$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: kZjFHFwQFO2AvHcFuEjLJ2Kqdl1R69cxDO3WI7JZd6U= Subject key identifier: 22:D7:B1:F0:71:5F:FA:7E:AC:CB:BC:5E:EE:0A:84:C9:1E:45:87:73 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 7BA2C65150766F145299AA97A0DA4AEB6D510E87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 020E Signing time: Thu 23 Jul 2026 08:35:48 +0000 Manifest this update: Thu 23 Jul 2026 08:30:48 +0000 Manifest next update: Fri 24 Jul 2026 11:52:48 +0000 Files and hashes: 1: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: TQW6ysixu0tP91BwcnDo0gwRpG74gPFiPCid6NcU7fI=) 2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: syvuZ8N+HyzB+bqQXT1tSESgNEOx2EwGXviRJS4JTY8=) 3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 08:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a2:c6:51:50:76:6f:14:52:99:aa:97:a0:da:4a:eb:6d:51:0e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Jul 23 08:30:48 2026 GMT Not After : Jul 24 11:52:48 2026 GMT Subject: CN=22D7B1F0715FFA7EACCBBC5EEE0A84C91E458773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:80:50:ee:14:dd:ba:29:00:73:b1:c2:7c: bb:8d:b0:9f:b0:d0:50:0d:fa:8a:7f:ff:5a:43:2f: 39:29:16:1a:52:0c:3e:a0:44:a4:24:c2:a8:24:59: cc:68:fc:bd:22:51:ea:0d:da:ae:1a:9b:ca:06:fa: d8:f9:b2:34:cc:87:48:57:f7:e1:af:3f:18:39:01: f8:85:8a:ab:0f:03:b5:aa:d5:66:82:79:bf:ad:3c: 74:26:8e:f5:9b:79:ac:9a:a3:5c:59:42:90:1a:3f: 74:b1:ef:b8:02:e1:0b:1f:24:27:a1:7c:dc:66:7d: 19:52:58:77:20:37:24:7c:58:16:3f:ec:f7:29:9a: 6e:5c:ac:85:a4:f5:a2:d2:80:d3:a0:8b:b3:e7:65: 04:d2:cb:32:7e:f0:e9:54:4d:2a:9b:0e:c6:dc:ac: c7:43:77:1c:1e:89:89:47:53:aa:c0:99:b1:78:eb: be:c1:1a:36:74:f0:7c:c2:af:96:2d:14:3b:1b:37: a9:ac:48:ec:50:e5:4a:6a:53:e7:7f:48:57:a7:36: 85:af:a9:27:07:3b:68:bb:31:da:b7:65:8e:1a:11: 18:79:dd:e1:84:34:c3:b0:d2:0e:72:46:33:da:fa: 98:31:88:da:d1:e9:ee:39:01:06:83:64:8f:09:d0: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D7:B1:F0:71:5F:FA:7E:AC:CB:BC:5E:EE:0A:84:C9:1E:45:87:73 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f4:00:4c:f6:11:c1:69:00:4e:6c:5a:a8:f8:60:53:8d:de: fa:af:04:5b:de:7c:ec:69:78:4f:04:0a:23:34:5b:07:14:71: 6f:e1:ad:a2:5f:74:5e:7d:93:24:27:2a:ef:14:c1:63:95:46: c8:83:0f:af:37:41:50:5b:29:22:80:1a:7b:67:b3:85:8f:a1: 30:0c:77:cc:36:c3:33:bf:70:96:50:01:71:dd:af:2b:7a:bb: 24:6d:be:de:9e:38:cd:6a:a5:aa:2f:f9:3d:31:18:3d:1c:a6: e5:a1:53:f8:ac:44:54:77:f7:f9:c3:2f:f4:f9:69:d4:7e:65: a8:58:3a:0e:63:25:d7:6e:6e:c1:77:3e:a1:ff:d4:32:5e:9d: c1:94:49:8a:7a:c4:db:a3:cf:9c:f0:bb:52:71:47:5f:80:60: 44:f3:07:4a:a2:c4:8a:b9:d0:de:93:8d:89:e1:55:59:00:eb: 5f:c4:ae:ea:e9:56:6d:a5:6f:5c:82:ac:3b:ee:89:52:57:be: a1:a8:2f:9e:c9:19:44:a1:c9:76:14:f7:98:54:4c:28:75:0b: ee:0d:26:fd:6b:ac:40:32:18:c1:2c:1f:23:96:fc:38:4c:62: cb:9f:b3:78:54:94:06:05:a6:77:12:ed:4f:23:b9:fc:c4:02: 8b:64:59:d3 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUe6LGUVB2bxRSmaqXoNpK621RDocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjA3MjMwODMwNDhaFw0yNjA3MjQxMTUyNDhaMDMxMTAvBgNV BAMTKDIyRDdCMUYwNzE1RkZBN0VBQ0NCQkM1RUVFMEE4NEM5MUU0NTg3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaIBQ7hTduikAc7HCfLuNsJ+w 0FAN+op//1pDLzkpFhpSDD6gRKQkwqgkWcxo/L0iUeoN2q4am8oG+tj5sjTMh0hX 9+GvPxg5AfiFiqsPA7Wq1WaCeb+tPHQmjvWbeayao1xZQpAaP3Sx77gC4QsfJCeh fNxmfRlSWHcgNyR8WBY/7Pcpmm5crIWk9aLSgNOgi7PnZQTSyzJ+8OlUTSqbDsbc rMdDdxweiYlHU6rAmbF4677BGjZ08HzCr5YtFDsbN6msSOxQ5UpqU+d/SFenNoWv qScHO2i7Mdq3ZY4aERh53eGENMOw0g5yRjPa+pgxiNrR6e45AQaDZI8J0Ib1AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUItex8HFf+n6sy7xe7gqEyR5Fh3MwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA BfQATPYRwWkATmxaqPhgU43e+q8EW9587Gl4TwQKIzRbBxRxb+Gtol90Xn2TJCcq 7xTBY5VGyIMPrzdBUFspIoAae2ezhY+hMAx3zDbDM79wllABcd2vK3q7JG2+3p44 zWqlqi/5PTEYPRym5aFT+KxEVHf3+cMv9Plp1H5lqFg6DmMl125uwXc+of/UMl6d wZRJinrE26PPnPC7UnFHX4BgRPMHSqLEirnQ3pONieFVWQDrX8Su6ulWbaVvXIKs O+6JUle+oagvnskZRKHJdhT3mFRMKHUL7g0m/WusQDIYwSwfI5b8OExiy5+zeFSU BgWmdxLtTyO5/MQCi2RZ0w== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:41 2026 by rpki-client