$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: ZRCYeRv00O18ehwNAP9BePV9VBR+3sM3v6CyfWn/Uhs= Subject key identifier: AA:F5:6B:C3:19:D3:8E:BB:01:55:D1:0F:94:5B:96:1C:6F:D9:0F:9E Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 325EFBC74EDB21FFC9E27986C4C2B77B93B3D4D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: AA Signing time: Tue 12 May 2026 10:04:47 +0000 Manifest this update: Tue 12 May 2026 09:59:47 +0000 Manifest next update: Wed 13 May 2026 11:55:47 +0000 Files and hashes: 1: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 2: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 3: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 4: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 5: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 6: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 7: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 8: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 9: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: MZItTz20i/OHsT/duJZn/UyJles6os8FnbvOLnv7QIk=) 10: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 11: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 12: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 13: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5e:fb:c7:4e:db:21:ff:c9:e2:79:86:c4:c2:b7:7b:93:b3:d4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: May 12 09:59:47 2026 GMT Not After : May 13 11:55:47 2026 GMT Subject: CN=AAF56BC319D38EBB0155D10F945B961C6FD90F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:0d:fd:aa:38:2a:e3:1c:a8:e6:71:03:c1: b1:61:de:31:54:7b:d6:90:94:c0:90:4b:67:38:c6: 18:96:22:09:7c:e3:e8:80:b1:b2:f8:53:a6:0b:0f: cc:07:79:57:1d:ff:ab:93:bd:f0:11:71:e3:65:3b: 99:5b:9f:77:9d:34:01:10:5f:a2:ce:eb:58:4f:12: 10:e7:ee:a9:ab:e1:1e:15:9e:f9:75:9d:81:1e:25: 38:70:a2:42:62:02:31:d1:44:0f:1d:fd:08:25:9b: 04:7b:e5:29:f3:b5:df:b5:97:ce:ea:c6:2f:dd:59: 8c:2f:4b:20:a8:42:14:d3:2a:9b:60:ce:8f:51:67: da:8f:78:96:8b:c2:92:08:1c:fa:db:d4:d6:0b:80: 53:d3:b2:09:47:00:53:e3:85:ef:1f:d9:81:9b:e3: a9:f8:e1:37:f5:49:12:ad:b0:d6:fd:78:9a:0a:2a: 7e:61:eb:9f:ea:d5:41:6a:b2:0e:cc:ab:1f:aa:2b: 8e:c2:de:8f:63:25:40:81:ed:b2:2c:59:eb:47:52: 21:e7:a7:de:2e:10:d2:ed:6c:51:75:d7:b7:af:99: 7b:5d:b8:bd:9d:6c:ba:60:62:33:52:1e:d5:56:74: 98:aa:b2:a8:d1:4d:04:e5:7c:3f:8d:f8:f4:65:f9: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:6B:C3:19:D3:8E:BB:01:55:D1:0F:94:5B:96:1C:6F:D9:0F:9E X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:02:75:60:90:6f:1a:8c:35:e5:06:79:06:ff:87:28:f1:5a: df:08:e4:62:95:26:3e:b9:58:a4:2c:c7:b9:e8:17:03:bc:64: 0b:52:b1:3f:43:d8:65:ce:80:59:ab:03:db:b9:1f:3a:09:11: 4e:ed:2a:d8:b4:96:e5:fb:4c:ec:b7:e9:93:ed:12:13:4f:5b: af:dc:0e:32:72:8f:d2:0d:df:53:6f:55:af:e4:34:dd:68:4b: 2b:51:0b:66:f3:d8:b7:3c:ce:39:4f:bf:2c:ee:70:0a:a9:ac: 25:4d:5f:4e:6d:64:9a:00:d4:c4:69:92:b2:a5:55:a3:4d:39: 7c:12:30:95:62:49:ed:68:25:cd:eb:db:ed:9a:39:44:1f:03: 84:02:1e:be:3d:20:e0:6b:60:f7:28:97:a6:0a:9b:f6:a7:20: 95:6a:0d:b7:06:1b:5a:55:23:a2:0d:31:0e:71:be:0b:50:53: ad:2a:87:99:fa:00:ed:ba:8e:1d:12:c5:c3:61:50:a3:8d:12: ab:04:74:96:42:fb:eb:a5:79:a0:47:ee:f9:ce:c8:55:39:1a: d4:09:93:99:73:f6:4e:1e:99:98:40:60:ca:89:7d:d6:7f:cc: a4:4f:d5:7a:c4:82:78:4e:10:f9:b8:d9:96:24:a5:64:35:69: 57:c3:b1:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMl77x07bIf/J4nmGxMK3e5Oz1NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA1MTIwOTU5NDdaFw0yNjA1MTMxMTU1NDdaMDMxMTAvBgNV BAMTKEFBRjU2QkMzMTlEMzhFQkIwMTU1RDEwRjk0NUI5NjFDNkZEOTBGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurQ39qjgq4xyo5nEDwbFh3jFU e9aQlMCQS2c4xhiWIgl84+iAsbL4U6YLD8wHeVcd/6uTvfARceNlO5lbn3edNAEQ X6LO61hPEhDn7qmr4R4Vnvl1nYEeJThwokJiAjHRRA8d/QglmwR75Snztd+1l87q xi/dWYwvSyCoQhTTKptgzo9RZ9qPeJaLwpIIHPrb1NYLgFPTsglHAFPjhe8f2YGb 46n44Tf1SRKtsNb9eJoKKn5h65/q1UFqsg7Mqx+qK47C3o9jJUCB7bIsWetHUiHn p94uENLtbFF117evmXtduL2dbLpgYjNSHtVWdJiqsqjRTQTlfD+N+PRl+efjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqvVrwxnTjrsBVdEPlFuWHG/ZD54wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQJ1YJBvGow15QZ5Bv+H KPFa3wjkYpUmPrlYpCzHuegXA7xkC1KxP0PYZc6AWasD27kfOgkRTu0q2LSW5ftM 7Lfpk+0SE09br9wOMnKP0g3fU29Vr+Q03WhLK1ELZvPYtzzOOU+/LO5wCqmsJU1f Tm1kmgDUxGmSsqVVo005fBIwlWJJ7Wglzevb7Zo5RB8DhAIevj0g4Gtg9yiXpgqb 9qcglWoNtwYbWlUjog0xDnG+C1BTrSqHmfoA7bqOHRLFw2FQo40SqwR0lkL766V5 oEfu+c7IVTka1AmTmXP2Th6ZmEBgyol91n/MpE/VesSCeE4Q+bjZliSlZDVpV8Ox IA== -----END CERTIFICATE-----Generated at Wed May 13 07:23:05 2026 by rpki-client