$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: UyP4l4jOi/ec1/j5oB69iq4CC4ygwNZPQe7TAYgB2hM= Subject key identifier: B1:3A:3D:9C:5A:E2:D0:AD:AF:46:26:6A:CC:C7:E0:AB:7D:41:EF:3F Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 14C561CB9437365ED458F5E3A5DA49985DD4B89E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: A4 Signing time: Tue 07 Jul 2026 08:15:51 +0000 Manifest this update: Tue 07 Jul 2026 08:10:51 +0000 Manifest next update: Wed 08 Jul 2026 10:59:51 +0000 Files and hashes: 1: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=) 2: 3137362e3130322e3137302e302f32342d3234203d3e2030.roa (hash: FdEMwfxos0DWgUBXbZbZR+NBnM6pumNifWcFam4oyus=) 3: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=) 4: 39312e3233332e382e302f32342d3234203d3e20383334.roa (hash: KqURV+5I9QVm5WiEyHoQ2zXtvlhZ5/goGAL788if0uA=) 5: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: OXwd+mH+pDlA7TaxpStP468H/IK3gST3L6NIU7/K614=) 6: 3137362e3130322e3137332e302f32342d3234203d3e20383334.roa (hash: Z/nJGSE22QL9O5tVdcBp5BJ8vuIQ/nDu589KsU9W7vk=) 7: 3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa (hash: T/dMaaeSvp1LggvFA92KZdLKggY6N7VrSw4p19VRscU=) 8: 3137362e3130322e3136392e302f32342d3234203d3e2030.roa (hash: nKG6CnM11Yjb8MVIkignfXNBO3ikiwLEINTV0ehMpsg=) 9: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 10: 3137362e3130322e3137342e302f32332d3234203d3e20383334.roa (hash: gPnaVBIt19O6m33mTQTgR5HJrcQgKrUjURPoTQicTTc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Jul 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:61:cb:94:37:36:5e:d4:58:f5:e3:a5:da:49:98:5d:d4:b8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Jul 7 08:10:51 2026 GMT Not After : Jul 8 10:59:51 2026 GMT Subject: CN=B13A3D9C5AE2D0ADAF46266ACCC7E0AB7D41EF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:07:38:a7:60:0f:e4:f3:5c:df:10:57:07: 40:ab:a9:1c:17:7f:81:34:d1:59:bd:e9:01:eb:d4: 67:1c:6c:c3:c2:2e:d2:79:a9:77:ee:8b:43:04:79: c9:ba:e1:08:af:b2:05:94:a1:4f:7e:d3:44:59:f4: 84:7d:49:d0:ff:86:90:0e:c3:69:2f:3f:db:93:76: f9:86:7c:44:19:19:4a:b4:0a:66:ed:1d:e2:73:0a: c3:44:9d:4d:0e:b3:ee:fe:dd:02:be:99:4f:5c:5f: db:6f:8e:c5:96:cc:4e:01:8d:a1:51:06:30:4c:c9: 35:be:f5:05:07:05:31:8e:63:a2:55:0e:24:53:cb: 0b:7b:0d:ba:40:01:ba:5e:69:34:cf:50:10:12:fa: fb:be:df:c9:44:d1:01:70:b5:67:e6:c8:78:f3:d9: b1:ca:cf:ce:ce:2f:2f:2a:63:a8:f4:01:2e:91:16: 9c:2f:a0:2b:1d:e6:53:cb:0f:65:5a:48:ee:66:63: 77:28:31:a4:d6:2d:12:d4:b0:d0:b0:af:04:48:ed: 0a:7f:00:c2:dd:ea:cd:b3:38:bf:af:3e:67:7e:84: 15:d9:23:12:79:a9:63:2d:2e:02:8b:8a:35:54:48: 48:86:7f:96:d6:d5:5f:f4:09:b5:f1:c1:27:07:48: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:3D:9C:5A:E2:D0:AD:AF:46:26:6A:CC:C7:E0:AB:7D:41:EF:3F X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:92:fd:55:c4:2e:42:a7:0f:bb:6d:33:e2:3a:c1:1d:6a: 58:a0:29:94:4f:31:33:6e:74:52:51:2a:27:25:47:23:97:44: b5:ea:6a:8c:c1:08:62:e7:a1:e5:96:2d:c1:d9:6d:ec:f2:4d: 65:5e:65:fd:93:e2:1d:51:3a:6e:83:6f:3d:83:78:f4:f0:90: 44:c5:dc:30:ba:0d:67:93:8b:83:99:d2:e3:07:07:14:f9:f6: d2:c6:74:0f:ab:a7:67:7c:d5:c7:f4:e9:61:3e:28:6b:15:61: 15:9b:dd:f8:64:24:47:55:18:43:37:fc:16:b3:97:de:e2:4d: e0:b9:b2:9e:c6:1d:7a:c2:ca:17:c5:b6:84:53:4c:33:47:84: 50:02:30:a5:df:9c:1b:65:55:e4:17:85:b1:17:d7:5b:3a:a2: f0:43:27:6a:94:8d:1c:f6:b9:74:af:e1:c2:3a:1b:a9:fd:1e: 7f:3c:c7:65:25:f9:7a:34:9a:6f:47:15:5b:6a:26:99:89:d6: 29:9b:f8:6c:54:f6:8f:c5:d6:d7:6b:6a:58:e8:5a:eb:01:15: a2:78:0f:39:fd:22:63:af:89:1a:4e:ae:9c:5d:b3:57:ed:f6: 43:9d:65:0f:64:a5:63:80:78:df:b8:41:44:c8:08:bb:2a:27: 5d:09:d8:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFMVhy5Q3Nl7UWPXjpdpJmF3UuJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA3MDcwODEwNTFaFw0yNjA3MDgxMDU5NTFaMDMxMTAvBgNV BAMTKEIxM0EzRDlDNUFFMkQwQURBRjQ2MjY2QUNDQzdFMEFCN0Q0MUVGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XQc4p2AP5PNc3xBXB0CrqRwX f4E00Vm96QHr1GccbMPCLtJ5qXfui0MEecm64QivsgWUoU9+00RZ9IR9SdD/hpAO w2kvP9uTdvmGfEQZGUq0CmbtHeJzCsNEnU0Os+7+3QK+mU9cX9tvjsWWzE4BjaFR BjBMyTW+9QUHBTGOY6JVDiRTywt7DbpAAbpeaTTPUBAS+vu+38lE0QFwtWfmyHjz 2bHKz87OLy8qY6j0AS6RFpwvoCsd5lPLD2VaSO5mY3coMaTWLRLUsNCwrwRI7Qp/ AMLd6s2zOL+vPmd+hBXZIxJ5qWMtLgKLijVUSEiGf5bW1V/0CbXxwScHSCwNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsTo9nFri0K2vRiZqzMfgq31B7z8wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ26S/VXELkKnD7ttM+I6 wR1qWKAplE8xM250UlEqJyVHI5dEtepqjMEIYueh5ZYtwdlt7PJNZV5l/ZPiHVE6 boNvPYN49PCQRMXcMLoNZ5OLg5nS4wcHFPn20sZ0D6unZ3zVx/TpYT4oaxVhFZvd +GQkR1UYQzf8FrOX3uJN4LmynsYdesLKF8W2hFNMM0eEUAIwpd+cG2VV5BeFsRfX Wzqi8EMnapSNHPa5dK/hwjobqf0efzzHZSX5ejSab0cVW2ommYnWKZv4bFT2j8XW 12tqWOha6wEVongPOf0iY6+JGk6unF2zV+32Q51lD2SlY4B437hBRMgIuyonXQnY +g== -----END CERTIFICATE-----Generated at Tue Jul 7 10:44:11 2026 by rpki-client