$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: njJ9ZF8IY68jt5+c2Ra+lj+SPJ8lFkSU9Be3+z9wGt0= Subject key identifier: 1E:1D:2D:DB:A1:18:F1:9A:0F:63:46:A1:08:03:60:82:AD:05:E7:E6 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 4B5C34745178EB6B00B29F4F279B6F60620E39D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 013E Signing time: Mon 31 Aug 2026 13:13:44 +0000 Manifest this update: Mon 31 Aug 2026 13:08:44 +0000 Manifest next update: Tue 01 Sep 2026 15:04:44 +0000 Files and hashes: 1: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 2: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 3: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 4: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 5: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 6: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 7: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 8: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 9: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: ZtMErZ3ugW/clnMO1uBKtARyLr6IqOZimgBNTMfTKL8=) 10: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 11: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 12: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 13: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 15:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5c:34:74:51:78:eb:6b:00:b2:9f:4f:27:9b:6f:60:62:0e:39:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Aug 31 13:08:44 2026 GMT Not After : Sep 1 15:04:44 2026 GMT Subject: CN=1E1D2DDBA118F19A0F6346A108036082AD05E7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:e1:ce:aa:4b:eb:e6:2a:f6:e7:97:fb:05: 03:2f:07:2d:b4:d9:44:a3:16:d5:13:93:68:b8:3e: 40:84:0c:46:4f:36:83:54:19:3c:2e:4f:1c:da:b7: d5:0a:ae:3a:b7:86:bb:80:7f:73:bc:eb:15:87:d4: d6:a2:7e:51:b3:40:9a:2f:a9:1a:d0:9a:04:a5:01: 08:b1:68:9e:bb:54:73:0e:87:5a:4d:31:bd:7c:1f: b2:ab:e4:34:b3:78:43:5e:07:f4:11:25:6b:37:8f: 91:c5:8d:18:ff:c3:da:99:b1:0d:4a:0f:01:1e:ae: bf:f6:a3:db:71:52:91:e3:d1:26:1f:d0:b2:40:16: dd:6a:b4:a1:a1:26:a2:21:c1:c5:ff:e4:a1:c5:7c: db:f8:9a:f7:a7:d1:0e:4f:6e:fe:0e:2f:c7:64:3d: b7:b1:c7:34:d1:13:05:58:7c:3d:53:30:1e:5b:0f: dc:9a:34:23:76:01:4f:45:30:bc:f0:62:a4:de:42: 0c:34:d8:17:85:6d:8a:3c:b4:75:a3:31:b2:b6:58: 6b:66:83:8b:a2:0d:84:94:d6:c1:9e:da:54:ea:7a: 1d:ee:53:da:1d:6b:c3:b8:08:94:35:b2:f5:7d:99: fc:39:0d:b5:18:85:00:f4:41:9f:c3:e6:40:64:7d: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1D:2D:DB:A1:18:F1:9A:0F:63:46:A1:08:03:60:82:AD:05:E7:E6 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:99:73:41:09:eb:8e:86:61:3d:cd:58:fe:cc:25:89:62:cd: c4:01:ad:14:e6:13:9c:9b:8c:c4:a1:ad:2d:45:14:01:f1:15: 52:38:fe:a6:b7:1b:01:5d:e9:67:19:6f:f6:4c:9c:83:c0:36: 71:9b:9e:7c:a5:9f:25:72:dc:c8:a1:e7:20:30:2e:71:34:c1: 30:7a:8f:98:a5:13:c2:a6:fb:37:7f:de:0e:d1:e6:25:33:4f: 68:cf:56:a3:a0:bf:44:c8:0c:28:a7:86:5a:3d:e6:05:4b:06: 12:7e:57:0f:22:82:1b:ec:ab:33:7b:73:2a:32:1d:ee:51:7f: 16:5b:97:87:21:9a:ab:07:f5:70:61:5a:3e:20:8e:0e:a6:97: 7f:c0:a5:86:5a:dc:d5:71:16:fa:30:34:a6:67:f1:3f:f4:71: ff:17:5d:6f:db:e0:d7:57:d6:ac:23:aa:fe:f7:1a:9b:ce:fe: 5b:b7:4a:85:92:51:6b:4c:0f:27:cb:13:17:48:8c:d9:98:80: d4:dd:fd:94:4a:86:a3:eb:26:dd:fa:f6:65:54:e2:ea:17:32: f4:fd:e1:89:cf:db:0e:44:0a:68:26:0e:8d:b7:02:aa:56:4d: 8a:49:31:0a:fc:ad:e8:f5:03:fc:35:19:df:bc:06:23:1f:4e: 0d:08:4f:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS1w0dFF462sAsp9PJ5tvYGIOOdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA4MzExMzA4NDRaFw0yNjA5MDExNTA0NDRaMDMxMTAvBgNV BAMTKDFFMUQyRERCQTExOEYxOUEwRjYzNDZBMTA4MDM2MDgyQUQwNUU3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnI+HOqkvr5ir255f7BQMvBy20 2USjFtUTk2i4PkCEDEZPNoNUGTwuTxzat9UKrjq3hruAf3O86xWH1NaiflGzQJov qRrQmgSlAQixaJ67VHMOh1pNMb18H7Kr5DSzeENeB/QRJWs3j5HFjRj/w9qZsQ1K DwEerr/2o9txUpHj0SYf0LJAFt1qtKGhJqIhwcX/5KHFfNv4mven0Q5Pbv4OL8dk PbexxzTREwVYfD1TMB5bD9yaNCN2AU9FMLzwYqTeQgw02BeFbYo8tHWjMbK2WGtm g4uiDYSU1sGe2lTqeh3uU9oda8O4CJQ1svV9mfw5DbUYhQD0QZ/D5kBkfXBNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHh0t26EY8ZoPY0ahCANggq0F5+YwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZlzQQnrjoZhPc1Y/swl iWLNxAGtFOYTnJuMxKGtLUUUAfEVUjj+prcbAV3pZxlv9kycg8A2cZuefKWfJXLc yKHnIDAucTTBMHqPmKUTwqb7N3/eDtHmJTNPaM9Wo6C/RMgMKKeGWj3mBUsGEn5X DyKCG+yrM3tzKjId7lF/FluXhyGaqwf1cGFaPiCODqaXf8Clhlrc1XEW+jA0pmfx P/Rx/xddb9vg11fWrCOq/vcam87+W7dKhZJRa0wPJ8sTF0iM2ZiA1N39lEqGo+sm 3fr2ZVTi6hcy9P3hic/bDkQKaCYOjbcCqlZNikkxCvyt6PUD/DUZ37wGIx9ODQhP 3g== -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:17 2026 by rpki-client