$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: /izPHPsdNuGC1lJYoSDAy05OvcjEkT2h7sxZP6FEwQo= Subject key identifier: 7E:5D:ED:C4:53:73:B8:34:FE:A6:B1:FA:66:FC:8B:44:33:6B:66:F6 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 1C1B5487490507B07055571D9335B888DF268D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 02AB Signing time: Thu 13 Aug 2026 02:48:04 +0000 Manifest this update: Thu 13 Aug 2026 02:43:04 +0000 Manifest next update: Fri 14 Aug 2026 05:54:04 +0000 Files and hashes: 1: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 2: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) 3: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) 4: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 5: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 6: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 7: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 8: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 9: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=) 10: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 2aFLtluT/SjypMQyoog0kie+LBF4549X4u960qZcmn0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 05:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1b:54:87:49:05:07:b0:70:55:57:1d:93:35:b8:88:df:26:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Aug 13 02:43:04 2026 GMT Not After : Aug 14 05:54:04 2026 GMT Subject: CN=7E5DEDC45373B834FEA6B1FA66FC8B44336B66F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:f6:59:8f:17:c7:b6:83:17:df:64:0f:9e: 5d:5f:64:dc:81:e8:d4:a4:f0:3c:2a:b4:e1:c1:f0: c8:71:bf:7b:a1:9a:46:e7:85:46:bb:f8:10:6a:e5: 0e:a7:42:f1:80:29:e9:82:a9:b6:e1:56:93:e2:53: d5:cc:b9:ac:bf:84:66:68:38:ea:da:20:41:15:2a: 0f:98:76:0a:ba:ba:c9:3e:bc:97:34:ef:5e:87:8c: 3f:70:96:06:55:7d:2b:63:39:e5:66:3e:f9:9d:4b: 73:f7:3c:d2:90:18:16:dd:44:9a:5b:ff:b9:fa:e0: 70:d2:5a:42:16:49:81:89:8c:9c:33:73:26:f1:56: 4f:72:97:f6:cb:81:d1:3e:db:60:e0:fa:4a:2d:c4: 7a:67:3a:22:e2:4a:0c:92:b7:85:0e:7a:27:9b:bc: ab:c4:b9:17:d5:4c:0f:10:3b:d3:f7:21:ad:40:59: d5:c7:41:c8:55:b7:e5:64:2b:3e:1f:d2:92:9c:eb: 2f:88:96:cd:ce:9b:11:ac:55:dc:e3:81:b3:dd:71: 79:f5:90:b7:b9:f0:bc:bb:d7:db:f3:a0:10:6e:06: 4e:88:55:ab:42:47:7b:2b:28:21:b9:d2:78:0a:1c: c7:7e:1e:e4:53:d1:9b:b1:36:83:e2:8c:17:ab:fd: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:ED:C4:53:73:B8:34:FE:A6:B1:FA:66:FC:8B:44:33:6B:66:F6 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:df:7b:94:89:bb:92:a6:fa:7e:e3:17:70:a7:0f:07:c1:c2: b9:61:57:de:3f:25:cd:90:79:16:fd:25:8c:29:31:84:eb:09: f4:24:5b:92:b3:3c:30:68:9d:aa:3f:e8:64:a2:aa:c8:f2:55: ee:fc:b4:4a:e7:90:72:45:8f:21:24:7e:9f:56:b3:9f:82:e8: ac:58:08:d6:45:89:56:88:c9:eb:d8:ca:1b:bd:87:ed:a0:58: 6d:93:5a:2b:ae:b8:0d:3e:2b:76:c3:78:09:60:42:f7:01:d0: d8:7a:20:a7:86:96:cd:de:e2:a9:8b:de:d7:ac:98:71:b4:a1: 0d:35:e0:5f:8a:f9:a3:2f:a1:02:dd:61:4c:84:3e:c8:d9:3d: f7:11:51:cc:40:7f:f3:af:c5:45:d7:b6:6a:ce:7f:73:7f:f5: f5:ae:d7:84:6e:3a:a1:62:95:7f:69:f8:14:98:78:90:60:79: 8d:b9:5f:a0:c3:31:85:92:4a:22:51:ae:6e:43:15:7c:a1:3c: c9:0b:dc:d5:52:81:04:76:fb:4c:ad:13:b9:13:b8:75:ef:5c: 58:8e:b6:c0:30:b2:e3:50:db:c5:5f:da:8d:69:d5:23:b1:88: 47:5b:64:a0:f6:15:e5:f8:ab:aa:77:89:ff:66:04:ca:7c:57: 2c:a6:b8:2f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHBtUh0kFB7BwVVcdkzW4iN8mjRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjA4MTMwMjQzMDRaFw0yNjA4MTQwNTU0MDRaMDMxMTAvBgNV BAMTKDdFNURFREM0NTM3M0I4MzRGRUE2QjFGQTY2RkM4QjQ0MzM2QjY2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3vZZjxfHtoMX32QPnl1fZNyB 6NSk8DwqtOHB8Mhxv3uhmkbnhUa7+BBq5Q6nQvGAKemCqbbhVpPiU9XMuay/hGZo OOraIEEVKg+Ydgq6usk+vJc0716HjD9wlgZVfStjOeVmPvmdS3P3PNKQGBbdRJpb /7n64HDSWkIWSYGJjJwzcybxVk9yl/bLgdE+22Dg+kotxHpnOiLiSgySt4UOeieb vKvEuRfVTA8QO9P3Ia1AWdXHQchVt+VkKz4f0pKc6y+Ils3OmxGsVdzjgbPdcXn1 kLe58Ly719vzoBBuBk6IVatCR3srKCG50ngKHMd+HuRT0ZuxNoPijBer/RmLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfl3txFNzuDT+prH6ZvyLRDNrZvYwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt97lIm7kqb6fuMXcKcP B8HCuWFX3j8lzZB5Fv0ljCkxhOsJ9CRbkrM8MGidqj/oZKKqyPJV7vy0SueQckWP ISR+n1azn4LorFgI1kWJVojJ69jKG72H7aBYbZNaK664DT4rdsN4CWBC9wHQ2Hog p4aWzd7iqYve16yYcbShDTXgX4r5oy+hAt1hTIQ+yNk99xFRzEB/86/FRde2as5/ c3/19a7XhG46oWKVf2n4FJh4kGB5jblfoMMxhZJKIlGubkMVfKE8yQvc1VKBBHb7 TK0TuRO4de9cWI62wDCy41DbxV/ajWnVI7GIR1tkoPYV5firqneJ/2YEynxXLKa4 Lw== -----END CERTIFICATE-----Generated at Thu Aug 13 13:24:11 2026 by rpki-client