$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: 1tDD82/b+l/bwwHjeTV2MIQVzhRISw4U6sYgnMizgUA= Subject key identifier: AB:5C:92:B1:2E:70:E6:70:04:F1:BD:45:8F:73:2F:54:BD:08:AC:68 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 1E379A94EA5EC1F06F87FFDB10FAF845820C7E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 035C Signing time: Thu 15 Oct 2026 17:41:12 +0000 Manifest this update: Thu 15 Oct 2026 17:36:12 +0000 Manifest next update: Fri 16 Oct 2026 19:06:12 +0000 Files and hashes: 1: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: jq49+V9L/myGpsDiPvHbssUlvMfOSNyz6B44ijaCan4=) 2: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: P4AuBQsYLVnrIyTEGNsNBdHkEYx0SPbatkNPI79H8KA=) 3: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) 4: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: dsfGcmcJQswtY9cB3QnNBLneqmF8yKEFmEG/dOKBVMo=) 5: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: vlJfBcwtIKeI7cvrJFR1icwxTkuss/ql4sPRJGgIw+Y=) 6: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 7: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 8: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 9: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 16:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:37:9a:94:ea:5e:c1:f0:6f:87:ff:db:10:fa:f8:45:82:0c:7e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Oct 15 17:36:12 2026 GMT Not After : Oct 16 19:06:12 2026 GMT Subject: CN=AB5C92B12E70E67004F1BD458F732F54BD08AC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:8e:f5:0e:fb:12:a4:78:b8:e8:8f:7f:e0: a8:d5:c4:38:8c:1d:4a:28:83:9f:f8:b6:04:77:62: d0:3e:65:63:30:0d:4c:1e:0d:b2:01:95:57:a4:b4: 50:c0:d4:e8:c8:ad:a5:c9:c8:25:ec:d0:df:c4:d5: 2c:18:62:72:e4:fb:d0:82:99:dd:2e:82:4c:5a:73: fa:93:e3:1d:5e:cb:ea:f0:80:7b:35:2d:a5:54:ac: 8d:ca:3d:30:f8:19:8f:bb:02:e8:bf:97:e1:41:c7: 01:ca:c9:80:15:53:dc:d1:81:63:b2:c8:2c:2e:43: 98:4a:41:d9:ba:78:cc:8f:11:4e:e7:50:cb:6d:37: 4c:17:5a:97:6c:30:bc:f9:b1:b1:b9:be:14:f7:69: ef:c9:3b:51:ac:84:c5:20:e9:60:34:34:ba:06:4d: ba:a0:1f:0b:4b:3b:11:2a:04:ac:54:7a:ff:28:ad: bc:15:25:cf:23:a3:9e:8d:d2:6a:ac:18:17:f1:00: cd:75:e5:7e:f0:e6:52:47:2d:38:e7:55:9c:1e:d2: b8:08:9f:89:59:dc:94:d3:14:c5:94:6c:e1:b9:db: 68:8c:f7:97:89:1b:34:f8:8a:a8:3c:b5:1a:e8:5f: ee:1e:a5:c3:0a:ee:43:b7:d4:30:0b:fc:19:e3:78: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:92:B1:2E:70:E6:70:04:F1:BD:45:8F:73:2F:54:BD:08:AC:68 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:86:98:12:af:a0:ac:60:9e:f3:e9:37:1f:26:1e:cd:bd:9d: 6a:8d:67:26:8a:bb:0f:16:68:b2:d1:4b:41:0f:7c:0e:e9:46: 91:2c:04:3d:3c:7b:68:e5:0f:49:13:02:14:9c:f3:d5:c8:e8: e8:5c:ca:72:0f:5a:4e:0e:27:7c:d9:69:59:63:d0:b7:f5:cd: 0b:a5:fa:02:8e:09:5c:53:97:09:9f:e0:17:3b:be:66:38:70: 69:ef:ce:a2:8a:bb:0e:06:c4:29:72:82:48:51:1d:d6:e3:83: cb:37:a3:59:f1:05:9a:09:78:b8:e7:b2:b8:b1:97:72:9a:45: c6:91:c4:f1:7f:78:57:fb:40:e5:61:ee:e8:86:dc:58:e2:28: 95:8e:56:3f:c0:c0:14:d6:db:58:28:e5:51:2c:a6:7e:9b:49: 99:d0:8f:0c:3b:39:8b:32:45:9f:f5:fb:e5:e6:5c:bd:70:0e: 15:94:65:fb:2b:06:ba:3d:f3:f5:53:fd:4c:c6:98:b4:87:70: be:d2:58:62:56:2a:1c:e6:a5:91:e7:70:95:da:d4:17:bb:1f: 06:1e:43:cf:45:83:4d:f8:1f:33:2a:59:66:fb:75:f8:f9:d2: 6c:5c:59:6f:b6:17:15:64:e9:2d:95:a3:45:b3:82:e0:d8:e9: 38:e4:dc:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHjealOpewfBvh//bEPr4RYIMfkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjEwMTUxNzM2MTJaFw0yNjEwMTYxOTA2MTJaMDMxMTAvBgNV BAMTKEFCNUM5MkIxMkU3MEU2NzAwNEYxQkQ0NThGNzMyRjU0QkQwOEFDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhI71DvsSpHi46I9/4KjVxDiM HUoog5/4tgR3YtA+ZWMwDUweDbIBlVektFDA1OjIraXJyCXs0N/E1SwYYnLk+9CC md0ugkxac/qT4x1ey+rwgHs1LaVUrI3KPTD4GY+7Aui/l+FBxwHKyYAVU9zRgWOy yCwuQ5hKQdm6eMyPEU7nUMttN0wXWpdsMLz5sbG5vhT3ae/JO1GshMUg6WA0NLoG TbqgHwtLOxEqBKxUev8orbwVJc8jo56N0mqsGBfxAM115X7w5lJHLTjnVZwe0rgI n4lZ3JTTFMWUbOG522iM95eJGzT4iqg8tRroX+4epcMK7kO31DAL/BnjeEnvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUq1ySsS5w5nAE8b1Fj3MvVL0IrGgwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioaYEq+grGCe8+k3HyYe zb2dao1nJoq7DxZostFLQQ98DulGkSwEPTx7aOUPSRMCFJzz1cjo6FzKcg9aTg4n fNlpWWPQt/XNC6X6Ao4JXFOXCZ/gFzu+Zjhwae/Oooq7DgbEKXKCSFEd1uODyzej WfEFmgl4uOeyuLGXcppFxpHE8X94V/tA5WHu6IbcWOIolY5WP8DAFNbbWCjlUSym fptJmdCPDDs5izJFn/X75eZcvXAOFZRl+ysGuj3z9VP9TMaYtIdwvtJYYlYqHOal kedwldrUF7sfBh5Dz0WDTfgfMypZZvt1+PnSbFxZb7YXFWTpLZWjRbOC4NjpOOTc Vw== -----END CERTIFICATE-----Generated at Thu Oct 15 21:34:07 2026 by rpki-client