$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: dVa+8kyutHzt7bsjgZf9LxKO3gnYO2oxZ1GqFpnLbx8= Subject key identifier: C5:A7:78:60:E5:1D:93:F4:61:8F:BE:73:3A:EF:FE:12:18:DE:69:8E Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 576B1524141FFAFE612AF8B5B35BC84E62B6A1A1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: E1 Signing time: Tue 21 Jul 2026 09:21:14 +0000 Manifest this update: Tue 21 Jul 2026 09:16:14 +0000 Manifest next update: Wed 22 Jul 2026 11:08:14 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 45/9QUOdn52irpcegvQY4pHm1kgYO9a4FDGVkiO/1Sc=) 2: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6b:15:24:14:1f:fa:fe:61:2a:f8:b5:b3:5b:c8:4e:62:b6:a1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jul 21 09:16:14 2026 GMT Not After : Jul 22 11:08:14 2026 GMT Subject: CN=C5A77860E51D93F4618FBE733AEFFE1218DE698E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:e0:04:6d:b4:de:d6:a9:9c:48:c1:b3:07: 96:7d:bf:1e:1c:c7:91:75:42:23:e8:63:b5:4e:13: 3d:32:7f:81:b4:4d:a7:79:6d:d5:25:95:83:c9:a9: 86:7a:0e:72:84:49:0d:fb:fe:17:d7:d4:92:7e:8d: 05:ee:df:d2:81:e6:39:f7:50:85:d5:5d:62:c1:51: 5a:3e:2f:67:d0:cc:25:34:f4:3b:01:a1:0a:91:b8: 5f:45:37:19:50:ec:37:8e:56:ba:29:b1:c2:06:cf: f6:87:ae:63:a7:dd:c3:32:6a:b3:d9:79:0b:f4:8d: 8e:9a:da:36:91:96:bf:96:c8:40:35:74:68:c2:34: 62:28:cf:2a:11:52:27:4f:ea:d2:39:df:9d:02:1e: 85:42:c0:5d:00:3e:10:4b:1b:81:90:bc:53:61:8e: 83:94:4b:3a:88:d7:85:52:14:9b:7c:5c:21:95:fa: 90:37:7c:b8:14:f9:47:76:24:48:f4:30:fb:7f:b4: f4:63:79:2e:71:34:f3:fa:ac:d5:41:e6:28:81:f7: 1f:b0:b3:c1:de:57:54:35:7f:c9:33:d4:9b:2b:c5: f2:ab:ae:f6:74:b1:95:1c:40:56:64:98:4a:fc:30: b2:3f:63:6c:40:34:4c:08:b5:34:c6:80:ef:be:d0: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:78:60:E5:1D:93:F4:61:8F:BE:73:3A:EF:FE:12:18:DE:69:8E X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ea:8d:df:63:e7:88:d2:ad:c8:15:61:56:5c:b6:0b:ec:6a: 9e:ec:55:7b:1a:89:53:61:23:97:b6:5d:35:d7:74:ef:bf:78: 91:c6:32:41:a8:e0:84:3f:76:e3:fb:23:31:17:be:9c:dc:13: 4b:b9:32:86:0b:49:d6:fd:12:6f:5a:70:ba:bf:d4:e5:f8:93: 76:05:c0:8c:0c:3b:41:92:be:c5:51:f4:33:43:53:ab:92:40: 38:63:58:bf:f7:75:e4:dd:f9:ed:13:fc:88:cb:e9:d3:e8:a8: 0d:95:ac:dc:f0:1b:fc:7a:fa:62:fc:66:de:46:a0:12:a9:3e: cf:3f:ef:0d:30:2e:13:66:91:bd:3c:27:b8:0f:95:09:b8:23: 3b:f5:cb:77:f8:69:5a:9d:f7:51:e6:6f:73:25:20:8c:6e:6c: 43:44:2f:38:aa:01:45:5e:af:ed:8b:f1:1e:83:a1:6e:10:99: e8:0b:6e:bf:51:49:04:e4:ad:4d:e9:eb:b5:ff:11:ef:ba:2a: 07:b2:4e:50:94:23:5a:7e:c3:4b:82:82:2f:d2:52:70:ea:47: 18:a9:72:00:09:ab:da:f6:0a:23:3b:50:4b:ca:37:97:f0:6d: 3b:3d:f9:98:98:46:59:0c:12:fa:12:28:4a:8d:fb:00:04:e4: a3:ba:c9:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV2sVJBQf+v5hKvi1s1vITmK2oaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA3MjEwOTE2MTRaFw0yNjA3MjIxMTA4MTRaMDMxMTAvBgNV BAMTKEM1QTc3ODYwRTUxRDkzRjQ2MThGQkU3MzNBRUZGRTEyMThERTY5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTMeAEbbTe1qmcSMGzB5Z9vx4c x5F1QiPoY7VOEz0yf4G0Tad5bdUllYPJqYZ6DnKESQ37/hfX1JJ+jQXu39KB5jn3 UIXVXWLBUVo+L2fQzCU09DsBoQqRuF9FNxlQ7DeOVropscIGz/aHrmOn3cMyarPZ eQv0jY6a2jaRlr+WyEA1dGjCNGIozyoRUidP6tI5350CHoVCwF0APhBLG4GQvFNh joOUSzqI14VSFJt8XCGV+pA3fLgU+Ud2JEj0MPt/tPRjeS5xNPP6rNVB5iiB9x+w s8HeV1Q1f8kz1JsrxfKrrvZ0sZUcQFZkmEr8MLI/Y2xANEwItTTGgO++0MBxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxad4YOUdk/Rhj75zOu/+EhjeaY4wHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDD6o3f Y+eI0q3IFWFWXLYL7Gqe7FV7GolTYSOXtl0113Tvv3iRxjJBqOCEP3bj+yMxF76c 3BNLuTKGC0nW/RJvWnC6v9Tl+JN2BcCMDDtBkr7FUfQzQ1OrkkA4Y1i/93Xk3fnt E/yIy+nT6KgNlazc8Bv8evpi/GbeRqASqT7PP+8NMC4TZpG9PCe4D5UJuCM79ct3 +GlanfdR5m9zJSCMbmxDRC84qgFFXq/ti/Eeg6FuEJnoC26/UUkE5K1N6eu1/xHv uioHsk5QlCNafsNLgoIv0lJw6kcYqXIACava9gojO1BLyjeX8G07PfmYmEZZDBL6 EihKjfsABOSjusmq -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:43 2026 by rpki-client