$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft File: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json) Hash identifier: 7mKO8TeRwG0mhjMHf1Hy29K6wGuhh4eO2NbZuy+BpVE= Subject key identifier: FD:CD:58:5A:96:71:65:E8:65:04:3F:CA:74:3B:83:27:DB:6B:95:B9 Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 7E905E697998C2180E4FA354002EA5658D950C33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft Manifest number: 51 Signing time: Mon 25 May 2026 10:07:15 +0000 Manifest this update: Mon 25 May 2026 10:02:15 +0000 Manifest next update: Tue 26 May 2026 23:03:15 +0000 Files and hashes: 1: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=) 2: 326131343a373538303a666166313a3a2f34382d3438203d3e20323134333434.roa (hash: LkT0ENe1YUFRxlS5aUhx4sNAMJ0+5HjZvFiPqwyHP/c=) 3: 326131343a373538303a666166323a3a2f34382d3438203d3e20323134333434.roa (hash: 2HKFlGEgh4l30gTTpJSrYvRSVMvgqrDNZ7KrLDKUxyY=) 4: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=) 5: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (hash: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g=) 6: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=) 7: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=) 8: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: X87uxXFxcvJQfZzh0N6BnFBKna34er29NW0Hm2VX08k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:90:5e:69:79:98:c2:18:0e:4f:a3:54:00:2e:a5:65:8d:95:0c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: May 25 10:02:15 2026 GMT Not After : May 26 23:03:15 2026 GMT Subject: CN=FDCD585A967165E865043FCA743B8327DB6B95B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:5b:02:8f:d9:f7:eb:12:8a:41:cc:60:98: bb:e0:63:d2:90:cc:c1:37:fa:a1:43:29:e3:a9:d2: 2c:b4:b0:ce:f1:11:ba:a0:03:44:79:56:26:ec:b3: 11:5d:e0:23:2c:0e:10:7e:c3:67:82:95:9d:0e:de: 4c:f0:4b:d6:cb:6f:7d:92:be:a4:68:b1:8b:bd:6b: e4:13:14:ad:c4:bb:af:b6:b5:cd:18:f9:6d:38:bc: 52:16:d0:65:6b:1b:16:38:8a:e9:a6:7d:b6:78:ae: 52:06:a5:6e:f7:b6:f2:17:41:06:8e:f3:e0:0a:16: 47:a2:b6:97:76:06:a4:09:43:29:42:5f:35:89:52: f9:20:d0:5f:78:55:3f:d4:05:4d:70:46:93:fc:7c: f0:e4:bb:ca:fe:f0:08:30:42:8e:ca:8f:f8:00:db: a2:3b:17:a4:7d:3c:f4:e0:e2:08:42:1f:5a:83:e1: 99:06:85:bb:fa:ec:ab:80:96:e1:72:a7:dd:a8:ac: 03:ef:ed:1b:5e:29:d8:84:bd:5c:5d:87:9a:eb:bd: 7b:14:3c:7a:e0:e5:00:4c:aa:90:d3:d5:f8:89:4b: 9d:41:62:4d:4f:af:08:65:3f:74:a1:2d:a9:de:b2: 88:99:ab:e1:32:0d:0c:83:55:d2:bf:1a:8d:ac:94: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:58:5A:96:71:65:E8:65:04:3F:CA:74:3B:83:27:DB:6B:95:B9 X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:c3:2a:14:64:38:14:11:57:f0:f9:fc:f5:fd:05:c4:10: 1e:b8:7f:4e:14:c5:26:5a:0a:15:78:a2:46:60:97:a4:a4:19: af:5e:16:e3:94:5a:5a:db:cb:77:c6:c9:cd:f7:c6:69:fd:e9: ab:31:74:5d:ec:5d:4d:85:4b:f3:eb:ed:34:84:1e:ef:f5:63: d2:d2:32:81:d3:2d:1d:6a:cb:83:54:51:be:17:0b:5b:16:83: f7:97:62:4d:7d:71:36:a9:23:ab:1a:3d:01:d2:a2:a6:e8:63: b6:b0:8e:fc:2c:88:ba:fa:0e:af:0e:2c:4f:bd:4e:5c:9b:f4: 3e:87:62:d6:be:f9:fd:ed:1b:90:b1:9a:78:c9:7b:2c:75:60: 45:a7:95:02:66:ef:22:3e:df:54:c4:3c:ce:6b:b5:b7:e5:90: 88:3b:8f:fe:0d:61:ea:72:ee:97:42:fb:b7:52:32:a8:17:3d: 0b:8c:44:74:fd:62:d5:7d:2d:50:dd:9c:91:88:f2:6d:06:64: e5:e7:4d:0f:79:11:b3:d7:90:03:27:c7:6c:4c:96:b0:ea:6e: cb:87:9f:7e:90:2d:eb:d5:4f:1e:3b:af:9d:92:c7:2f:92:15: 32:bf:0b:9a:e9:4c:95:36:64:44:4c:6b:94:1b:b0:53:01:89: 65:a7:0a:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfpBeaXmYwhgOT6NUAC6lZY2VDDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA1MjUxMDAyMTVaFw0yNjA1MjYyMzAzMTVaMDMxMTAvBgNV BAMTKEZEQ0Q1ODVBOTY3MTY1RTg2NTA0M0ZDQTc0M0I4MzI3REI2Qjk1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCL1sCj9n36xKKQcxgmLvgY9KQ zME3+qFDKeOp0iy0sM7xEbqgA0R5VibssxFd4CMsDhB+w2eClZ0O3kzwS9bLb32S vqRosYu9a+QTFK3Eu6+2tc0Y+W04vFIW0GVrGxY4iummfbZ4rlIGpW73tvIXQQaO 8+AKFkeitpd2BqQJQylCXzWJUvkg0F94VT/UBU1wRpP8fPDku8r+8AgwQo7Kj/gA 26I7F6R9PPTg4ghCH1qD4ZkGhbv67KuAluFyp92orAPv7RteKdiEvVxdh5rrvXsU PHrg5QBMqpDT1fiJS51BYk1PrwhlP3ShLanesoiZq+EyDQyDVdK/Go2slC6JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/c1YWpZxZehlBD/KdDuDJ9trlbkwHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8xLzc3RTREMjNE MEZEQUNFRTI5MzNEOUE2RDMwMzNDREY1RUZDM0VEQTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCULcMq FGQ4FBFX8Pn89f0FxBAeuH9OFMUmWgoVeKJGYJekpBmvXhbjlFpa28t3xsnN98Zp /emrMXRd7F1NhUvz6+00hB7v9WPS0jKB0y0dasuDVFG+FwtbFoP3l2JNfXE2qSOr Gj0B0qKm6GO2sI78LIi6+g6vDixPvU5cm/Q+h2LWvvn97RuQsZp4yXssdWBFp5UC Zu8iPt9UxDzOa7W35ZCIO4/+DWHqcu6XQvu3UjKoFz0LjER0/WLVfS1Q3ZyRiPJt BmTl500PeRGz15ADJ8dsTJaw6m7Lh59+kC3r1U8eO6+dkscvkhUyvwua6UyVNmRE TGuUG7BTAYllpwo6 -----END CERTIFICATE-----Generated at Mon May 25 17:11:45 2026 by rpki-client