$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: E3gNk4M0wcL7nCWQJpXbMuCX5RUyeAAyC5SZjbs5VWo= Subject key identifier: 5A:9C:C2:81:44:74:C5:17:14:81:B0:56:93:D8:37:CE:43:D8:35:BA Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 4B01591511CEEA032495660123B0AA0648838AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 010A Signing time: Thu 23 Jul 2026 13:43:27 +0000 Manifest this update: Thu 23 Jul 2026 13:38:27 +0000 Manifest next update: Fri 24 Jul 2026 14:27:27 +0000 Files and hashes: 1: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 2: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 3: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: VIDyE9bRx2J+6AVQLi1BV+GCS3TUnK0QV4hQe3E/3No=) 4: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 5: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 6: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 7: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 8: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 9: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 10: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 11: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 12: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 13: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:01:59:15:11:ce:ea:03:24:95:66:01:23:b0:aa:06:48:83:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jul 23 13:38:27 2026 GMT Not After : Jul 24 14:27:27 2026 GMT Subject: CN=5A9CC2814474C5171481B05693D837CE43D835BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:e1:29:58:41:9f:08:52:e8:15:c1:51:52: 37:4b:27:05:df:02:90:1c:2f:e1:94:9a:04:a7:43: 2e:2c:25:1d:75:cc:80:f9:a8:d0:12:39:82:98:94: 62:e4:0d:15:02:8e:28:a0:5c:b5:b3:2a:bb:2a:2e: e5:87:41:a6:75:4a:2e:02:6e:a2:7e:21:f6:73:03: 9f:15:8e:5b:bd:35:28:fa:01:19:f4:ec:e3:c0:6a: 98:37:9e:27:26:9d:41:99:bf:ac:38:b7:cc:7b:f3: e2:3f:3d:2b:c6:c9:1a:ca:3b:e4:07:a0:e0:fb:af: 1f:ca:86:d8:6c:0e:83:23:94:da:1c:eb:a2:be:b3: ca:66:31:00:ff:b9:02:35:f7:4c:a7:12:f9:3c:e6: 4f:d3:8f:19:4b:dd:77:3f:74:bc:2d:6a:a0:07:7d: 17:30:dc:61:f5:fd:3f:01:4d:24:6f:24:ab:74:19: cf:f2:8b:78:d0:e2:3b:30:b4:39:48:f7:67:c2:f1: 4a:7f:00:35:aa:13:e9:4f:42:e5:a2:0c:8a:bf:70: 66:26:f6:a1:4e:7c:c2:c2:af:7a:d5:5f:f6:06:dd: 67:f6:a5:b3:58:51:5a:82:6c:2b:a8:8a:ef:6f:68: 18:7a:eb:0e:91:f1:53:70:d6:8c:dd:52:9d:90:9a: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:C2:81:44:74:C5:17:14:81:B0:56:93:D8:37:CE:43:D8:35:BA X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ff:25:01:9e:76:92:c2:7e:7e:37:06:cc:f6:2c:92:c6:1e: 2e:54:07:3a:73:8e:1e:89:42:28:98:37:0b:ba:24:6e:ee:0d: 4d:13:48:3e:05:dd:28:b3:45:9e:84:07:a0:c2:fb:01:57:5e: c9:89:54:46:bb:d7:9a:1b:69:83:7c:b7:b3:7f:f5:b6:02:54: f9:b0:4a:4d:30:21:74:6f:d2:ee:53:03:e7:8a:46:ac:b4:48: 26:e5:a8:26:92:2c:54:f7:5b:a8:86:a0:4e:4e:83:38:3a:07: 8d:28:1a:bd:97:b4:41:00:97:f7:e5:8d:6f:16:48:8c:5c:e7: e4:2c:8d:70:71:ee:dd:b6:38:4b:c8:26:f0:3d:ae:d4:79:b1: 91:de:38:04:af:35:23:38:ba:df:ed:bd:5c:61:8e:8c:39:97: fb:a3:bf:d6:81:3d:d9:54:21:03:94:93:5e:4e:86:e6:8e:d9: 8d:7d:34:1b:1a:7f:da:54:45:b6:c1:d7:8c:53:d7:f2:6c:39: a8:04:52:07:8e:38:a9:e6:47:af:9e:60:69:db:26:05:08:54: a0:75:60:8d:1d:3e:8b:66:11:d7:98:34:3e:1d:19:d3:4a:78: fb:b5:4d:a1:d3:d7:66:1e:a1:6e:e9:5c:98:c7:4b:6e:e7:53: 5d:50:3e:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSwFZFRHO6gMklWYBI7CqBkiDisIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA3MjMxMzM4MjdaFw0yNjA3MjQxNDI3MjdaMDMxMTAvBgNV BAMTKDVBOUNDMjgxNDQ3NEM1MTcxNDgxQjA1NjkzRDgzN0NFNDNEODM1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOOEpWEGfCFLoFcFRUjdLJwXf ApAcL+GUmgSnQy4sJR11zID5qNASOYKYlGLkDRUCjiigXLWzKrsqLuWHQaZ1Si4C bqJ+IfZzA58Vjlu9NSj6ARn07OPAapg3nicmnUGZv6w4t8x78+I/PSvGyRrKO+QH oOD7rx/KhthsDoMjlNoc66K+s8pmMQD/uQI190ynEvk85k/TjxlL3Xc/dLwtaqAH fRcw3GH1/T8BTSRvJKt0Gc/yi3jQ4jswtDlI92fC8Up/ADWqE+lPQuWiDIq/cGYm 9qFOfMLCr3rVX/YG3Wf2pbNYUVqCbCuoiu9vaBh66w6R8VNw1ozdUp2QmlVLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWpzCgUR0xRcUgbBWk9g3zkPYNbowHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP8lAZ52ksJ+fjcGzPYs ksYeLlQHOnOOHolCKJg3C7okbu4NTRNIPgXdKLNFnoQHoML7AVdeyYlURrvXmhtp g3y3s3/1tgJU+bBKTTAhdG/S7lMD54pGrLRIJuWoJpIsVPdbqIagTk6DODoHjSga vZe0QQCX9+WNbxZIjFzn5CyNcHHu3bY4S8gm8D2u1Hmxkd44BK81Izi63+29XGGO jDmX+6O/1oE92VQhA5STXk6G5o7ZjX00Gxp/2lRFtsHXjFPX8mw5qARSB444qeZH r55gadsmBQhUoHVgjR0+i2YR15g0Ph0Z00p4+7VNodPXZh6hbulcmMdLbudTXVA+ hg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:33:30 2026 by rpki-client