$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: MSy6WOQRzYQyGhmWzMX+vefHF3TCkXdBTISc/ou9T1k= Subject key identifier: 01:79:22:DB:98:F5:F9:F0:47:36:51:35:F7:17:D7:27:87:72:99:A4 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 46196AD863A62D4B253F84C0C1A85462B7D9FCF1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: D4 Signing time: Sat 18 Apr 2026 10:04:06 +0000 Manifest this update: Sat 18 Apr 2026 09:59:06 +0000 Manifest next update: Sun 19 Apr 2026 12:36:06 +0000 Files and hashes: 1: 326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa (hash: VcVUsrYac0pzWJK2F7lpmFfvFDL2ZKG/uypN2LdY9f4=) 2: 326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (hash: q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=) 3: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: i3EIq96Z0h/Zb/ed09oBdYc3BqSvaLWh0TSX1OvU+PY=) 4: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) 5: 326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa (hash: rhL38qg/W10yIpndI3LKqIuuEEEeF98B/XXYMapKGsI=) 6: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) 7: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=) 8: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=) 9: 326130363a313238333a383931363a3a2f34382d3438203d3e20323133343133.roa (hash: xUGvIyx/a5N+LcKm4jRlraXDt9i9y3juhfko91grU4U=) 10: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 11: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=) 12: 326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa (hash: VEluBfu+UVgZrxSe1UipoTLy1fiGHxv2QDcCVFCjUkc=) 13: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=) 14: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 15: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) 16: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 12:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:19:6a:d8:63:a6:2d:4b:25:3f:84:c0:c1:a8:54:62:b7:d9:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Apr 18 09:59:06 2026 GMT Not After : Apr 19 12:36:06 2026 GMT Subject: CN=017922DB98F5F9F047365135F717D727877299A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:e1:3d:b3:b6:ab:7d:6d:47:ac:ec:48:f7: ee:1c:07:49:20:cc:a9:a4:3c:db:01:02:1f:0f:6d: 1c:80:dd:bf:2b:31:d7:35:25:f5:ea:f1:9c:7c:10: 47:e1:09:86:bd:cc:ff:bd:c7:63:59:0a:eb:e7:bf: 51:36:16:39:0e:4b:55:74:98:ea:85:d6:8b:ae:3c: 06:55:28:28:f7:a0:ed:eb:58:db:fa:3a:1d:e5:1d: 20:7e:7e:78:61:82:2a:85:bb:de:7c:f7:49:17:50: 48:f5:a1:b1:e5:c2:6e:7a:c6:4a:4a:a4:bf:5d:4a: f2:33:62:03:14:7d:08:0b:17:bb:2e:39:13:d6:8a: 01:19:7e:0a:5c:10:d0:54:ca:3a:5e:4e:2f:7d:54: da:82:79:5a:e8:1b:aa:bd:42:5d:db:94:cf:86:21: 3c:70:90:fd:7f:62:95:e9:37:26:b0:a2:7c:f1:06: e4:72:be:48:cd:79:b4:51:1c:4a:08:1e:c0:15:0f: 5e:de:e2:55:dc:9c:aa:29:c9:5f:44:d5:77:6b:f0: 4f:54:96:08:ff:c9:b2:99:50:00:a1:d5:a7:68:a5: 29:ec:a9:1c:1d:c0:a4:db:94:c6:1c:98:ca:8d:b3: d4:1f:3c:d6:b3:ca:23:7c:58:34:01:c6:cc:1d:b8: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:22:DB:98:F5:F9:F0:47:36:51:35:F7:17:D7:27:87:72:99:A4 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:cd:20:da:93:3d:f2:d9:91:04:f0:9d:60:75:df:e5:cc: e0:14:3b:16:63:42:c6:eb:bc:81:5d:89:1b:0b:08:54:71:7c: 27:59:2b:a2:75:be:dd:c1:cb:ce:d8:15:7f:35:52:01:cd:30: f8:b2:3e:d9:a5:9a:88:99:4d:a3:3d:05:23:9c:99:20:ec:bd: 2d:19:29:5e:0d:41:d8:0a:7a:48:f9:7b:56:38:d8:86:bc:c6: d5:26:7c:93:d2:12:f8:fa:e2:ed:ab:0e:61:da:e2:f2:c0:16: ae:c0:c6:88:bc:98:af:ec:f4:cd:07:9d:ae:22:d2:ff:93:88: c3:be:4a:35:16:b5:13:e5:57:45:0e:1a:4e:37:73:48:1a:df: c3:4b:92:1a:70:8b:97:1e:b6:14:02:91:bc:7f:07:64:6d:ff: 7a:08:27:6c:eb:7d:42:b7:d9:3b:27:50:c8:5e:db:84:75:10: 52:9e:1e:02:ed:36:b9:77:6c:a9:ac:48:c1:42:c4:65:eb:2a: d5:51:f4:42:05:62:c5:95:2d:49:d6:ea:15:07:d7:31:13:32: 27:3e:92:61:3f:92:18:c9:65:dc:f9:16:4c:0e:a5:51:75:80: 6f:76:28:3f:1d:f5:6f:47:93:7d:e1:77:eb:52:6d:29:07:5d: f9:7a:4d:df -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURhlq2GOmLUslP4TAwahUYrfZ/PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA0MTgwOTU5MDZaFw0yNjA0MTkxMjM2MDZaMDMxMTAvBgNV BAMTKDAxNzkyMkRCOThGNUY5RjA0NzM2NTEzNUY3MTdENzI3ODc3Mjk5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QuE9s7arfW1HrOxI9+4cB0kg zKmkPNsBAh8PbRyA3b8rMdc1JfXq8Zx8EEfhCYa9zP+9x2NZCuvnv1E2FjkOS1V0 mOqF1ouuPAZVKCj3oO3rWNv6Oh3lHSB+fnhhgiqFu95890kXUEj1obHlwm56xkpK pL9dSvIzYgMUfQgLF7suORPWigEZfgpcENBUyjpeTi99VNqCeVroG6q9Ql3blM+G ITxwkP1/YpXpNyawonzxBuRyvkjNebRRHEoIHsAVD17e4lXcnKopyV9E1Xdr8E9U lgj/ybKZUACh1adopSnsqRwdwKTblMYcmMqNs9QfPNazyiN8WDQBxswduOB5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAXki25j1+fBHNlE19xfXJ4dymaQwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB72s0g 2pM98tmRBPCdYHXf5czgFDsWY0LG67yBXYkbCwhUcXwnWSuidb7dwcvO2BV/NVIB zTD4sj7ZpZqImU2jPQUjnJkg7L0tGSleDUHYCnpI+XtWONiGvMbVJnyT0hL4+uLt qw5h2uLywBauwMaIvJiv7PTNB52uItL/k4jDvko1FrUT5VdFDhpON3NIGt/DS5Ia cIuXHrYUApG8fwdkbf96CCds631Ct9k7J1DIXtuEdRBSnh4C7Ta5d2yprEjBQsRl 6yrVUfRCBWLFlS1J1uoVB9cxEzInPpJhP5IYyWXc+RZMDqVRdYBvdig/HfVvR5N9 4XfrUm0pB135ek3f -----END CERTIFICATE-----Generated at Sat Apr 18 23:51:59 2026 by rpki-client