$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: H7fVspPPh2Tzh+Y5rSZcOAT42fxdzx25W5/+qk3kfiE= Subject key identifier: D2:1F:C9:B6:15:38:67:3A:DB:CA:B3:DA:19:FD:A8:BC:55:A3:DA:62 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 1CFA1BCEEE7C883A6CB9BEE01E9371F1BA7C9B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 07A8 Signing time: Mon 20 Jul 2026 21:14:54 +0000 Manifest this update: Mon 20 Jul 2026 21:09:54 +0000 Manifest next update: Tue 21 Jul 2026 22:11:54 +0000 Files and hashes: 1: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=) 2: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=) 3: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=) 4: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=) 5: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (hash: AEIp6S70Gj6QR1Z2+hxR6CJde/WoBwWvkBWWBSrENhA=) 6: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=) 7: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=) 8: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=) 9: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=) 10: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: Fjiyu2rMBqtfygMSzifX/BiwPaSbUbZrIua74qINddU=) 11: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=) 12: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=) 13: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=) 14: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=) 15: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=) 16: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=) 17: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: gmWH6xBqv6iHkSUEaOI6mVn4z54Nuz/S3PczBQJukcU=) 18: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=) 19: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=) 20: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=) 21: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=) 22: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=) 23: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=) 24: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=) 25: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=) 26: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=) 27: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=) 28: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=) 29: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=) 30: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=) 31: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 22:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fa:1b:ce:ee:7c:88:3a:6c:b9:be:e0:1e:93:71:f1:ba:7c:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Jul 20 21:09:54 2026 GMT Not After : Jul 21 22:11:54 2026 GMT Subject: CN=D21FC9B61538673ADBCAB3DA19FDA8BC55A3DA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:3e:0d:4e:a5:dc:f1:1d:69:1f:62:56:c7: 73:0c:8d:c5:ef:e6:20:82:f9:f5:12:bc:b0:e8:65: c7:03:dc:0c:44:ac:99:07:47:34:e1:92:2f:50:4c: 23:7c:69:6c:08:dd:10:fc:9f:0d:88:ff:fd:9c:88: 99:1f:04:eb:6d:91:c4:77:89:1a:c0:e4:1e:f5:b7: db:e0:c8:34:f4:f5:1c:ed:b0:e9:66:35:8f:a3:36: 2f:f9:33:e6:f8:57:18:db:1d:79:8b:d7:47:77:06: 3f:31:d4:66:ac:2b:5e:64:17:55:d4:0d:cf:88:3e: 37:50:c9:aa:c8:20:bd:ff:06:ba:1a:4f:2c:7a:56: 4f:f1:c7:6d:87:79:15:cd:13:5e:ff:64:95:4c:ee: da:97:16:97:68:53:52:c6:e9:b4:3d:27:a0:b3:11: 42:ba:85:20:5c:36:9a:c1:ec:17:a7:19:63:af:4e: 10:28:b5:85:3d:92:20:a4:dc:e9:89:20:1d:7a:9d: 68:6c:58:bd:a3:d2:6f:48:b8:8c:b5:7b:03:ed:89: 35:fb:34:74:95:ca:ff:a7:fc:0c:a8:03:ec:60:83: 38:a2:be:02:5f:3a:50:35:d9:29:21:05:14:8e:94: bd:bd:92:29:8a:62:aa:ba:8c:72:7d:c8:7a:2d:f4: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:C9:B6:15:38:67:3A:DB:CA:B3:DA:19:FD:A8:BC:55:A3:DA:62 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a1:a4:7b:c0:48:60:68:9d:e4:9e:35:96:96:b1:3c:62:89: 25:c7:7f:d6:fc:05:59:47:45:d5:34:37:db:01:6a:94:6f:5c: 51:db:df:9f:ae:6d:bc:9b:d3:8c:b1:a4:9c:f8:9f:08:56:af: 8b:23:a5:8d:d7:ad:d3:79:76:fa:6d:5e:b7:1c:b1:bd:fa:5a: c7:10:28:ec:93:f6:e8:b8:6f:64:95:50:b2:79:69:10:26:22: 3d:0f:54:93:9e:bc:bd:29:f2:99:31:9a:46:bf:36:47:dd:a1: 6d:17:09:42:ff:d9:68:a0:b2:27:6d:d8:c6:4e:7b:c9:00:ab: 60:d4:b9:2b:eb:00:9b:49:2e:1d:29:f9:b0:e1:03:c5:66:8e: f3:51:df:cd:07:c8:63:ab:33:ac:7f:5c:c2:48:ea:06:07:c2: f1:1e:91:b7:a2:c1:76:df:9d:80:b9:fe:b2:c5:80:ac:09:53: b2:a5:71:0a:bb:d4:10:c1:93:f6:d1:88:2e:62:18:14:9c:5c: d2:41:b8:75:10:db:c5:ce:d4:65:77:b6:9e:3d:0d:16:0b:c5: 6e:93:b5:0d:54:c8:79:09:ab:94:a9:6c:9f:93:7d:0a:44:0f: f8:b0:80:01:ba:87:d9:83:3d:11:d8:e0:f4:59:e2:0d:df:8c: 2d:87:6c:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHPobzu58iDpsub7gHpNx8bp8m20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjA3MjAyMTA5NTRaFw0yNjA3MjEyMjExNTRaMDMxMTAvBgNV BAMTKEQyMUZDOUI2MTUzODY3M0FEQkNBQjNEQTE5RkRBOEJDNTVBM0RBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCQz4NTqXc8R1pH2JWx3MMjcXv 5iCC+fUSvLDoZccD3AxErJkHRzThki9QTCN8aWwI3RD8nw2I//2ciJkfBOttkcR3 iRrA5B71t9vgyDT09RztsOlmNY+jNi/5M+b4VxjbHXmL10d3Bj8x1GasK15kF1XU Dc+IPjdQyarIIL3/BroaTyx6Vk/xx22HeRXNE17/ZJVM7tqXFpdoU1LG6bQ9J6Cz EUK6hSBcNprB7BenGWOvThAotYU9kiCk3OmJIB16nWhsWL2j0m9IuIy1ewPtiTX7 NHSVyv+n/AyoA+xggziivgJfOlA12SkhBRSOlL29kimKYqq6jHJ9yHot9J1TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0h/JthU4ZzrbyrPaGf2ovFWj2mIwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqGke8BIYGid5J41lpax PGKJJcd/1vwFWUdF1TQ32wFqlG9cUdvfn65tvJvTjLGknPifCFaviyOljdet03l2 +m1etxyxvfpaxxAo7JP26LhvZJVQsnlpECYiPQ9Uk568vSnymTGaRr82R92hbRcJ Qv/ZaKCyJ23Yxk57yQCrYNS5K+sAm0kuHSn5sOEDxWaO81HfzQfIY6szrH9cwkjq BgfC8R6Rt6LBdt+dgLn+ssWArAlTsqVxCrvUEMGT9tGILmIYFJxc0kG4dRDbxc7U ZXe2nj0NFgvFbpO1DVTIeQmrlKlsn5N9CkQP+LCAAbqH2YM9Edjg9FniDd+MLYds Dw== -----END CERTIFICATE-----Generated at Tue Jul 21 10:09:31 2026 by rpki-client