$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: EU0ASFhomuddzeyfPfys2Jc3ujggDE8GzyDDNxgM7bA= Subject key identifier: 15:9A:40:38:BE:1A:DA:B8:11:86:E3:3E:D2:26:13:D0:2D:8B:D9:3D Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 3523A3406664AB6641B33878D32B61A0B531774C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 4E Signing time: Wed 04 Mar 2026 08:28:24 +0000 Manifest this update: Wed 04 Mar 2026 08:23:24 +0000 Manifest next update: Thu 05 Mar 2026 11:20:24 +0000 Files and hashes: 1: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 2: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 3: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 4: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 5: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: 3shiY5P+igXeY/z/vvJGn1bBl+pNuij2K+EuIPq0b1U=) 6: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 7: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 8: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 9: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 10: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 11: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 12: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 13: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:23:a3:40:66:64:ab:66:41:b3:38:78:d3:2b:61:a0:b5:31:77:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Mar 4 08:23:24 2026 GMT Not After : Mar 5 11:20:24 2026 GMT Subject: CN=159A4038BE1ADAB81186E33ED22613D02D8BD93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:8a:fa:5b:bf:cf:b3:9c:12:c1:57:b2:17: 96:25:95:64:68:c2:a6:27:2f:e7:24:32:42:52:c2: 8f:97:02:fb:37:e2:09:8b:cd:0c:09:43:66:78:2c: e0:92:c6:cd:b6:cb:e5:2a:13:01:b7:df:d4:bd:36: 4c:ce:bb:0c:83:9f:ca:2d:80:4b:ca:b6:c2:c8:f6: a1:d6:20:02:6e:dc:69:60:82:61:6c:2b:1e:18:b1: 9d:7a:03:e0:3d:22:0d:93:26:57:f0:b0:f1:7c:39: 5d:8c:e2:31:71:75:7e:04:38:37:91:ff:35:77:ce: d9:11:ec:a3:95:7f:0e:41:ac:34:0d:b7:f9:53:46: 5d:f3:56:cb:7d:d6:73:a1:c4:c5:e3:11:58:92:16: c5:8e:8c:07:3b:1c:26:84:3f:76:20:ea:b0:69:34: 62:45:47:7c:88:85:16:d0:ae:0f:22:b1:61:29:e0: c1:c9:0d:25:33:bb:b3:55:7f:ea:22:86:c6:b1:ea: 74:af:b6:cc:e7:5e:b4:da:36:b5:c4:8a:79:a6:9b: 88:14:0f:06:40:bd:b0:9b:db:26:47:be:a1:85:f4: 88:2d:cf:09:6b:44:41:87:6b:b0:5e:f6:fe:40:11: 2b:21:2b:35:0b:49:c7:3f:49:f5:bb:b7:a9:af:75: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9A:40:38:BE:1A:DA:B8:11:86:E3:3E:D2:26:13:D0:2D:8B:D9:3D X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:4c:db:03:92:03:18:b6:4c:c1:01:fc:39:73:00:73:12:e4: 33:94:83:ac:b3:78:3d:fe:e1:f5:ba:2d:f2:e7:49:4d:8b:de: 93:42:5f:61:7e:bb:93:3a:a3:a9:fc:a1:94:88:9a:bf:88:9f: 47:0c:91:fd:e7:58:5c:31:84:2e:50:21:15:c2:25:83:74:cc: a3:76:5e:bf:72:d0:04:56:52:4c:89:eb:74:b5:59:17:6b:2d: ce:ae:48:92:5d:70:39:f1:42:16:67:3b:04:e5:0d:a9:e1:33: 14:e9:42:00:b4:32:b3:4b:34:18:f6:c0:f3:e6:fb:1a:75:2a: 23:3b:64:ed:fd:62:29:04:32:6a:2d:aa:b2:86:fd:98:45:cd: 58:2e:fd:f1:dc:24:87:19:7a:68:2a:2a:34:da:92:d8:72:63: 91:7f:80:11:da:34:32:53:cc:b4:d0:e8:f0:fe:2d:46:a8:81: a4:2d:0f:ff:43:a7:e8:ca:a4:20:9f:9a:bb:2e:9e:53:ce:66: 19:45:b5:ca:48:47:5b:68:4e:57:7c:2e:b8:0e:50:bf:d0:2d: 29:94:03:1c:24:df:da:20:14:c3:44:b6:38:6e:5a:47:1a:30: 5b:17:29:94:9d:29:65:70:ce:5f:8c:d2:d5:67:e9:62:58:c3: ed:9e:ce:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNSOjQGZkq2ZBszh40ythoLUxd0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAzMDQwODIzMjRaFw0yNjAzMDUxMTIwMjRaMDMxMTAvBgNV BAMTKDE1OUE0MDM4QkUxQURBQjgxMTg2RTMzRUQyMjYxM0QwMkQ4QkQ5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDti4r6W7/Ps5wSwVeyF5YllWRo wqYnL+ckMkJSwo+XAvs34gmLzQwJQ2Z4LOCSxs22y+UqEwG339S9NkzOuwyDn8ot gEvKtsLI9qHWIAJu3GlggmFsKx4YsZ16A+A9Ig2TJlfwsPF8OV2M4jFxdX4EODeR /zV3ztkR7KOVfw5BrDQNt/lTRl3zVst91nOhxMXjEViSFsWOjAc7HCaEP3Yg6rBp NGJFR3yIhRbQrg8isWEp4MHJDSUzu7NVf+oihsax6nSvtsznXrTaNrXEinmmm4gU DwZAvbCb2yZHvqGF9IgtzwlrREGHa7Be9v5AESshKzULScc/SfW7t6mvdawnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFZpAOL4a2rgRhuM+0iYT0C2L2T0wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5EzbA5IDGLZMwQH8OXMA cxLkM5SDrLN4Pf7h9bot8udJTYvek0JfYX67kzqjqfyhlIiav4ifRwyR/edYXDGE LlAhFcIlg3TMo3Zev3LQBFZSTInrdLVZF2stzq5Ikl1wOfFCFmc7BOUNqeEzFOlC ALQys0s0GPbA8+b7GnUqIztk7f1iKQQyai2qsob9mEXNWC798dwkhxl6aCoqNNqS 2HJjkX+AEdo0MlPMtNDo8P4tRqiBpC0P/0On6MqkIJ+auy6eU85mGUW1ykhHW2hO V3wuuA5Qv9AtKZQDHCTf2iAUw0S2OG5aRxowWxcplJ0pZXDOX4zS1WfpYljD7Z7O dw== -----END CERTIFICATE-----Generated at Wed Mar 4 15:45:20 2026 by rpki-client