$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: IwtTg6dRS+p+v1PPbTjBGk2v4kJgatndd+QyMVbvYPg= Subject key identifier: 41:81:4D:43:A3:BD:8F:E7:17:B3:52:DD:05:BB:99:FF:27:92:D4:F6 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 5438175339323428F46A8EA7FCF92A0ABAF15847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: C5 Signing time: Tue 02 Jun 2026 00:00:58 +0000 Manifest this update: Mon 01 Jun 2026 23:55:58 +0000 Manifest next update: Wed 03 Jun 2026 03:53:58 +0000 Files and hashes: 1: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 2: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: D4GPq1BtZ9uetGKTeGJTHp97/06slsGaYhL2B1qUZyI=) 3: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 4: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 5: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 6: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 7: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 8: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 9: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 10: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 11: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 12: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 13: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 03:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:38:17:53:39:32:34:28:f4:6a:8e:a7:fc:f9:2a:0a:ba:f1:58:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jun 1 23:55:58 2026 GMT Not After : Jun 3 03:53:58 2026 GMT Subject: CN=41814D43A3BD8FE717B352DD05BB99FF2792D4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:a7:58:bc:ac:a2:76:3b:45:ae:c3:53:b6: 0f:3d:78:c2:89:89:d8:ca:54:58:cd:67:cf:aa:28: ed:23:7a:67:9e:a1:ad:dd:45:60:06:47:0c:76:fd: 6b:63:17:33:65:17:81:d4:a4:4d:06:b5:28:b0:c3: d5:33:88:42:81:54:de:62:bc:69:ab:4a:c9:30:b2: b0:c0:07:e7:ae:5c:6e:3a:b8:eb:53:04:c4:84:fd: 8f:e9:f8:f6:e0:9c:10:df:af:ee:e8:cb:53:b0:6e: 2d:1e:d9:49:18:e2:ac:18:a5:44:ac:60:9e:bd:ba: 40:57:d5:a7:34:ff:34:42:12:43:7d:2b:22:08:a1: 53:59:f6:25:2a:a1:40:3c:4a:1a:26:83:3b:f0:75: 62:ab:ac:73:5a:6d:eb:54:fe:47:d2:79:28:10:9a: b9:fd:65:80:44:34:eb:e9:e4:ad:c2:0b:1e:23:7b: 43:09:3d:d1:ba:44:3e:e9:e3:c3:20:9c:14:d2:05: 80:db:5c:df:d7:10:50:03:2e:dd:d1:97:5d:76:a4: 34:39:96:b5:ed:2c:49:d0:a7:9a:95:86:0e:63:8f: d4:91:df:3c:95:c5:f8:32:74:27:af:a1:16:8c:fd: 66:e6:08:1f:82:d9:ae:59:16:38:71:3c:a9:60:99: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:4D:43:A3:BD:8F:E7:17:B3:52:DD:05:BB:99:FF:27:92:D4:F6 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ed:32:d0:06:8b:27:4b:51:b6:db:b3:6d:a8:97:36:7a:5e: cc:dc:b1:f6:ab:d0:5c:3a:df:b3:3b:1d:2c:5b:1e:02:35:de: b6:a2:0f:03:a6:33:60:3c:8b:c5:ed:81:9b:23:8f:2a:e9:b7: f4:52:52:40:00:46:90:a1:68:52:94:99:45:91:3a:50:61:ec: 33:f6:e0:1e:e4:a5:30:43:20:90:f5:b3:32:57:14:60:1a:03: f8:a6:19:08:07:5a:8e:55:2f:16:61:d9:bd:fb:f6:30:b5:a3: 5b:a2:66:47:38:50:b9:37:45:d1:9e:12:ff:31:6b:aa:e9:f6: da:64:28:d6:df:3a:14:d9:0e:54:a9:b5:54:0c:77:a0:0c:04: b6:5e:1a:28:0f:0b:42:70:e1:6b:9c:f2:13:e7:0c:18:a7:ee: 84:e6:35:6c:80:bc:fd:92:bc:c0:13:ff:2d:1e:79:9a:33:5f: fd:8c:4b:a4:c1:a4:88:e5:f8:98:e5:56:ab:b7:82:33:45:de: dd:3b:e5:97:dd:0a:5c:3e:a0:0d:86:e7:39:eb:eb:38:b4:e3: 40:c8:ec:86:b1:b4:1b:53:11:32:f6:bd:d8:95:f1:1a:ec:c0: 53:40:e1:8b:2f:60:c7:e5:fb:82:e6:ac:bf:b9:23:1e:13:97: 1c:8c:f3:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVDgXUzkyNCj0ao6n/PkqCrrxWEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA2MDEyMzU1NThaFw0yNjA2MDMwMzUzNThaMDMxMTAvBgNV BAMTKDQxODE0RDQzQTNCRDhGRTcxN0IzNTJERDA1QkI5OUZGMjc5MkQ0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/H6dYvKyidjtFrsNTtg89eMKJ idjKVFjNZ8+qKO0jemeeoa3dRWAGRwx2/WtjFzNlF4HUpE0GtSiww9UziEKBVN5i vGmrSskwsrDAB+euXG46uOtTBMSE/Y/p+PbgnBDfr+7oy1Owbi0e2UkY4qwYpUSs YJ69ukBX1ac0/zRCEkN9KyIIoVNZ9iUqoUA8ShomgzvwdWKrrHNabetU/kfSeSgQ mrn9ZYBENOvp5K3CCx4je0MJPdG6RD7p48MgnBTSBYDbXN/XEFADLt3Rl112pDQ5 lrXtLEnQp5qVhg5jj9SR3zyVxfgydCevoRaM/WbmCB+C2a5ZFjhxPKlgmVc/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQYFNQ6O9j+cXs1LdBbuZ/yeS1PYwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO0y0AaLJ0tRttuzbaiX NnpezNyx9qvQXDrfszsdLFseAjXetqIPA6YzYDyLxe2BmyOPKum39FJSQABGkKFo UpSZRZE6UGHsM/bgHuSlMEMgkPWzMlcUYBoD+KYZCAdajlUvFmHZvfv2MLWjW6Jm RzhQuTdF0Z4S/zFrqun22mQo1t86FNkOVKm1VAx3oAwEtl4aKA8LQnDha5zyE+cM GKfuhOY1bIC8/ZK8wBP/LR55mjNf/YxLpMGkiOX4mOVWq7eCM0Xe3Tvll90KXD6g DYbnOevrOLTjQMjshrG0G1MRMva92JXxGuzAU0Dhiy9gx+X7guasv7kjHhOXHIzz 3g== -----END CERTIFICATE-----Generated at Tue Jun 2 21:02:18 2026 by rpki-client