$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: BI9MfNnKyMang3V+5bO2UQ+gAuQWvS1eOK4j4Qg6h0g= Subject key identifier: 1E:CF:BE:9C:61:E9:E0:9F:44:F1:40:C9:8E:47:7D:89:C7:E8:E3:1C Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 567E1A2ECA4221827C0E5A487767D6BB147828D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0649 Signing time: Fri 01 May 2026 01:06:49 +0000 Manifest this update: Fri 01 May 2026 01:01:49 +0000 Manifest next update: Sat 02 May 2026 02:35:49 +0000 Files and hashes: 1: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 3: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 4: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 5: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=) 6: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 1JVzwCL3zzQLtzfJpqwF13TFgn1Jcx4cv6sGWqR9vKk=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 8: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 9: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 02:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7e:1a:2e:ca:42:21:82:7c:0e:5a:48:77:67:d6:bb:14:78:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: May 1 01:01:49 2026 GMT Not After : May 2 02:35:49 2026 GMT Subject: CN=1ECFBE9C61E9E09F44F140C98E477D89C7E8E31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:d6:ab:ba:74:fc:b6:fa:06:80:77:0a:2f: 54:19:25:c8:64:62:01:b8:17:bd:84:b5:d8:4c:f7: 05:2a:84:7e:df:ca:1a:e0:ab:62:62:2c:d3:e9:1f: 4c:6d:07:02:64:eb:01:a6:4f:b2:b3:6c:a3:8e:b0: ab:87:b5:ef:02:1e:82:53:2e:b7:67:59:89:60:32: 71:07:ad:0e:ab:14:03:ba:6b:93:a5:70:5e:f8:b2: 59:18:c2:ea:fd:7d:89:91:af:f2:2c:62:30:2e:0e: 61:c7:fe:93:31:d5:3d:70:a3:57:94:c5:b9:6c:d7: 0a:cd:b4:50:bf:96:81:9a:18:b9:b6:9c:11:fc:4c: 4e:c2:51:03:fd:d0:8a:92:b8:99:47:81:1c:f7:63: eb:88:fe:af:9d:38:6d:5b:6c:f3:7b:60:7f:eb:24: be:3c:3e:3a:28:45:74:11:42:f3:03:8b:98:32:97: 3c:fc:58:a4:28:4c:78:a0:b7:3e:cc:79:54:63:0c: 45:36:83:9e:e1:41:75:67:8a:f3:60:58:90:94:92: c1:23:01:f5:f8:d5:75:42:b6:51:c5:fd:7d:9d:11: 15:9a:86:e7:e3:5d:71:71:b9:59:f3:2f:18:b4:9c: ae:27:2b:7d:0f:fb:c5:f1:44:c2:fb:32:fa:6b:12: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:BE:9C:61:E9:E0:9F:44:F1:40:C9:8E:47:7D:89:C7:E8:E3:1C X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:05:bd:b2:31:8c:e6:d2:0c:9c:71:9a:57:d9:d8:93:f6:d7: 10:18:de:80:5a:a1:e7:97:ab:a5:91:97:95:a6:73:bb:dd:df: 44:7c:ee:5e:76:45:5c:21:d0:c7:b3:28:11:fd:a8:2b:6d:e1: 83:5e:ad:08:ea:62:91:df:59:be:0f:e3:cd:4a:7f:9b:ef:86: 05:c2:f5:64:a5:c6:4c:0f:55:b3:24:24:60:36:28:23:49:85: d0:f2:db:86:72:23:c1:ee:92:c1:b1:af:02:bf:af:15:fa:ea: 17:0a:4e:49:8e:93:74:ee:ad:0d:fc:6a:79:0f:1c:6c:7a:10: 06:dc:d9:44:4c:3e:9d:3c:bd:66:31:a7:02:9d:16:78:22:c0: eb:3c:6b:69:b4:4e:bd:a4:ec:0e:e2:2f:da:51:3f:17:59:a2: b7:00:ff:84:ae:80:32:08:05:0e:cd:a4:d9:ae:a1:bf:c8:7e: 9e:ed:46:5f:bb:1a:09:6a:00:a0:5b:4a:54:9c:bc:2a:48:e6: 26:d3:95:8e:2c:74:10:1f:39:84:44:85:f6:be:7b:e6:ec:ee: bd:df:b0:f1:71:eb:d3:09:a4:48:bc:b0:8e:e4:9c:3e:c8:73: ec:a8:8f:16:4e:ed:a0:a9:00:f0:d0:82:6a:f1:88:45:15:90: 63:42:63:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVn4aLspCIYJ8DlpId2fWuxR4KNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA1MDEwMTAxNDlaFw0yNjA1MDIwMjM1NDlaMDMxMTAvBgNV BAMTKDFFQ0ZCRTlDNjFFOUUwOUY0NEYxNDBDOThFNDc3RDg5QzdFOEUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMdarunT8tvoGgHcKL1QZJchk YgG4F72EtdhM9wUqhH7fyhrgq2JiLNPpH0xtBwJk6wGmT7KzbKOOsKuHte8CHoJT LrdnWYlgMnEHrQ6rFAO6a5OlcF74slkYwur9fYmRr/IsYjAuDmHH/pMx1T1wo1eU xbls1wrNtFC/loGaGLm2nBH8TE7CUQP90IqSuJlHgRz3Y+uI/q+dOG1bbPN7YH/r JL48PjooRXQRQvMDi5gylzz8WKQoTHigtz7MeVRjDEU2g57hQXVnivNgWJCUksEj AfX41XVCtlHF/X2dERWahufjXXFxuVnzLxi0nK4nK30P+8XxRML7MvprEvIxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHs++nGHp4J9E8UDJjkd9icfo4xwwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzwW9sjGM5tIMnHGaV9nY k/bXEBjegFqh55erpZGXlaZzu93fRHzuXnZFXCHQx7MoEf2oK23hg16tCOpikd9Z vg/jzUp/m++GBcL1ZKXGTA9VsyQkYDYoI0mF0PLbhnIjwe6SwbGvAr+vFfrqFwpO SY6TdO6tDfxqeQ8cbHoQBtzZREw+nTy9ZjGnAp0WeCLA6zxrabROvaTsDuIv2lE/ F1mitwD/hK6AMggFDs2k2a6hv8h+nu1GX7saCWoAoFtKVJy8KkjmJtOVjix0EB85 hESF9r575uzuvd+w8XHr0wmkSLywjuScPshz7KiPFk7toKkA8NCCavGIRRWQY0Jj WQ== -----END CERTIFICATE-----Generated at Fri May 1 13:45:47 2026 by rpki-client