$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: DcPoqTTGd5EsPKQ5ukj+Sfh1ixiDxaHcZ1fc3yAMXx4= Subject key identifier: EB:1A:01:28:C2:A9:98:E5:49:6F:2F:4D:04:79:89:84:A6:3E:9E:52 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 3A4E18DE268EA49BC507B3FEDBA76CE5C6906C1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: 0126 Signing time: Thu 14 May 2026 18:06:40 +0000 Manifest this update: Thu 14 May 2026 18:01:40 +0000 Manifest next update: Fri 15 May 2026 19:34:40 +0000 Files and hashes: 1: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) 2: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=) 3: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) 4: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=) 5: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: 9fsKAQUN3hnKgMOporCfmrex805v2RF1+X0UIifx2Ms=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 19:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4e:18:de:26:8e:a4:9b:c5:07:b3:fe:db:a7:6c:e5:c6:90:6c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: May 14 18:01:40 2026 GMT Not After : May 15 19:34:40 2026 GMT Subject: CN=EB1A0128C2A998E5496F2F4D04798984A63E9E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:99:83:b9:46:a0:50:9e:b3:2e:b6:5b:6d: 7a:76:cd:8a:75:b7:6f:99:c2:e4:60:66:3b:ea:35: 72:fd:50:c1:28:f1:e1:c5:40:48:c7:f7:10:f6:4f: 7c:00:df:77:00:f0:de:6e:14:27:62:b2:24:0e:fb: 8c:a2:54:5a:b2:7a:8e:7b:20:48:84:f0:ec:33:e1: 7d:b7:b6:10:f2:9e:a7:f0:27:96:e6:d3:7a:41:09: 77:b4:fb:b5:f6:0f:26:c6:a3:0b:6e:87:a5:c1:ba: 22:08:a2:53:ad:16:bc:57:f5:3d:83:59:63:b9:aa: cc:b5:5d:16:58:7d:fc:c9:cc:dc:68:2b:9e:ec:21: d4:b5:cb:6e:e4:78:f0:2d:91:7a:a4:88:a3:9d:d9: 18:d4:87:4a:5d:5b:54:4c:9f:0e:e7:17:70:ce:71: 1c:66:5e:7c:ba:6d:a7:94:60:65:6e:a6:0e:c8:7f: 48:1c:73:7c:34:51:59:ca:dd:13:27:7f:1c:a9:ba: b9:d2:3e:dd:4c:70:3e:9b:0f:99:85:03:da:c0:e0: 0d:9d:a8:5e:77:bd:e0:90:b6:8c:b7:fc:84:1d:8a: 73:52:5e:fd:d0:9e:ca:51:99:1a:da:ca:a6:72:17: 4d:17:ee:a2:dc:51:87:c5:a6:b4:c0:0e:48:4e:ac: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:01:28:C2:A9:98:E5:49:6F:2F:4D:04:79:89:84:A6:3E:9E:52 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:b2:54:d4:1b:e9:e6:3c:e6:07:e8:35:ea:62:40:f1:f1: 66:31:1a:24:df:5e:04:0a:58:3d:d1:01:2f:e9:19:22:17:c6: ec:bb:e4:dc:a0:73:a6:ab:6c:25:b8:88:af:f5:aa:0a:28:f1: 4a:bf:65:cd:d4:0f:30:7d:1e:88:0c:b8:e7:77:38:53:c2:bd: 81:62:8f:7a:ae:9d:c4:a8:f4:82:54:c3:8e:c5:95:b4:51:87: 84:bc:93:b4:94:c8:15:d5:50:e3:72:2c:d9:1e:6b:2b:1b:9c: 50:a9:d0:cf:7b:91:d6:94:d3:0b:3a:60:f1:cd:c6:d6:e6:03: 48:20:c6:47:db:2c:80:8c:40:10:a1:7c:43:99:53:0d:07:ae: 64:d7:01:b3:7b:52:bf:9a:cf:80:9b:ed:ea:35:d4:9f:23:65: f4:fe:84:e3:a9:5c:32:e2:6c:a4:57:b9:cd:27:9e:f8:55:2a: 0c:6d:9d:cf:7e:46:75:9c:5b:ac:2d:64:ca:e3:ee:4a:a7:15: bd:06:1f:64:0d:ac:29:1e:4c:13:40:1d:7d:41:aa:73:69:55: 08:5b:76:9f:e2:8a:9d:f7:6c:8b:f7:3e:80:17:2e:4b:df:eb: 4f:ca:8c:f4:4e:59:fe:1f:10:de:81:51:29:cf:a5:a0:39:8d: 3c:ab:79:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOk4Y3iaOpJvFB7P+26ds5caQbB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNjA1MTQxODAxNDBaFw0yNjA1MTUxOTM0NDBaMDMxMTAvBgNV BAMTKEVCMUEwMTI4QzJBOTk4RTU0OTZGMkY0RDA0Nzk4OTg0QTYzRTlFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHe5mDuUagUJ6zLrZbbXp2zYp1 t2+ZwuRgZjvqNXL9UMEo8eHFQEjH9xD2T3wA33cA8N5uFCdisiQO+4yiVFqyeo57 IEiE8Owz4X23thDynqfwJ5bm03pBCXe0+7X2DybGowtuh6XBuiIIolOtFrxX9T2D WWO5qsy1XRZYffzJzNxoK57sIdS1y27kePAtkXqkiKOd2RjUh0pdW1RMnw7nF3DO cRxmXny6baeUYGVupg7If0gcc3w0UVnK3RMnfxypurnSPt1McD6bD5mFA9rA4A2d qF53veCQtoy3/IQdinNSXv3QnspRmRrayqZyF00X7qLcUYfFprTADkhOrMdLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6xoBKMKpmOVJby9NBHmJhKY+nlIwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2myVNQb6eY85gfoNepi QPHxZjEaJN9eBApYPdEBL+kZIhfG7Lvk3KBzpqtsJbiIr/WqCijxSr9lzdQPMH0e iAy453c4U8K9gWKPeq6dxKj0glTDjsWVtFGHhLyTtJTIFdVQ43Is2R5rKxucUKnQ z3uR1pTTCzpg8c3G1uYDSCDGR9ssgIxAEKF8Q5lTDQeuZNcBs3tSv5rPgJvt6jXU nyNl9P6E46lcMuJspFe5zSee+FUqDG2dz35GdZxbrC1kyuPuSqcVvQYfZA2sKR5M E0AdfUGqc2lVCFt2n+KKnfdsi/c+gBcuS9/rT8qM9E5Z/h8Q3oFRKc+loDmNPKt5 GQ== -----END CERTIFICATE-----Generated at Fri May 15 06:19:06 2026 by rpki-client