$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: aKQ3InPLHfUHrtR/b4f1aHDfT0j1mZxuq7OuZ6JpanM= Subject key identifier: 9E:59:49:08:57:03:1E:D2:40:05:15:A1:44:86:28:25:A2:B4:31:D1 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 39717CAE16D8A288486E4276B9468D98F77C0F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 018A Signing time: Sun 25 Oct 2026 12:17:12 +0000 Manifest this update: Sun 25 Oct 2026 12:12:12 +0000 Manifest next update: Mon 26 Oct 2026 13:21:12 +0000 Files and hashes: 1: 38312e3139392e32382e302f32342d3234203d3e203633333532.roa (hash: EDPc+a+sY0tztsfTW3G6u4Wl4dcCJplDRGtTdOEkIrQ=) 2: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: 33SOFhBXuBaboJJED7mdIrQvTkgO2ayQw3ATmDGBkWo=) 3: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 4: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 5: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 6: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 7: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 8: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 9: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 10: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 11: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 12: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 13: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 13:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:71:7c:ae:16:d8:a2:88:48:6e:42:76:b9:46:8d:98:f7:7c:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Oct 25 12:12:12 2026 GMT Not After : Oct 26 13:21:12 2026 GMT Subject: CN=9E59490857031ED2400515A144862825A2B431D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:ac:e7:9c:5a:8c:ce:5d:9c:73:f7:5d:a0: 38:ef:0e:03:37:cb:a9:99:13:10:fa:06:f1:8e:e3: e1:18:2b:bb:a1:5c:67:ae:88:12:b7:bd:eb:f0:98: 10:f1:83:37:f7:c3:c0:f2:5f:5e:3d:2b:43:87:4c: a7:52:bc:ef:6d:05:73:a5:b9:3d:7f:bb:44:40:d5: 15:49:82:2b:21:97:b8:17:74:c1:7c:b4:b7:bd:12: 7d:bc:bb:89:f8:ff:4f:67:33:7c:1c:a7:e2:7a:09: 35:96:92:10:d2:af:b8:83:22:d4:2d:a0:d6:11:f1: 80:32:06:12:d0:a5:a2:31:ad:cc:5d:e3:a7:b3:be: a5:52:02:07:d6:49:a2:c5:8b:d7:41:f5:35:c1:ee: 56:fc:a9:09:de:68:28:c9:4c:2e:a5:55:f4:79:5b: 41:2a:32:d4:9a:90:20:c5:bb:f8:1c:91:2e:8b:2f: 28:0c:52:8c:7c:3b:df:c9:a0:b6:ab:c2:9e:f1:1d: ba:e6:37:9b:90:5f:e6:19:f4:c3:ec:8b:dc:aa:9f: 6d:c6:c7:1a:76:62:ee:9f:47:00:53:13:32:16:6d: 70:eb:5c:3a:61:bf:b7:4b:14:c1:ef:e7:60:88:a5: ec:47:60:9a:e2:22:2e:d0:15:62:49:92:3c:a3:e1: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:59:49:08:57:03:1E:D2:40:05:15:A1:44:86:28:25:A2:B4:31:D1 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2f:c1:ad:8c:90:2a:a9:b0:28:cc:00:c1:a5:69:e0:ee:6f: 99:94:b6:89:13:7d:48:e7:1d:a8:2a:59:fe:1f:55:68:1a:64: 0f:0f:9c:3f:d9:3b:10:05:dd:45:37:56:d3:34:ad:10:02:ab: 30:bc:c7:8e:1a:58:6c:b9:16:77:44:04:cc:b3:e4:7c:f0:99: 7f:57:f0:0d:25:9a:67:70:b2:c3:e2:83:c1:a1:7e:7b:d2:a0: 63:0c:8c:d8:f0:23:37:b7:24:ac:6c:84:16:df:28:58:03:38: 93:0b:85:59:63:ce:6d:49:af:cd:9a:b5:f4:83:3b:85:95:0b: b9:ac:d5:d5:a5:73:8b:84:f2:aa:cb:fd:61:c7:27:9a:49:de: 9d:d0:4f:48:66:4e:29:28:e7:f3:eb:da:11:90:9d:d2:47:83: bd:e5:d7:b0:08:fa:67:4f:0c:0e:6a:87:41:cd:96:d0:19:8e: 8f:c5:c4:d7:de:39:6a:15:ac:25:a1:9a:98:89:3d:08:f2:25: a5:de:c6:63:b3:ab:cf:e6:26:49:1f:9e:0e:ef:2a:ab:10:f3: 06:72:fa:59:80:7e:88:b9:c5:36:08:38:5d:40:cb:33:a1:90: 6d:6d:4d:03:67:6b:63:f9:2d:73:7a:94:77:93:b9:cc:da:15: d3:1b:5e:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOXF8rhbYoohIbkJ2uUaNmPd8DywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjEwMjUxMjEyMTJaFw0yNjEwMjYxMzIxMTJaMDMxMTAvBgNV BAMTKDlFNTk0OTA4NTcwMzFFRDI0MDA1MTVBMTQ0ODYyODI1QTJCNDMxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWaznnFqMzl2cc/ddoDjvDgM3 y6mZExD6BvGO4+EYK7uhXGeuiBK3vevwmBDxgzf3w8DyX149K0OHTKdSvO9tBXOl uT1/u0RA1RVJgishl7gXdMF8tLe9En28u4n4/09nM3wcp+J6CTWWkhDSr7iDItQt oNYR8YAyBhLQpaIxrcxd46ezvqVSAgfWSaLFi9dB9TXB7lb8qQneaCjJTC6lVfR5 W0EqMtSakCDFu/gckS6LLygMUox8O9/JoLarwp7xHbrmN5uQX+YZ9MPsi9yqn23G xxp2Yu6fRwBTEzIWbXDrXDphv7dLFMHv52CIpexHYJriIi7QFWJJkjyj4UFPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnllJCFcDHtJABRWhRIYoJaK0MdEwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai/BrYyQKqmwKMwAwaVp 4O5vmZS2iRN9SOcdqCpZ/h9VaBpkDw+cP9k7EAXdRTdW0zStEAKrMLzHjhpYbLkW d0QEzLPkfPCZf1fwDSWaZ3Cyw+KDwaF+e9KgYwyM2PAjN7ckrGyEFt8oWAM4kwuF WWPObUmvzZq19IM7hZULuazV1aVzi4Tyqsv9YccnmknendBPSGZOKSjn8+vaEZCd 0keDveXXsAj6Z08MDmqHQc2W0BmOj8XE1945ahWsJaGamIk9CPIlpd7GY7Orz+Ym SR+eDu8qqxDzBnL6WYB+iLnFNgg4XUDLM6GQbW1NA2drY/ktc3qUd5O5zNoV0xte RQ== -----END CERTIFICATE-----Generated at Mon Oct 26 04:06:04 2026 by rpki-client