$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: mmgN6f+lt5ZKfcTxM2T2J3h3NwdCwEulQuG+kVVTjKQ= Subject key identifier: 22:18:63:96:07:47:B1:32:95:41:16:EB:61:B3:0C:24:55:C2:71:7D Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 60CBC802B14B44F4BB4B37C1CA81D2BE03EF3759 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 0168 Signing time: Fri 10 Jul 2026 09:53:14 +0000 Manifest this update: Fri 10 Jul 2026 09:48:14 +0000 Manifest next update: Sat 11 Jul 2026 13:34:14 +0000 Files and hashes: 1: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=) 2: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) 3: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=) 4: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=) 5: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: RsLkhVybGhgTZV4qd4MFr5SwkGT0+Hx497+Zt8154bA=) 6: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cb:c8:02:b1:4b:44:f4:bb:4b:37:c1:ca:81:d2:be:03:ef:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Jul 10 09:48:14 2026 GMT Not After : Jul 11 13:34:14 2026 GMT Subject: CN=221863960747B132954116EB61B30C2455C2717D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:1f:ac:a3:cb:ea:1c:7c:ab:cc:e4:46:36: bf:7b:7c:c2:60:6a:a5:a9:ef:52:28:de:bb:08:88: fa:32:fd:bf:de:25:88:e4:71:1d:34:4f:b0:9d:1c: 19:e8:99:f0:b1:67:94:c0:d4:77:cc:43:45:44:9b: be:18:ed:3e:2e:a1:f9:50:26:9b:c2:02:02:69:57: 56:f6:c4:64:93:12:aa:33:2c:f4:64:99:11:33:1e: c1:88:f5:fa:97:6f:9f:1e:cf:e1:f7:27:40:50:ff: cc:f5:1a:3d:c5:57:f6:38:58:9d:9e:79:ac:b8:56: 5b:bf:1c:d1:3c:9f:b5:ae:d8:d6:ef:6f:d2:90:f0: 03:66:15:92:34:44:9b:6c:bc:50:42:69:a7:f3:43: be:22:e4:3f:48:b7:78:91:9a:9e:5d:0b:98:d5:ac: 4d:8a:48:dc:b4:cc:5d:31:07:fc:7e:0f:87:d8:e5: 7f:f1:be:c0:45:a8:8b:01:79:f1:45:e2:b9:b4:a8: b1:3c:11:7f:0d:f9:5c:83:86:15:30:31:04:6c:8b: b4:ea:b4:c1:b0:b2:dc:60:f4:ba:0b:cf:77:4a:e4: 11:b8:20:c7:ec:99:d8:b8:b2:e1:92:6d:cc:d6:c1: fe:ff:81:3c:30:59:0e:50:fc:a0:75:e9:bd:03:ff: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:18:63:96:07:47:B1:32:95:41:16:EB:61:B3:0C:24:55:C2:71:7D X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:45:fb:2d:14:9d:d2:be:27:72:b7:84:b3:60:22:55:ac:69: 49:c0:65:b3:59:50:86:b8:e1:6d:69:96:12:71:a2:1a:13:9e: 3b:3b:14:5f:df:93:89:13:20:b2:4c:16:f0:8f:9f:a0:e7:a4: 87:7a:a1:9d:d2:9d:0f:f1:ee:0a:6f:bb:4a:f8:89:0a:47:7c: 54:d1:ca:e4:00:30:9f:79:68:1b:47:4a:41:19:a4:dc:16:e3: a3:55:03:81:a0:95:9c:bb:39:79:3e:16:74:5e:b4:4d:6f:36: 65:67:d7:d2:bd:54:96:d0:fe:b1:e0:d5:a0:a9:7f:6b:d0:88: 95:84:4d:09:ba:d5:69:c3:af:1c:0c:29:41:6c:88:60:bd:52: a7:70:33:44:64:63:8d:3e:97:18:10:00:be:58:2f:08:c6:10: d8:53:f4:b2:95:20:d5:e2:97:5d:3e:c0:05:03:8e:65:8b:7f: 8c:95:5f:dc:fa:dc:42:de:dd:f1:59:c2:cb:d7:04:b8:d8:17: e2:a7:aa:20:29:64:68:53:7c:ca:82:d4:ec:b7:88:ce:a7:f7: 84:63:91:5e:bd:34:92:89:f6:46:61:4d:44:6e:ec:37:4d:05: 37:03:d2:a2:43:8e:b8:89:c5:d9:2a:76:e8:62:36:0f:28:04: ff:a1:6e:03 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYMvIArFLRPS7SzfByoHSvgPvN1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNjA3MTAwOTQ4MTRaFw0yNjA3MTExMzM0MTRaMDMxMTAvBgNV BAMTKDIyMTg2Mzk2MDc0N0IxMzI5NTQxMTZFQjYxQjMwQzI0NTVDMjcxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljx+so8vqHHyrzORGNr97fMJg aqWp71Io3rsIiPoy/b/eJYjkcR00T7CdHBnomfCxZ5TA1HfMQ0VEm74Y7T4uoflQ JpvCAgJpV1b2xGSTEqozLPRkmREzHsGI9fqXb58ez+H3J0BQ/8z1Gj3FV/Y4WJ2e eay4Vlu/HNE8n7Wu2Nbvb9KQ8ANmFZI0RJtsvFBCaafzQ74i5D9It3iRmp5dC5jV rE2KSNy0zF0xB/x+D4fY5X/xvsBFqIsBefFF4rm0qLE8EX8N+VyDhhUwMQRsi7Tq tMGwstxg9LoLz3dK5BG4IMfsmdi4suGSbczWwf7/gTwwWQ5Q/KB16b0D/z5dAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUIhhjlgdHsTKVQRbrYbMMJFXCcX0wHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskX7LRSd0r4ncreEs2Ai VaxpScBls1lQhrjhbWmWEnGiGhOeOzsUX9+TiRMgskwW8I+foOekh3qhndKdD/Hu Cm+7SviJCkd8VNHK5AAwn3loG0dKQRmk3Bbjo1UDgaCVnLs5eT4WdF60TW82ZWfX 0r1UltD+seDVoKl/a9CIlYRNCbrVacOvHAwpQWyIYL1Sp3AzRGRjjT6XGBAAvlgv CMYQ2FP0spUg1eKXXT7ABQOOZYt/jJVf3PrcQt7d8VnCy9cEuNgX4qeqIClkaFN8 yoLU7LeIzqf3hGORXr00kon2RmFNRG7sN00FNwPSokOOuInF2Sp26GI2DygE/6Fu Aw== -----END CERTIFICATE-----Generated at Fri Jul 10 15:13:26 2026 by rpki-client