$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: tyrjBZZ6CEBlNgjWpNa/pYkFbvq04khqFnZAqbnMZRQ= Subject key identifier: CD:1A:52:D4:B7:D2:9D:C6:D9:03:D7:E3:C3:D0:D2:7D:E2:3E:40:68 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 28DBC2A7621635EE2D9023DA4ED4D7C7028231A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 03E4 Signing time: Thu 23 Jul 2026 14:41:44 +0000 Manifest this update: Thu 23 Jul 2026 14:36:44 +0000 Manifest next update: Fri 24 Jul 2026 16:06:44 +0000 Files and hashes: 1: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 0JoIiUMIT0jAbI3GHPb8luCDeUy4DCLrWrwx+cvSkwY=) 2: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: DLt/YaNd3U+w/oJhBVHDVLx1eMjPGr+hUCSEoL4Ng7M=) 3: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=) 4: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: gguUaLGiZloULmQoLb1t2Z/Nc/im18/K2ylNKEqcBq8=) 5: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 6: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: RXHjluervVOKSOjAfkUVqFpPIpnYTG1wbKbkRzpyWc8=) 7: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 8: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 9: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=) 10: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: 9ogwbP0FwI3bt9smQhF/FyCTLBfxIietP/iXZ8W8um0=) 11: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: MZinW+ThJOvxuorz79LfJwm0SPpHFhvqZI72l4euJeU=) 12: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: 47TKIm+rcsxq3NreeDAo7patjoMtfx1Dh+ijStJKcFs=) 13: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 9LUtoeiyFR5uHzwoW1Snn+6cLSpTHjqMgoogsv4SuLw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:db:c2:a7:62:16:35:ee:2d:90:23:da:4e:d4:d7:c7:02:82:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Jul 23 14:36:44 2026 GMT Not After : Jul 24 16:06:44 2026 GMT Subject: CN=CD1A52D4B7D29DC6D903D7E3C3D0D27DE23E4068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:93:d5:1c:0c:b8:34:84:c7:29:aa:fe:89: 04:60:78:42:21:ec:48:6a:67:4c:23:10:1b:c9:d5: dc:0c:46:e3:eb:91:0a:58:85:ad:89:73:b5:e7:67: 6a:f0:51:ff:0b:ef:01:d8:ea:74:ad:39:0e:09:de: f0:41:53:fa:2b:14:d2:27:4e:2a:6b:69:8d:c3:dc: c1:67:f2:49:c9:0f:d8:2f:9a:09:51:94:ed:a9:5d: 8b:76:3a:55:17:14:0b:a6:6c:61:40:87:3a:72:82: 05:43:13:ab:70:aa:2c:4f:09:08:c6:a8:a0:43:b7: 8f:a8:25:46:65:67:6d:87:9f:f1:ec:37:ed:69:cf: d0:87:9f:9b:9d:54:47:2b:cb:06:1a:32:cb:fc:6c: b0:d2:80:1a:dc:95:bc:c8:81:9e:ef:80:8f:16:de: b6:d1:d6:7e:f3:28:c5:07:30:aa:05:43:2a:a1:3e: 92:72:f2:c2:f3:a0:aa:2a:18:f2:17:2d:3e:d7:f3: 98:3b:4c:cd:25:0a:ed:48:e8:49:1c:52:27:74:26: 0b:84:30:c9:2b:06:82:1b:96:65:62:ba:7d:81:17: c3:44:84:23:ab:b6:96:54:19:bc:14:83:a8:79:7a: 02:59:73:89:82:3c:e2:a9:66:68:ea:52:3c:e4:1b: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:52:D4:B7:D2:9D:C6:D9:03:D7:E3:C3:D0:D2:7D:E2:3E:40:68 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4d:c0:a5:b0:5f:c8:c0:ff:06:3a:4a:61:38:57:0c:b9:fa: d0:f7:16:b5:e1:fc:57:fa:94:19:62:65:8e:bb:bf:b0:96:68: b1:d5:a3:7c:b6:85:ca:56:1a:3d:ba:53:75:b5:c7:cc:7f:5a: 04:5d:5c:f0:f6:ef:e2:cf:4a:cf:b7:ce:ec:60:f6:a0:66:a9: 10:4a:cd:c4:1b:4f:da:9f:88:ba:1d:a7:a6:e8:df:49:ca:52: c0:05:1d:13:b1:38:ec:c2:15:42:be:78:0e:8b:47:0f:70:7e: e5:da:13:ab:5e:05:ce:78:76:c8:2e:cb:a0:e4:69:f4:b3:cc: 01:d1:bd:01:9c:77:b6:ab:b6:28:aa:cc:aa:49:c0:71:4a:4f: a1:45:50:c9:2f:7a:94:32:e9:71:f3:c0:91:84:aa:85:50:37: 52:85:74:f9:69:be:22:a6:6e:b1:ac:e5:96:f4:ce:2d:36:4c: 3d:ca:0a:db:72:e5:cb:17:c0:a3:ce:02:90:25:6b:83:ce:3b: 88:5f:fe:a2:07:3a:25:80:cc:10:cf:59:5f:bf:77:d5:44:2c: 34:e4:c8:3d:05:a1:33:58:92:46:c1:c9:38:46:29:9c:7a:8b: 5e:a2:8c:b7:d8:0c:2b:8f:7b:05:a3:56:15:b1:24:56:07:9f: 84:57:5b:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKNvCp2IWNe4tkCPaTtTXxwKCMaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjA3MjMxNDM2NDRaFw0yNjA3MjQxNjA2NDRaMDMxMTAvBgNV BAMTKENEMUE1MkQ0QjdEMjlEQzZEOTAzRDdFM0MzRDBEMjdERTIzRTQwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGqJPVHAy4NITHKar+iQRgeEIh 7EhqZ0wjEBvJ1dwMRuPrkQpYha2Jc7XnZ2rwUf8L7wHY6nStOQ4J3vBBU/orFNIn TipraY3D3MFn8knJD9gvmglRlO2pXYt2OlUXFAumbGFAhzpyggVDE6twqixPCQjG qKBDt4+oJUZlZ22Hn/HsN+1pz9CHn5udVEcrywYaMsv8bLDSgBrclbzIgZ7vgI8W 3rbR1n7zKMUHMKoFQyqhPpJy8sLzoKoqGPIXLT7X85g7TM0lCu1I6EkcUid0JguE MMkrBoIblmViun2BF8NEhCOrtpZUGbwUg6h5egJZc4mCPOKpZmjqUjzkG/aDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzRpS1LfSncbZA9fjw9DSfeI+QGgwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY03ApbBfyMD/BjpKYThX DLn60PcWteH8V/qUGWJljru/sJZosdWjfLaFylYaPbpTdbXHzH9aBF1c8Pbv4s9K z7fO7GD2oGapEErNxBtP2p+Iuh2npujfScpSwAUdE7E47MIVQr54DotHD3B+5doT q14Fznh2yC7LoORp9LPMAdG9AZx3tqu2KKrMqknAcUpPoUVQyS96lDLpcfPAkYSq hVA3UoV0+Wm+IqZusazllvTOLTZMPcoK23LlyxfAo84CkCVrg847iF/+ogc6JYDM EM9ZX7931UQsNOTIPQWhM1iSRsHJOEYpnHqLXqKMt9gMK497BaNWFbEkVgefhFdb TA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:56:53 2026 by rpki-client