$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: Qcd+SCYxOcUysg0GKSXjliG43hDZzrqsfmiptNTcY6E= Subject key identifier: 9C:FB:03:D7:D7:95:0E:E2:DA:76:E5:10:94:FA:57:2A:5C:AF:24:3E Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 5D4BFCE7EAF79E7FE03F2E48731D781B21EADAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 6B Signing time: Thu 26 Mar 2026 04:02:38 +0000 Manifest this update: Thu 26 Mar 2026 03:57:38 +0000 Manifest next update: Fri 27 Mar 2026 04:12:38 +0000 Files and hashes: 1: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 2: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 3: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 4: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 5: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 6: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 7: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: IP7nlHVaV2JT+7hK1D2NphHfBtCBr60evMPBrSNOxe4=) 8: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 9: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 10: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 11: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 12: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 13: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:fc:e7:ea:f7:9e:7f:e0:3f:2e:48:73:1d:78:1b:21:ea:da:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Mar 26 03:57:38 2026 GMT Not After : Mar 27 04:12:38 2026 GMT Subject: CN=9CFB03D7D7950EE2DA76E51094FA572A5CAF243E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:af:df:c0:01:ec:83:88:7d:18:0e:13:39: 18:9c:d3:13:7d:d8:a3:8a:ff:66:64:3e:61:c5:60: 6d:e7:be:dd:75:97:4c:30:88:a7:77:66:4e:ff:b0: e3:7f:7e:ce:7b:1e:a5:95:47:9a:24:16:13:c1:48: 3b:b0:78:f1:67:6c:5c:81:71:94:3a:85:54:05:c0: d1:c5:a7:99:22:e9:36:a5:ec:5f:84:08:e6:59:ab: bf:0e:16:7b:7c:b1:f4:72:57:0a:b1:f5:d2:7e:b7: 9f:61:09:a9:f5:16:da:d0:9f:fc:71:a9:fc:59:1c: ec:72:cc:43:94:d7:a5:d6:8b:c3:61:2e:37:c7:bd: aa:3e:f5:67:4b:9f:21:24:73:9d:60:c5:36:21:a5: 18:d7:d8:aa:61:ff:33:7d:2a:5e:3f:9d:dc:2a:f8: 6e:9f:7c:c3:5f:c9:e4:a1:1e:f6:a7:b8:e8:58:e5: 64:75:4e:dd:ad:f3:90:15:ae:94:b6:cd:00:9e:2a: 21:54:4b:1c:8d:68:f7:cb:93:a4:d5:81:cd:00:68: 03:61:b3:53:04:25:d8:07:1a:00:1e:a1:c7:7e:65: c7:7f:29:21:d1:6b:35:00:c6:5d:44:7e:01:1e:c8: 14:bb:cd:17:3e:33:f5:db:58:a5:26:85:81:58:4d: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FB:03:D7:D7:95:0E:E2:DA:76:E5:10:94:FA:57:2A:5C:AF:24:3E X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:34:57:7f:96:23:f7:cf:96:91:13:ec:ef:ea:08:10:f0:15: bc:71:e8:b4:d9:44:e9:88:92:71:1c:df:01:3a:3a:5f:10:f7: 56:dc:6b:cd:af:f8:ef:c7:05:15:66:0f:9b:0e:9a:67:c8:90: fb:f8:1d:1c:a7:1b:c3:02:e0:b6:e8:93:dd:6b:47:0d:d1:f5: 95:88:16:99:bb:8f:50:5c:27:10:d0:af:5a:60:24:c0:17:1e: 97:c8:b0:bd:32:6a:31:a7:aa:25:cf:dc:87:b4:4c:9d:ca:01: 4f:a4:62:18:be:de:d1:b4:47:d9:47:9d:ce:20:71:05:09:8f: 5e:dc:8e:29:e8:d3:54:b6:ea:cb:b7:b7:cd:78:80:85:e1:cc: 64:4f:ae:18:fe:41:35:d4:69:35:76:44:30:95:4d:0e:9e:5f: 92:40:bd:b3:e9:f1:25:69:7b:a3:52:65:c2:8d:32:aa:fb:90: 14:e5:fd:6a:a6:ae:a1:2f:b3:4b:a7:ab:a1:c4:5f:16:5c:82: 74:22:0f:e3:61:dd:2b:96:d8:34:6d:90:4e:1a:17:4f:27:82: 2b:5e:1e:d1:e0:f5:be:84:f9:79:10:60:cd:67:38:ec:79:c5: 97:6d:92:e6:f9:49:ce:39:8d:34:bf:71:0c:b4:66:5f:a1:ff: bb:fe:d7:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXUv85+r3nn/gPy5Icx14GyHq2uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAzMjYwMzU3MzhaFw0yNjAzMjcwNDEyMzhaMDMxMTAvBgNV BAMTKDlDRkIwM0Q3RDc5NTBFRTJEQTc2RTUxMDk0RkE1NzJBNUNBRjI0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+K/fwAHsg4h9GA4TORic0xN9 2KOK/2ZkPmHFYG3nvt11l0wwiKd3Zk7/sON/fs57HqWVR5okFhPBSDuwePFnbFyB cZQ6hVQFwNHFp5ki6Tal7F+ECOZZq78OFnt8sfRyVwqx9dJ+t59hCan1FtrQn/xx qfxZHOxyzEOU16XWi8NhLjfHvao+9WdLnyEkc51gxTYhpRjX2Kph/zN9Kl4/ndwq +G6ffMNfyeShHvanuOhY5WR1Tt2t85AVrpS2zQCeKiFUSxyNaPfLk6TVgc0AaANh s1MEJdgHGgAeocd+Zcd/KSHRazUAxl1EfgEeyBS7zRc+M/XbWKUmhYFYTetTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnPsD19eVDuLaduUQlPpXKlyvJD4wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjRXf5Yj98+WkRPs7+oI EPAVvHHotNlE6YiScRzfATo6XxD3Vtxrza/478cFFWYPmw6aZ8iQ+/gdHKcbwwLg tuiT3WtHDdH1lYgWmbuPUFwnENCvWmAkwBcel8iwvTJqMaeqJc/ch7RMncoBT6Ri GL7e0bRH2UedziBxBQmPXtyOKejTVLbqy7e3zXiAheHMZE+uGP5BNdRpNXZEMJVN Dp5fkkC9s+nxJWl7o1Jlwo0yqvuQFOX9aqauoS+zS6erocRfFlyCdCIP42HdK5bY NG2QThoXTyeCK14e0eD1voT5eRBgzWc47HnFl22S5vlJzjmNNL9xDLRmX6H/u/7X hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:11 2026 by rpki-client