$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: NFCKrnyMa4QlwPuMztsQ0QhavGD56AUmtzJ6YBucdBU= Subject key identifier: E3:3D:9B:AF:31:F1:E1:79:F9:52:55:55:13:2D:84:FD:FD:07:DB:7C Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 21D3DD5E44FB8AE4E8B9DD334081309FE8087CB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 01F9 Signing time: Tue 12 May 2026 07:12:07 +0000 Manifest this update: Tue 12 May 2026 07:07:07 +0000 Manifest next update: Wed 13 May 2026 10:55:07 +0000 Files and hashes: 1: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=) 2: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: aQqyppfq1G0dtgfce5qUTiEgqU4ipo9uY/suA4axV58=) 3: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: yFE4I2Zywk/vg/AZKkdTIOfHhJdBxexAqvkF0jOzfOk=) 4: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: kBwEK18YCfMx0ouzbMGql3wfMadnMbnDgpYbNfw03+g=) 5: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 10:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d3:dd:5e:44:fb:8a:e4:e8:b9:dd:33:40:81:30:9f:e8:08:7c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: May 12 07:07:07 2026 GMT Not After : May 13 10:55:07 2026 GMT Subject: CN=E33D9BAF31F1E179F9525555132D84FDFD07DB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:ef:45:91:9d:c0:9d:d8:01:e7:ff:88:f1: 9c:36:0d:0d:29:47:bd:f6:fa:5e:99:26:b1:9d:af: af:0e:e6:9d:db:fb:38:d7:b6:e6:c0:db:af:29:8a: bb:22:df:9e:e6:fe:52:69:ab:36:8e:42:35:98:2f: b3:22:00:e0:e9:fd:da:c1:c2:40:2d:04:1b:3d:a6: e2:80:18:10:cc:7e:d7:db:9c:70:91:91:f8:b6:3f: 5e:0d:1d:81:47:24:55:63:4a:1a:a7:22:6b:49:d0: bb:31:fb:be:72:6f:24:2b:f6:28:fa:03:5a:d1:d3: 39:16:db:21:03:d5:68:be:21:08:e4:88:af:f4:10: 74:20:df:b3:23:96:cc:09:3d:8c:70:3a:b0:eb:59: 0a:0b:9f:5a:29:ab:56:c0:79:1f:a3:fc:e8:95:69: b5:aa:3a:52:b7:45:3e:e4:e7:f5:63:4c:2a:20:63: 8f:79:ce:0b:0a:d5:3b:9b:2f:2d:7d:71:c9:09:8d: b9:b0:4e:4f:c5:d8:5c:99:0f:a2:70:59:36:93:6d: 0d:10:2f:dd:6c:ed:d5:3c:0b:17:7d:47:cb:16:43: 3f:95:5d:29:c0:20:9f:b2:1e:a3:36:1d:2b:1b:04: 04:24:89:6c:e0:69:e2:a8:e3:17:46:3c:aa:82:06: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:9B:AF:31:F1:E1:79:F9:52:55:55:13:2D:84:FD:FD:07:DB:7C X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:09:eb:df:b7:74:36:a4:49:7a:9f:1d:5e:fe:b9:59:ce: 12:30:c4:c2:3f:b0:f0:99:22:3a:70:46:f4:dd:23:83:cb:79: 58:a8:e4:35:7a:19:fb:e6:70:15:08:33:0e:82:9a:03:24:16: f8:e5:c2:c8:a0:13:11:1e:bd:79:aa:ea:86:ea:fa:3a:53:62: 26:91:d7:9a:68:1f:74:31:5d:4c:16:dc:57:c2:41:6b:65:aa: e6:86:30:ae:6d:01:e6:7e:3d:d9:f5:6c:3d:63:2c:78:70:3e: d6:60:7a:39:32:e6:1e:bb:8c:3c:ec:af:c6:24:f5:50:b7:cc: fe:6a:46:ce:16:49:39:3d:f2:14:b6:d3:a0:cf:43:fd:a2:96: 8f:f7:69:26:86:c9:64:4c:cd:ea:0b:fe:99:97:1c:e3:92:82: 31:3b:89:5c:5c:e9:16:66:14:1f:ef:5a:de:c4:a1:b4:28:ac: 89:5d:a9:5b:95:2b:ff:4d:cd:d3:f4:4e:2a:cc:e6:9a:96:ee: 52:ea:87:da:97:e2:de:0b:59:4e:50:29:88:0a:69:3c:64:4a: 61:16:99:f3:f3:39:c9:76:cc:8a:a5:ea:ac:4e:df:67:ab:88: 31:f6:18:67:fc:2c:c2:6f:73:0d:d7:9e:0b:38:f0:23:5b:95: 02:58:53:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIdPdXkT7iuToud0zQIEwn+gIfLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjA1MTIwNzA3MDdaFw0yNjA1MTMxMDU1MDdaMDMxMTAvBgNV BAMTKEUzM0Q5QkFGMzFGMUUxNzlGOTUyNTU1NTEzMkQ4NEZERkQwN0RCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4+9FkZ3AndgB5/+I8Zw2DQ0p R732+l6ZJrGdr68O5p3b+zjXtubA268pirsi357m/lJpqzaOQjWYL7MiAODp/drB wkAtBBs9puKAGBDMftfbnHCRkfi2P14NHYFHJFVjShqnImtJ0Lsx+75ybyQr9ij6 A1rR0zkW2yED1Wi+IQjkiK/0EHQg37MjlswJPYxwOrDrWQoLn1opq1bAeR+j/OiV abWqOlK3RT7k5/VjTCogY495zgsK1TubLy19cckJjbmwTk/F2FyZD6JwWTaTbQ0Q L91s7dU8Cxd9R8sWQz+VXSnAIJ+yHqM2HSsbBAQkiWzgaeKo4xdGPKqCBhI1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4z2brzHx4Xn5UlVVEy2E/f0H23wwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjEJ69+3dDakSXqfHV7+ uVnOEjDEwj+w8JkiOnBG9N0jg8t5WKjkNXoZ++ZwFQgzDoKaAyQW+OXCyKATER69 earqhur6OlNiJpHXmmgfdDFdTBbcV8JBa2Wq5oYwrm0B5n492fVsPWMseHA+1mB6 OTLmHruMPOyvxiT1ULfM/mpGzhZJOT3yFLbToM9D/aKWj/dpJobJZEzN6gv+mZcc 45KCMTuJXFzpFmYUH+9a3sShtCisiV2pW5Ur/03N0/ROKszmmpbuUuqH2pfi3gtZ TlApiAppPGRKYRaZ8/M5yXbMiqXqrE7fZ6uIMfYYZ/wswm9zDdeeCzjwI1uVAlhT HQ== -----END CERTIFICATE-----Generated at Wed May 13 03:25:57 2026 by rpki-client