$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: fFX6StVQAn1AXzN3KpqFQi9Yvi7IgHlbMlyHz3kvEYc= Subject key identifier: 97:15:BF:FE:E6:15:92:42:55:EE:D3:B6:0B:A4:21:66:AE:AD:11:72 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 05B7783498E9BDB7CC8552EC510050FCCFA9866D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 024B Signing time: Tue 12 May 2026 22:32:42 +0000 Manifest this update: Tue 12 May 2026 22:27:42 +0000 Manifest next update: Thu 14 May 2026 01:56:42 +0000 Files and hashes: 1: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 2: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 3: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 4: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 5: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 6: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 7: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 8: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 9: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 10: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 11: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 12: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: gn8TSWhfxwgFsa2KNE5FSQ2yfPAZowCQPY3LgWpFVVs=) 13: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 14: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 15: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b7:78:34:98:e9:bd:b7:cc:85:52:ec:51:00:50:fc:cf:a9:86:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: May 12 22:27:42 2026 GMT Not After : May 14 01:56:42 2026 GMT Subject: CN=9715BFFEE615924255EED3B60BA42166AEAD1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:31:7a:46:85:b3:6e:7e:c8:8f:49:77:91: 1c:42:1a:23:82:fa:93:5e:83:d2:11:38:22:17:87: 5e:69:ea:80:21:6e:d3:c5:11:22:74:c6:82:e6:fe: 93:71:e3:12:b2:67:c5:f9:e6:8f:d7:b0:98:8c:43: 33:8a:81:27:ec:9e:54:a9:5f:de:43:35:1f:9e:f0: 7f:6a:a9:07:09:59:a6:79:00:d4:70:22:a7:d8:0d: 22:c7:25:ea:89:0b:d8:19:a3:16:61:73:2a:73:c3: c5:c4:00:02:0f:ad:bc:49:65:19:1b:b6:48:d5:e6: 62:25:63:88:68:f9:ec:97:7f:99:cc:68:a3:ec:62: 9f:e8:83:b2:e5:cb:3e:d0:2d:85:86:7e:80:88:49: c2:ba:b6:4b:36:84:59:cc:82:0b:a8:57:4b:b9:d3: 1d:b9:f4:56:b4:65:3b:da:17:25:4a:8d:8a:71:01: 48:87:29:03:4a:11:bb:ed:40:0c:0e:6d:69:b0:e7: 5f:0b:d4:90:b4:74:a8:ca:ea:97:af:5e:b2:53:26: 67:56:6a:24:45:c5:97:e9:f5:f1:01:31:b0:18:b5: 21:68:c7:6e:46:71:27:7b:2e:64:a9:f6:90:ea:f7: 46:77:4d:8f:c3:4e:44:3c:dd:4b:7b:13:f8:9e:13: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:15:BF:FE:E6:15:92:42:55:EE:D3:B6:0B:A4:21:66:AE:AD:11:72 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8a:2b:41:19:c9:93:81:aa:8f:64:72:02:b2:fd:57:63:4e: a3:45:8b:dc:c6:be:27:cd:48:83:9c:c8:e9:96:18:43:46:1f: ca:2c:83:32:ce:50:f1:72:cb:3a:dc:cb:f0:e2:a1:12:e8:e2: b7:1b:52:79:ea:63:f6:b5:64:9b:62:00:6e:00:68:d6:dd:2b: 20:33:e7:09:f1:53:c4:13:86:a9:8f:17:b6:89:97:f7:9f:52: b9:cb:8b:47:69:de:95:a4:6b:2f:50:66:6a:ad:dc:91:c9:eb: 65:78:88:d9:18:96:9f:a6:b1:2a:e2:c0:8e:00:40:d4:73:bb: 6c:a9:af:c3:4c:d6:f9:c3:4c:eb:d8:40:f7:cb:76:93:0b:90: d3:8e:f3:e1:c1:90:14:5e:7b:2c:2b:d6:31:be:8b:c6:fd:a0: 3f:18:c5:16:10:c4:eb:22:86:4a:12:0d:a5:45:1b:97:9e:72: 90:dd:7d:38:35:f3:6c:fe:2b:40:06:19:54:93:04:78:ca:87: c4:e2:fc:ec:c0:4e:9c:4d:85:44:f1:c3:16:9a:db:8f:3f:91: 6b:9c:91:e1:51:9b:a2:b6:9f:ee:d6:52:4c:70:69:7f:e7:49: a5:18:4b:fa:29:d5:0f:a4:bd:ea:85:d3:05:bc:73:49:9f:7c: 46:99:cc:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBbd4NJjpvbfMhVLsUQBQ/M+phm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA1MTIyMjI3NDJaFw0yNjA1MTQwMTU2NDJaMDMxMTAvBgNV BAMTKDk3MTVCRkZFRTYxNTkyNDI1NUVFRDNCNjBCQTQyMTY2QUVBRDExNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0zF6RoWzbn7Ij0l3kRxCGiOC +pNeg9IROCIXh15p6oAhbtPFESJ0xoLm/pNx4xKyZ8X55o/XsJiMQzOKgSfsnlSp X95DNR+e8H9qqQcJWaZ5ANRwIqfYDSLHJeqJC9gZoxZhcypzw8XEAAIPrbxJZRkb tkjV5mIlY4ho+eyXf5nMaKPsYp/og7Llyz7QLYWGfoCIScK6tks2hFnMgguoV0u5 0x259Fa0ZTvaFyVKjYpxAUiHKQNKEbvtQAwObWmw518L1JC0dKjK6pevXrJTJmdW aiRFxZfp9fEBMbAYtSFox25GcSd7LmSp9pDq90Z3TY/DTkQ83Ut7E/ieE6fLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlxW//uYVkkJV7tO2C6QhZq6tEXIwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4orQRnJk4Gqj2RyArL9 V2NOo0WL3Ma+J81Ig5zI6ZYYQ0YfyiyDMs5Q8XLLOtzL8OKhEujitxtSeepj9rVk m2IAbgBo1t0rIDPnCfFTxBOGqY8XtomX959SucuLR2nelaRrL1Bmaq3ckcnrZXiI 2RiWn6axKuLAjgBA1HO7bKmvw0zW+cNM69hA98t2kwuQ047z4cGQFF57LCvWMb6L xv2gPxjFFhDE6yKGShINpUUbl55ykN19ODXzbP4rQAYZVJMEeMqHxOL87MBOnE2F RPHDFprbjz+Ra5yR4VGboraf7tZSTHBpf+dJpRhL+inVD6S96oXTBbxzSZ98RpnM KQ== -----END CERTIFICATE-----Generated at Wed May 13 02:44:22 2026 by rpki-client