$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: RgDD1oOZH/GV+jpTtmIi+19f4G/uekLAjxgBNgUuuKw= Subject key identifier: 59:65:BC:7F:CD:BA:9A:B2:CD:97:4C:B0:59:BE:2B:38:B8:10:B8:4D Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 52CDC58ED50D3B77FA348CEF7E52E6FD8C13C589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: F3 Signing time: Thu 27 Aug 2026 06:13:18 +0000 Manifest this update: Thu 27 Aug 2026 06:08:18 +0000 Manifest next update: Fri 28 Aug 2026 09:11:18 +0000 Files and hashes: 1: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (hash: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=) 2: 3137362e3130322e3137322e302f32342d3234203d3e20383334.roa (hash: lR0P/b2pLESvfEtW69Jl1aeQ0nMgaZVWJylK7oc6PxU=) 3: 3137362e3130322e3136392e302f32342d3234203d3e20383334.roa (hash: KZeFH81st2m7rRCumIHME3dUWKCFFCU3aaL567av+I0=) 4: 3137362e3130322e3137352e302f32342d3234203d3e20343031373736.roa (hash: mLkML/nX8BEbBGPjQmndoRU210mLsv1F9QROUnH+NoY=) 5: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (hash: Abx0NY/FEKNB40FyZyolSPqu0J8sHxU49jbBgSLFT6U=) 6: 3137362e3130322e3137302e302f32342d3234203d3e20383334.roa (hash: /XkGMBmCDEjz/QuH3EJzE2qCHas6PIE7Hmz6n29y7II=) 7: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (hash: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=) 8: 3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa (hash: sCqFG2YhCHeDqaJvV17HVBO8NLNwKmROgfeEU+mI+Xw=) 9: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: ubBzpFUIW3CLeCirJ5BlAMk8AX/u0zL27uWc8v0Gz7E=) 10: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 11: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 12: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (hash: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=) 13: 3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa (hash: dUWRnvNQrG03cFGRKewLSEVSnqrlP2WFLU1i5zJtdMs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 09:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cd:c5:8e:d5:0d:3b:77:fa:34:8c:ef:7e:52:e6:fd:8c:13:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Aug 27 06:08:18 2026 GMT Not After : Aug 28 09:11:18 2026 GMT Subject: CN=5965BC7FCDBA9AB2CD974CB059BE2B38B810B84D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:a5:46:d8:f2:65:d2:79:e9:32:d4:cf:6a: b5:30:70:2d:7e:75:4b:2e:e7:0f:72:16:03:57:97: 47:50:5a:83:da:b4:17:c7:9c:66:89:e1:1c:a1:0c: 98:a4:31:ba:3a:7c:e3:8f:6f:3b:11:25:c6:df:ef: 84:a8:94:86:84:70:84:71:db:04:c6:46:78:b8:8b: 3e:74:6f:c4:6d:3a:9f:3d:03:1a:a8:dc:d8:bd:a0: a4:c4:8f:c6:d4:e4:da:a9:9b:f5:f2:e2:de:9a:49: 32:61:7d:ed:63:72:5b:4b:1f:5d:94:d8:6f:67:f4: 1d:9a:aa:13:f9:a3:4f:88:f8:39:51:d9:db:29:18: da:72:80:77:20:36:76:d4:f3:1c:e4:6e:5e:40:48: b3:5c:3c:43:9b:12:20:fe:fb:0b:68:99:01:e3:23: 59:ec:26:84:8a:28:b8:f3:55:47:8f:59:8a:27:c4: 20:5b:c7:8b:50:af:da:30:d2:65:58:c4:70:4d:ed: 92:1e:1f:4b:11:94:60:b5:ae:8d:32:ab:ab:41:5d: 6f:89:9a:fc:b6:fe:73:ef:cb:fa:87:22:c9:e9:5d: d9:95:13:85:2f:11:6b:1e:52:2f:8d:00:52:2e:c1: 3b:9c:e8:45:0a:ec:b2:09:af:c3:fd:6c:a3:f5:8c: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:BC:7F:CD:BA:9A:B2:CD:97:4C:B0:59:BE:2B:38:B8:10:B8:4D X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:a8:17:d4:37:51:bd:30:e0:3d:5a:34:4a:c8:14:24:ab: c9:79:10:15:8b:b3:ac:9c:93:7d:af:51:cd:8c:e1:80:10:8b: 20:a5:78:2d:11:18:a2:e0:02:38:26:3f:a8:e2:10:68:25:7a: 10:70:86:9f:bd:35:e1:7f:ae:4a:b4:fe:ed:3d:32:3f:b1:f5: 18:fe:25:a8:31:fd:49:26:6e:f0:0e:f9:ba:06:45:2a:5b:8f: c3:a6:c4:94:48:cf:bc:c9:88:02:1e:86:f5:c5:2a:fa:92:db: 2a:62:e6:40:68:5b:f7:9a:33:c4:d8:ed:eb:37:7b:7e:3d:e2: 75:7b:67:d3:30:63:69:62:38:78:03:d2:ec:b8:a3:0b:d2:d0: 04:88:48:6c:e6:b8:56:8d:ed:46:02:27:6c:00:33:4b:8d:89: cf:de:75:d1:57:8d:b1:1a:54:cf:44:ba:7b:e3:54:a1:8a:4b: 04:71:f7:da:64:7b:34:7a:a6:c8:22:cf:61:11:99:df:56:ad: 22:bc:45:2a:68:ba:d4:b0:25:1e:48:ca:62:55:02:9c:a9:d2: fc:15:af:df:f9:d9:df:25:ff:f4:a1:26:48:d9:12:93:71:7f: 90:6e:5b:c0:d0:90:aa:23:c4:b1:e9:c8:86:9d:cb:5c:30:8c: 7f:78:49:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUs3FjtUNO3f6NIzvflLm/YwTxYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA4MjcwNjA4MThaFw0yNjA4MjgwOTExMThaMDMxMTAvBgNV BAMTKDU5NjVCQzdGQ0RCQTlBQjJDRDk3NENCMDU5QkUyQjM4QjgxMEI4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCej6VG2PJl0nnpMtTParUwcC1+ dUsu5w9yFgNXl0dQWoPatBfHnGaJ4RyhDJikMbo6fOOPbzsRJcbf74SolIaEcIRx 2wTGRni4iz50b8RtOp89Axqo3Ni9oKTEj8bU5Nqpm/Xy4t6aSTJhfe1jcltLH12U 2G9n9B2aqhP5o0+I+DlR2dspGNpygHcgNnbU8xzkbl5ASLNcPEObEiD++wtomQHj I1nsJoSKKLjzVUePWYonxCBbx4tQr9ow0mVYxHBN7ZIeH0sRlGC1ro0yq6tBXW+J mvy2/nPvy/qHIsnpXdmVE4UvEWseUi+NAFIuwTuc6EUK7LIJr8P9bKP1jEAFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWWW8f826mrLNl0ywWb4rOLgQuE0wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVWoF9Q3Ub0w4D1aNErI FCSryXkQFYuzrJyTfa9RzYzhgBCLIKV4LREYouACOCY/qOIQaCV6EHCGn7014X+u SrT+7T0yP7H1GP4lqDH9SSZu8A75ugZFKluPw6bElEjPvMmIAh6G9cUq+pLbKmLm QGhb95ozxNjt6zd7fj3idXtn0zBjaWI4eAPS7LijC9LQBIhIbOa4Vo3tRgInbAAz S42Jz9510VeNsRpUz0S6e+NUoYpLBHH32mR7NHqmyCLPYRGZ31atIrxFKmi61LAl HkjKYlUCnKnS/BWv3/nZ3yX/9KEmSNkSk3F/kG5bwNCQqiPEsenIhp3LXDCMf3hJ Nw== -----END CERTIFICATE-----Generated at Thu Aug 27 20:01:33 2026 by rpki-client