$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: Je0MtOtSYe5HsxHj9yCsFv3jvrvMQpTutVdXZUTGOGY= Subject key identifier: B5:B5:E2:CF:FD:81:DA:A9:54:1C:C4:AC:BC:64:A8:52:BC:D9:6B:FA Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 1702F5B395C463AA5BDAE3EEAB519DB836915635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 053C Signing time: Tue 16 Jun 2026 16:10:08 +0000 Manifest this update: Tue 16 Jun 2026 16:05:08 +0000 Manifest next update: Wed 17 Jun 2026 20:00:08 +0000 Files and hashes: 1: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: dVMxJoK1QDtrJn3+jutmaJN+8KcVZMnKSQ/eCyNfmLU=) 3: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=) 4: 39332e39352e3131322e302f32342d3234203d3e20313534313332.roa (hash: X+hAqNzdKPOq+S7rLC3YDEE1/xfftKr31m0O1xfsUHE=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 6: 39332e39352e3131372e302f32342d3234203d3e20313332333539.roa (hash: M5vwdteA6vgVGSkPPJNq/lGZgSs9KFCNf+KWBKR3xOo=) 7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 9: 39332e39352e3131342e302f32342d3234203d3e20313335373534.roa (hash: Izt//jX4t8fzdPYyoivBCz0lpYa0Sgr/L9v7uiEiByQ=) 10: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 11: 39332e39352e3131372e302f32342d3234203d3e203633313939.roa (hash: 2o2IrH+YjFOXIYA8yjafAYSAeGOyzAWksmoKHkdif/U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 14:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:02:f5:b3:95:c4:63:aa:5b:da:e3:ee:ab:51:9d:b8:36:91:56:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jun 16 16:05:08 2026 GMT Not After : Jun 17 20:00:08 2026 GMT Subject: CN=B5B5E2CFFD81DAA9541CC4ACBC64A852BCD96BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:ec:f0:fb:af:bf:3b:ad:5a:1e:bf:c5:2c: 95:2d:ac:50:43:60:18:af:a5:09:54:0d:0a:a4:2e: 07:db:54:fe:83:eb:b8:7d:2e:44:c3:55:72:66:b6: 14:90:1b:f4:3f:d4:08:6e:43:2f:48:73:cc:7c:90: 13:7e:7e:66:54:1d:74:e8:2f:f8:46:61:43:39:03: cc:3e:11:84:ae:cf:73:0e:e1:e2:82:d5:60:8f:03: b9:8a:91:6c:49:3c:45:7e:4c:7f:87:38:a9:9f:8f: 5a:b8:f3:d2:6a:b1:31:31:e7:8f:4d:f0:74:18:1d: cf:a1:71:8e:7a:a3:50:82:88:97:c5:06:18:39:2a: 1c:81:27:48:e9:80:84:a9:ca:6d:c8:cb:50:30:65: db:3e:3b:33:fc:2c:2c:19:b3:bd:04:7a:ca:f3:27: 6f:9e:ff:d8:70:80:66:1e:c4:70:0e:25:f5:77:3d: 8a:c1:3c:d1:2a:e8:b0:a6:3f:f6:b8:79:66:10:2e: d1:a9:b3:fd:ad:d7:ec:e2:76:70:db:d7:a7:77:77: f3:b1:f8:a6:ba:b8:e1:41:37:47:61:1f:53:f9:f2: ba:73:37:62:58:7c:2c:2d:7b:19:ca:5a:03:2b:78: 49:7f:c0:a8:ac:90:2c:7b:44:12:62:e8:d8:a3:2c: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:E2:CF:FD:81:DA:A9:54:1C:C4:AC:BC:64:A8:52:BC:D9:6B:FA X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:d9:74:89:bc:83:40:2e:13:e1:87:87:8e:0e:87:fb:73:0f: c5:c1:aa:0a:fc:28:5a:fc:d2:57:7a:d4:2e:65:87:ba:14:30: 12:fb:20:69:c1:c5:74:02:83:0c:ab:20:82:c7:89:92:d5:2c: e9:f5:c9:65:a0:5e:83:d7:1e:a5:73:a1:60:20:0f:2c:31:a5: 64:91:63:7b:87:cc:1a:19:39:bc:b9:17:08:8b:cb:e1:32:dc: 60:fa:73:62:88:12:ca:68:a4:93:db:4b:73:21:43:90:b3:c2: 5e:04:cc:7d:36:b1:64:13:3e:40:74:35:1b:76:93:0c:70:13: 57:87:36:b4:b1:93:3d:a8:31:fb:5c:d5:1a:76:5b:6f:7c:9d: 07:84:f5:ba:af:3c:5d:b0:eb:79:0f:4b:ce:75:67:f3:65:7c: bc:6b:a2:7d:f3:2f:45:48:be:a7:b6:1b:e2:7a:d5:08:26:ac: 41:65:42:f5:bb:01:1a:c3:9d:92:e8:89:e4:9e:fc:61:ab:9d: 8a:d9:4b:d3:ee:4c:a9:c4:75:28:80:36:d4:85:00:d2:7e:23: 17:fc:d4:b7:e0:69:e1:75:9d:ba:8e:34:de:e5:8a:e3:2c:29: 57:e1:0c:3a:fc:19:15:ce:61:e7:cb:3a:d0:95:ac:62:2f:cc: 36:5c:2f:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFwL1s5XEY6pb2uPuq1GduDaRVjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjA2MTYxNjA1MDhaFw0yNjA2MTcyMDAwMDhaMDMxMTAvBgNV BAMTKEI1QjVFMkNGRkQ4MURBQTk1NDFDQzRBQ0JDNjRBODUyQkNEOTZCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+uzw+6+/O61aHr/FLJUtrFBD YBivpQlUDQqkLgfbVP6D67h9LkTDVXJmthSQG/Q/1AhuQy9Ic8x8kBN+fmZUHXTo L/hGYUM5A8w+EYSuz3MO4eKC1WCPA7mKkWxJPEV+TH+HOKmfj1q489JqsTEx549N 8HQYHc+hcY56o1CCiJfFBhg5KhyBJ0jpgISpym3Iy1AwZds+OzP8LCwZs70Eesrz J2+e/9hwgGYexHAOJfV3PYrBPNEq6LCmP/a4eWYQLtGps/2t1+zidnDb16d3d/Ox +Ka6uOFBN0dhH1P58rpzN2JYfCwtexnKWgMreEl/wKiskCx7RBJi6NijLMRDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtbXiz/2B2qlUHMSsvGSoUrzZa/owHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA39l0ibyDQC4T4YeHjg6H +3MPxcGqCvwoWvzSV3rULmWHuhQwEvsgacHFdAKDDKsggseJktUs6fXJZaBeg9ce pXOhYCAPLDGlZJFje4fMGhk5vLkXCIvL4TLcYPpzYogSymikk9tLcyFDkLPCXgTM fTaxZBM+QHQ1G3aTDHATV4c2tLGTPagx+1zVGnZbb3ydB4T1uq88XbDreQ9LznVn 82V8vGuiffMvRUi+p7Yb4nrVCCasQWVC9bsBGsOdkuiJ5J78YauditlL0+5MqcR1 KIA21IUA0n4jF/zUt+Bp4XWduo403uWK4ywpV+EMOvwZFc5h58s60JWsYi/MNlwv Fw== -----END CERTIFICATE-----Generated at Tue Jun 16 23:51:44 2026 by rpki-client