB9D+RHGNLV2jYWBV1+6K9StmYizUM/KMNmptI KlDQe5j8yoFht2pOsEsbSA0CQuuPI3G0OtNg7H5/wLTw6pnOLXnL3ppjgf7HDLxi o0RgVFfuIOj2NnnivpXUjOdN6Resa4p9w98hsE4ZAceiQXtYh0IJyEF7IcCDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDejhxwtILLyJWg8tqhhyl/tipiIwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf9UTB2QXHk6H04p13Zb gg/RHZtHkcYJ4O3QoXVEWzznJ1dwKJ3UeXTSPCbhHM4/xdSljhggmiy6cv73jS1Z LjClNYbSR/6pHprHg+nRYwTWA1zv7jb+52SJudp+Y0qnXwf8djbI5UjzmzRm+mbY twx3O1D/DRJKJE9FRXed6AWtwcJwrjO/D/Jz29HHUU2orS6/VsTblzjf3RusdLBn AfqjiE+DQn5wjxaWzD1c/gl7mkg62FoulJsZdz0cAlZL/Fpz93hnavBOxUW0zkOE +67iVqJxA8oeNCJA5yRLJCmUct/JG+noseMnfTdwYd6nGukP02X+DFN4IKPpfsNR ng== -----END CERTIFICATE-----Generated at Fri Jul 24 04:31:49 2026 by rpki-client