$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: XtXUBAzzB9yOB7Zdrw9aawLzroou9JDSA2YM5bo5SOs= Subject key identifier: DC:F3:E6:3C:1E:31:B0:A6:90:42:85:36:23:8F:49:12:D9:F2:0F:E4 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 537B6B72D377C9AE1A46154CD89FC25F399FC09E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0611 Signing time: Thu 05 Nov 2026 00:39:03 +0000 Manifest this update: Thu 05 Nov 2026 00:34:03 +0000 Manifest next update: Fri 06 Nov 2026 00:40:03 +0000 Files and hashes: 1: 39332e39352e3131342e302f32342d3234203d3e20343032323635.roa (hash: XpI1frjDCdiqqdjI8V0/ftv5/Y6j8UuAYvwRLMQoOgQ=) 2: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: 7D44z6xLp+NWT+JNRmxNHn/TxGu7Gwn+STgluSXXDGU=) 3: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=) 4: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=) 5: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=) 6: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 7: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: H81cp3ASup85sKx0c0oDYuGDSbCqUrdOIIe3mldxGno=) 8: 39332e39352e3131322e302f32342d3234203d3e20323130373332.roa (hash: PX19irLQHpIFWltGzv3XYJnikwfnyHbTOA1bjEAIlcw=) 9: 39332e39352e3131362e302f32342d3234203d3e2039333034.roa (hash: plCfGSXPfhTajm4cdjMqyYr1YrnQY7w3e6xDMUQOQyY=) 10: 39332e39352e3131372e302f32342d3234203d3e20313939353530.roa (hash: yK4SlFqYZqw24XzIvuSXyDco9ggufuCdB4ClN+zHcy8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 00:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7b:6b:72:d3:77:c9:ae:1a:46:15:4c:d8:9f:c2:5f:39:9f:c0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Nov 5 00:34:03 2026 GMT Not After : Nov 6 00:40:03 2026 GMT Subject: CN=DCF3E63C1E31B0A690428536238F4912D9F20FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:8d:0f:10:15:d5:34:87:1e:33:a0:b7:0d: 5b:8b:20:99:e2:cf:be:84:1c:35:99:91:cf:3f:7f: 59:ec:8e:00:f4:be:b1:12:77:f6:07:4f:11:3a:96: d2:ea:7c:b2:2b:84:5a:17:bb:13:ef:64:c2:5c:30: 01:5e:51:80:97:99:af:9c:33:e1:a1:5a:2d:51:02: bb:cb:b2:b1:c0:90:06:9c:81:cc:76:d9:ba:0e:b2: b0:e4:6d:b4:13:97:7f:f9:93:cd:c7:b5:e0:ec:4d: 0d:5a:bb:15:9b:52:c1:da:48:08:1e:2d:f5:8b:95: 72:f0:45:2b:1b:36:73:98:e6:2a:a2:94:60:d2:cc: d9:7f:26:b6:ab:07:22:33:d7:6c:c5:18:fd:26:c8: fc:e6:5c:4b:2b:36:c0:61:7d:a8:a3:0a:3d:a4:e9: e4:60:77:2e:26:f7:d0:e1:2d:0f:31:15:60:27:c5: a0:b3:5a:0f:df:bd:79:54:2f:85:95:c9:14:69:77: 1f:67:90:97:e9:9f:b6:b5:f5:b6:13:e4:c8:34:b1: a3:7a:3d:52:b4:7f:6c:f8:62:bf:99:05:26:06:35: f3:9e:86:fb:e8:ca:17:53:19:f5:b6:67:83:43:88: 7b:62:05:a9:22:ac:c6:34:40:56:a3:94:6b:0f:a6: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:E6:3C:1E:31:B0:A6:90:42:85:36:23:8F:49:12:D9:F2:0F:E4 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8d:ac:e6:8e:da:88:21:54:59:0b:6d:5e:74:47:24:32:38: e6:47:52:e1:0c:10:48:e2:1d:ea:3e:53:14:4e:d5:4f:83:d1: 58:3a:8d:c8:a4:72:85:21:95:7f:af:a5:48:2e:b4:15:e2:6e: d3:64:a2:66:9d:fc:06:50:5c:ad:a2:26:5b:1b:5b:32:b0:ff: 92:3c:66:4d:d2:ba:a1:98:12:00:90:5d:ee:45:15:d9:cb:c6: f2:91:31:64:b9:71:f7:4a:0f:e8:33:fd:c9:af:24:88:60:c1: 21:cd:67:75:87:1b:c3:7c:41:dd:8a:de:69:a4:23:62:bb:25: 88:82:d4:35:ae:2e:99:05:9d:02:fc:2b:21:ba:30:16:53:6e: 9e:1f:d4:27:d4:3a:37:3d:33:12:1e:33:2d:f3:76:c5:c0:e1: 49:04:f7:78:5e:42:e1:29:ea:ab:b5:29:8a:d2:3f:87:9c:29: 94:35:c7:90:fd:eb:f2:ec:bd:4c:e6:49:64:1b:ab:0a:3f:95: 60:34:f9:b1:5d:98:b8:b8:68:79:0b:ab:74:ad:15:ff:ac:94: 25:2c:79:62:bd:e0:81:2f:48:a2:df:1f:a9:5f:9e:d0:53:02: f5:47:d8:44:8a:df:47:8e:f5:59:19:21:96:e5:20:58:91:75: 36:a5:10:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU3trctN3ya4aRhVM2J/CXzmfwJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjExMDUwMDM0MDNaFw0yNjExMDYwMDQwMDNaMDMxMTAvBgNV BAMTKERDRjNFNjNDMUUzMUIwQTY5MDQyODUzNjIzOEY0OTEyRDlGMjBGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8Y0PEBXVNIceM6C3DVuLIJni z76EHDWZkc8/f1nsjgD0vrESd/YHTxE6ltLqfLIrhFoXuxPvZMJcMAFeUYCXma+c M+GhWi1RArvLsrHAkAacgcx22boOsrDkbbQTl3/5k83HteDsTQ1auxWbUsHaSAge LfWLlXLwRSsbNnOY5iqilGDSzNl/JrarByIz12zFGP0myPzmXEsrNsBhfaijCj2k 6eRgdy4m99DhLQ8xFWAnxaCzWg/fvXlUL4WVyRRpdx9nkJfpn7a19bYT5Mg0saN6 PVK0f2z4Yr+ZBSYGNfOehvvoyhdTGfW2Z4NDiHtiBakirMY0QFajlGsPpkNpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3PPmPB4xsKaQQoU2I49JEtnyD+QwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY2s5o7aiCFUWQttXnRH JDI45kdS4QwQSOId6j5TFE7VT4PRWDqNyKRyhSGVf6+lSC60FeJu02SiZp38BlBc raImWxtbMrD/kjxmTdK6oZgSAJBd7kUV2cvG8pExZLlx90oP6DP9ya8kiGDBIc1n dYcbw3xB3YreaaQjYrsliILUNa4umQWdAvwrIbowFlNunh/UJ9Q6Nz0zEh4zLfN2 xcDhSQT3eF5C4Snqq7UpitI/h5wplDXHkP3r8uy9TOZJZBurCj+VYDT5sV2YuLho eQurdK0V/6yUJSx5Yr3ggS9Iot8fqV+e0FMC9UfYRIrfR471WRkhluUgWJF1NqUQ nA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:29:02 2026 by rpki-client