$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 6Ww3DaJlpn5jL740fL8eruHSY35C793Odi/mrO1L/mE= Subject key identifier: 08:0D:8D:5C:4E:F1:7B:A7:65:B9:9D:6C:F3:FB:9A:2E:11:7D:1E:5B Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 48D716AE43B5055CD4BB7D75872246314E3DC437 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0319 Signing time: Wed 15 Jul 2026 09:16:47 +0000 Manifest this update: Wed 15 Jul 2026 09:11:47 +0000 Manifest next update: Thu 16 Jul 2026 22:19:47 +0000 Files and hashes: 1: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 2: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 3: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 4: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: fVQBqE5sydcbu0c8XLZUWC7DMMQSyHLOASkIVvbRIpQ=) 5: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 6: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Jul 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d7:16:ae:43:b5:05:5c:d4:bb:7d:75:87:22:46:31:4e:3d:c4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jul 15 09:11:47 2026 GMT Not After : Jul 16 22:19:47 2026 GMT Subject: CN=080D8D5C4EF17BA765B99D6CF3FB9A2E117D1E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:cb:e5:8c:fc:a3:2b:ab:32:d6:5f:6c:28: 6f:48:4c:ef:d8:38:2e:eb:75:6f:b8:73:ce:0d:18: 3f:e5:6c:a1:59:e3:78:e5:be:00:b8:3f:83:f3:dd: ac:e4:d4:90:12:5b:38:1b:1e:f7:f9:6f:82:c8:74: 73:1f:87:52:07:8c:a7:22:23:da:0f:45:81:44:94: d2:a8:9d:56:f9:61:a9:95:ca:09:02:9b:bb:d0:19: 61:23:7f:f9:5b:7b:fa:4f:b4:8c:d5:99:1c:cf:4a: 14:74:4f:4d:5f:18:88:9b:ec:9d:f8:00:c9:c5:7e: c0:11:0b:32:9b:17:66:1a:51:f4:b0:e4:8d:bc:07: 0a:aa:cc:d7:0e:88:36:05:a2:4c:db:e1:d4:3c:1d: a3:76:c1:e6:ea:fc:b8:c5:1a:d2:86:da:1c:61:11: c8:71:ab:46:c7:d5:f9:60:d6:e8:20:57:2e:62:d7: b2:2b:36:fb:6f:d2:0b:ab:86:90:1b:38:13:61:0a: 47:04:6c:b7:10:ab:53:1f:32:d3:7e:67:2e:d2:c0: dd:a4:7d:de:da:75:9d:75:fe:da:19:68:d4:f8:e6: 1a:7a:82:80:e9:5a:59:be:da:d2:51:79:fe:a5:74: b7:68:d3:e1:11:2f:57:03:aa:de:7c:98:10:3a:b3: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:8D:5C:4E:F1:7B:A7:65:B9:9D:6C:F3:FB:9A:2E:11:7D:1E:5B X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:68:79:54:fc:8e:f0:1f:0b:0f:1f:6a:fa:13:8f:c7:9c: 2a:c2:2a:7d:6e:08:90:fa:bc:1c:b3:6e:1a:c7:0e:be:8b:5e: d9:cb:b8:88:9a:85:c8:82:e4:7b:20:5a:17:44:7d:90:70:cb: e5:81:bb:c7:ee:d5:e1:78:30:6a:e9:e0:d8:b8:3f:ab:1a:a3: 91:3d:23:41:df:45:40:fe:9a:28:2a:8d:a2:87:01:88:56:14: 1f:36:2f:70:b1:de:8f:c5:a8:de:4b:e7:da:14:54:bf:dd:8a: 10:8a:7f:25:92:f9:ea:fd:00:76:36:45:0b:97:3f:58:ae:17: 6e:d2:1d:f9:4b:eb:76:d4:d6:47:5e:8a:96:33:bd:16:5b:f1: eb:7d:33:38:49:f0:9a:c4:50:68:06:d7:fa:08:1e:2c:77:f7: 4a:7f:c7:e4:b0:b2:17:d3:45:bc:f7:e2:68:56:d5:18:b0:1b: 7c:35:4a:60:01:16:9b:29:20:19:42:cf:c8:b2:07:07:fc:9c: 52:9e:8d:a7:ab:4d:f3:39:57:6b:39:bd:b9:27:ac:81:26:41: d6:44:d8:a5:76:57:29:62:23:52:06:a0:a3:16:10:72:d1:c2: fc:29:0d:e0:8c:4f:f2:10:45:c7:37:2d:65:77:33:2b:56:57: e2:35:f3:75 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSNcWrkO1BVzUu311hyJGMU49xDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA3MTUwOTExNDdaFw0yNjA3MTYyMjE5NDdaMDMxMTAvBgNV BAMTKDA4MEQ4RDVDNEVGMTdCQTc2NUI5OUQ2Q0YzRkI5QTJFMTE3RDFFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijsvljPyjK6sy1l9sKG9ITO/Y OC7rdW+4c84NGD/lbKFZ43jlvgC4P4Pz3azk1JASWzgbHvf5b4LIdHMfh1IHjKci I9oPRYFElNKonVb5YamVygkCm7vQGWEjf/lbe/pPtIzVmRzPShR0T01fGIib7J34 AMnFfsARCzKbF2YaUfSw5I28BwqqzNcOiDYFokzb4dQ8HaN2webq/LjFGtKG2hxh Echxq0bH1flg1uggVy5i17IrNvtv0gurhpAbOBNhCkcEbLcQq1MfMtN+Zy7SwN2k fd7adZ11/toZaNT45hp6goDpWlm+2tJRef6ldLdo0+ERL1cDqt58mBA6szHXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUCA2NXE7xe6dluZ1s8/uaLhF9HlswHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDNoeVT8jvAfCw8favoT j8ecKsIqfW4IkPq8HLNuGscOvote2cu4iJqFyILkeyBaF0R9kHDL5YG7x+7V4Xgw aung2Lg/qxqjkT0jQd9FQP6aKCqNoocBiFYUHzYvcLHej8Wo3kvn2hRUv92KEIp/ JZL56v0AdjZFC5c/WK4XbtId+UvrdtTWR16KljO9Flvx630zOEnwmsRQaAbX+gge LHf3Sn/H5LCyF9NFvPfiaFbVGLAbfDVKYAEWmykgGULPyLIHB/ycUp6Np6tN8zlX azm9uSesgSZB1kTYpXZXKWIjUgagoxYQctHC/CkN4IxP8hBFxzctZXczK1ZX4jXz dQ== -----END CERTIFICATE-----Generated at Wed Jul 15 14:30:58 2026 by rpki-client