$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: OZeTRenRaMl+k/HPNzW9EXMpgtTwVj9Q0uhyu5v1xL0= Subject key identifier: E9:C4:6F:AA:A1:0D:39:5B:67:D9:E0:D0:1B:63:88:EA:C3:A0:EB:86 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 1DD5A3AD8C9812094DF281D5E3321122B3630C8F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: C8 Signing time: Sun 26 Jul 2026 21:59:19 +0000 Manifest this update: Sun 26 Jul 2026 21:54:19 +0000 Manifest next update: Mon 27 Jul 2026 23:53:19 +0000 Files and hashes: 1: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 3: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: EJtMB9b8wHVn6OBeXk5+OXw7+wsCVE8hD41ZJoEZJ18=) 4: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) 5: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 6: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 7: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 8: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 9: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d5:a3:ad:8c:98:12:09:4d:f2:81:d5:e3:32:11:22:b3:63:0c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Jul 26 21:54:19 2026 GMT Not After : Jul 27 23:53:19 2026 GMT Subject: CN=E9C46FAAA10D395B67D9E0D01B6388EAC3A0EB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:d8:0c:c6:a1:52:da:bd:1e:99:3c:6f:3e: 6c:c7:99:da:a1:89:47:00:05:38:7c:cc:c2:b3:69: 79:26:4a:db:28:e4:c5:92:b8:8c:da:cd:78:1e:c7: f0:e6:94:e2:92:ac:c1:c3:10:19:ec:1c:ad:d4:6a: e1:ad:2e:02:10:45:a4:eb:6a:36:99:88:e9:7e:9f: 57:c8:da:a6:dc:8a:b4:76:d6:d5:48:8a:0a:ad:39: 03:21:03:3f:95:c7:f0:4d:f2:e8:a8:f4:a5:32:9c: b9:5a:77:7b:b6:52:8b:b1:89:91:f2:87:5d:ab:6d: ce:5c:39:dc:2b:74:ad:2a:08:2f:f7:b4:63:67:8e: 2f:b1:d9:55:4e:4d:4a:bc:e4:11:bd:98:6f:53:5e: 22:55:95:23:dd:4a:08:0d:e2:95:16:8a:70:c4:74: ba:66:55:16:b6:59:1f:8f:cb:85:ab:60:cf:93:5e: 36:e4:65:40:32:00:ad:aa:f3:75:44:bc:cd:f6:10: 19:49:6b:12:de:c7:1d:f6:9a:2f:8f:e3:a5:bf:1f: 59:16:ff:94:e6:27:ce:80:ba:d4:cf:39:be:be:83: 1a:bc:52:1b:2a:07:0b:e5:99:1f:1e:90:f2:c8:95: 22:4d:8f:2f:13:e9:71:6b:f8:60:26:71:7c:74:a6: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:6F:AA:A1:0D:39:5B:67:D9:E0:D0:1B:63:88:EA:C3:A0:EB:86 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ed:0f:3b:e8:5c:54:a4:8d:22:02:79:96:f8:2e:8e:af:a7: 95:a6:a7:c4:99:8d:69:92:f7:07:62:61:42:b4:f0:6c:99:78: d9:21:46:6f:52:74:d7:4f:4a:04:b1:cd:a9:a8:7d:e7:9a:ac: 5e:97:80:ac:46:0a:71:9f:4e:b8:31:75:3b:94:b4:2f:59:17: ba:fd:43:63:e6:b1:3f:8f:1b:53:7b:f8:eb:e0:2f:1a:aa:be: a3:3a:72:3d:a2:d4:36:d7:90:75:05:ef:1e:eb:a3:4f:7b:6a: fb:7f:0c:54:43:c2:b0:1a:c9:b9:87:88:ee:e2:2a:1c:17:49: 87:e1:ac:51:8c:38:08:81:57:81:db:90:74:07:6c:4e:27:ef: c7:a9:72:73:a6:da:2b:99:a3:65:d2:10:e1:eb:88:26:88:db: 91:83:97:6a:d0:b7:d3:0e:09:30:a8:95:92:12:88:48:0a:ec: 67:f6:07:72:33:25:b9:bd:cd:70:fe:ea:e4:90:dc:bd:c8:44: 61:e5:83:e4:38:40:cb:51:ea:d7:2a:6b:bb:bc:85:f0:5c:cb: 83:0e:c7:ed:de:02:e8:36:e1:6c:22:31:f3:26:c0:41:e3:15: c7:2c:35:3f:d6:b4:b6:85:6c:17:21:23:80:13:34:a9:6f:16: 70:89:81:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHdWjrYyYEglN8oHV4zIRIrNjDI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA3MjYyMTU0MTlaFw0yNjA3MjcyMzUzMTlaMDMxMTAvBgNV BAMTKEU5QzQ2RkFBQTEwRDM5NUI2N0Q5RTBEMDFCNjM4OEVBQzNBMEVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnl9gMxqFS2r0emTxvPmzHmdqh iUcABTh8zMKzaXkmStso5MWSuIzazXgex/DmlOKSrMHDEBnsHK3UauGtLgIQRaTr ajaZiOl+n1fI2qbcirR21tVIigqtOQMhAz+Vx/BN8uio9KUynLlad3u2UouxiZHy h12rbc5cOdwrdK0qCC/3tGNnji+x2VVOTUq85BG9mG9TXiJVlSPdSggN4pUWinDE dLpmVRa2WR+Py4WrYM+TXjbkZUAyAK2q83VEvM32EBlJaxLexx32mi+P46W/H1kW /5TmJ86AutTPOb6+gxq8UhsqBwvlmR8ekPLIlSJNjy8T6XFr+GAmcXx0pitTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6cRvqqENOVtn2eDQG2OI6sOg64YwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl7Q87 6FxUpI0iAnmW+C6Or6eVpqfEmY1pkvcHYmFCtPBsmXjZIUZvUnTXT0oEsc2pqH3n mqxel4CsRgpxn064MXU7lLQvWRe6/UNj5rE/jxtTe/jr4C8aqr6jOnI9otQ215B1 Be8e66NPe2r7fwxUQ8KwGsm5h4ju4iocF0mH4axRjDgIgVeB25B0B2xOJ+/HqXJz ptormaNl0hDh64gmiNuRg5dq0LfTDgkwqJWSEohICuxn9gdyMyW5vc1w/urkkNy9 yERh5YPkOEDLUerXKmu7vIXwXMuDDsft3gLoNuFsIjHzJsBB4xXHLDU/1rS2hWwX ISOAEzSpbxZwiYHa -----END CERTIFICATE-----Generated at Mon Jul 27 00:51:51 2026 by rpki-client