$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: kPW3TRyYGKZ8r3Q7NWyIZTg6hMX9IhhuCiWQwMfL2Qg= Subject key identifier: 2E:EC:AD:D6:31:1F:93:33:6A:DF:F5:E1:E0:F9:6D:BD:C8:CC:50:14 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 1B3D73ADAC23946F0BBDD3C0EF8BC2D10C5DC66C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 0304 Signing time: Wed 12 Aug 2026 20:16:45 +0000 Manifest this update: Wed 12 Aug 2026 20:11:45 +0000 Manifest next update: Thu 13 Aug 2026 23:13:45 +0000 Files and hashes: 1: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) 2: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 3: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 4: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) 5: 34352e36362e36302e302f32342d3234203d3e20313432323430.roa (hash: O2zlu9PnS4SC1q+mg3Mn33JIix4GdmXvNYG3utR66a8=) 6: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 7: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 8: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: dsfGcmcJQswtY9cB3QnNBLneqmF8yKEFmEG/dOKBVMo=) 9: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: Pul01Zdd5YI0rYBhSrJmJ7MU4aW2Ta1JZNrQJUfFjAk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 23:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:73:ad:ac:23:94:6f:0b:bd:d3:c0:ef:8b:c2:d1:0c:5d:c6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Aug 12 20:11:45 2026 GMT Not After : Aug 13 23:13:45 2026 GMT Subject: CN=2EECADD6311F93336ADFF5E1E0F96DBDC8CC5014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:28:5b:af:30:b5:a0:80:68:ca:f6:37:f1: 3a:b1:4e:b2:61:c7:c0:e7:8a:f2:06:95:70:ef:db: e6:e8:17:dc:bf:9f:f3:e7:06:20:e0:1c:41:43:b8: 75:fb:7d:7c:f2:5b:d9:0d:2e:48:b5:51:44:e2:f6: d8:00:bd:88:e3:68:20:fd:ab:f3:e9:a0:c0:bf:45: dd:99:fc:89:60:7b:81:7d:ae:cf:c9:a2:f0:1f:80: 8c:68:d4:4a:81:da:51:fc:7d:1b:09:ab:20:56:69: 7f:e0:3f:35:a3:5e:e2:13:23:52:ab:bd:36:eb:15: 93:8b:d2:50:9f:41:22:8a:34:c9:a9:2b:34:66:65: 34:de:68:47:8b:a8:9e:ea:96:65:10:26:00:f9:76: a1:04:4a:8f:35:7e:51:27:70:64:9c:48:06:69:65: 2b:03:5b:0e:f2:3e:e3:bf:99:cc:ce:01:0a:63:67: 58:fc:ea:cd:51:0f:fa:9d:db:00:32:ea:1e:30:0a: 5d:bd:16:05:16:04:1c:b4:19:72:9d:69:42:d9:5a: 00:fc:dc:ff:33:02:2c:0e:1b:34:3c:13:9c:b0:ba: cf:79:48:d2:12:ff:a0:af:0a:76:79:51:93:dd:d7: bb:dd:67:9f:c1:b6:37:7c:b7:92:e1:16:5c:cf:20: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EC:AD:D6:31:1F:93:33:6A:DF:F5:E1:E0:F9:6D:BD:C8:CC:50:14 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:94:ff:de:a5:ed:dd:86:bb:c1:09:e8:e2:4e:33:f2:e2: 48:fc:f4:47:cf:e6:f5:0b:aa:2f:bb:ff:02:73:2a:a9:c3:33: ed:05:b3:3d:17:dd:7b:01:8d:d5:7a:64:06:b5:ca:20:13:dc: b8:0b:e6:e4:67:8d:47:2c:42:26:5b:c3:06:d9:22:f3:bf:33: 9c:fe:28:75:ea:af:c9:0d:a3:62:d8:b3:88:2b:2e:54:63:07: 47:cc:a1:ce:0b:9f:cf:c0:95:30:60:b3:8e:24:82:dd:9e:7d: eb:d6:8d:ca:27:9f:d9:ab:46:a3:cc:54:af:18:2d:34:92:98: 11:70:b5:05:69:b0:b6:56:81:f8:dc:e5:1d:6b:10:06:fb:ee: 57:9c:31:9f:d4:8d:e3:dd:d0:cc:dd:d2:0e:6f:2d:eb:be:97: 94:23:be:d6:7b:19:2f:e6:2b:34:1d:5d:df:16:39:24:62:b4: 7e:df:4a:29:77:b4:ab:f4:ba:69:28:75:4d:c9:67:88:67:d7: 40:48:b8:27:53:a8:f0:af:43:b0:f0:44:81:17:b8:48:76:7b: 08:58:c7:79:d1:75:b5:31:85:cc:99:8c:a7:e0:2e:c9:73:84: de:0f:8f:d9:2d:7e:6b:65:ca:db:e9:38:33:24:9c:18:08:6e: 5e:d2:34:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGz1zrawjlG8LvdPA74vC0QxdxmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA4MTIyMDExNDVaFw0yNjA4MTMyMzEzNDVaMDMxMTAvBgNV BAMTKDJFRUNBREQ2MzExRjkzMzM2QURGRjVFMUUwRjk2REJEQzhDQzUwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD08ihbrzC1oIBoyvY38TqxTrJh x8DnivIGlXDv2+boF9y/n/PnBiDgHEFDuHX7fXzyW9kNLki1UUTi9tgAvYjjaCD9 q/PpoMC/Rd2Z/Ilge4F9rs/JovAfgIxo1EqB2lH8fRsJqyBWaX/gPzWjXuITI1Kr vTbrFZOL0lCfQSKKNMmpKzRmZTTeaEeLqJ7qlmUQJgD5dqEESo81flEncGScSAZp ZSsDWw7yPuO/mczOAQpjZ1j86s1RD/qd2wAy6h4wCl29FgUWBBy0GXKdaULZWgD8 3P8zAiwOGzQ8E5ywus95SNIS/6CvCnZ5UZPd17vdZ5/Btjd8t5LhFlzPIJ+TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULuyt1jEfkzNq3/Xh4PltvcjMUBQwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoCU/96l7d2Gu8EJ6OJO M/LiSPz0R8/m9QuqL7v/AnMqqcMz7QWzPRfdewGN1XpkBrXKIBPcuAvm5GeNRyxC JlvDBtki878znP4odeqvyQ2jYtiziCsuVGMHR8yhzgufz8CVMGCzjiSC3Z5969aN yief2atGo8xUrxgtNJKYEXC1BWmwtlaB+NzlHWsQBvvuV5wxn9SN493QzN3SDm8t 676XlCO+1nsZL+YrNB1d3xY5JGK0ft9KKXe0q/S6aSh1TclniGfXQEi4J1Oo8K9D sPBEgRe4SHZ7CFjHedF1tTGFzJmMp+AuyXOE3g+P2S1+a2XK2+k4MyScGAhuXtI0 8g== -----END CERTIFICATE-----Generated at Thu Aug 13 13:24:10 2026 by rpki-client