$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: w9uPlza5RrEy1X1JBIxoXPvyVlF6FXb4YdWy9RCSS5Q= Subject key identifier: 5F:28:AF:03:25:12:DA:4A:F0:29:37:5D:4E:34:CD:A3:F3:89:C6:E0 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 35750EE38B71D20683F7C19B5C007BE7D7A1F917 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 01D0 Signing time: Sun 26 Jul 2026 08:17:02 +0000 Manifest this update: Sun 26 Jul 2026 08:12:02 +0000 Manifest next update: Mon 27 Jul 2026 09:10:02 +0000 Files and hashes: 1: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 2: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 4: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: o5V+amixXvEYoZzTMmpMfA1U/+BWT03GYz8mztDGRLQ=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 6: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 7: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 8: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 09:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:75:0e:e3:8b:71:d2:06:83:f7:c1:9b:5c:00:7b:e7:d7:a1:f9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jul 26 08:12:02 2026 GMT Not After : Jul 27 09:10:02 2026 GMT Subject: CN=5F28AF032512DA4AF029375D4E34CDA3F389C6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:2d:79:c9:e5:cc:c3:f4:44:a6:14:2f:46: 5f:b5:e5:c7:20:70:92:c6:f6:59:cf:c3:85:4c:8c: c5:9f:59:67:1e:9a:a8:d8:4c:26:e5:4a:87:b6:61: df:1d:b0:37:a0:8f:fe:04:9d:f6:8b:e1:20:d6:4d: 77:ce:e7:a4:3f:8e:6b:ad:bd:72:ce:7d:7e:33:77: b1:b9:f6:d3:5e:48:cd:3d:db:d4:7b:68:a5:81:ff: bc:06:fb:f5:50:95:b1:8a:e0:53:b3:74:16:14:0d: 0f:eb:11:00:b2:69:31:ee:a7:ec:71:8a:ac:0f:40: e1:f6:2f:ed:59:83:f8:dc:d9:c1:4e:1d:fa:96:8d: 52:26:ad:b6:c6:82:8b:d0:e0:66:3b:cd:3c:3b:d3: 1c:cf:b9:71:ad:e5:b1:6f:b7:a9:cc:72:57:39:9c: cf:ab:7e:06:7e:bf:61:fa:b2:4f:19:a7:4d:9f:29: ce:4d:6d:d2:04:4d:dd:0e:46:41:5d:d4:f3:e8:b6: b1:97:8b:1a:e5:b2:6b:84:3d:ce:f4:86:e7:d4:a9: 1d:0c:76:98:df:31:f4:db:97:6d:b1:74:44:23:be: f2:7d:96:15:63:f5:df:f8:01:63:ae:2c:36:5e:ef: 95:93:d6:15:64:2f:7a:5f:0c:fc:43:06:82:a6:cb: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:AF:03:25:12:DA:4A:F0:29:37:5D:4E:34:CD:A3:F3:89:C6:E0 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:10:47:b2:00:11:5e:e8:1a:2a:df:17:61:0d:3c:2a:b9:39: 61:15:4f:70:fc:12:83:78:16:4f:82:03:5d:99:a5:f1:7c:c6: 27:e8:dc:a6:27:84:5f:ce:89:54:4a:cd:93:f2:1d:a5:a5:f2: 8f:17:aa:c4:75:96:07:37:ee:db:4e:23:31:6a:2e:63:98:a8: ac:66:e4:72:14:ee:98:97:9b:1f:a6:45:d2:b9:6b:7e:1a:9d: 0c:5d:e3:85:a4:b8:21:b5:14:5b:11:89:01:e8:c4:42:d9:3e: 58:1f:40:21:27:ee:45:4c:d1:ff:58:0a:80:83:42:87:b8:07: ef:bd:73:88:37:ef:cf:81:79:27:a8:54:88:4f:2d:2a:f5:a4: dd:b5:af:3f:f6:0b:12:43:a9:4d:3b:c6:fb:8f:3e:9b:f3:22: 03:8a:03:47:f0:6d:07:7b:9f:06:ce:24:1e:6a:ff:da:f4:51: 01:59:cb:ce:48:1a:94:ee:c0:24:6d:e9:50:d5:29:13:97:37: 66:d8:30:1f:ab:af:21:f4:f5:33:08:88:38:30:b9:5e:56:e0: 26:a0:2c:8e:7d:b9:b3:fb:b3:0e:ef:a8:73:42:a1:2f:cf:2b: 25:a5:e7:97:60:7a:16:75:95:c5:87:9d:02:97:3b:3f:51:6e: 91:21:73:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNXUO44tx0gaD98GbXAB759eh+RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA3MjYwODEyMDJaFw0yNjA3MjcwOTEwMDJaMDMxMTAvBgNV BAMTKDVGMjhBRjAzMjUxMkRBNEFGMDI5Mzc1RDRFMzRDREEzRjM4OUM2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuS15yeXMw/REphQvRl+15ccg cJLG9lnPw4VMjMWfWWcemqjYTCblSoe2Yd8dsDegj/4EnfaL4SDWTXfO56Q/jmut vXLOfX4zd7G59tNeSM0929R7aKWB/7wG+/VQlbGK4FOzdBYUDQ/rEQCyaTHup+xx iqwPQOH2L+1Zg/jc2cFOHfqWjVImrbbGgovQ4GY7zTw70xzPuXGt5bFvt6nMclc5 nM+rfgZ+v2H6sk8Zp02fKc5NbdIETd0ORkFd1PPotrGXixrlsmuEPc70hufUqR0M dpjfMfTbl22xdEQjvvJ9lhVj9d/4AWOuLDZe75WT1hVkL3pfDPxDBoKmy1ZLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXyivAyUS2krwKTddTjTNo/OJxuAwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeEEey ABFe6Boq3xdhDTwquTlhFU9w/BKDeBZPggNdmaXxfMYn6NymJ4RfzolUSs2T8h2l pfKPF6rEdZYHN+7bTiMxai5jmKisZuRyFO6Yl5sfpkXSuWt+Gp0MXeOFpLghtRRb EYkB6MRC2T5YH0AhJ+5FTNH/WAqAg0KHuAfvvXOIN+/PgXknqFSITy0q9aTdta8/ 9gsSQ6lNO8b7jz6b8yIDigNH8G0He58GziQeav/a9FEBWcvOSBqU7sAkbelQ1SkT lzdm2DAfq68h9PUzCIg4MLleVuAmoCyOfbmz+7MO76hzQqEvzyslpeeXYHoWdZXF h50Clzs/UW6RIXME -----END CERTIFICATE-----Generated at Mon Jul 27 00:54:05 2026 by rpki-client