$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: BtYw6SJIakco/YcybquNGIoAmmm0yXqYkh0B0xow1BE= Subject key identifier: 28:23:14:8C:E1:EA:DA:6D:78:BE:17:AE:F8:83:44:2D:86:D6:A0:BE Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 7B6D2BD39B18695465F925C1232E7AECF01EEBF1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 0119 Signing time: Tue 21 Jul 2026 08:58:33 +0000 Manifest this update: Tue 21 Jul 2026 08:53:33 +0000 Manifest next update: Wed 22 Jul 2026 09:17:33 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: sIGFhx7Fmp+wFvf6q5A24dWLb6rDuUhktX/CmKlWrT4=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6d:2b:d3:9b:18:69:54:65:f9:25:c1:23:2e:7a:ec:f0:1e:eb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jul 21 08:53:33 2026 GMT Not After : Jul 22 09:17:33 2026 GMT Subject: CN=2823148CE1EADA6D78BE17AEF883442D86D6A0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:61:69:74:54:40:fd:66:9d:99:9f:45:58: be:0b:40:dc:65:f8:93:71:03:10:1e:f8:6c:2f:63: 7f:c1:ed:03:e8:56:e9:de:95:fb:f1:25:5e:0b:cd: bc:31:97:46:17:a0:f7:c9:4b:39:b4:85:1a:ee:70: a5:48:d5:de:91:1b:00:24:a4:64:4b:b6:41:98:21: 5c:e8:72:17:d7:de:92:cf:a8:d4:f9:fd:9b:59:1c: 01:40:75:23:b3:9a:82:ef:81:ea:73:92:aa:ab:03: 91:14:37:ff:9e:17:69:0f:81:90:6e:8d:10:4f:50: 17:46:8b:00:44:eb:4e:39:f2:23:e0:6f:47:7e:64: 59:78:27:79:ff:f5:8b:86:c9:49:54:05:71:e4:09: 11:33:9d:9b:13:3e:cc:96:58:72:ba:67:c7:89:48: 94:ff:ab:1a:b0:48:67:85:c2:64:50:9d:3b:5f:61: 5b:c8:e4:e6:64:e9:0a:ad:ed:0c:e3:40:a1:47:65: 76:ec:14:94:14:bd:e2:69:4c:c6:fc:f2:be:29:bc: 42:a6:f2:59:bb:ef:27:ea:9e:3e:20:fc:c6:4c:50: c2:00:11:36:58:56:a7:7f:18:0b:1b:33:3a:ac:4f: c4:b5:88:5d:34:5d:a2:96:da:60:39:88:46:99:ae: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:14:8C:E1:EA:DA:6D:78:BE:17:AE:F8:83:44:2D:86:D6:A0:BE X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:27:43:32:5e:87:fd:ef:99:f3:95:5e:29:f8:bf:54:c6:f4: 35:53:21:cf:a8:6f:71:89:a6:a0:56:a2:1f:97:d0:7a:05:d0: 2b:9d:f7:74:0d:9c:0e:9b:2e:bd:52:05:47:98:77:13:3b:aa: e4:16:9d:2a:81:49:3e:03:de:39:69:34:e3:76:dc:e1:de:b5: 17:cc:d4:72:57:72:6f:b9:14:b7:b3:64:6a:77:1e:02:d3:b8: 77:39:19:12:de:56:f1:0e:53:30:54:35:6a:da:29:e2:8a:0a: b6:9e:36:08:c2:1b:da:29:24:94:e8:67:da:a4:1a:91:49:e5: 82:ee:f8:3f:9f:29:b4:bd:71:f4:14:06:c9:dd:5c:27:8c:e9: a3:78:d7:24:a1:6b:26:cc:e2:f2:ce:8e:de:e2:6f:3f:97:c0: d9:c4:a5:00:af:9b:b5:68:17:0f:c6:41:11:c6:45:99:f1:d7: 57:0c:df:45:19:a5:53:20:b4:4f:38:27:b8:ae:7e:04:96:c4: 63:1c:ef:fd:8e:76:d4:8c:87:24:09:a0:55:fb:8b:ba:3a:47: e5:a1:70:e8:ab:03:85:47:94:88:1c:d4:a8:4d:57:4f:07:04: 3a:89:f6:8b:37:a1:4f:7f:a2:5b:b8:b0:fa:d5:8e:2d:93:59: ed:9d:7b:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe20r05sYaVRl+SXBIy567PAe6/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjA3MjEwODUzMzNaFw0yNjA3MjIwOTE3MzNaMDMxMTAvBgNV BAMTKDI4MjMxNDhDRTFFQURBNkQ3OEJFMTdBRUY4ODM0NDJEODZENkEwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa2FpdFRA/WadmZ9FWL4LQNxl +JNxAxAe+GwvY3/B7QPoVunelfvxJV4Lzbwxl0YXoPfJSzm0hRrucKVI1d6RGwAk pGRLtkGYIVzochfX3pLPqNT5/ZtZHAFAdSOzmoLvgepzkqqrA5EUN/+eF2kPgZBu jRBPUBdGiwBE60458iPgb0d+ZFl4J3n/9YuGyUlUBXHkCREznZsTPsyWWHK6Z8eJ SJT/qxqwSGeFwmRQnTtfYVvI5OZk6Qqt7QzjQKFHZXbsFJQUveJpTMb88r4pvEKm 8lm77yfqnj4g/MZMUMIAETZYVqd/GAsbMzqsT8S1iF00XaKW2mA5iEaZru3rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKCMUjOHq2m14vheu+INELYbWoL4wHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByJ0My Xof975nzlV4p+L9UxvQ1UyHPqG9xiaagVqIfl9B6BdArnfd0DZwOmy69UgVHmHcT O6rkFp0qgUk+A945aTTjdtzh3rUXzNRyV3JvuRS3s2Rqdx4C07h3ORkS3lbxDlMw VDVq2iniigq2njYIwhvaKSSU6GfapBqRSeWC7vg/nym0vXH0FAbJ3VwnjOmjeNck oWsmzOLyzo7e4m8/l8DZxKUAr5u1aBcPxkERxkWZ8ddXDN9FGaVTILRPOCe4rn4E lsRjHO/9jnbUjIckCaBV+4u6OkfloXDoqwOFR5SIHNSoTVdPBwQ6ifaLN6FPf6Jb uLD61Y4tk1ntnXtD -----END CERTIFICATE-----Generated at Tue Jul 21 22:16:57 2026 by rpki-client