$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft (raw, json) Hash identifier: 5tL4Nd7aKQrydrrkjg6vYS5kklqJDrV9JYu38OBKFIw= Subject key identifier: 5C:41:B7:87:EA:FE:12:A3:5D:A6:EF:B3:C5:94:F8:47:F8:2D:9D:5A Authority key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 Certificate issuer: /CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Certificate serial: 3F75FC6F67B5F7B21319C3C8F53E6BEF349108BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft Manifest number: 35 Signing time: Tue 11 Aug 2026 04:56:47 +0000 Manifest this update: Tue 11 Aug 2026 04:51:47 +0000 Manifest next update: Wed 12 Aug 2026 07:22:47 +0000 Files and hashes: 1: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl (hash: 6PrlD+vr4+kb6yTprlSE38MtBvU8ddJM8wS95MxaWgQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Aug 2026 19:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:75:fc:6f:67:b5:f7:b2:13:19:c3:c8:f5:3e:6b:ef:34:91:08:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2 Validity Not Before: Aug 11 04:51:47 2026 GMT Not After : Aug 12 07:22:47 2026 GMT Subject: CN=5C41B787EAFE12A35DA6EFB3C594F847F82D9D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:fb:e9:8b:44:7c:cd:e6:93:6e:fc:11:ac: 59:b4:3d:f5:f1:6e:aa:15:88:9e:70:df:3c:97:eb: 03:be:a1:67:fd:99:6b:f4:93:45:23:87:2f:86:83: 09:f3:95:6b:66:e7:53:76:05:3a:8f:08:47:49:07: 86:a4:68:b6:00:52:02:d0:01:9c:b2:f3:7e:f6:e6: 3d:0f:68:06:fb:eb:9d:13:bf:60:ff:ab:23:3f:16: 24:c6:55:18:f1:81:83:b0:37:d6:0d:b1:1f:1e:2c: ee:2f:4d:4a:9d:53:3d:74:dc:79:89:bf:8f:1f:fc: 51:0c:ed:6f:94:59:1a:de:e7:d1:6e:40:87:c6:47: dd:50:65:45:a6:bd:7a:ac:95:40:d1:65:00:2f:3c: ec:c6:48:a6:7a:45:4c:0f:26:8d:65:7e:52:6c:6a: 20:0f:8d:98:f2:bd:82:fe:e6:2f:06:a9:82:a4:4d: 38:d0:32:37:76:04:4a:83:cf:c8:0b:c2:42:4a:a9: c8:19:25:ad:76:1e:62:44:42:3a:27:fc:7b:6f:aa: c5:fa:6b:07:6d:f4:3e:76:0c:3b:cc:30:05:58:64: 5c:7e:56:85:65:40:4c:78:bd:62:82:2b:9e:f3:8b: 6a:b4:a4:91:ac:76:20:0c:95:8b:a0:70:b3:f5:7f: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:B7:87:EA:FE:12:A3:5D:A6:EF:B3:C5:94:F8:47:F8:2D:9D:5A X509v3 Authority Key Identifier: keyid:57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1f:9c:37:7b:6d:e4:3b:61:95:9b:b3:dc:98:d7:f2:c4:aa: 8b:ba:27:6d:df:65:11:2b:e3:3b:69:3c:ef:6f:3e:b9:0d:75: 03:e1:60:3e:a9:58:8f:d7:97:ce:ea:78:04:67:7a:bd:d6:d5: 63:78:61:dd:84:df:a3:eb:4e:b6:d9:69:7b:bb:b7:b8:39:7b: 20:ab:1b:96:e0:69:91:7f:70:f1:d7:2e:a8:1d:3e:e0:bc:6d: f7:46:9f:db:41:45:08:0c:5b:c0:c1:28:f4:4f:10:e3:68:5b: 47:46:41:0d:06:95:f6:7b:a0:d2:d0:1a:fd:fc:d9:e5:2a:34: f2:fb:b3:ea:7c:cb:14:40:36:a8:38:e8:1f:e3:52:10:73:e2: b2:2e:33:98:ff:01:e4:04:37:ad:93:ab:32:e7:ab:29:12:d5: 5e:bb:e8:34:76:ce:23:6c:c7:ce:78:8c:46:a4:68:d8:53:9f: 85:2b:ed:99:ce:fa:0d:1d:3d:97:29:f2:0d:19:74:30:11:6f: 6b:d8:2c:f8:3c:d1:2a:3d:72:cf:55:82:97:a1:07:6b:76:5f: 6f:87:9c:f7:7e:78:50:8c:18:14:52:ae:c5:c9:c4:4b:11:e5: 97:36:bd:7d:05:e5:b2:7f:79:6b:05:f4:9d:27:0a:ae:83:39: da:74:b2:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP3X8b2e197ITGcPI9T5r7zSRCLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0 MTYzMUVBMjAeFw0yNjA4MTEwNDUxNDdaFw0yNjA4MTIwNzIyNDdaMDMxMTAvBgNV BAMTKDVDNDFCNzg3RUFGRTEyQTM1REE2RUZCM0M1OTRGODQ3RjgyRDlENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFs/vpi0R8zeaTbvwRrFm0PfXx bqoViJ5w3zyX6wO+oWf9mWv0k0Ujhy+GgwnzlWtm51N2BTqPCEdJB4akaLYAUgLQ AZyy83725j0PaAb7650Tv2D/qyM/FiTGVRjxgYOwN9YNsR8eLO4vTUqdUz103HmJ v48f/FEM7W+UWRre59FuQIfGR91QZUWmvXqslUDRZQAvPOzGSKZ6RUwPJo1lflJs aiAPjZjyvYL+5i8GqYKkTTjQMjd2BEqDz8gLwkJKqcgZJa12HmJEQjon/HtvqsX6 awdt9D52DDvMMAVYZFx+VoVlQEx4vWKCK57zi2q0pJGsdiAMlYugcLP1f33zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXEG3h+r+EqNdpu+zxZT4R/gtnVowHwYDVR0j BBgwFoAUVw54SKMoRYLNbw8MA199m0FjHqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQz NjIyLzEvNTcwRTc4NDhBMzI4NDU4MkNENkYwRjBDMDM1RjdEOUI0MTYzMUVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMw MzVGN0Q5QjQxNjMxRUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBiNjU0NWZjLTllYWMtNGZkYy1hMmVjLWM3MDJkNzRkMzYyMi8xLzU3MEU3ODQ4 QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkH5w3 e23kO2GVm7PcmNfyxKqLuidt32URK+M7aTzvbz65DXUD4WA+qViP15fO6ngEZ3q9 1tVjeGHdhN+j60622Wl7u7e4OXsgqxuW4GmRf3Dx1y6oHT7gvG33Rp/bQUUIDFvA wSj0TxDjaFtHRkENBpX2e6DS0Br9/NnlKjTy+7PqfMsUQDaoOOgf41IQc+KyLjOY /wHkBDetk6sy56spEtVeu+g0ds4jbMfOeIxGpGjYU5+FK+2ZzvoNHT2XKfINGXQw EW9r2Cz4PNEqPXLPVYKXoQdrdl9vh5z3fnhQjBgUUq7FycRLEeWXNr19BeWyf3lr BfSdJwqugznadLLZ -----END CERTIFICATE-----Generated at Tue Aug 11 10:38:11 2026 by rpki-client