$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: xtrmIExDCkbOkHQ8o1ogEU5yFCPJlKcYXWKkhTI0DjA= Subject key identifier: AC:72:EE:E1:3E:31:7B:27:35:83:29:6F:31:A0:89:32:67:B7:DA:40 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 3B1D7EAA41D9451C7A91C134776970117B5F04C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 51 Signing time: Sat 18 Apr 2026 10:05:46 +0000 Manifest this update: Sat 18 Apr 2026 10:00:46 +0000 Manifest next update: Sun 19 Apr 2026 14:03:46 +0000 Files and hashes: 1: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 3: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 4: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 5: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) 6: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 7: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: iOAe1VEZ9cKOaC2cmcyIdCsE3+I8iipl2ZwwJoYbyGA=) 8: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 9: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 13:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1d:7e:aa:41:d9:45:1c:7a:91:c1:34:77:69:70:11:7b:5f:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Apr 18 10:00:46 2026 GMT Not After : Apr 19 14:03:46 2026 GMT Subject: CN=AC72EEE13E317B273583296F31A0893267B7DA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:da:e1:ad:7b:98:b9:53:e1:62:99:30:6d: 5f:f2:81:84:cd:af:a4:87:c1:96:38:fd:25:70:f0: a3:0d:61:12:07:c0:dd:e0:3d:92:4c:be:f4:49:83: f5:9d:0d:6a:0c:79:c2:02:b9:a6:14:5f:24:d2:60: 4f:1b:08:b9:38:bf:a8:fa:79:ed:40:93:70:8e:71: bb:66:f8:88:4e:35:00:62:c5:1f:94:21:fa:9d:64: 62:c4:9f:83:5d:c4:1f:77:83:41:c2:93:ce:23:88: e9:aa:29:70:3e:3b:85:67:90:df:1d:a8:68:98:d2: 0b:5d:0f:00:92:0a:53:fc:61:49:df:3b:84:0e:08: b0:66:0b:8d:17:a3:d5:b4:b0:d7:93:c4:51:9c:34: 93:32:e7:bb:8d:87:d4:e0:74:49:7e:af:86:39:ce: 3a:d7:b2:af:2a:7c:92:1a:cb:94:b5:bb:cf:db:bf: fa:b6:20:06:ce:45:47:f3:92:94:9d:6a:90:56:c3: 2f:71:8c:23:bc:6a:47:b1:14:17:61:48:7e:bf:33: 28:68:6a:b2:33:17:c6:16:b9:11:74:23:82:7a:e2: 7a:ae:3f:e8:47:ce:c6:56:f4:f9:53:dd:6b:cc:af: b9:e2:1e:00:9e:b4:0a:e9:d8:cd:5c:4e:ea:29:45: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:EE:E1:3E:31:7B:27:35:83:29:6F:31:A0:89:32:67:B7:DA:40 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:52:67:15:62:13:51:54:77:3d:b1:c7:23:a6:20:64:15:02: 4c:8f:64:fe:d8:07:5b:ad:d8:9c:68:66:ab:da:57:6f:d4:cd: 17:2c:88:86:d3:44:c2:a5:2b:5f:12:07:ba:6b:1b:6b:c2:03: 9b:89:16:86:e7:a4:21:43:dc:19:0b:d7:f0:3d:56:34:b4:bd: de:fc:37:be:16:02:db:86:2e:22:53:e0:73:c7:22:e2:54:e1: 4d:ab:19:a6:87:5d:d6:dd:56:af:7d:12:78:3b:e3:31:f2:99: de:b1:e6:48:e2:d3:fc:bc:0f:0f:37:27:c0:69:fc:e6:d5:28: 1e:90:65:12:bf:a9:ca:77:53:48:f3:6b:f0:cd:22:97:c5:3a: 9b:ff:5c:07:02:53:de:88:ef:4d:8d:94:c1:bc:3b:cc:dc:a0: cc:97:48:43:bb:82:60:4f:0d:21:3e:2f:e6:16:27:c5:99:bd: e7:b0:b1:c2:76:23:30:0f:cb:b6:65:f0:6e:ff:a7:35:fe:68: ed:6b:09:fd:ee:77:1d:f7:9e:e5:92:05:1a:c3:ec:52:92:04: ab:92:fe:57:b8:6e:a8:68:f4:68:4b:7e:8f:31:d4:b8:b0:38: 92:46:cb:0b:dc:8f:6b:a0:70:f3:96:71:59:ee:3b:d7:59:d3: ee:72:e6:d0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOx1+qkHZRRx6kcE0d2lwEXtfBMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA0MTgxMDAwNDZaFw0yNjA0MTkxNDAzNDZaMDMxMTAvBgNV BAMTKEFDNzJFRUUxM0UzMTdCMjczNTgzMjk2RjMxQTA4OTMyNjdCN0RBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMtrhrXuYuVPhYpkwbV/ygYTN r6SHwZY4/SVw8KMNYRIHwN3gPZJMvvRJg/WdDWoMecICuaYUXyTSYE8bCLk4v6j6 ee1Ak3COcbtm+IhONQBixR+UIfqdZGLEn4NdxB93g0HCk84jiOmqKXA+O4VnkN8d qGiY0gtdDwCSClP8YUnfO4QOCLBmC40Xo9W0sNeTxFGcNJMy57uNh9TgdEl+r4Y5 zjrXsq8qfJIay5S1u8/bv/q2IAbORUfzkpSdapBWwy9xjCO8akexFBdhSH6/Myho arIzF8YWuRF0I4J64nquP+hHzsZW9PlT3WvMr7niHgCetArp2M1cTuopRSxpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrHLu4T4xeyc1gylvMaCJMme32kAwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHUmcV YhNRVHc9sccjpiBkFQJMj2T+2AdbrdicaGar2ldv1M0XLIiG00TCpStfEge6axtr wgObiRaG56QhQ9wZC9fwPVY0tL3e/De+FgLbhi4iU+BzxyLiVOFNqxmmh13W3Vav fRJ4O+Mx8pneseZI4tP8vA8PNyfAafzm1SgekGUSv6nKd1NI82vwzSKXxTqb/1wH AlPeiO9NjZTBvDvM3KDMl0hDu4JgTw0hPi/mFifFmb3nsLHCdiMwD8u2ZfBu/6c1 /mjtawn97ncd957lkgUaw+xSkgSrkv5XuG6oaPRoS36PMdS4sDiSRssL3I9roHDz lnFZ7jvXWdPucubQ -----END CERTIFICATE-----Generated at Sun Apr 19 02:37:41 2026 by rpki-client