$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: opJtoYxaiB4mMFsIb/qdgUZt65Chlr0yLDnnuKio9IA= Subject key identifier: 89:E8:40:F3:EC:AD:D6:D3:DA:48:E7:54:8E:14:63:80:9E:70:A9:AA Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 3099F3A8D845D38F291E34E8F04D7AB1B42D7601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 0288 Signing time: Tue 12 May 2026 16:59:50 +0000 Manifest this update: Tue 12 May 2026 16:54:50 +0000 Manifest next update: Wed 13 May 2026 18:04:50 +0000 Files and hashes: 1: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 2: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) 3: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 4: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 5: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: GQeQNLtVLLY0vlr+hI8oMvnGOXSOsRz2+tEhzL6b9nY=) 6: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 7: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc=) 8: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 9: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk=) 10: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw=) 11: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:99:f3:a8:d8:45:d3:8f:29:1e:34:e8:f0:4d:7a:b1:b4:2d:76:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: May 12 16:54:50 2026 GMT Not After : May 13 18:04:50 2026 GMT Subject: CN=89E840F3ECADD6D3DA48E7548E1463809E70A9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:63:96:bd:25:39:46:93:05:13:1f:f7:91: 0a:2f:97:d5:d9:0e:df:53:44:e0:5d:a7:13:70:72: e8:a5:61:f9:cf:d6:f9:75:21:93:f5:78:5b:c2:ed: 48:17:18:1e:a3:1c:b9:13:e5:2d:94:28:9c:36:77: 98:fa:ef:04:a6:e3:c5:40:c9:48:84:b7:24:b8:5a: 42:a9:45:86:e9:6e:cd:21:21:22:9e:e4:ac:36:1b: 04:8c:e4:c7:31:9f:8d:66:a5:d3:ed:97:44:cc:be: a9:d8:dc:b8:77:a8:88:d2:42:70:a0:83:a5:71:6b: 24:6a:b2:70:3b:46:de:b9:b8:45:f0:1c:d1:f8:16: 97:7f:0c:be:30:04:7a:1e:fc:d2:7d:9a:c8:66:fb: c6:32:47:81:27:5d:6e:cf:7f:ff:dc:25:b1:d9:01: 8b:34:1b:02:56:73:af:cb:5d:b0:ec:be:02:cf:fa: e6:69:26:87:d7:53:9e:35:01:bf:7a:9e:b8:96:07: 2e:d3:05:91:bc:26:5b:60:27:82:a0:eb:f8:72:52: 9b:8d:e8:07:f7:b1:e2:ed:65:7a:ec:36:f7:2e:c5: 34:94:e4:71:11:66:17:66:9b:97:a4:f3:18:3c:33: e5:dd:c5:56:bc:22:b9:99:42:4e:13:84:0a:95:10: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E8:40:F3:EC:AD:D6:D3:DA:48:E7:54:8E:14:63:80:9E:70:A9:AA X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8f:4e:64:c9:7d:75:67:2d:30:42:04:00:61:ba:5d:44:c3: e4:f5:26:12:fb:c8:5d:3a:5c:ba:6f:f9:57:a3:f6:38:d0:d2: 4e:10:67:fc:0a:c5:e5:98:da:3f:0c:89:18:84:ae:a1:41:cf: ef:26:5c:b0:65:ff:fa:0b:4f:7f:c6:75:80:34:c3:fd:d1:ec: 6b:20:c1:0f:ac:1a:46:70:cf:84:9d:2f:02:0a:ef:fb:27:c7: df:99:5a:bf:98:6f:0e:36:be:88:25:fd:b6:77:1e:4c:3f:64: 57:36:c2:d6:d6:7c:42:9a:9c:d6:4c:33:fa:69:cb:a7:ba:01: cd:a1:8c:96:2b:32:06:7f:1f:ac:fe:13:2e:fb:f8:12:dc:52: b5:a5:b3:85:1e:3d:06:5b:98:38:f6:3e:9c:8a:3d:c0:5a:ad: e6:ca:5f:82:74:2c:f5:21:5d:53:96:1b:5a:b8:00:fd:4a:36: 66:4a:81:87:59:75:3f:1b:ef:68:94:e6:da:e7:4a:5c:1a:50: de:ec:94:d4:82:5d:32:73:af:ce:1e:d0:b8:fd:ea:ba:8a:af: 3d:ba:ed:5e:45:9f:ae:77:60:04:3e:b4:70:21:61:98:25:ce: dd:69:4a:8a:3a:f2:d0:60:f1:7c:64:09:ec:e0:e5:6b:cf:62: 75:47:4d:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMJnzqNhF048pHjTo8E16sbQtdgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA1MTIxNjU0NTBaFw0yNjA1MTMxODA0NTBaMDMxMTAvBgNV BAMTKDg5RTg0MEYzRUNBREQ2RDNEQTQ4RTc1NDhFMTQ2MzgwOUU3MEE5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWhmOWvSU5RpMFEx/3kQovl9XZ Dt9TROBdpxNwcuilYfnP1vl1IZP1eFvC7UgXGB6jHLkT5S2UKJw2d5j67wSm48VA yUiEtyS4WkKpRYbpbs0hISKe5Kw2GwSM5Mcxn41mpdPtl0TMvqnY3Lh3qIjSQnCg g6VxayRqsnA7Rt65uEXwHNH4Fpd/DL4wBHoe/NJ9mshm+8YyR4EnXW7Pf//cJbHZ AYs0GwJWc6/LXbDsvgLP+uZpJofXU541Ab96nriWBy7TBZG8JltgJ4Kg6/hyUpuN 6Af3seLtZXrsNvcuxTSU5HERZhdmm5ek8xg8M+XdxVa8IrmZQk4ThAqVEONbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiehA8+yt1tPaSOdUjhRjgJ5wqaowHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADo9OZMl9dWctMEIEAGG6 XUTD5PUmEvvIXTpcum/5V6P2ONDSThBn/ArF5ZjaPwyJGISuoUHP7yZcsGX/+gtP f8Z1gDTD/dHsayDBD6waRnDPhJ0vAgrv+yfH35lav5hvDja+iCX9tnceTD9kVzbC 1tZ8Qpqc1kwz+mnLp7oBzaGMlisyBn8frP4TLvv4EtxStaWzhR49BluYOPY+nIo9 wFqt5spfgnQs9SFdU5YbWrgA/Uo2ZkqBh1l1PxvvaJTm2udKXBpQ3uyU1IJdMnOv zh7QuP3quoqvPbrtXkWfrndgBD60cCFhmCXO3WlKijry0GDxfGQJ7ODla89idUdN 5Q== -----END CERTIFICATE-----Generated at Wed May 13 03:45:28 2026 by rpki-client