$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: ziInuQ5jvwraWsYPNyBL9C6p9Q+R6/xk2xRVBHgWfJg= Subject key identifier: 23:74:03:6E:BD:5C:13:62:C8:62:F4:49:DD:A6:4D:76:F5:DB:78:B4 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 01CE1A0C53BC72AF5D0264A75CDEBFD923B0AE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 02C8 Signing time: Sun 28 Jun 2026 21:57:49 +0000 Manifest this update: Sun 28 Jun 2026 21:52:49 +0000 Manifest next update: Mon 29 Jun 2026 23:04:49 +0000 Files and hashes: 1: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 2: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 3: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: Tqcho9ZxxfCH+0YeFIpISFB0ybHE/wlpXvuXd+M6iDY=) 4: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 5: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 6: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: atjmZHyN0fpnZVZKw7T2mpLloOaroEYoclDUcL8HXvA=) 7: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) 8: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 9: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 23:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ce:1a:0c:53:bc:72:af:5d:02:64:a7:5c:de:bf:d9:23:b0:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Jun 28 21:52:49 2026 GMT Not After : Jun 29 23:04:49 2026 GMT Subject: CN=2374036EBD5C1362C862F449DDA64D76F5DB78B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:d9:7d:14:5c:28:65:0a:c6:45:a9:aa:fd: d5:2e:d3:00:f7:04:37:39:55:4f:f4:cc:41:aa:c0: 45:fd:de:88:c7:8b:5b:81:2e:37:92:29:64:6d:08: 35:2d:ee:3a:85:3a:fa:f2:c4:4b:a7:a9:1e:65:10: af:09:66:ed:0d:b4:a0:cd:8e:fa:bb:5a:af:7a:8c: 95:3a:30:71:b0:1c:62:f3:46:c7:45:a4:01:c1:74: 50:57:7e:11:9d:7b:ff:32:d8:67:f2:32:0e:d3:80: f8:80:06:9d:24:3c:d3:ef:6c:a6:ca:e2:4b:33:06: 1a:9b:0c:52:bd:a1:6d:39:7e:53:9f:81:89:74:25: 98:cc:19:54:35:50:1c:38:58:2b:e1:bc:3a:ae:3f: dd:0d:07:0f:2b:bf:ad:52:d8:1a:a9:4f:37:26:bb: f1:e3:32:08:05:70:62:1d:11:66:21:59:b3:98:48: e6:08:85:79:22:59:cd:ed:85:a6:9b:b1:ba:6e:78: ce:e6:4d:c6:ac:65:43:f6:1e:bf:d7:c5:01:67:b6: 9f:4c:78:5c:53:ae:b4:10:8a:6a:7f:0b:95:61:2b: 34:d3:b8:1e:3c:08:e5:58:41:f0:13:24:9e:76:b9: 16:8a:54:b7:f5:0c:5d:a2:ef:44:ce:41:e8:6c:a8: ce:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:74:03:6E:BD:5C:13:62:C8:62:F4:49:DD:A6:4D:76:F5:DB:78:B4 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f2:81:d0:31:10:7e:e5:25:66:7c:76:03:38:b7:21:77:6e: e6:33:db:fd:e6:68:c6:34:7e:54:ee:a3:48:3b:93:28:eb:59: a3:5b:c0:2d:a1:89:0a:27:7c:f7:42:60:54:d2:e2:76:59:c9: 7b:16:bf:21:67:fa:97:c1:45:0a:07:35:4c:7b:e6:00:4d:04: e5:24:0b:a7:8e:a8:9e:3c:1f:39:66:f5:c4:4d:1d:fa:e2:1f: a7:ad:c0:b5:59:e8:a6:2f:6b:f3:d0:1b:81:74:d0:6f:c1:2f: b8:b5:38:d0:a2:d9:62:7b:13:d9:65:2f:78:7e:64:99:67:bd: cb:5f:9d:30:ff:76:aa:20:b7:11:7d:26:8e:74:23:38:a3:88: 85:f1:c1:ab:76:57:ee:61:a3:7a:8e:80:47:85:f6:e0:a7:54: 89:7e:44:4b:6e:be:0d:41:74:5f:df:ac:f8:bd:dd:41:24:ac: ce:da:2f:94:ca:4d:8a:c5:cb:d3:1b:6b:73:7a:48:c7:f0:4a: c9:03:b1:84:3b:a9:98:76:2a:49:6a:8d:25:93:97:d6:37:7d: 02:a6:c4:a1:42:c1:17:32:88:4a:8c:1d:fe:8a:2e:8c:d2:80: d6:84:94:15:a1:3a:0c:68:8c:2e:21:85:0e:18:05:84:be:64: 02:5f:4a:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAc4aDFO8cq9dAmSnXN6/2SOwrpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA2MjgyMTUyNDlaFw0yNjA2MjkyMzA0NDlaMDMxMTAvBgNV BAMTKDIzNzQwMzZFQkQ1QzEzNjJDODYyRjQ0OUREQTY0RDc2RjVEQjc4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkdl9FFwoZQrGRamq/dUu0wD3 BDc5VU/0zEGqwEX93ojHi1uBLjeSKWRtCDUt7jqFOvryxEunqR5lEK8JZu0NtKDN jvq7Wq96jJU6MHGwHGLzRsdFpAHBdFBXfhGde/8y2GfyMg7TgPiABp0kPNPvbKbK 4kszBhqbDFK9oW05flOfgYl0JZjMGVQ1UBw4WCvhvDquP90NBw8rv61S2BqpTzcm u/HjMggFcGIdEWYhWbOYSOYIhXkiWc3thaabsbpueM7mTcasZUP2Hr/XxQFntp9M eFxTrrQQimp/C5VhKzTTuB48COVYQfATJJ52uRaKVLf1DF2i70TOQehsqM4fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUI3QDbr1cE2LIYvRJ3aZNdvXbeLQwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/KB0DEQfuUlZnx2Azi3 IXdu5jPb/eZoxjR+VO6jSDuTKOtZo1vALaGJCid890JgVNLidlnJexa/IWf6l8FF Cgc1THvmAE0E5SQLp46onjwfOWb1xE0d+uIfp63AtVnopi9r89AbgXTQb8EvuLU4 0KLZYnsT2WUveH5kmWe9y1+dMP92qiC3EX0mjnQjOKOIhfHBq3ZX7mGjeo6AR4X2 4KdUiX5ES26+DUF0X9+s+L3dQSSsztovlMpNisXL0xtrc3pIx/BKyQOxhDupmHYq SWqNJZOX1jd9AqbEoULBFzKISowd/ooujNKA1oSUFaE6DGiMLiGFDhgFhL5kAl9K aA== -----END CERTIFICATE-----Generated at Mon Jun 29 11:09:39 2026 by rpki-client