$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: mLTafu6Z3IdY065QTLJMzan8VpbsaqJhzPur4uygBiI= Subject key identifier: 6B:9F:7C:9F:4B:CA:02:2F:A8:D7:06:11:92:9E:89:53:5E:6F:6B:F9 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 21064A9AE2AC4DA173AF38016015CB9B81AC7CD8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0455 Signing time: Tue 21 Jul 2026 03:21:17 +0000 Manifest this update: Tue 21 Jul 2026 03:16:17 +0000 Manifest next update: Wed 22 Jul 2026 06:56:17 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: DoDkfQnChkWZCOApCioCsewCOleiJf2GBpQXk52WC+g=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:06:4a:9a:e2:ac:4d:a1:73:af:38:01:60:15:cb:9b:81:ac:7c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jul 21 03:16:17 2026 GMT Not After : Jul 22 06:56:17 2026 GMT Subject: CN=6B9F7C9F4BCA022FA8D70611929E89535E6F6BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:a5:c1:3f:38:b9:1f:45:e4:b0:27:d8:0c: df:dc:75:bc:e5:14:34:68:ef:77:2f:3f:4f:d4:a0: ff:00:fa:63:6b:ee:54:35:47:bd:81:0b:ed:f6:2b: 10:24:5c:86:7b:ae:eb:5b:cb:3e:be:16:07:ef:d8: 7c:be:04:4c:41:bd:de:8a:37:e6:01:43:f0:c6:98: 78:bf:8d:89:2b:a2:7b:90:36:72:44:b4:ca:b0:a7: b7:15:54:6f:0c:d9:51:ee:0d:23:bb:df:f3:55:b2: a3:70:06:6f:8b:1f:4c:30:79:0b:66:92:21:69:2e: 76:dc:6f:17:17:14:7d:e0:a5:d7:2a:fa:49:c4:50: f1:7f:49:1b:0e:2d:4e:59:a2:09:3c:a6:57:d1:f9: dc:82:15:d8:5b:f7:6e:51:14:cb:14:4e:0a:9a:68: f8:c8:3a:c2:41:5c:41:11:d7:58:bf:13:3b:19:f2: 89:87:c1:8f:b5:d3:44:c6:e5:89:e9:48:c4:1f:f5: 78:10:7f:ad:94:5d:d7:33:25:ec:61:b7:bc:16:0a: 89:28:ee:57:78:aa:8e:65:86:f2:5f:81:fe:58:ee: eb:89:32:65:a2:55:e0:4f:df:94:ad:2c:a7:4c:ef: c5:36:43:4b:3d:e6:f2:0e:6e:06:85:63:b8:a2:16: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9F:7C:9F:4B:CA:02:2F:A8:D7:06:11:92:9E:89:53:5E:6F:6B:F9 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:02:15:ad:1c:ec:60:b1:88:eb:08:99:ca:a0:02:a6:e0:c0: 13:3b:9f:6c:65:fd:f9:d3:08:df:95:7c:51:e8:69:fd:cf:44: e9:cb:5d:61:59:68:eb:57:31:88:77:a1:d0:b2:d6:25:6c:c7: 76:df:e5:37:a1:5e:1a:13:8f:a8:3f:7d:ac:51:fc:56:f6:4d: 62:84:50:8e:fd:f2:bb:b3:71:13:d4:b2:91:f5:69:ba:0e:80: f4:d9:e4:d1:26:36:02:0b:16:14:e4:2f:e0:ac:6c:5f:6f:d0: 5b:39:b2:38:54:5f:1f:c4:bc:4d:b5:eb:f5:48:ac:80:2f:17: dd:27:55:b8:99:0a:fa:a5:41:ba:81:72:db:82:cb:cf:3b:79: 6d:37:f6:69:21:a9:59:14:80:53:52:b4:0f:77:0d:5c:37:e5: 48:27:95:ba:ce:6e:68:69:6e:ed:c0:02:ce:83:c6:35:b9:93: 18:72:28:32:ac:ce:45:47:65:df:54:d0:83:87:4e:cb:98:ef: 41:27:f4:3c:cc:27:57:fd:35:e2:57:e3:ec:67:c8:ff:4e:55: fc:fe:6c:93:3f:84:e3:9a:35:17:64:79:bf:43:a1:0d:9f:1c: c0:fb:7d:51:9d:82:09:68:51:21:28:85:a8:8b:9f:85:21:a3: dd:d5:e8:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIQZKmuKsTaFzrzgBYBXLm4GsfNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA3MjEwMzE2MTdaFw0yNjA3MjIwNjU2MTdaMDMxMTAvBgNV BAMTKDZCOUY3QzlGNEJDQTAyMkZBOEQ3MDYxMTkyOUU4OTUzNUU2RjZCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9aXBPzi5H0XksCfYDN/cdbzl FDRo73cvP0/UoP8A+mNr7lQ1R72BC+32KxAkXIZ7rutbyz6+Fgfv2Hy+BExBvd6K N+YBQ/DGmHi/jYkronuQNnJEtMqwp7cVVG8M2VHuDSO73/NVsqNwBm+LH0wweQtm kiFpLnbcbxcXFH3gpdcq+knEUPF/SRsOLU5Zogk8plfR+dyCFdhb925RFMsUTgqa aPjIOsJBXEER11i/EzsZ8omHwY+100TG5YnpSMQf9XgQf62UXdczJexht7wWCoko 7ld4qo5lhvJfgf5Y7uuJMmWiVeBP35StLKdM78U2Q0s95vIObgaFY7iiFgaXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa598n0vKAi+o1wYRkp6JU15va/kwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEAhWt HOxgsYjrCJnKoAKm4MATO59sZf350wjflXxR6Gn9z0Tpy11hWWjrVzGId6HQstYl bMd23+U3oV4aE4+oP32sUfxW9k1ihFCO/fK7s3ET1LKR9Wm6DoD02eTRJjYCCxYU 5C/grGxfb9BbObI4VF8fxLxNtev1SKyALxfdJ1W4mQr6pUG6gXLbgsvPO3ltN/Zp IalZFIBTUrQPdw1cN+VIJ5W6zm5oaW7twALOg8Y1uZMYcigyrM5FR2XfVNCDh07L mO9BJ/Q8zCdX/TXiV+PsZ8j/TlX8/myTP4TjmjUXZHm/Q6ENnxzA+31RnYIJaFEh KIWoi5+FIaPd1eiZ -----END CERTIFICATE-----Generated at Tue Jul 21 20:51:29 2026 by rpki-client