$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json) Hash identifier: rijyN8u3UY1wBxTdxduCsr6MKMc+5B2bpEjHpNLHi8c= Subject key identifier: CE:FE:F8:F1:3E:34:7F:F1:93:BC:59:B2:D2:0A:67:BF:C8:F1:C3:69 Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Certificate serial: 66F4EBFC6B6C7494BFDDE3DA3BC45C04ACEF7AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft Manifest number: 87 Signing time: Fri 10 Jul 2026 11:15:30 +0000 Manifest this update: Fri 10 Jul 2026 11:10:30 +0000 Manifest next update: Sat 11 Jul 2026 13:34:30 +0000 Files and hashes: 1: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=) 2: AS213900.asa (hash: oa1Iuw8bgMTU3z7mY46RD/wvezCuUWlFzXKRiFcVWHk=) 3: 326131333a633863333a653866663a3a2f34382d313238203d3e20323133393030.roa (hash: w4ztKM2YHXn5pHZOkaCgsj+Q7c/anVV2bOT4TNgFFAQ=) 4: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: rCih+wsbC/sUlxaeZ7WQ7TBxXFWmvnqZrOCS97hmNFw=) 5: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (hash: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f4:eb:fc:6b:6c:74:94:bf:dd:e3:da:3b:c4:5c:04:ac:ef:7a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3 Validity Not Before: Jul 10 11:10:30 2026 GMT Not After : Jul 11 13:34:30 2026 GMT Subject: CN=CEFEF8F13E347FF193BC59B2D20A67BFC8F1C369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:4f:06:25:a2:73:99:e1:3c:ba:19:2f:4c: 63:b3:83:61:75:32:dd:04:21:69:55:34:d2:44:dd: 7f:e8:f1:cc:9b:e5:20:b5:96:44:d9:c2:08:1c:df: bc:3b:16:ec:a9:d1:07:67:4f:11:50:35:05:60:c4: 38:1c:19:71:e7:e4:d7:d6:d5:13:d7:e7:60:b1:70: 06:95:a4:78:41:36:7f:d3:d6:d9:40:d9:5f:91:68: 21:23:c2:5b:4b:44:f9:e2:27:f2:8a:d9:01:d7:c3: 34:f5:13:83:8c:e9:3a:c9:bd:62:ca:b9:3d:27:95: 6c:1b:95:4f:88:62:72:9c:3c:e1:31:f4:13:c2:4f: 80:1f:26:b7:41:f7:12:a5:86:9c:ce:c4:20:e3:26: 21:f7:27:1a:e8:3e:07:18:59:1c:c6:aa:4b:5c:63: b8:57:8c:1d:88:55:c7:6d:12:65:70:41:21:d7:91: ae:6b:98:6d:4b:5d:f1:02:28:9f:ce:ae:58:8f:24: c3:b7:be:23:e3:b3:91:3f:1a:1a:c0:73:34:f5:e2: 58:83:21:06:75:48:42:ed:c2:8e:f9:e0:54:4b:88: 0a:fc:c8:95:d9:92:20:84:4d:92:36:b9:e9:2e:bc: 35:da:09:4b:8d:d6:42:88:02:8c:78:18:e0:43:4c: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:F8:F1:3E:34:7F:F1:93:BC:59:B2:D2:0A:67:BF:C8:F1:C3:69 X509v3 Authority Key Identifier: keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:24:bb:b0:a9:02:89:c3:2e:d2:7c:5f:60:23:f3:e9:61:0a: 76:78:a0:cf:20:e6:3e:8b:dd:bf:9b:ef:c8:62:9d:9c:81:95: 1b:83:b6:6f:59:b4:c0:6c:c6:27:42:fa:05:91:ff:f6:8d:50: 7b:52:a8:a4:20:30:22:aa:77:6f:80:3a:00:79:ac:e8:b6:9f: 50:f6:38:5e:29:1e:ad:08:e3:74:05:0c:f1:4c:16:02:9e:b7: d0:6c:21:af:b3:95:22:3b:51:cd:56:d5:4f:45:ba:0b:ef:03: 93:01:67:d0:22:ca:c7:38:23:2f:7b:c4:c9:0b:57:58:5e:aa: de:a4:54:68:28:06:be:81:5a:a2:cd:08:e6:72:ea:fe:6c:96: 58:68:f4:93:43:dc:7d:24:91:9e:7a:9b:85:14:08:3a:a5:2a: 5c:a5:b4:f5:91:3e:d8:0f:5f:19:d3:a1:0a:e4:c8:36:26:bd: f3:12:4e:cf:6e:11:fa:02:00:d4:1a:3d:73:26:85:c6:56:c9: e5:94:e3:8b:8c:58:c8:07:f9:54:10:e0:6b:60:a9:72:81:13: ae:1a:aa:21:aa:47:18:7f:a5:aa:76:13:e6:29:f5:12:ae:39: 71:b4:4e:ef:0b:bf:f0:b6:97:b0:26:2a:61:0a:54:d8:7c:fe: c4:19:9e:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZvTr/GtsdJS/3ePaO8RcBKzvetMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm ZTVmOTFhMzAeFw0yNjA3MTAxMTEwMzBaFw0yNjA3MTExMzM0MzBaMDMxMTAvBgNV BAMTKENFRkVGOEYxM0UzNDdGRjE5M0JDNTlCMkQyMEE2N0JGQzhGMUMzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVk8GJaJzmeE8uhkvTGOzg2F1 Mt0EIWlVNNJE3X/o8cyb5SC1lkTZwggc37w7Fuyp0QdnTxFQNQVgxDgcGXHn5NfW 1RPX52CxcAaVpHhBNn/T1tlA2V+RaCEjwltLRPniJ/KK2QHXwzT1E4OM6TrJvWLK uT0nlWwblU+IYnKcPOEx9BPCT4AfJrdB9xKlhpzOxCDjJiH3JxroPgcYWRzGqktc Y7hXjB2IVcdtEmVwQSHXka5rmG1LXfECKJ/OrliPJMO3viPjs5E/GhrAczT14liD IQZ1SELtwo754FRLiAr8yJXZkiCETZI2uekuvDXaCUuN1kKIAox4GOBDTJwjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzv748T40f/GTvFmy0gpnv8jxw2kwHwYDVR0j BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1 ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCS7sKkCicMu0nxfYCPz 6WEKdnigzyDmPovdv5vvyGKdnIGVG4O2b1m0wGzGJ0L6BZH/9o1Qe1KopCAwIqp3 b4A6AHms6LafUPY4XikerQjjdAUM8UwWAp630Gwhr7OVIjtRzVbVT0W6C+8DkwFn 0CLKxzgjL3vEyQtXWF6q3qRUaCgGvoFaos0I5nLq/myWWGj0k0PcfSSRnnqbhRQI OqUqXKW09ZE+2A9fGdOhCuTINia98xJOz24R+gIA1Bo9cyaFxlbJ5ZTji4xYyAf5 VBDga2CpcoETrhqqIapHGH+lqnYT5in1Eq45cbRO7wu/8LaXsCYqYQpU2Hz+xBme EA== -----END CERTIFICATE-----Generated at Fri Jul 10 16:50:40 2026 by rpki-client