$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: urp2/GbWD12y0Pg95iRkr1mDU3yDsNUDDZ6XbScq/zQ= Subject key identifier: 46:AB:F6:68:7C:02:14:A6:36:17:80:81:75:37:4C:52:74:66:1E:39 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 191282CE9D8EB6B031AA934E7151CDFF47B93A68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: B5 Signing time: Thu 13 Aug 2026 09:14:24 +0000 Manifest this update: Thu 13 Aug 2026 09:09:24 +0000 Manifest next update: Fri 14 Aug 2026 11:35:24 +0000 Files and hashes: 1: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: 70nG/hWQsJ1Fp/aGnNp8pubWohc8N40cezLpH726x0w=) 2: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 3: 3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa (hash: +DN809AlaoX5+Lv+NqMgfBEbnjnBdEJgPi7MDj2sR/8=) 4: 34362e31382e39322e302f32322d3234203d3e20323134343332.roa (hash: NyXurW1DFDhqL0gW2AhubSlX8l+W/Em/ZT/cZ6caczo=) 5: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: i4J5fi4/ki9gpiPZ1WeNXoJ5Dkev+co9+mR0nmWAo0Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:12:82:ce:9d:8e:b6:b0:31:aa:93:4e:71:51:cd:ff:47:b9:3a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Aug 13 09:09:24 2026 GMT Not After : Aug 14 11:35:24 2026 GMT Subject: CN=46ABF6687C0214A63617808175374C5274661E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:99:f1:43:55:a7:2b:c0:83:4b:7c:ce:da: cb:6a:1a:95:60:99:55:7f:9c:3e:03:d4:cd:f2:b6: ad:5e:70:60:40:03:32:d7:be:70:4a:6a:d1:4e:7f: d3:74:be:53:90:eb:6e:bf:26:08:f4:f1:b4:f2:95: 55:c0:88:c0:ca:1d:9e:8c:1a:28:1a:ab:8b:7d:39: 38:87:ad:6d:16:a4:83:5a:ee:ee:d4:c6:0c:7a:bb: 76:cc:f7:3d:1d:ce:4b:1a:30:d2:29:7c:41:59:8b: 05:69:31:d2:e9:34:4b:1c:16:aa:66:53:c4:db:b3: 42:ff:a7:36:a1:c0:a7:db:55:99:27:81:7a:5a:dc: db:fe:e8:be:fe:61:dc:e8:69:81:8b:bd:aa:57:6a: 39:b9:36:75:30:3b:eb:9a:08:15:11:3c:31:0d:d8: 8c:df:49:87:34:de:a2:31:2a:e2:62:08:8c:8b:33: ff:9b:1b:2b:0a:ee:0b:2f:f9:a0:eb:74:e3:a8:1f: 3b:02:6d:a1:ca:84:59:b7:6a:9e:b9:c8:d2:79:80: 2e:bb:3b:55:3d:df:a4:71:0e:fe:dc:dc:48:bd:83: 5c:8e:50:e6:31:36:f5:76:3e:4a:8f:f3:ef:9d:3c: ca:cf:a8:63:a3:cb:61:e6:03:c3:7e:ce:02:48:15: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:F6:68:7C:02:14:A6:36:17:80:81:75:37:4C:52:74:66:1E:39 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:ac:99:92:f5:ee:e1:d7:fd:e5:2d:b2:03:1e:7d:46:db: a1:0f:0a:b6:70:0c:56:12:53:b0:b5:29:4e:5d:95:02:e2:c3: 43:fe:c8:80:a1:ea:26:a8:4e:61:fa:5c:d5:e6:aa:2e:b1:0f: f1:27:13:f8:6b:05:84:9a:c1:80:dd:3f:17:d6:87:5c:00:d8: d1:67:ce:92:a2:b0:9a:05:d3:79:8d:23:96:57:39:b3:7b:9c: ef:6b:f9:15:d6:c8:0b:eb:8d:f2:75:e3:b5:36:b7:2d:42:8c: 79:59:33:23:d5:e0:f5:4a:9b:1b:68:bf:27:db:6c:94:83:a0: f8:7d:6f:72:4c:3a:38:a7:6d:96:f5:5b:50:34:92:a0:c7:13: c3:6d:4e:c2:1d:ab:bf:aa:3c:f0:78:0d:46:22:a1:85:2f:d3: 1a:33:fd:25:af:26:35:76:d3:18:03:9d:cb:8f:57:e5:ef:4e: 0c:d0:b9:fd:eb:4f:06:fb:71:bf:66:c3:85:24:13:a1:d4:73: e7:08:30:b3:71:63:1c:f1:ba:23:27:83:7d:00:1a:c8:b0:6a: 7c:2d:77:99:22:d1:73:c2:4f:fc:d4:26:71:99:cd:72:60:03: 56:21:07:f1:2a:a2:70:67:b2:94:bb:ab:6a:28:5e:f1:3d:3f: aa:af:be:80 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGRKCzp2OtrAxqpNOcVHN/0e5OmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA4MTMwOTA5MjRaFw0yNjA4MTQxMTM1MjRaMDMxMTAvBgNV BAMTKDQ2QUJGNjY4N0MwMjE0QTYzNjE3ODA4MTc1Mzc0QzUyNzQ2NjFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqJnxQ1WnK8CDS3zO2stqGpVg mVV/nD4D1M3ytq1ecGBAAzLXvnBKatFOf9N0vlOQ626/Jgj08bTylVXAiMDKHZ6M Gigaq4t9OTiHrW0WpINa7u7Uxgx6u3bM9z0dzksaMNIpfEFZiwVpMdLpNEscFqpm U8Tbs0L/pzahwKfbVZkngXpa3Nv+6L7+YdzoaYGLvapXajm5NnUwO+uaCBURPDEN 2IzfSYc03qIxKuJiCIyLM/+bGysK7gsv+aDrdOOoHzsCbaHKhFm3ap65yNJ5gC67 O1U936RxDv7c3Ei9g1yOUOYxNvV2PkqP8++dPMrPqGOjy2HmA8N+zgJIFfUtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURqv2aHwCFKY2F4CBdTdMUnRmHjkwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoGsmZL17uHX/eUtsgMe fUbboQ8KtnAMVhJTsLUpTl2VAuLDQ/7IgKHqJqhOYfpc1eaqLrEP8ScT+GsFhJrB gN0/F9aHXADY0WfOkqKwmgXTeY0jllc5s3uc72v5FdbIC+uN8nXjtTa3LUKMeVkz I9Xg9UqbG2i/J9tslIOg+H1vckw6OKdtlvVbUDSSoMcTw21Owh2rv6o88HgNRiKh hS/TGjP9Ja8mNXbTGAOdy49X5e9ODNC5/etPBvtxv2bDhSQTodRz5wgws3FjHPG6 IyeDfQAayLBqfC13mSLRc8JP/NQmcZnNcmADViEH8SqicGeylLuraihe8T0/qq++ gA== -----END CERTIFICATE-----Generated at Thu Aug 13 13:22:43 2026 by rpki-client