$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: LVNsYLrOZ0++CJMPKsag+sAm6e3TDmvz4C2gxWNNKNs= Subject key identifier: B3:32:4D:32:3C:93:8E:C2:F2:97:C8:20:AF:AA:87:D7:AF:5A:B9:D4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 14356781DF3C90A616913A0FFDD29C3C6B8C4668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0516 Signing time: Mon 27 Jul 2026 03:53:47 +0000 Manifest this update: Mon 27 Jul 2026 03:48:47 +0000 Manifest next update: Tue 28 Jul 2026 05:41:47 +0000 Files and hashes: 1: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=) 2: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=) 3: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 4: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 6: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=) 7: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: O8Qw2/VO2ljYDlLH+hETUmpHNdpj7Cbu+7bB0vZIVCk=) 8: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=) 9: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 10: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=) 11: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 05:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:35:67:81:df:3c:90:a6:16:91:3a:0f:fd:d2:9c:3c:6b:8c:46:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jul 27 03:48:47 2026 GMT Not After : Jul 28 05:41:47 2026 GMT Subject: CN=B3324D323C938EC2F297C820AFAA87D7AF5AB9D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:04:69:01:b6:b1:0a:19:04:92:39:f7:4d: ba:58:a9:4b:b9:3e:68:86:6d:0d:d6:15:e6:cd:3a: 81:bc:b1:01:77:34:36:8f:6a:0b:b1:c9:c6:35:b6: 10:e8:22:b5:ad:3a:82:0f:64:2d:8f:43:a6:14:e0: 14:43:16:43:9a:a6:33:09:d3:e2:78:d2:01:ca:11: ba:f2:7e:01:7a:8f:38:b9:e2:ed:e1:41:1d:d0:86: 19:62:e7:29:6f:45:69:f4:50:a9:60:a1:2c:fd:71: 07:aa:b3:bf:69:1a:e3:5f:50:f6:14:c5:58:ff:60: 92:00:9d:c8:30:6a:68:3f:14:5f:06:33:ba:07:87: 59:dd:a7:d5:2c:32:3a:b4:ae:e9:b1:f9:28:7e:43: f2:26:5a:a2:a6:99:63:44:e4:a2:05:eb:79:f6:df: 8a:42:1e:70:65:92:59:24:fc:9c:7f:8b:d1:08:0d: b1:8f:e0:08:8a:4a:47:16:19:99:4e:20:7a:7c:07: 57:4b:9a:01:0c:77:ea:d2:32:4d:de:e2:3d:ee:ff: 04:03:23:36:0a:2e:2f:6d:ab:4a:30:08:7a:a4:8c: 30:5d:ab:40:31:a4:d6:10:06:66:c2:78:54:10:2d: f1:a5:b7:dc:38:51:ae:76:2f:ef:d9:9e:88:11:0d: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:32:4D:32:3C:93:8E:C2:F2:97:C8:20:AF:AA:87:D7:AF:5A:B9:D4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c3:03:0e:76:59:c0:da:cc:a8:b6:42:37:7c:20:97:2f:b9: fc:d0:8b:ea:29:70:17:b2:fa:64:b5:2b:72:73:47:2e:41:fd: 33:b3:ad:74:86:59:d3:53:a6:8f:0c:cf:2d:ad:80:f0:2f:ed: 12:90:2d:2d:af:13:dc:a9:09:a9:6f:61:ee:7c:8c:bf:7b:76: 11:da:60:a7:07:14:ed:9a:d1:36:d8:ed:4d:fb:b0:a8:b4:60: d6:97:12:65:cf:44:1d:af:bf:a0:86:6f:5c:77:5d:ad:ec:c8: 57:ff:b9:bb:3c:32:4a:2a:92:6d:57:3b:e3:49:68:7c:36:d6: 52:5f:42:96:3d:8b:f8:8b:55:b6:4c:ee:7f:4d:b9:dd:93:6f: 28:a7:49:d0:8a:89:08:73:87:2a:3a:c8:fb:67:cc:5a:35:07: a1:32:a8:9e:ce:95:94:de:88:69:82:c1:2b:98:49:c8:05:23: 19:9b:2b:39:09:97:c6:be:ec:7c:d4:25:d6:b0:6f:a2:41:75: b0:11:90:fa:bb:02:34:56:da:03:9c:26:d0:ba:49:b4:66:08: 38:c9:d8:54:26:e1:5d:15:8d:43:bf:b8:81:af:ca:b3:14:b9: ae:6b:b0:46:5f:de:81:0b:cf:03:fa:8f:b7:a6:51:eb:14:c9: f3:32:d6:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFDVngd88kKYWkToP/dKcPGuMRmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjA3MjcwMzQ4NDdaFw0yNjA3MjgwNTQxNDdaMDMxMTAvBgNV BAMTKEIzMzI0RDMyM0M5MzhFQzJGMjk3QzgyMEFGQUE4N0Q3QUY1QUI5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzQRpAbaxChkEkjn3TbpYqUu5 PmiGbQ3WFebNOoG8sQF3NDaPaguxycY1thDoIrWtOoIPZC2PQ6YU4BRDFkOapjMJ 0+J40gHKEbryfgF6jzi54u3hQR3Qhhli5ylvRWn0UKlgoSz9cQeqs79pGuNfUPYU xVj/YJIAncgwamg/FF8GM7oHh1ndp9UsMjq0rumx+Sh+Q/ImWqKmmWNE5KIF63n2 34pCHnBlklkk/Jx/i9EIDbGP4AiKSkcWGZlOIHp8B1dLmgEMd+rSMk3e4j3u/wQD IzYKLi9tq0owCHqkjDBdq0AxpNYQBmbCeFQQLfGlt9w4Ua52L+/ZnogRDYf3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUszJNMjyTjsLyl8ggr6qH169audQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcMDDnZZwNrMqLZCN3wg ly+5/NCL6ilwF7L6ZLUrcnNHLkH9M7OtdIZZ01OmjwzPLa2A8C/tEpAtLa8T3KkJ qW9h7nyMv3t2EdpgpwcU7ZrRNtjtTfuwqLRg1pcSZc9EHa+/oIZvXHddrezIV/+5 uzwySiqSbVc740lofDbWUl9Clj2L+ItVtkzuf0253ZNvKKdJ0IqJCHOHKjrI+2fM WjUHoTKons6VlN6IaYLBK5hJyAUjGZsrOQmXxr7sfNQl1rBvokF1sBGQ+rsCNFba A5wm0LpJtGYIOMnYVCbhXRWNQ7+4ga/KsxS5rmuwRl/egQvPA/qPt6ZR6xTJ8zLW sg== -----END CERTIFICATE-----Generated at Mon Jul 27 14:21:06 2026 by rpki-client