$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft File: 75F554161E3D1197F4F9B22E7171E99E87BEB830.mft (raw, json) Hash identifier: QZzmmVVOGRnhC98BnMfOGyfsvTgOK3YI0HDC3mmFXGc= Subject key identifier: 25:DC:0E:1C:DC:3D:D6:CE:B7:5F:03:9A:D1:C8:0F:45:BF:65:39:63 Authority key identifier: 75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30 Certificate issuer: /CN=75F554161E3D1197F4F9B22E7171E99E87BEB830 Certificate serial: 6125846A195F86A480C80597F2BAC864F8CE0D96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft Manifest number: 6B Signing time: Mon 20 Apr 2026 08:13:59 +0000 Manifest this update: Mon 20 Apr 2026 08:08:59 +0000 Manifest next update: Tue 21 Apr 2026 11:44:59 +0000 Files and hashes: 1: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134343230.roa (hash: 1nc15sBmXGLcJ+vZKUEIDElcwAMIwyX0sJw3OiBW5oM=) 2: 75F554161E3D1197F4F9B22E7171E99E87BEB830.crl (hash: GnPBN1XIRKxoLASTiQl84d8PPWoiB2jNCcT/gKUaPow=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:84:6a:19:5f:86:a4:80:c8:05:97:f2:ba:c8:64:f8:ce:0d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F554161E3D1197F4F9B22E7171E99E87BEB830 Validity Not Before: Apr 20 08:08:59 2026 GMT Not After : Apr 21 11:44:59 2026 GMT Subject: CN=25DC0E1CDC3DD6CEB75F039AD1C80F45BF653963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:d8:fa:d2:73:3b:24:25:26:d7:3c:15:1b: 93:6e:f8:ca:84:5d:c1:29:82:38:48:b9:b6:2f:88: e8:f6:ed:e8:0f:4b:42:84:a6:fa:6a:97:a8:1f:fb: 51:ab:fa:85:a6:3a:9a:67:76:d4:a9:6b:ea:ae:ee: ea:cd:b2:7e:8c:74:71:d5:4f:47:81:63:35:94:8e: d7:33:bb:3d:68:8f:62:d6:19:e2:d7:7b:52:99:7a: 9a:e2:dd:9a:5d:35:44:d0:4d:82:73:3b:aa:e6:cb: 82:db:89:6c:0d:0a:27:64:fc:90:78:f8:3a:f9:bf: 3c:eb:05:0d:45:84:1e:62:f8:9c:09:7f:49:a3:b1: 69:fc:0c:40:b7:28:c9:67:92:b5:66:35:a9:d7:52: 86:a4:14:4c:53:79:2e:13:17:f8:27:5e:c8:31:42: c7:6f:4a:44:88:e7:3f:85:3f:af:83:4d:88:6c:b7: 4f:23:09:87:38:15:18:e4:c1:94:f7:e1:02:ec:59: da:37:c3:6e:53:7b:b9:c6:8e:88:49:cb:6d:ac:7b: 22:9e:23:3d:33:a8:b5:7a:90:8d:2e:71:3a:16:2d: e1:cb:b3:30:53:87:86:b9:aa:4b:33:2d:ef:7b:82: 8d:59:7c:a6:32:f8:6c:87:04:f4:ad:21:45:08:f4: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:0E:1C:DC:3D:D6:CE:B7:5F:03:9A:D1:C8:0F:45:BF:65:39:63 X509v3 Authority Key Identifier: keyid:75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e6:39:e8:89:a7:a1:a8:7a:d2:40:66:92:1d:e1:85:29:49: 76:f9:28:80:1e:62:46:ce:ce:aa:26:55:85:ca:f2:02:3c:73: f9:fd:a2:2f:13:43:b9:96:b3:fe:9c:fc:b3:a2:31:ff:65:2e: ed:ee:6a:8f:72:16:ef:7c:ce:ee:48:1b:86:fe:74:de:f5:df: 96:74:5e:89:2b:15:03:e6:84:2d:6f:e9:b1:55:05:ca:75:29: 4d:e0:3d:cd:d1:b6:e7:b0:30:19:57:57:b6:68:83:67:6a:d7: 7a:56:a2:58:54:ca:be:ea:94:a5:cf:20:4e:14:df:02:ca:cd: 28:35:c4:2e:ed:d8:87:e6:92:42:70:cb:21:d9:3c:bb:dc:4d: 32:ac:96:4f:92:b2:d2:48:68:26:09:a6:30:1e:30:4c:b8:c6: e0:40:53:e3:06:75:55:6b:11:8b:c7:2a:ac:82:ad:c7:bb:09: 7b:67:29:21:14:b0:a7:dd:d4:4f:6b:3e:35:10:81:aa:44:fb: 7b:08:b2:e3:eb:f3:ac:0b:b5:b1:ff:5b:56:88:3d:72:03:38: 79:7b:a9:19:0d:13:96:59:8d:39:6e:b5:09:fd:7f:90:5f:66: e6:d4:15:a8:15:d0:5c:70:ea:bc:cd:77:70:ec:fd:53:80:2b: 48:94:14:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYSWEahlfhqSAyAWX8rrIZPjODZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGNTU0MTYxRTNEMTE5N0Y0RjlCMjJFNzE3MUU5OUU4 N0JFQjgzMDAeFw0yNjA0MjAwODA4NTlaFw0yNjA0MjExMTQ0NTlaMDMxMTAvBgNV BAMTKDI1REMwRTFDREMzREQ2Q0VCNzVGMDM5QUQxQzgwRjQ1QkY2NTM5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxNj60nM7JCUm1zwVG5Nu+MqE XcEpgjhIubYviOj27egPS0KEpvpql6gf+1Gr+oWmOppndtSpa+qu7urNsn6MdHHV T0eBYzWUjtczuz1oj2LWGeLXe1KZepri3ZpdNUTQTYJzO6rmy4LbiWwNCidk/JB4 +Dr5vzzrBQ1FhB5i+JwJf0mjsWn8DEC3KMlnkrVmNanXUoakFExTeS4TF/gnXsgx QsdvSkSI5z+FP6+DTYhst08jCYc4FRjkwZT34QLsWdo3w25Te7nGjohJy22seyKe Iz0zqLV6kI0ucToWLeHLszBTh4a5qkszLe97go1ZfKYy+GyHBPStIUUI9EKDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJdwOHNw91s63XwOa0cgPRb9lOWMwHwYDVR0j BBgwFoAUdfVUFh49EZf0+bIucXHpnoe+uDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzEvNzVGNTU0MTYxRTNEMTE5N0Y0RjlCMjJFNzE3MUU5OUU4N0JFQjgzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83NUY1NTQxNjFFM0QxMTk3RjRGOUIyMkU3 MTcxRTk5RTg3QkVCODMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyN2I1ZWY3LWQxMjEtNGFlMi1iYWI2LTQxMGQyMDUzNDliOC8xLzc1RjU1NDE2 MUUzRDExOTdGNEY5QjIyRTcxNzFFOTlFODdCRUI4MzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCk5jno iaehqHrSQGaSHeGFKUl2+SiAHmJGzs6qJlWFyvICPHP5/aIvE0O5lrP+nPyzojH/ ZS7t7mqPchbvfM7uSBuG/nTe9d+WdF6JKxUD5oQtb+mxVQXKdSlN4D3N0bbnsDAZ V1e2aINnatd6VqJYVMq+6pSlzyBOFN8Cys0oNcQu7diH5pJCcMsh2Ty73E0yrJZP krLSSGgmCaYwHjBMuMbgQFPjBnVVaxGLxyqsgq3Huwl7ZykhFLCn3dRPaz41EIGq RPt7CLLj6/OsC7Wx/1tWiD1yAzh5e6kZDROWWY05brUJ/X+QX2bm1BWoFdBccOq8 zXdw7P1TgCtIlBRa -----END CERTIFICATE-----Generated at Mon Apr 20 10:53:50 2026 by rpki-client