$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: opz24UcJX4+gvV9K4CdmUSudrpzXFWeMfjPvxVEDmJ8= Subject key identifier: 3B:D3:AE:7D:4B:45:E2:66:A6:AF:91:49:AC:50:40:21:34:47:B0:9F Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 1BB69517E471BA13C4279CAB476CE693986111EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 8A Signing time: Sat 18 Apr 2026 08:34:54 +0000 Manifest this update: Sat 18 Apr 2026 08:29:54 +0000 Manifest next update: Sun 19 Apr 2026 12:31:54 +0000 Files and hashes: 1: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 2: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 3: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 4: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 5: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 6: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 7: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 8: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 9: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: a5rNifXx4uSdGYO5Eo9JEuOuaLz5Vp2nVi/8CObSEug=) 10: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 11: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 12: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 13: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:95:17:e4:71:ba:13:c4:27:9c:ab:47:6c:e6:93:98:61:11:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Apr 18 08:29:54 2026 GMT Not After : Apr 19 12:31:54 2026 GMT Subject: CN=3BD3AE7D4B45E266A6AF9149AC5040213447B09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:76:ae:77:d3:77:5d:30:cf:03:e4:36:aa: 10:c1:65:62:50:b1:ae:8f:f6:69:b0:26:67:fc:da: ef:0f:5c:07:c9:99:42:4e:0e:8b:e4:1c:90:52:19: 62:14:ea:db:f5:0c:c4:3b:a4:e0:69:7f:80:19:82: 2a:c5:a5:61:26:37:70:08:fd:47:ae:32:c8:7c:7f: ee:50:51:e6:f7:a5:cb:c2:6d:8b:06:f2:96:53:d0: 25:f5:ff:4e:f7:bd:ab:a9:60:c7:2d:c2:e9:af:fc: aa:02:93:e6:9f:49:b8:1e:6e:4e:ce:30:34:93:d0: 98:36:73:d6:67:db:80:cc:fe:fd:40:71:ef:f2:1a: 64:e9:be:43:ba:2e:65:61:90:bc:c1:8d:0d:2f:2e: b1:79:8d:63:83:cf:e2:63:a1:3c:f3:54:49:6e:4c: 0e:74:0b:e7:b3:c1:40:60:4d:44:91:04:e9:4f:9e: 69:a7:76:77:e3:13:03:bd:ba:dc:ee:c5:01:06:3e: 6c:06:5f:a2:9f:e5:c9:c9:fb:27:21:51:31:f6:2a: f6:bd:e7:aa:e4:2c:b1:43:cd:e3:64:3d:73:f8:df: 5c:df:f0:3e:ea:6d:cd:fb:1c:3e:32:c8:9f:53:8b: 2f:35:a4:04:9e:8a:4c:66:d7:08:e1:6c:95:ca:de: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:AE:7D:4B:45:E2:66:A6:AF:91:49:AC:50:40:21:34:47:B0:9F X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b5:1c:2f:e4:a4:6d:7f:d0:a7:87:dc:c6:a4:7f:0d:7d:31: 8b:94:e1:0b:1b:a7:88:f4:0e:a9:8a:1c:5f:e5:a2:fa:c9:53: 4d:4b:27:70:a6:fe:2e:24:c4:6f:b2:10:73:d2:7e:23:54:a8: 9c:4b:d5:14:a3:33:2f:bf:aa:22:61:35:4f:3a:5d:c5:78:f5: 5f:5e:09:35:c7:53:f6:27:51:8e:99:27:bd:98:e9:17:cb:22: f1:94:35:59:17:6b:6e:aa:3c:1a:0e:61:3c:16:e6:b4:9f:0f: ac:dc:46:d2:8f:0e:82:26:90:48:7d:6a:66:84:e4:e5:b7:2f: 2c:72:cb:53:68:08:9f:7a:31:29:90:80:ad:33:6c:dc:20:05: f1:46:c7:c7:ad:87:84:d9:cd:4a:11:a2:da:cd:64:2e:3b:6b: 08:98:3b:d6:ac:78:73:86:f8:24:e7:5c:55:ec:ec:18:03:64: b0:2a:bd:83:3e:d5:7f:4e:05:63:b3:68:44:82:81:0a:56:9a: 5d:15:e7:c2:64:50:42:6b:b2:54:ea:38:4b:51:a7:b5:87:bf: 56:76:d2:f3:f0:87:37:bc:57:c4:3f:f6:62:6c:2f:e0:9e:8b: f8:06:ff:ad:89:21:ad:9d:c6:2b:d9:55:c8:93:1f:ba:c7:f4: 56:1a:4d:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG7aVF+RxuhPEJ5yrR2zmk5hhEe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA0MTgwODI5NTRaFw0yNjA0MTkxMjMxNTRaMDMxMTAvBgNV BAMTKDNCRDNBRTdENEI0NUUyNjZBNkFGOTE0OUFDNTA0MDIxMzQ0N0IwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44Xaud9N3XTDPA+Q2qhDBZWJQ sa6P9mmwJmf82u8PXAfJmUJODovkHJBSGWIU6tv1DMQ7pOBpf4AZgirFpWEmN3AI /UeuMsh8f+5QUeb3pcvCbYsG8pZT0CX1/073vaupYMctwumv/KoCk+afSbgebk7O MDST0Jg2c9Zn24DM/v1Ace/yGmTpvkO6LmVhkLzBjQ0vLrF5jWODz+JjoTzzVElu TA50C+ezwUBgTUSRBOlPnmmndnfjEwO9utzuxQEGPmwGX6Kf5cnJ+ychUTH2Kva9 56rkLLFDzeNkPXP431zf8D7qbc37HD4yyJ9Tiy81pASeikxm1wjhbJXK3o4/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUO9OufUtF4mamr5FJrFBAITRHsJ8wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLUcL+SkbX/Qp4fcxqR/ DX0xi5ThCxuniPQOqYocX+Wi+slTTUsncKb+LiTEb7IQc9J+I1SonEvVFKMzL7+q ImE1TzpdxXj1X14JNcdT9idRjpknvZjpF8si8ZQ1WRdrbqo8Gg5hPBbmtJ8PrNxG 0o8OgiaQSH1qZoTk5bcvLHLLU2gIn3oxKZCArTNs3CAF8UbHx62HhNnNShGi2s1k LjtrCJg71qx4c4b4JOdcVezsGANksCq9gz7Vf04FY7NoRIKBClaaXRXnwmRQQmuy VOo4S1GntYe/VnbS8/CHN7xXxD/2Ymwv4J6L+Ab/rYkhrZ3GK9lVyJMfusf0VhpN BQ== -----END CERTIFICATE-----Generated at Sat Apr 18 19:40:58 2026 by rpki-client