$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: bQl5D7XK1CAgqYRay/n9lDLPk3enzuW9mzrB1fgX92k= Subject key identifier: 92:A2:32:84:A4:80:C7:34:6B:8C:A6:DB:8A:B4:94:8F:94:35:28:19 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 080D7A7ED146B49B730D3F492FD41E8E66EEA142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 04F5 Signing time: Wed 29 Apr 2026 20:56:36 +0000 Manifest this update: Wed 29 Apr 2026 20:51:36 +0000 Manifest next update: Thu 30 Apr 2026 23:47:36 +0000 Files and hashes: 1: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: qsVt8zLoe4v3q5wi3vtytFljX9bT9rOFXTt8nhjgqzs=) 2: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 3: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 4: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 5: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 6: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (hash: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=) 7: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 8: 39332e39352e3131332e302f32342d3234203d3e20313530323933.roa (hash: sFKJ+/43Q0TDsK2fITN6YuDzrhvf9oDqMZEN2TxnHz4=) 9: 39332e39352e3131332e302f32342d3234203d3e20343032303434.roa (hash: AtOuXGHz2DTlb1k/SfCWhLHsL8OPE1HWzZC1wZunOVo=) 10: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 23:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0d:7a:7e:d1:46:b4:9b:73:0d:3f:49:2f:d4:1e:8e:66:ee:a1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Apr 29 20:51:36 2026 GMT Not After : Apr 30 23:47:36 2026 GMT Subject: CN=92A23284A480C7346B8CA6DB8AB4948F94352819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:85:88:87:2f:b2:2c:65:bc:26:86:17:75: 04:6e:48:90:1f:ce:41:93:23:9b:d2:a2:3a:f2:4a: 65:e2:4c:af:e5:d3:73:f8:3f:21:5a:6d:44:3f:f4: c5:dd:c7:77:c8:b8:57:44:64:27:8a:74:b1:30:42: e1:b8:78:52:33:aa:f3:11:2b:8f:b7:41:87:32:e7: e6:22:21:7f:48:1f:79:de:06:41:77:f1:9e:96:6f: cb:12:c1:00:2b:92:09:8f:34:ba:44:a6:f3:3b:b7: 55:e1:07:50:8b:08:f8:e1:36:ba:c6:b0:4d:64:28: b3:1e:77:74:39:c0:40:2f:05:85:79:44:49:4e:83: 57:77:06:59:a1:c5:b8:9b:2a:9c:8a:1f:cd:4a:b2: 6e:21:ab:55:b6:1f:6f:62:1e:38:7a:7e:a9:df:f6: d1:25:b5:b7:d7:88:c1:f6:aa:f8:a8:fb:69:16:a4: 0a:50:1c:d7:15:70:90:57:95:eb:8d:0f:5d:d1:bf: 1a:e4:c1:7a:01:df:c3:92:ca:0a:ab:1b:b6:99:b2: 09:9c:47:71:a6:99:e3:af:ee:8b:cc:91:53:fc:9e: 82:98:38:9d:6d:54:72:a4:09:81:28:03:e0:98:dd: 89:ba:2f:75:98:b9:15:f7:27:f7:a3:88:df:0f:7a: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:32:84:A4:80:C7:34:6B:8C:A6:DB:8A:B4:94:8F:94:35:28:19 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:97:b5:24:5b:87:09:16:4c:96:12:84:60:23:15:4e:2d: 15:52:f8:60:22:68:d4:22:9b:bb:f0:f6:1c:57:04:2b:fd:56: b1:fa:be:a3:5d:28:dd:66:3d:08:f9:0b:60:71:a1:f9:bb:30: 11:51:da:c7:31:fd:70:57:0f:b7:d3:41:22:f4:25:09:c5:6d: 24:2c:9d:53:96:1c:12:1d:79:bd:7f:f5:03:1e:e3:c4:77:79: d8:9c:6b:be:36:7a:1a:02:e6:78:d8:16:38:1f:6f:a2:81:79: bb:79:f1:1c:14:b6:57:20:72:3b:77:2e:34:02:fc:60:92:42: 48:46:5d:1b:89:bf:16:18:42:aa:14:c7:85:93:09:d6:40:0d: ac:1c:5e:a8:bd:c5:93:17:7c:f8:a6:08:18:38:d6:43:b4:36: 26:01:75:a5:b1:a2:49:51:b0:c0:a7:13:ff:72:31:43:a5:e0: 41:45:0e:f2:82:95:40:17:40:95:db:f2:11:51:79:98:57:97: 55:21:a7:5d:d0:bb:b7:65:63:f6:7a:96:9c:b0:e3:d6:64:33: 20:ca:29:00:31:d4:f8:76:13:88:23:a5:b0:02:7d:23:87:bf: 39:3f:ed:d4:81:d0:00:5a:90:c4:d0:a9:89:7e:74:75:4f:50: 20:68:77:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCA16ftFGtJtzDT9JL9QejmbuoUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjA0MjkyMDUxMzZaFw0yNjA0MzAyMzQ3MzZaMDMxMTAvBgNV BAMTKDkyQTIzMjg0QTQ4MEM3MzQ2QjhDQTZEQjhBQjQ5NDhGOTQzNTI4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRV4WIhy+yLGW8JoYXdQRuSJAf zkGTI5vSojrySmXiTK/l03P4PyFabUQ/9MXdx3fIuFdEZCeKdLEwQuG4eFIzqvMR K4+3QYcy5+YiIX9IH3neBkF38Z6Wb8sSwQArkgmPNLpEpvM7t1XhB1CLCPjhNrrG sE1kKLMed3Q5wEAvBYV5RElOg1d3BlmhxbibKpyKH81Ksm4hq1W2H29iHjh6fqnf 9tEltbfXiMH2qvio+2kWpApQHNcVcJBXleuND13RvxrkwXoB38OSygqrG7aZsgmc R3GmmeOv7ovMkVP8noKYOJ1tVHKkCYEoA+CY3Ym6L3WYuRX3J/ejiN8PesA7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkqIyhKSAxzRrjKbbirSUj5Q1KBkwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+KXtSRbhwkWTJYShGAj FU4tFVL4YCJo1CKbu/D2HFcEK/1Wsfq+o10o3WY9CPkLYHGh+bswEVHaxzH9cFcP t9NBIvQlCcVtJCydU5YcEh15vX/1Ax7jxHd52JxrvjZ6GgLmeNgWOB9vooF5u3nx HBS2VyByO3cuNAL8YJJCSEZdG4m/FhhCqhTHhZMJ1kANrBxeqL3Fkxd8+KYIGDjW Q7Q2JgF1pbGiSVGwwKcT/3IxQ6XgQUUO8oKVQBdAldvyEVF5mFeXVSGnXdC7t2Vj 9nqWnLDj1mQzIMopADHU+HYTiCOlsAJ9I4e/OT/t1IHQAFqQxNCpiX50dU9QIGh3 tA== -----END CERTIFICATE-----Generated at Thu Apr 30 10:55:11 2026 by rpki-client