$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json) Hash identifier: Z+GSnwwKbE1dtC+eLh+f/wGtRzUhp/NlXcenfYFIVS0= Subject key identifier: 72:F3:57:4D:56:D0:80:61:41:57:9B:75:9C:E0:88:61:1C:6C:74:1E Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 4938FAA93335D8A1FCC37BE51C6DBE79FF623E39 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft Manifest number: 0131 Signing time: Wed 25 Mar 2026 20:16:57 +0000 Manifest this update: Wed 25 Mar 2026 20:11:57 +0000 Manifest next update: Thu 26 Mar 2026 20:16:57 +0000 Files and hashes: 1: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=) 2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: iVBTMlR4trZvrLrZNZqG0JHBbNNSq+0TsRB8SDmMgIo=) 3: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=) 4: 326130623a396534323a3a2f34382d3438203d3e20323134343531.roa (hash: ZRjJLmDeRNCwRY7Ib+tMKnrANdRcJxaIkzreli7J/Wg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:38:fa:a9:33:35:d8:a1:fc:c3:7b:e5:1c:6d:be:79:ff:62:3e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Mar 25 20:11:57 2026 GMT Not After : Mar 26 20:16:57 2026 GMT Subject: CN=72F3574D56D0806141579B759CE088611C6C741E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:ae:5c:75:e8:94:f7:e0:e2:d8:fb:bd:97: 8e:6a:8d:57:5e:11:6e:e5:55:61:e5:da:94:2c:13: 9f:11:ed:d9:b9:05:d0:d9:22:06:8b:b6:4c:d1:99: 21:1c:c6:9f:d0:f9:70:80:75:9f:58:73:23:19:bf: fc:81:1c:50:c9:4f:9c:c9:8a:0a:e4:42:91:15:f7: bd:47:02:ec:54:03:7d:0f:a1:86:da:2d:9e:d1:6b: 8d:43:be:ff:fd:eb:ba:cf:86:82:a8:9b:d3:01:b3: c2:b3:b4:c1:64:37:70:aa:d4:21:58:a0:d6:b7:39: 90:2d:60:9b:92:13:ec:34:45:f8:50:2c:0f:24:27: d6:68:25:71:4d:80:34:f8:56:5c:54:2c:ff:cc:58: 46:67:05:5d:64:32:66:d6:a0:92:06:3d:36:e3:46: 4a:96:d4:6c:62:80:56:d0:d2:f8:f1:87:cc:66:12: 11:5c:09:3b:dc:51:7f:20:3c:b9:e1:10:35:6b:f9: ff:94:5e:ae:8f:91:b5:b2:7e:26:59:d4:95:5d:89: 1a:3c:69:8a:5d:de:0a:72:b2:8f:96:16:5d:98:6a: 16:a3:4a:32:bd:11:5f:46:81:01:ce:81:e0:b4:cf: ce:fd:96:5d:2d:23:0b:6c:08:57:2d:1f:f3:18:7a: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F3:57:4D:56:D0:80:61:41:57:9B:75:9C:E0:88:61:1C:6C:74:1E X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:89:8d:f4:90:f5:54:4e:46:0b:62:18:e7:2f:37:93:5e:c0: d7:e0:97:e6:8d:9b:6d:d6:f9:c4:11:4c:3f:17:dd:36:01:93: 79:6b:a7:c6:e2:18:cf:30:99:a7:35:69:d3:83:9f:8e:a8:cf: a1:5e:7e:43:9a:d9:0e:8f:ea:e3:52:76:df:1c:ff:4a:f8:16: ff:3e:43:91:dd:23:ba:34:3a:a4:5b:cd:53:d0:8e:2c:98:07: 8c:06:09:94:10:25:8d:1a:fa:83:af:9c:d6:b9:68:89:11:f0: 1d:ca:95:15:a4:c6:71:d0:de:4f:4a:5c:f3:de:6e:63:ac:e6: 1b:d8:33:82:57:b0:49:aa:f4:ba:b1:de:e8:ed:b8:c1:89:4a: 88:05:85:bf:8b:e6:c2:03:d9:46:28:01:e6:57:46:1d:13:fc: d9:57:ca:01:d9:a4:57:8b:af:db:be:9b:fd:5d:ba:d4:bc:3c: a6:b2:4c:39:b8:c4:1c:4a:d4:0d:89:32:9d:f1:6b:c0:0e:2d: 4e:2f:34:0d:dd:f3:20:98:ab:9d:74:5f:54:17:f4:ed:4a:bb: 7f:3b:22:e6:a2:a1:1d:0c:62:77:b2:de:9f:f8:db:68:dc:21: 98:5f:b6:b5:44:c8:2a:83:0e:b3:22:43:26:5a:22:b8:6c:8e: 65:27:d9:09 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSTj6qTM12KH8w3vlHG2+ef9iPjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjAzMjUyMDExNTdaFw0yNjAzMjYyMDE2NTdaMDMxMTAvBgNV BAMTKDcyRjM1NzRENTZEMDgwNjE0MTU3OUI3NTlDRTA4ODYxMUM2Qzc0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJ65cdeiU9+Di2Pu9l45qjVde EW7lVWHl2pQsE58R7dm5BdDZIgaLtkzRmSEcxp/Q+XCAdZ9YcyMZv/yBHFDJT5zJ igrkQpEV971HAuxUA30PoYbaLZ7Ra41Dvv/967rPhoKom9MBs8KztMFkN3Cq1CFY oNa3OZAtYJuSE+w0RfhQLA8kJ9ZoJXFNgDT4VlxULP/MWEZnBV1kMmbWoJIGPTbj RkqW1GxigFbQ0vjxh8xmEhFcCTvcUX8gPLnhEDVr+f+UXq6PkbWyfiZZ1JVdiRo8 aYpd3gpyso+WFl2YahajSjK9EV9GgQHOgeC0z879ll0tIwtsCFctH/MYeuV3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUcvNXTVbQgGFBV5t1nOCIYRxsdB4wHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3 MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvomN9JD1VE5GC2IY5y83 k17A1+CX5o2bbdb5xBFMPxfdNgGTeWunxuIYzzCZpzVp04OfjqjPoV5+Q5rZDo/q 41J23xz/SvgW/z5Dkd0jujQ6pFvNU9COLJgHjAYJlBAljRr6g6+c1rloiRHwHcqV FaTGcdDeT0pc895uY6zmG9gzglewSar0urHe6O24wYlKiAWFv4vmwgPZRigB5ldG HRP82VfKAdmkV4uv276b/V261Lw8prJMObjEHErUDYkynfFrwA4tTi80Dd3zIJir nXRfVBf07Uq7fzsi5qKhHQxid7Len/jbaNwhmF+2tUTIKoMOsyJDJloiuGyOZSfZ CQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:06:31 2026 by rpki-client