$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: o3UxXnXdR2KusFltZg0Cy+43vQGBz3nZgDxVPnRxEbE= Subject key identifier: 92:EC:46:C8:8A:21:5F:00:6D:5F:B1:60:A1:B4:66:BC:76:4B:F1:48 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 55C0D3DFE2E011C6CD4BBDEAD8D16FFC442F1454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 0161 Signing time: Fri 25 Sep 2026 02:43:59 +0000 Manifest this update: Fri 25 Sep 2026 02:38:59 +0000 Manifest next update: Sat 26 Sep 2026 04:09:59 +0000 Files and hashes: 1: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 2: 38312e3139392e32382e302f32342d3234203d3e203633333532.roa (hash: EDPc+a+sY0tztsfTW3G6u4Wl4dcCJplDRGtTdOEkIrQ=) 3: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 4: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: gMAuCKqoMOf73sHCwY53R4h5yl32EJcOUaJ3+g98fJ4=) 5: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 6: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 7: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 8: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 9: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 10: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 11: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 12: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 13: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c0:d3:df:e2:e0:11:c6:cd:4b:bd:ea:d8:d1:6f:fc:44:2f:14:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Sep 25 02:38:59 2026 GMT Not After : Sep 26 04:09:59 2026 GMT Subject: CN=92EC46C88A215F006D5FB160A1B466BC764BF148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:44:fb:e1:c7:b9:e6:fd:0b:ec:49:4b:92: 79:79:8b:21:e7:7c:53:9a:ef:43:75:e6:ff:cb:b7: 2a:25:65:cc:dc:38:e8:b9:37:c1:66:21:7c:0f:6e: d2:1e:70:fb:ad:35:8c:12:45:72:f2:2c:cd:1f:54: c7:b1:04:7d:c0:49:51:b6:f6:a8:9b:07:bb:79:60: c6:6f:62:e0:d4:55:45:c6:07:b9:da:9e:11:79:64: 51:9d:03:e8:37:df:63:97:95:84:f0:b2:dd:cb:43: 9b:f1:31:27:1f:db:aa:d8:3c:36:59:4f:11:55:28: 20:b0:5d:f9:ed:d2:05:b6:a7:60:17:fc:d3:af:6e: 13:e5:91:3d:ad:8a:39:b2:c9:d3:13:03:07:7c:35: 9d:55:dc:72:19:48:9e:28:fa:39:45:8d:18:a8:ba: ad:4b:df:82:ee:dd:77:47:f0:89:b9:59:76:84:c7: 78:03:ee:7b:5f:21:da:c0:b5:bd:ec:1d:f6:85:be: d2:0f:11:e1:23:c0:60:24:b2:da:17:a4:34:25:e8: fe:7b:28:27:3e:3c:bd:a6:84:52:ef:c2:68:87:4c: 6d:60:53:89:67:40:f9:1f:e7:e2:5a:dc:af:e7:21: 49:83:ef:ee:45:07:cb:af:dd:23:d1:ad:8a:c6:d2: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:46:C8:8A:21:5F:00:6D:5F:B1:60:A1:B4:66:BC:76:4B:F1:48 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:40:83:45:96:16:37:53:79:af:d1:54:e6:84:9c:50:ff:71: d5:5a:05:89:0f:e8:6b:39:b5:24:3a:f0:56:1b:37:50:66:d5: c2:71:03:dd:8d:d1:aa:aa:f5:76:80:a9:43:e8:06:68:3a:3d: f8:13:56:a1:c9:68:a6:75:d1:71:d5:9b:69:2a:9b:f2:19:67: fb:4c:a8:a5:92:20:fa:bc:e7:f6:fd:08:67:a3:b8:d0:8e:3b: e4:1c:b8:10:45:75:a8:ef:e1:87:17:7d:7c:ed:8a:91:f6:18: 15:18:93:39:1e:ce:d9:43:8a:11:f3:ca:62:d1:79:77:35:b7: 9b:b8:31:85:3f:4f:56:87:17:c9:cb:e1:ef:53:b5:aa:6e:19: 1e:cc:ae:2f:ae:87:9d:ab:35:ca:c2:f1:c8:b5:5a:4d:8c:c1: 17:cf:a6:8e:be:e8:b6:3f:6e:1c:92:65:c4:1b:54:8b:98:43: f9:89:b9:93:e9:1e:52:17:a6:40:62:dd:22:ef:49:74:c6:c2: ec:b7:18:67:25:27:6b:0d:20:d4:25:38:50:5c:ff:ce:2f:dc: 63:aa:e4:30:58:84:4d:8f:55:72:de:65:75:c1:64:94:68:22: be:0b:63:d4:37:3d:24:c0:54:9d:a6:b5:95:e5:85:2d:31:79: 6e:9a:44:a1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVcDT3+LgEcbNS73q2NFv/EQvFFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA5MjUwMjM4NTlaFw0yNjA5MjYwNDA5NTlaMDMxMTAvBgNV BAMTKDkyRUM0NkM4OEEyMTVGMDA2RDVGQjE2MEExQjQ2NkJDNzY0QkYxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEX0T74ce55v0L7ElLknl5iyHn fFOa70N15v/LtyolZczcOOi5N8FmIXwPbtIecPutNYwSRXLyLM0fVMexBH3ASVG2 9qibB7t5YMZvYuDUVUXGB7nanhF5ZFGdA+g332OXlYTwst3LQ5vxMScf26rYPDZZ TxFVKCCwXfnt0gW2p2AX/NOvbhPlkT2tijmyydMTAwd8NZ1V3HIZSJ4o+jlFjRio uq1L34Lu3XdH8Im5WXaEx3gD7ntfIdrAtb3sHfaFvtIPEeEjwGAkstoXpDQl6P57 KCc+PL2mhFLvwmiHTG1gU4lnQPkf5+Ja3K/nIUmD7+5FB8uv3SPRrYrG0pyZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkuxGyIohXwBtX7FgobRmvHZL8UgwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0CDRZYWN1N5r9FU5oSc UP9x1VoFiQ/oazm1JDrwVhs3UGbVwnED3Y3Rqqr1doCpQ+gGaDo9+BNWoclopnXR cdWbaSqb8hln+0yopZIg+rzn9v0IZ6O40I475By4EEV1qO/hhxd9fO2KkfYYFRiT OR7O2UOKEfPKYtF5dzW3m7gxhT9PVocXycvh71O1qm4ZHsyuL66Hnas1ysLxyLVa TYzBF8+mjr7otj9uHJJlxBtUi5hD+Ym5k+keUhemQGLdIu9JdMbC7LcYZyUnaw0g 1CU4UFz/zi/cY6rkMFiETY9Vct5ldcFklGgivgtj1Dc9JMBUnaa1leWFLTF5bppE oQ== -----END CERTIFICATE-----Generated at Fri Sep 25 08:47:17 2026 by rpki-client