$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: up26SQqxtbJCrP32urTuqNkitp7b0k3Bfvg4NaFAsho= Subject key identifier: F0:BC:F9:AC:B4:00:95:74:2B:69:1B:B0:0F:B2:65:17:C0:86:0E:45 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 21A16C22A851D698134198496EAEF471EA793D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: E8 Signing time: Sun 29 Mar 2026 00:42:16 +0000 Manifest this update: Sun 29 Mar 2026 00:37:16 +0000 Manifest next update: Mon 30 Mar 2026 03:35:16 +0000 Files and hashes: 1: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=) 2: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) 3: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: IzdE3VbPzrQxBKpSsfsQlCJvOvc3mYVUJZ44wiN+pxM=) 4: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=) 5: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 03:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a1:6c:22:a8:51:d6:98:13:41:98:49:6e:ae:f4:71:ea:79:3d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: Mar 29 00:37:16 2026 GMT Not After : Mar 30 03:35:16 2026 GMT Subject: CN=F0BCF9ACB40095742B691BB00FB26517C0860E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:cd:a7:0a:d3:47:7d:4d:de:54:aa:ce:a1: a5:e0:0a:28:9e:8c:59:8e:6e:2b:da:5b:25:9f:33: f1:dd:b4:b2:a1:de:68:22:f3:e9:4e:98:56:df:e4: 84:72:6d:3c:f3:94:46:6a:ca:16:d0:6a:cc:5b:43: 91:bc:b6:6f:f4:38:c0:03:22:63:dc:75:84:c8:b7: 30:6f:46:31:7b:ed:7d:42:e5:cf:15:5a:02:2e:c2: 8d:33:91:d2:b6:e5:54:e5:b5:e5:ec:84:d2:3e:ee: 9f:24:ef:87:43:35:1d:a4:1d:e2:80:53:82:86:07: d2:83:e1:9b:37:2d:b0:c3:a5:84:9e:ac:ed:74:3e: 8e:91:a4:aa:f9:14:f0:1e:e2:6e:2f:7c:08:1e:ee: ab:27:e4:48:dc:a6:ad:bd:87:02:e2:b8:2d:40:be: 5c:b4:c6:3b:c4:15:b6:99:0a:1e:51:36:52:e7:8e: 5b:79:2a:ed:d6:64:e5:29:15:af:64:77:dd:f7:93: 28:d7:40:86:5f:1a:4e:09:55:dd:32:f4:15:1d:32: 12:d5:f1:44:84:78:d0:9d:b8:97:b7:13:76:bc:b2: 2a:40:60:3e:32:ff:91:2b:9b:0f:1d:70:61:e8:2a: 17:ec:d5:7b:7f:f6:8d:e2:79:6a:f7:4e:dc:8a:75: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:F9:AC:B4:00:95:74:2B:69:1B:B0:0F:B2:65:17:C0:86:0E:45 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4c:36:a0:4d:58:d7:23:34:0b:c1:f9:42:bc:c1:9c:f5:73: dd:8d:dc:a1:1d:be:8a:7a:d8:60:de:8a:f1:3e:4e:88:1b:9c: 35:8a:68:0c:a8:5c:fc:25:2e:6b:27:85:7b:50:97:a3:e8:24: 70:e0:41:92:e0:9d:8d:c3:01:1d:ea:07:91:dc:45:00:8f:1b: 99:29:77:fa:20:71:83:6b:27:ee:ad:cd:1e:4f:18:6b:b9:7d: 8f:b1:68:ca:a1:91:6c:18:52:46:6c:c5:ba:50:ba:b6:fb:1a: 8d:9a:68:85:23:49:a1:ba:78:10:af:2d:15:20:d5:d0:d1:32: 47:96:07:8e:b5:b6:5c:57:ff:3c:ed:13:a8:7a:cb:17:bd:e2: 14:e4:da:86:65:cf:9f:cb:e3:de:85:1f:07:c4:39:78:b0:01: 6f:f2:ee:34:52:06:36:6c:10:35:d8:1e:94:f7:b9:98:b1:11: 9d:09:0b:81:f1:7e:57:a9:4a:d1:6e:ec:b3:b3:9c:b0:f9:06: e6:64:e5:fc:4a:33:ff:2d:11:5b:f0:17:6d:75:77:a2:d2:b8: d0:0f:62:ce:0b:dc:dd:6d:1a:91:46:47:c6:2e:5c:e2:f9:c6: 2e:f2:e0:b3:1b:1e:24:5a:88:79:5f:cd:a4:a7:03:36:0a:78: a7:0f:f1:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIaFsIqhR1pgTQZhJbq70cep5PV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNjAzMjkwMDM3MTZaFw0yNjAzMzAwMzM1MTZaMDMxMTAvBgNV BAMTKEYwQkNGOUFDQjQwMDk1NzQyQjY5MUJCMDBGQjI2NTE3QzA4NjBFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjx82nCtNHfU3eVKrOoaXgCiie jFmObivaWyWfM/HdtLKh3mgi8+lOmFbf5IRybTzzlEZqyhbQasxbQ5G8tm/0OMAD ImPcdYTItzBvRjF77X1C5c8VWgIuwo0zkdK25VTlteXshNI+7p8k74dDNR2kHeKA U4KGB9KD4Zs3LbDDpYSerO10Po6RpKr5FPAe4m4vfAge7qsn5Ejcpq29hwLiuC1A vly0xjvEFbaZCh5RNlLnjlt5Ku3WZOUpFa9kd933kyjXQIZfGk4JVd0y9BUdMhLV 8USEeNCduJe3E3a8sipAYD4y/5Ermw8dcGHoKhfs1Xt/9o3ieWr3TtyKdS9LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8Lz5rLQAlXQraRuwD7JlF8CGDkUwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkw2oE1Y1yM0C8H5QrzB nPVz3Y3coR2+inrYYN6K8T5OiBucNYpoDKhc/CUuayeFe1CXo+gkcOBBkuCdjcMB HeoHkdxFAI8bmSl3+iBxg2sn7q3NHk8Ya7l9j7FoyqGRbBhSRmzFulC6tvsajZpo hSNJobp4EK8tFSDV0NEyR5YHjrW2XFf/PO0TqHrLF73iFOTahmXPn8vj3oUfB8Q5 eLABb/LuNFIGNmwQNdgelPe5mLERnQkLgfF+V6lK0W7ss7OcsPkG5mTl/Eoz/y0R W/AXbXV3otK40A9izgvc3W0akUZHxi5c4vnGLvLgsxseJFqIeV/NpKcDNgp4pw/x Tg== -----END CERTIFICATE-----Generated at Sun Mar 29 15:22:07 2026 by rpki-client