$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json) Hash identifier: 4mMwWLwH0RPdIXsJOjLTrRxoyjPpFZ2biDXrxNt1uxc= Subject key identifier: 7F:D2:98:42:12:CE:1C:47:BD:AB:B5:36:2E:36:BD:1B:B4:5F:99:C0 Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 7D042D99B172E5C01235E3E42BEA97971CA4BE96 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft Manifest number: 0154 Signing time: Mon 20 Apr 2026 00:47:02 +0000 Manifest this update: Mon 20 Apr 2026 00:42:02 +0000 Manifest next update: Tue 21 Apr 2026 02:55:02 +0000 Files and hashes: 1: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: iXnMc+V769vdVg0NEzGcTcO7c12YMN36cAwaBoXuTwg=) 2: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=) 3: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=) 4: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: MNCqr3Z7QXiBSOwJLkauFepQ5rDCrgle22paROrNRp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 02:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:2d:99:b1:72:e5:c0:12:35:e3:e4:2b:ea:97:97:1c:a4:be:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Apr 20 00:42:02 2026 GMT Not After : Apr 21 02:55:02 2026 GMT Subject: CN=7FD2984212CE1C47BDABB5362E36BD1BB45F99C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:bc:de:51:3a:a9:21:20:17:95:41:e0:7e: f2:9c:35:a7:9a:2f:51:7c:1d:61:cc:45:ec:f2:3a: 23:b6:7c:4d:fc:01:d4:75:40:73:3d:15:c7:91:4d: c3:d4:89:cc:a1:7f:6e:1e:bf:e9:71:37:a2:83:60: 41:76:35:9d:f3:d4:62:bf:eb:d2:aa:88:d0:f1:27: e9:6f:82:2f:32:83:b4:29:97:53:48:35:75:f5:d1: c2:cc:b4:02:5e:eb:23:81:6c:eb:ef:7b:30:a2:88: cd:c8:10:dc:8f:b8:14:64:f6:ed:12:be:99:4c:ea: 38:49:7e:68:c0:23:8e:48:89:44:79:bf:7f:06:6e: 9d:d6:55:bc:74:5c:7f:2e:9b:fd:36:4f:e9:be:2f: f9:b5:27:29:2f:60:66:5c:69:30:44:7c:48:c8:10: d5:fe:d2:cf:7a:cf:f3:24:35:05:a6:6d:d2:1d:97: 48:d5:02:63:02:ea:0a:bf:93:65:8b:d7:0d:1e:32: b7:cc:4d:6a:80:77:56:85:b4:ca:0d:e8:79:ce:a6: bd:4e:ec:a1:1d:a6:7d:25:b4:0a:87:a0:07:09:93: 34:57:bb:61:b8:c1:41:6d:f4:1a:08:9d:4d:4d:30: 6e:53:37:cb:97:c2:44:75:b8:82:00:1a:76:ac:4a: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D2:98:42:12:CE:1C:47:BD:AB:B5:36:2E:36:BD:1B:B4:5F:99:C0 X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:16:ff:28:97:cf:2e:1d:8c:e5:ab:84:64:ee:1c:4f:c5: df:17:a6:88:5a:a2:7f:bb:0d:59:37:b6:ad:10:40:9f:d7:6a: 0c:c0:b2:72:c0:2e:e9:a8:10:b1:94:de:c1:f9:e8:5e:64:78: 98:3c:3b:6c:d7:4f:6e:88:97:f4:56:58:b6:9c:f4:5a:78:94: ed:10:1d:7e:6e:83:7e:30:3b:20:bd:a9:9c:fa:b0:90:a6:c3: dc:e7:02:03:d1:4b:89:ab:97:8f:7d:e4:d7:ce:4e:29:b8:64: ec:14:fd:33:a3:27:b5:2d:87:ec:d6:e2:c1:1b:bb:2d:d4:de: 80:a6:ab:f3:3a:b8:0e:6f:7d:18:0b:34:7f:ea:cb:87:a0:12: da:e0:09:1b:a1:58:32:43:a0:e1:52:11:5a:7f:44:74:01:16: b0:7e:d6:61:2d:f4:15:db:11:3e:30:d2:fd:6e:a0:09:ca:63: cd:e2:c2:f3:fc:aa:9c:aa:93:21:af:78:26:9b:2b:26:e0:c7: 31:5e:16:b7:e6:9c:8d:7d:48:38:f0:be:cd:69:f3:8b:d4:54: 9e:fa:99:b2:b2:7f:45:f9:a0:71:9e:72:94:ac:91:a8:d1:33: dc:a0:66:77:f1:9c:91:d6:c5:d6:59:8f:69:b6:a4:c8:ce:80: fa:a7:e4:b4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfQQtmbFy5cASNePkK+qXlxykvpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjA0MjAwMDQyMDJaFw0yNjA0MjEwMjU1MDJaMDMxMTAvBgNV BAMTKDdGRDI5ODQyMTJDRTFDNDdCREFCQjUzNjJFMzZCRDFCQjQ1Rjk5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC397zeUTqpISAXlUHgfvKcNaea L1F8HWHMRezyOiO2fE38AdR1QHM9FceRTcPUicyhf24ev+lxN6KDYEF2NZ3z1GK/ 69KqiNDxJ+lvgi8yg7Qpl1NINXX10cLMtAJe6yOBbOvvezCiiM3IENyPuBRk9u0S vplM6jhJfmjAI45IiUR5v38Gbp3WVbx0XH8um/02T+m+L/m1JykvYGZcaTBEfEjI ENX+0s96z/MkNQWmbdIdl0jVAmMC6gq/k2WL1w0eMrfMTWqAd1aFtMoN6HnOpr1O 7KEdpn0ltAqHoAcJkzRXu2G4wUFt9BoInU1NMG5TN8uXwkR1uIIAGnasSkyVAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUf9KYQhLOHEe9q7U2Lja9G7RfmcAwHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3 MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEkW/yiXzy4djOWrhGTu HE/F3xemiFqif7sNWTe2rRBAn9dqDMCycsAu6agQsZTewfnoXmR4mDw7bNdPboiX 9FZYtpz0WniU7RAdfm6DfjA7IL2pnPqwkKbD3OcCA9FLiauXj33k185OKbhk7BT9 M6MntS2H7NbiwRu7LdTegKar8zq4Dm99GAs0f+rLh6AS2uAJG6FYMkOg4VIRWn9E dAEWsH7WYS30FdsRPjDS/W6gCcpjzeLC8/yqnKqTIa94JpsrJuDHMV4Wt+acjX1I OPC+zWnzi9RUnvqZsrJ/RfmgcZ5ylKyRqNEz3KBmd/GckdbF1lmPabakyM6A+qfk tA== -----END CERTIFICATE-----Generated at Mon Apr 20 10:53:19 2026 by rpki-client