$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: vgja9sXtn66LDhSK3DeAB/iuJn04C+iQCw5OjZa+yds= Subject key identifier: 44:95:97:1B:7E:54:71:54:A5:C2:46:BF:1E:15:4D:E5:5B:29:CE:01 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 599DD10C65425ADAECAFA49400EE177C28715420 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: C4 Signing time: Thu 23 Jul 2026 17:53:46 +0000 Manifest this update: Thu 23 Jul 2026 17:48:46 +0000 Manifest next update: Fri 24 Jul 2026 20:24:46 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 3: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 4: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 5: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 6: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 7: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: AcQIvnz1+YFVuDBaQn73O/QUZReuT910QKBTdHkZgMI=) 8: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 9: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9d:d1:0c:65:42:5a:da:ec:af:a4:94:00:ee:17:7c:28:71:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Jul 23 17:48:46 2026 GMT Not After : Jul 24 20:24:46 2026 GMT Subject: CN=4495971B7E547154A5C246BF1E154DE55B29CE01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:4f:dc:b9:a0:5c:97:b5:82:a5:8c:a0:94: 32:67:fc:6e:dd:39:aa:93:45:08:ad:5d:21:58:dd: 71:fb:09:5e:93:11:5d:d2:b4:51:f2:2b:b7:a9:72: 04:a6:e1:07:a5:16:b5:f4:ff:c8:54:66:64:f4:5e: 1e:25:44:5f:c8:36:84:c7:f1:dd:b3:0c:1d:b3:c4: fa:fc:41:9e:d0:c6:69:62:65:2a:f1:2d:ba:9a:aa: 9a:31:87:8a:f8:b9:d0:da:a1:2d:cc:dc:db:ef:eb: 41:e1:ea:ad:17:45:4e:f3:55:0c:60:1a:46:e2:32: 9a:b3:4e:17:5f:98:ff:50:4d:a5:62:f7:58:66:db: e3:c3:7f:49:39:f7:39:a5:0f:d1:44:bf:ad:51:b0: 11:ad:2b:5a:d3:79:4f:67:5f:a4:f2:a5:86:b3:90: a2:ec:8c:79:00:21:4e:a8:de:86:28:a7:26:77:27: 3d:80:54:9a:96:77:b8:60:75:58:d7:a1:9f:f0:85: f4:75:9f:a2:fa:c8:af:12:ab:d7:ba:fa:e8:dc:d0: e7:b9:de:97:8c:58:4d:f8:50:87:1a:e7:3c:17:b5: d5:b4:77:d7:36:b7:be:ed:76:7b:d4:86:39:6f:00: be:48:3d:06:46:d1:2f:40:74:86:c5:11:b3:05:a9: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:97:1B:7E:54:71:54:A5:C2:46:BF:1E:15:4D:E5:5B:29:CE:01 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e9:21:4b:f3:fb:9e:84:f4:86:6c:ad:b0:78:26:fc:d8:b2: 89:6d:e6:a1:ab:a0:32:80:57:47:9f:6d:7d:a1:77:cc:87:67: 1b:08:eb:1f:ef:cf:2e:50:74:19:8c:12:4c:52:8d:05:3d:09: 15:dc:c6:64:07:32:cb:a0:72:de:ad:7b:bc:88:58:fb:04:8d: 1b:77:3a:b8:12:66:7c:9b:ee:67:d6:b8:f0:0d:19:dc:55:04: d8:67:ba:cc:7e:e1:b4:fa:95:1d:b4:fd:93:b2:57:5d:f3:54: a0:64:c3:0f:fe:0e:6c:df:6c:ae:fd:16:5b:0d:5e:62:fd:85: b8:1c:3d:9b:0a:d0:9b:b1:e6:3e:1c:0e:16:e1:6e:ab:e7:03: e0:08:eb:1c:bb:33:9d:13:08:2d:1b:c5:ff:9c:74:26:ad:d3: b0:0d:03:1a:b2:d0:4c:3b:75:34:cb:f6:fa:2d:c3:01:38:25: 90:40:df:89:43:e3:fb:07:50:3b:c9:18:a9:3a:37:aa:9d:e7: 98:d4:cd:c1:ec:4e:55:eb:da:08:c2:8e:6c:13:2e:b8:59:b3: 4b:9f:e1:f2:d5:5b:dd:db:a9:82:a1:74:c0:11:41:9a:c2:23: b6:0c:9f:c5:86:26:19:dd:16:36:60:24:3f:75:75:ae:49:ab: 76:18:20:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWZ3RDGVCWtrsr6SUAO4XfChxVCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA3MjMxNzQ4NDZaFw0yNjA3MjQyMDI0NDZaMDMxMTAvBgNV BAMTKDQ0OTU5NzFCN0U1NDcxNTRBNUMyNDZCRjFFMTU0REU1NUIyOUNFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxU/cuaBcl7WCpYyglDJn/G7d OaqTRQitXSFY3XH7CV6TEV3StFHyK7epcgSm4QelFrX0/8hUZmT0Xh4lRF/INoTH 8d2zDB2zxPr8QZ7QxmliZSrxLbqaqpoxh4r4udDaoS3M3Nvv60Hh6q0XRU7zVQxg GkbiMpqzThdfmP9QTaVi91hm2+PDf0k59zmlD9FEv61RsBGtK1rTeU9nX6TypYaz kKLsjHkAIU6o3oYopyZ3Jz2AVJqWd7hgdVjXoZ/whfR1n6L6yK8Sq9e6+ujc0Oe5 3peMWE34UIca5zwXtdW0d9c2t77tdnvUhjlvAL5IPQZG0S9AdIbFEbMFqUyzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURJWXG35UcVSlwka/HhVN5VspzgEwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb6SFL 8/uehPSGbK2weCb82LKJbeahq6AygFdHn219oXfMh2cbCOsf788uUHQZjBJMUo0F PQkV3MZkBzLLoHLerXu8iFj7BI0bdzq4EmZ8m+5n1rjwDRncVQTYZ7rMfuG0+pUd tP2Tsldd81SgZMMP/g5s32yu/RZbDV5i/YW4HD2bCtCbseY+HA4W4W6r5wPgCOsc uzOdEwgtG8X/nHQmrdOwDQMastBMO3U0y/b6LcMBOCWQQN+JQ+P7B1A7yRipOjeq neeY1M3B7E5V69oIwo5sEy64WbNLn+Hy1Vvd26mCoXTAEUGawiO2DJ/FhiYZ3RY2 YCQ/dXWuSat2GCCO -----END CERTIFICATE-----Generated at Thu Jul 23 21:27:45 2026 by rpki-client