$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: g5pOiDXP+o/wsCCMjAq8mJcM0cAJb+o62PUDKhFa+EE= Subject key identifier: 46:F7:7E:A1:EE:AC:42:2D:F9:69:1C:CD:67:DA:69:8D:A8:40:C4:71 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 287F7D863D302488721D458FE38E76477D1C00D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: F4 Signing time: Tue 21 Jul 2026 07:12:35 +0000 Manifest this update: Tue 21 Jul 2026 07:07:35 +0000 Manifest next update: Wed 22 Jul 2026 09:32:35 +0000 Files and hashes: 1: 326131343a373538303a6163613a3a2f34382d3438203d3e203438323636.roa (hash: m0JZIjGPbuRcNff74X1PNepaT8iUZ69LeXHnRPJt/AQ=) 2: 326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (hash: GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=) 3: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: 8+sFKnwsT89h19oYgv0Kk9nuxqlzUd3P3YkbIEKl10c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 09:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:7d:86:3d:30:24:88:72:1d:45:8f:e3:8e:76:47:7d:1c:00:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Jul 21 07:07:35 2026 GMT Not After : Jul 22 09:32:35 2026 GMT Subject: CN=46F77EA1EEAC422DF9691CCD67DA698DA840C471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:08:25:69:ee:82:18:62:c3:25:31:ab:ac: 38:ce:5a:9d:88:8b:47:95:f6:48:03:fc:2d:31:30: 3e:f5:28:7c:05:62:0b:4c:c8:9c:87:a0:f0:4f:cd: 20:07:1e:4b:3b:15:4d:aa:a0:75:9f:73:8b:41:4d: 2b:6d:1e:bd:da:07:7b:e5:ea:b2:03:00:33:3b:6b: 98:70:d0:eb:17:4b:a8:04:6e:81:0d:39:eb:1b:e3: bd:f8:d2:6c:31:51:ec:c6:47:25:96:82:58:44:03: e8:17:1c:1e:97:00:38:35:a4:29:93:f3:ac:2d:58: 3e:77:83:94:d0:01:52:84:91:9a:90:04:a5:71:08: 7c:22:93:85:2a:0a:4d:0a:bb:78:7e:13:4f:70:0a: c1:98:b3:0a:b7:82:03:d2:38:e1:3d:eb:95:6a:c9: 5f:02:4b:52:27:3f:7c:ed:66:db:65:bc:7e:66:de: f7:f4:c0:09:c1:84:11:6b:6b:28:95:2a:a0:76:34: 51:b3:5d:e0:92:67:60:8b:03:4f:af:d7:28:49:9b: dd:67:73:b3:45:bb:b7:52:9e:2e:dc:66:a4:70:a5: 79:f0:4f:b5:9e:9a:32:a5:71:cc:88:b4:33:e5:e2: 2d:17:3c:aa:74:5d:1c:05:a9:a0:42:01:69:29:2a: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F7:7E:A1:EE:AC:42:2D:F9:69:1C:CD:67:DA:69:8D:A8:40:C4:71 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:51:4b:43:e7:30:5b:48:08:dd:eb:ab:7d:19:d2:5c:18:84: c9:0e:6d:5d:fc:24:2b:d8:ab:ca:b1:be:21:91:de:7b:a6:dc: ad:35:fd:a3:c0:b4:2f:3b:87:9b:95:40:d9:1b:4a:0d:e5:22: e4:de:47:2c:6b:45:25:ca:67:aa:99:05:ee:f1:eb:05:17:5b: 81:01:c9:6c:42:41:5e:88:2d:e3:e1:39:97:82:0c:4d:db:5f: bd:41:aa:1d:bf:33:70:37:b4:e5:1d:92:41:41:1c:a8:52:7b: f3:ca:64:32:e0:e0:33:fa:29:fe:e1:71:64:e1:1e:d5:2e:23: 88:b0:25:c4:01:35:21:aa:18:90:44:02:d7:c1:57:05:67:8e: 16:ca:f7:f9:70:e6:eb:d3:f2:bc:56:f4:ce:7c:6e:b1:10:8f: 01:40:b1:e9:71:3c:19:df:ae:28:5e:63:37:ff:af:d7:89:d2: 16:52:a2:b1:3d:5b:e2:0b:ba:9e:e7:40:da:4d:4a:ca:ee:c4: bc:fa:f6:96:fb:50:b9:8a:b0:95:3a:04:c4:86:2a:61:09:b4: f1:19:74:25:42:3c:89:bf:48:23:fc:95:b7:bc:cc:4d:68:14: a5:1e:e2:fe:5b:1f:e6:41:27:0f:c9:b0:75:f0:a9:fe:a2:99: ff:be:94:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKH99hj0wJIhyHUWP4452R30cANYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNjA3MjEwNzA3MzVaFw0yNjA3MjIwOTMyMzVaMDMxMTAvBgNV BAMTKDQ2Rjc3RUExRUVBQzQyMkRGOTY5MUNDRDY3REE2OThEQTg0MEM0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqAglae6CGGLDJTGrrDjOWp2I i0eV9kgD/C0xMD71KHwFYgtMyJyHoPBPzSAHHks7FU2qoHWfc4tBTSttHr3aB3vl 6rIDADM7a5hw0OsXS6gEboENOesb47340mwxUezGRyWWglhEA+gXHB6XADg1pCmT 86wtWD53g5TQAVKEkZqQBKVxCHwik4UqCk0Ku3h+E09wCsGYswq3ggPSOOE965Vq yV8CS1InP3ztZttlvH5m3vf0wAnBhBFrayiVKqB2NFGzXeCSZ2CLA0+v1yhJm91n c7NFu7dSni7cZqRwpXnwT7WemjKlccyItDPl4i0XPKp0XRwFqaBCAWkpKoavAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURvd+oe6sQi35aRzNZ9ppjahAxHEwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmUUtD 5zBbSAjd66t9GdJcGITJDm1d/CQr2KvKsb4hkd57ptytNf2jwLQvO4eblUDZG0oN 5SLk3kcsa0UlymeqmQXu8esFF1uBAclsQkFeiC3j4TmXggxN21+9QaodvzNwN7Tl HZJBQRyoUnvzymQy4OAz+in+4XFk4R7VLiOIsCXEATUhqhiQRALXwVcFZ44Wyvf5 cObr0/K8VvTOfG6xEI8BQLHpcTwZ364oXmM3/6/XidIWUqKxPVviC7qe50DaTUrK 7sS8+vaW+1C5irCVOgTEhiphCbTxGXQlQjyJv0gj/JW3vMxNaBSlHuL+Wx/mQScP ybB18Kn+opn/vpSp -----END CERTIFICATE-----Generated at Tue Jul 21 17:49:36 2026 by rpki-client