$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft File: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft (raw, json) Hash identifier: iXDixkXRw5Ea/mcu3Y7rHE43Z0StXHDIbIwLJYsjmxE= Subject key identifier: 98:03:80:52:CC:F3:D0:B1:C0:7E:38:8D:08:CC:85:C2:82:E5:09:CB Authority key identifier: 01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 Certificate issuer: /CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Certificate serial: 4EB7F00F26F0E26801619A224BC8E8F024C2D8A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft Manifest number: 16 Signing time: Thu 30 Apr 2026 00:01:28 +0000 Manifest this update: Wed 29 Apr 2026 23:56:28 +0000 Manifest next update: Fri 01 May 2026 00:57:28 +0000 Files and hashes: 1: 326131333a376663303a313031663a3a2f34382d3438203d3e20323134353837.roa (hash: NILQ8/k8RWx9Jp9dOJ2tdW/rwY6dVyE3d3RQvgfQQ7Q=) 2: 3139342e36312e302e302f32342d3234203d3e20323133323136.roa (hash: cDv+tCpd/eaVv7HBUSB+v0knElafCYH9RP9hQp1KhK8=) 3: 326131333a376663303a613432613a3a2f34382d3438203d3e20323133323136.roa (hash: lt17UYcjIOUOPLVOK/FWXABZZQuRCYc0AYsajAWcNG0=) 4: AS213216.asa (hash: E44tygSJlhvbcH//RusbDcWbj+tZTXOnGQ3XzZ2jCqQ=) 5: 326131333a376663303a313031303a3a2f34382d3438203d3e20323134353837.roa (hash: qkAnu8n5ZwhWIiFOozTwrJIaIzyzsrR64v/E5gw6fnU=) 6: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl (hash: ml1snRv9MWgteTo//y5/5WrOuMUOfNij2+y3Q/C/clE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b7:f0:0f:26:f0:e2:68:01:61:9a:22:4b:c8:e8:f0:24:c2:d8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Validity Not Before: Apr 29 23:56:28 2026 GMT Not After : May 1 00:57:28 2026 GMT Subject: CN=98038052CCF3D0B1C07E388D08CC85C282E509CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:86:7e:0c:69:89:b8:a9:62:cb:b5:98:9f: b1:77:d9:e9:8e:fa:a5:68:ba:41:fe:6f:db:4d:8f: 03:b3:5a:ec:e3:a0:59:e3:b8:9c:81:6d:5f:0f:d1: 5b:f2:b4:08:b4:28:9b:f6:05:93:c4:0b:3a:7e:53: 97:c3:10:89:b6:b9:32:15:50:ae:5a:5c:17:55:4e: 21:d9:e3:b3:ff:3d:0b:3b:ca:06:3b:7f:1c:71:ee: 89:51:0b:39:47:db:d1:3b:5a:d7:83:a2:a2:1a:65: cd:49:81:c5:8f:ce:d1:ab:9b:d3:50:4f:56:96:9d: 29:94:1c:04:e5:f2:08:1f:25:ea:94:1c:e9:8d:d7: 80:bd:3d:9e:ea:ca:29:98:67:04:91:af:41:6c:a0: 00:2d:e8:65:f2:55:62:3c:8c:b2:f9:36:e1:7d:3f: 34:b0:b1:7d:d4:25:ad:d7:e4:bc:3a:0e:9f:09:69: 94:11:6d:c5:6b:c5:22:0a:dd:2c:26:0d:e5:dd:3e: 91:50:ca:4f:23:be:c6:6b:68:23:df:35:f1:88:0a: 3c:27:f9:cd:42:42:bd:3b:b1:2e:5a:91:ab:3d:ab: 3d:14:28:08:ac:d5:26:b2:35:50:22:18:de:03:5c: 0f:09:0d:56:e1:fb:92:01:2c:1b:08:b5:dd:84:28: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:80:52:CC:F3:D0:B1:C0:7E:38:8D:08:CC:85:C2:82:E5:09:CB X509v3 Authority Key Identifier: keyid:01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:38:89:37:c7:4a:80:e1:e8:88:6c:a7:a0:6d:6f:80:92:94: e8:cc:5f:da:78:87:e3:35:73:f0:b4:84:ee:a3:07:53:4a:db: 4f:92:e3:04:96:4f:54:74:1f:a1:e9:ab:05:ee:a0:a1:67:71: 3b:87:94:b3:cb:b9:75:e6:9e:c9:fb:a3:6d:6e:39:bc:5d:d4: a1:ce:7b:40:dd:40:c9:2c:1f:bf:a9:f0:66:79:bf:b6:29:7d: 91:94:06:38:c4:fa:d5:95:2b:d3:f5:52:da:93:f8:e1:9a:4d: 06:02:0c:27:09:ca:2b:38:04:cf:b5:25:ef:56:61:0b:53:ae: f7:b9:32:4f:a8:37:1d:a5:2e:02:6e:da:09:0e:9c:82:7e:43: d6:79:35:54:8d:be:a2:9c:42:0b:33:f4:06:91:7b:4a:67:65: f7:53:54:33:10:61:3f:53:9b:f5:aa:55:20:6e:ce:a9:52:ac: 50:b9:36:c9:3c:f4:c4:85:65:df:68:1d:38:59:c0:0c:36:e5: 63:5d:cd:64:60:95:54:6c:72:58:d1:1f:6b:55:5f:9d:18:f8: 3c:95:8b:ca:b3:77:05:7e:ec:68:dd:4c:fe:da:e4:9d:80:59: de:84:f9:dd:a8:8c:9a:d4:a5:98:af:59:5f:ab:50:c3:85:e6: 8c:f9:16:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTrfwDybw4mgBYZoiS8jo8CTC2KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3N2RjZDdiZWUxMTkwNjI5NDM3Y2E0YzhhYjgzZTNh ZDE1YzdhOTAeFw0yNjA0MjkyMzU2MjhaFw0yNjA1MDEwMDU3MjhaMDMxMTAvBgNV BAMTKDk4MDM4MDUyQ0NGM0QwQjFDMDdFMzg4RDA4Q0M4NUMyODJFNTA5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1oZ+DGmJuKliy7WYn7F32emO +qVoukH+b9tNjwOzWuzjoFnjuJyBbV8P0VvytAi0KJv2BZPECzp+U5fDEIm2uTIV UK5aXBdVTiHZ47P/PQs7ygY7fxxx7olRCzlH29E7WteDoqIaZc1JgcWPztGrm9NQ T1aWnSmUHATl8ggfJeqUHOmN14C9PZ7qyimYZwSRr0FsoAAt6GXyVWI8jLL5NuF9 PzSwsX3UJa3X5Lw6Dp8JaZQRbcVrxSIK3SwmDeXdPpFQyk8jvsZraCPfNfGICjwn +c1CQr07sS5akas9qz0UKAis1SayNVAiGN4DXA8JDVbh+5IBLBsItd2EKIVvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmAOAUszz0LHAfjiNCMyFwoLlCcswHwYDVR0j BBgwFoAUAXfc177hGQYpQ3ykyKuD460Vx6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBlNDhkYTItYmYzZC00Zjk0LTljMTMtYzA4YzExOTBk ZTE4LzAvMDE3N0RDRDdCRUUxMTkwNjI5NDM3Q0E0QzhBQjgzRTNBRDE1QzdBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FYZmMxNzdoR1FZcFEzeWt5S3VENDYw Vng2ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGU0OGRhMi1i ZjNkLTRmOTQtOWMxMy1jMDhjMTE5MGRlMTgvMC8wMTc3RENEN0JFRTExOTA2Mjk0 MzdDQTRDOEFCODNFM0FEMTVDN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjiJN8dKgOHoiGynoG1v gJKU6Mxf2niH4zVz8LSE7qMHU0rbT5LjBJZPVHQfoemrBe6goWdxO4eUs8u5deae yfujbW45vF3Uoc57QN1AySwfv6nwZnm/til9kZQGOMT61ZUr0/VS2pP44ZpNBgIM JwnKKzgEz7Ul71ZhC1Ou97kyT6g3HaUuAm7aCQ6cgn5D1nk1VI2+opxCCzP0BpF7 Smdl91NUMxBhP1Ob9apVIG7OqVKsULk2yTz0xIVl32gdOFnADDblY13NZGCVVGxy WNEfa1VfnRj4PJWLyrN3BX7saN1M/trknYBZ3oT53aiMmtSlmK9ZX6tQw4XmjPkW MQ== -----END CERTIFICATE-----Generated at Thu Apr 30 12:40:09 2026 by rpki-client