$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: ehYkKjykYQJRSe9ck3LvbwJMyF9RlcJPPEpQiJkg2u4= Subject key identifier: 81:18:2C:50:22:EE:98:FF:60:70:DC:6A:9E:FE:D2:F6:3C:AB:11:EB Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 412C62A76C0600006ACB713FC9442959BA148548 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 02B1 Signing time: Tue 21 Jul 2026 09:15:04 +0000 Manifest this update: Tue 21 Jul 2026 09:10:04 +0000 Manifest next update: Wed 22 Jul 2026 10:29:04 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: 1NHg65Js13tnZqfGnp0DgCgZYJd5w7D+Cj5EnJcxks0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 10:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2c:62:a7:6c:06:00:00:6a:cb:71:3f:c9:44:29:59:ba:14:85:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Jul 21 09:10:04 2026 GMT Not After : Jul 22 10:29:04 2026 GMT Subject: CN=81182C5022EE98FF6070DC6A9EFED2F63CAB11EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:fd:9c:e9:41:ea:aa:bb:0e:aa:fc:92:be: 6d:51:ef:a3:7a:00:3a:75:e0:5a:6a:a6:66:ca:75: cb:18:ee:7c:f7:3d:a5:5b:9c:44:6e:97:f8:46:93: 67:6a:10:6f:fd:42:17:52:c0:62:31:9e:b3:a7:be: 79:8f:b3:ec:9c:f5:c9:75:59:1c:fd:de:62:7f:a2: 85:fd:3f:e8:84:68:14:05:7b:56:db:52:b3:a8:23: a4:4f:92:9d:a1:b7:d1:5c:ab:66:d9:f0:e1:59:7e: d3:41:77:94:98:cb:04:09:e9:5c:2b:7a:9c:60:ec: 2f:1e:a5:fa:c3:33:9f:63:9e:d6:fa:7b:11:1f:5b: 17:1c:a2:4a:30:02:22:b9:f4:95:7d:55:55:28:cf: e7:a2:65:26:d6:77:63:fb:c4:f6:24:c7:66:a2:43: 92:7e:c0:44:69:59:c1:d4:1a:fe:c0:69:35:7f:b5: 64:00:2b:00:5a:b0:68:45:f2:af:19:7f:e9:a1:48: 9a:e0:dc:77:0f:b6:c8:ab:33:ef:28:61:d6:d2:f7: 77:19:73:96:42:9c:70:a5:6e:3a:62:76:ad:22:b0: 48:05:54:06:6d:d4:fd:86:9f:5a:34:7d:ad:4d:e6: 60:03:95:98:85:90:a8:94:af:98:4d:94:39:24:d9: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:18:2C:50:22:EE:98:FF:60:70:DC:6A:9E:FE:D2:F6:3C:AB:11:EB X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:40:fd:1b:48:61:2b:9e:84:7a:ee:ff:92:af:5c:19:1b:df: 2e:71:80:5d:79:28:96:5e:42:42:bb:68:25:dd:c1:ce:54:97: 3c:52:c0:59:0b:0e:fb:c4:c0:1f:ab:f0:cf:77:9c:11:51:4a: 28:f1:33:93:34:94:b6:94:62:7d:9e:b8:90:c1:e7:87:7c:b3: c8:3e:fd:0e:8c:10:c8:82:66:bb:61:2c:0d:c1:74:36:6b:82: bd:73:fd:cc:31:c5:8e:da:a1:18:76:e2:5b:3d:af:b2:cf:c1: 24:06:e5:d4:6c:11:e5:75:ff:6f:02:13:ad:f7:99:c7:14:5a: b5:15:05:e9:70:fb:72:5f:a9:12:f4:3f:31:f4:96:5e:79:57: f0:1d:06:cd:76:81:6f:a6:4c:48:ba:db:74:b2:e0:96:17:4b: 7b:95:c0:c6:86:ff:87:b9:65:73:44:b0:dc:db:e7:fd:3b:c7: 14:c8:24:af:1a:3b:40:11:11:42:0c:6d:91:77:72:e3:bb:c5: a3:ce:60:4b:f7:3b:71:de:57:d1:78:d1:90:fe:4d:ed:7a:23: a9:1d:7a:6f:3c:73:de:35:d2:d1:d6:33:e5:0d:3b:81:d1:0d: 3d:20:a4:d0:6f:6f:18:c8:7e:00:3b:00:65:b0:90:4e:61:91: 42:24:34:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQSxip2wGAABqy3E/yUQpWboUhUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA3MjEwOTEwMDRaFw0yNjA3MjIxMDI5MDRaMDMxMTAvBgNV BAMTKDgxMTgyQzUwMjJFRTk4RkY2MDcwREM2QTlFRkVEMkY2M0NBQjExRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3P2c6UHqqrsOqvySvm1R76N6 ADp14FpqpmbKdcsY7nz3PaVbnERul/hGk2dqEG/9QhdSwGIxnrOnvnmPs+yc9cl1 WRz93mJ/ooX9P+iEaBQFe1bbUrOoI6RPkp2ht9Fcq2bZ8OFZftNBd5SYywQJ6Vwr epxg7C8epfrDM59jntb6exEfWxccokowAiK59JV9VVUoz+eiZSbWd2P7xPYkx2ai Q5J+wERpWcHUGv7AaTV/tWQAKwBasGhF8q8Zf+mhSJrg3HcPtsirM+8oYdbS93cZ c5ZCnHClbjpidq0isEgFVAZt1P2Gn1o0fa1N5mADlZiFkKiUr5hNlDkk2dX/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgRgsUCLumP9gcNxqnv7S9jyrEeswHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHQP0b SGErnoR67v+Sr1wZG98ucYBdeSiWXkJCu2gl3cHOVJc8UsBZCw77xMAfq/DPd5wR UUoo8TOTNJS2lGJ9nriQweeHfLPIPv0OjBDIgma7YSwNwXQ2a4K9c/3MMcWO2qEY duJbPa+yz8EkBuXUbBHldf9vAhOt95nHFFq1FQXpcPtyX6kS9D8x9JZeeVfwHQbN doFvpkxIutt0suCWF0t7lcDGhv+HuWVzRLDc2+f9O8cUyCSvGjtAERFCDG2Rd3Lj u8WjzmBL9ztx3lfReNGQ/k3teiOpHXpvPHPeNdLR1jPlDTuB0Q09IKTQb28YyH4A OwBlsJBOYZFCJDR7 -----END CERTIFICATE-----Generated at Tue Jul 21 17:26:47 2026 by rpki-client