$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: rDyGcZRPdVqBT6zxPNB/3wFkQLSLlzMhYNGP4iMwjd0= Subject key identifier: 9B:9B:35:95:DC:4D:72:5A:5C:A3:03:66:4E:80:39:09:8D:A7:F7:E3 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 27BEE621A12F958E6F480734133E799A9A6A045C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 0102 Signing time: Fri 17 Jul 2026 13:15:23 +0000 Manifest this update: Fri 17 Jul 2026 13:10:23 +0000 Manifest next update: Sat 18 Jul 2026 14:22:23 +0000 Files and hashes: 1: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 2: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 3: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: m2vtyGmb1f0OAISHscO5HJao3vuF/KE9mM4uiEvtD4g=) 4: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 5: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 6: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 7: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 8: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 9: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 10: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 11: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 12: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 13: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 14:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:be:e6:21:a1:2f:95:8e:6f:48:07:34:13:3e:79:9a:9a:6a:04:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jul 17 13:10:23 2026 GMT Not After : Jul 18 14:22:23 2026 GMT Subject: CN=9B9B3595DC4D725A5CA303664E8039098DA7F7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:1d:0f:79:d6:46:85:4a:c7:0b:aa:9c:65: cb:4f:e6:18:9c:ce:6b:57:87:ca:e7:a7:f5:8b:3a: 20:d9:73:dd:3f:00:91:f1:9b:5b:72:9c:09:1e:87: f8:84:2e:04:e6:0e:9f:a1:54:55:3c:f3:28:73:17: 75:2c:f8:a6:00:ae:67:c6:1a:42:9b:8d:25:d7:5f: 50:6c:15:18:68:03:f7:16:8c:76:fc:34:e1:3e:78: ec:5f:c3:df:3b:1a:bf:fd:2e:db:52:b2:ad:75:3a: 48:1f:9e:9c:52:56:ef:7a:86:2e:da:5f:7e:7d:69: 10:17:d1:40:ca:a1:e7:b8:14:cf:9c:39:dc:09:c8: f0:3e:56:61:d0:38:d9:b9:52:67:32:5a:56:7a:46: 06:a5:98:17:76:5f:57:c7:55:32:de:25:3a:42:73: ec:b6:35:d2:25:96:71:0b:c5:46:28:b3:42:53:ae: 6a:82:f0:dd:ff:67:d0:11:43:df:ff:39:50:b8:88: 28:49:be:69:5b:5a:35:c8:e1:a4:c8:93:b1:2f:d0: 8a:3b:9f:ce:ce:d0:71:8d:32:dd:0f:78:96:d2:27: af:0e:c6:21:02:01:9d:2b:6d:c2:1d:20:77:f7:3c: c3:14:6f:cb:bf:fa:a1:f9:ef:ff:6a:da:dc:4d:82: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9B:35:95:DC:4D:72:5A:5C:A3:03:66:4E:80:39:09:8D:A7:F7:E3 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b9:ad:b9:64:b8:b0:5e:a4:62:37:7f:f3:66:96:94:46:d6: f6:53:39:e5:03:4f:17:09:6e:fb:22:9e:e5:e4:f2:35:a0:f6: f6:87:74:df:65:15:7b:e5:08:cb:f9:cc:85:37:b2:ba:0e:72: cb:bb:ac:74:af:8e:f1:50:ca:1a:c0:ab:21:32:cd:21:10:7c: c3:77:6e:87:ed:9b:24:50:84:ec:c4:bc:42:f9:18:fd:48:cf: aa:7e:8f:d9:6d:ac:5e:87:3f:5d:92:c2:a3:c7:a7:c8:94:99: b6:51:57:aa:5f:ba:cf:87:81:e2:ce:59:e4:9e:03:b5:4f:b3: aa:d0:f9:52:73:be:5c:86:d8:6c:f7:5e:58:40:9d:63:ea:ff: fc:d4:07:a7:b3:1a:9c:e2:a0:71:22:74:d2:c3:4e:5e:ce:48: a7:c0:fc:4d:27:07:02:f6:96:9d:31:8f:08:4b:79:a0:d0:7b: 9d:02:91:3e:09:eb:f3:7f:31:e5:74:b9:62:f6:93:d3:36:00: 85:8d:9a:ad:21:42:2d:73:e2:29:d0:df:c5:55:f3:84:b5:34: 1b:12:eb:91:8f:76:48:5e:0a:e1:fc:2f:c6:85:b0:ff:00:04: d0:da:be:3a:a9:f5:a4:68:eb:c5:19:3f:51:34:c6:13:17:4d: 06:c2:09:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ77mIaEvlY5vSAc0Ez55mppqBFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA3MTcxMzEwMjNaFw0yNjA3MTgxNDIyMjNaMDMxMTAvBgNV BAMTKDlCOUIzNTk1REM0RDcyNUE1Q0EzMDM2NjRFODAzOTA5OERBN0Y3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgx0PedZGhUrHC6qcZctP5hic zmtXh8rnp/WLOiDZc90/AJHxm1tynAkeh/iELgTmDp+hVFU88yhzF3Us+KYArmfG GkKbjSXXX1BsFRhoA/cWjHb8NOE+eOxfw987Gr/9LttSsq11OkgfnpxSVu96hi7a X359aRAX0UDKoee4FM+cOdwJyPA+VmHQONm5UmcyWlZ6RgalmBd2X1fHVTLeJTpC c+y2NdIllnELxUYos0JTrmqC8N3/Z9ARQ9//OVC4iChJvmlbWjXI4aTIk7Ev0Io7 n87O0HGNMt0PeJbSJ68OxiECAZ0rbcIdIHf3PMMUb8u/+qH57/9q2txNgmRHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUm5s1ldxNclpcowNmToA5CY2n9+MwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLmtuWS4sF6kYjd/82aW lEbW9lM55QNPFwlu+yKe5eTyNaD29od032UVe+UIy/nMhTeyug5yy7usdK+O8VDK GsCrITLNIRB8w3duh+2bJFCE7MS8QvkY/UjPqn6P2W2sXoc/XZLCo8enyJSZtlFX ql+6z4eB4s5Z5J4DtU+zqtD5UnO+XIbYbPdeWECdY+r//NQHp7ManOKgcSJ00sNO Xs5Ip8D8TScHAvaWnTGPCEt5oNB7nQKRPgnr838x5XS5YvaT0zYAhY2arSFCLXPi KdDfxVXzhLU0GxLrkY92SF4K4fwvxoWw/wAE0Nq+Oqn1pGjrxRk/UTTGExdNBsIJ Rg== -----END CERTIFICATE-----Generated at Sat Jul 18 01:49:01 2026 by rpki-client