$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft File: ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft (raw, json) Hash identifier: gJQn8YS7j/G9Zfu8Hv91IqG0GM9jmDIIjTexQ9BTKhI= Subject key identifier: 5B:D0:94:D7:C7:A3:5A:A3:9D:DB:45:AA:B1:8B:40:F2:9D:FA:BC:BB Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A Certificate issuer: /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Certificate serial: 6BF44F3EB7738071AF55DD0F12C066543395064F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft Manifest number: 05 Signing time: Thu 23 Jul 2026 05:07:33 +0000 Manifest this update: Thu 23 Jul 2026 05:02:33 +0000 Manifest next update: Fri 24 Jul 2026 05:43:33 +0000 Files and hashes: 1: AS153376.asa (hash: X6/S+yH4qwEnnexD8pfiVMbvZEbISi51P2gImMfuZ/M=) 2: ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl (hash: 7SLZxMaRr78Gmsb5lkK6Xfp4xbVL/AXYerF4oU7xiQE=) 3: 323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa (hash: T+DNXjQMMXpH68tGwE1BkA1mNFVvRXhA5dKMe9sTdUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 05:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f4:4f:3e:b7:73:80:71:af:55:dd:0f:12:c0:66:54:33:95:06:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Validity Not Before: Jul 23 05:02:33 2026 GMT Not After : Jul 24 05:43:33 2026 GMT Subject: CN=5BD094D7C7A35AA39DDB45AAB18B40F29DFABCBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:6b:8e:ba:4f:f7:e8:11:da:87:e2:8a:d5: 48:75:71:55:8e:25:02:40:23:1c:3c:01:ce:c9:00: 02:18:95:1b:e5:58:b6:51:56:a4:a4:56:d5:9e:f8: f3:89:dd:1d:74:03:96:bb:a5:d8:23:c9:b2:92:47: 05:b5:e1:f1:7e:c8:ef:7a:0b:2d:bd:c3:58:7e:ba: 3a:3a:c2:59:d6:82:49:b2:bb:7e:37:80:fc:bc:03: 78:f6:82:f1:6d:b1:0a:f4:47:ee:d7:1d:b6:e4:15: b2:25:12:48:cd:06:53:53:0a:86:96:9f:dc:29:2a: e8:89:9a:96:73:8e:e6:b4:9b:d1:77:06:21:13:74: 1f:f5:9d:bb:3a:6c:64:84:86:13:f2:29:ce:4b:fb: 6e:82:84:6b:d2:8b:a8:18:a9:f7:b0:13:e1:92:26: d4:8e:fc:e8:60:16:1d:08:d4:f1:fd:ef:33:86:3b: e9:1b:ad:15:44:75:dc:7e:fd:54:dc:7b:53:35:2b: ee:5a:24:99:23:90:00:65:0e:68:46:41:19:7c:a9: f9:c4:9a:e8:de:99:2b:ce:21:f6:bb:dd:c3:ba:cd: f6:fb:57:a7:eb:e0:72:2f:18:6f:79:45:67:80:11: de:17:80:ad:43:4a:0c:2f:14:01:d4:2b:e0:3f:f4: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:94:D7:C7:A3:5A:A3:9D:DB:45:AA:B1:8B:40:F2:9D:FA:BC:BB X509v3 Authority Key Identifier: keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:30:b4:23:1d:f0:a3:de:0f:32:b3:c3:0c:fa:c5:d2:fa:03: f9:41:5e:ed:a6:65:66:74:a4:cf:dd:cb:a6:d0:6c:98:ef:6f: 9e:8e:da:8d:8b:6a:9f:25:0c:9c:05:52:43:80:58:2b:0c:96: 5f:8f:3a:a7:7d:88:39:9c:9d:88:41:5d:66:02:9b:e3:ef:ab: 50:e0:01:bf:b6:a0:d7:d7:6b:62:42:72:1e:2c:63:ba:67:eb: 1b:28:7e:ed:84:29:b4:33:2b:18:29:ee:34:d8:47:86:47:94: e4:4d:42:51:4e:72:14:78:e6:c2:da:c1:7f:68:35:10:b4:0e: af:88:1c:a8:2f:4b:ca:2b:5f:eb:41:e4:73:84:c7:5a:75:30: 10:71:a6:43:02:40:24:37:98:cc:64:88:d2:a9:03:95:e4:2f: b8:8f:ea:73:b3:20:09:b1:da:65:4c:8f:83:09:f9:27:48:70: 55:42:bc:bd:1c:a2:e7:68:25:95:2c:cb:d3:23:ac:5f:12:8a: 92:a2:c5:d7:73:35:fb:48:40:16:15:7f:8a:26:7d:2e:b3:18: 71:4a:6f:9f:46:7d:ac:2b:cf:5c:57:57:66:24:3b:15:fb:53: 3c:55:31:dd:d4:5b:e4:9a:5e:87:fa:91:ca:2c:ff:8d:78:1e: 3e:4c:18:0e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa/RPPrdzgHGvVd0PEsBmVDOVBk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdB MzQzMDQxQTAeFw0yNjA3MjMwNTAyMzNaFw0yNjA3MjQwNTQzMzNaMDMxMTAvBgNV BAMTKDVCRDA5NEQ3QzdBMzVBQTM5RERCNDVBQUIxOEI0MEYyOURGQUJDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuM2uOuk/36BHah+KK1Uh1cVWO JQJAIxw8Ac7JAAIYlRvlWLZRVqSkVtWe+POJ3R10A5a7pdgjybKSRwW14fF+yO96 Cy29w1h+ujo6wlnWgkmyu343gPy8A3j2gvFtsQr0R+7XHbbkFbIlEkjNBlNTCoaW n9wpKuiJmpZzjua0m9F3BiETdB/1nbs6bGSEhhPyKc5L+26ChGvSi6gYqfewE+GS JtSO/OhgFh0I1PH97zOGO+kbrRVEddx+/VTce1M1K+5aJJkjkABlDmhGQRl8qfnE mujemSvOIfa73cO6zfb7V6fr4HIvGG95RWeAEd4XgK1DSgwvFAHUK+A/9NufAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUW9CU18ejWqOd20WqsYtA8p36vLswHwYDVR0j BBgwFoAUq+8MK+G8pyZZbCHtEyZJp6NDBBowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzMvQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdBMzQzMDQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMS9BQkVGMEMyQkUxQkNBNzI2NTk2QzIxRUQx MzI2NDlBN0EzNDMwNDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8zL0FCRUYwQzJC RTFCQ0E3MjY1OTZDMjFFRDEzMjY0OUE3QTM0MzA0MUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBMLQj HfCj3g8ys8MM+sXS+gP5QV7tpmVmdKTP3cum0GyY72+ejtqNi2qfJQycBVJDgFgr DJZfjzqnfYg5nJ2IQV1mApvj76tQ4AG/tqDX12tiQnIeLGO6Z+sbKH7thCm0MysY Ke402EeGR5TkTUJRTnIUeObC2sF/aDUQtA6viByoL0vKK1/rQeRzhMdadTAQcaZD AkAkN5jMZIjSqQOV5C+4j+pzsyAJsdplTI+DCfknSHBVQry9HKLnaCWVLMvTI6xf EoqSosXXczX7SEAWFX+KJn0usxhxSm+fRn2sK89cV1dmJDsV+1M8VTHd1Fvkml6H +pHKLP+NeB4+TBgO -----END CERTIFICATE-----Generated at Thu Jul 23 19:54:58 2026 by rpki-client