$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: mhifN4yYlvY9TZO7OV4G2Jhm6DnAEqN1s0F23AQK9xw= Subject key identifier: 45:7B:0D:D2:90:A2:D9:54:0E:F6:A5:F9:83:5F:A0:DC:59:3F:DB:C7 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 219DF62B64B142C0C094FBFA4F631AA19A31AEA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 0245 Signing time: Wed 25 Mar 2026 12:50:38 +0000 Manifest this update: Wed 25 Mar 2026 12:45:38 +0000 Manifest next update: Thu 26 Mar 2026 14:46:38 +0000 Files and hashes: 1: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 2: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 3: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc=) 4: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: RAf2s/P2CMU8Gg0dop4qrViyggS/b5L0ZKlNTAzy520=) 5: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw=) 6: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 7: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 8: 3134312e39382e34332e302f32342d3234203d3e203633313939.roa (hash: qIvPiXlQ2pg3f/7mhaP/mlEDh5IakbCDbr6yJGTo5+g=) 9: 34352e36362e36332e302f32342d3234203d3e20313530323933.roa (hash: aG9+XQlh145qdADV5P4V+eZUHaIDM09ABAVqUp5GkL4=) 10: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk=) 11: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9d:f6:2b:64:b1:42:c0:c0:94:fb:fa:4f:63:1a:a1:9a:31:ae:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Mar 25 12:45:38 2026 GMT Not After : Mar 26 14:46:38 2026 GMT Subject: CN=457B0DD290A2D9540EF6A5F9835FA0DC593FDBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:e8:f4:3b:e6:5a:c8:8d:92:f5:90:2a:d3: ac:a3:75:15:07:01:f1:da:dd:e6:f7:d8:48:60:96: 44:fe:65:a2:12:fc:52:7f:82:12:dc:31:3b:50:c6: bf:86:33:0d:7f:20:22:cd:0d:ad:1b:70:04:87:3e: 3f:ff:7f:07:f1:b8:b7:e8:47:27:7a:72:91:37:a5: c1:b2:d9:35:21:40:5a:cc:d8:4e:79:cd:f7:dc:88: 1b:90:f9:e9:a8:82:85:e0:49:69:22:c5:13:9e:6b: 4e:1a:a2:27:c6:43:a0:ac:5f:03:51:4a:f8:29:a7: d5:4b:34:85:f5:5e:50:cc:70:82:da:64:78:aa:3f: 96:7a:0c:b8:a0:86:7d:6e:2d:1c:29:69:c0:2a:43: 2b:97:6f:4a:c0:7a:c4:0b:74:7e:8f:b9:b0:58:2e: 47:e9:7d:73:8d:ee:99:9e:81:fd:9a:23:84:84:36: a1:de:6f:6a:7e:ff:13:c2:c3:18:e8:aa:10:84:29: 4e:27:15:8d:ff:57:3d:f3:0c:70:35:03:4e:f0:87: 97:5f:14:b1:9c:1e:5e:a0:66:05:2d:cc:41:ea:d3: f1:e2:54:10:72:3c:a0:15:7a:9e:68:4b:04:a4:1a: bc:1b:b7:f0:9a:73:9f:30:b0:0d:4e:92:f0:35:c5: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:0D:D2:90:A2:D9:54:0E:F6:A5:F9:83:5F:A0:DC:59:3F:DB:C7 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d7:87:e5:82:72:8a:e3:d8:f7:99:a5:36:48:c1:7e:2c:05: 4f:07:1d:1b:28:0c:ca:5b:24:5c:46:af:dc:cc:a0:c8:28:80: 0b:f4:a2:9e:ad:19:e2:6f:12:8b:ee:da:95:48:da:b4:c9:46: 1e:ef:52:99:41:c6:6d:9a:d1:dd:71:30:c4:20:bb:8b:59:33: 7e:46:d8:0a:80:0f:e1:9e:0e:0e:3f:e7:94:32:15:ee:cd:fe: 79:b3:b9:4f:fe:49:73:d3:ee:5e:37:23:97:69:db:5a:c5:15: bb:36:3b:01:44:10:ad:f1:dc:69:2c:de:99:26:a2:ff:f8:4b: ea:06:a2:54:42:f8:aa:33:59:a3:9f:8f:b1:74:65:66:0a:7b: 7a:19:67:7b:8f:8b:c4:85:23:82:5d:25:84:0d:b7:36:5b:8a: 38:52:00:00:2e:fd:53:29:51:e4:ee:cb:b8:33:cc:a9:1a:7d: 48:d0:7a:09:eb:ac:48:b8:07:8b:11:6e:58:3c:b8:07:ba:56: 12:b8:08:49:80:f0:53:f2:49:73:a6:72:f1:b2:a4:99:6e:ea: 25:33:27:8c:ff:fb:a4:c2:0a:61:45:01:02:24:6e:6e:91:a6: df:5c:5e:bf:9a:40:eb:2f:ae:a5:e2:1c:4c:f9:0a:e8:ac:48: 2c:ea:4f:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIZ32K2SxQsDAlPv6T2MaoZoxrqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjAzMjUxMjQ1MzhaFw0yNjAzMjYxNDQ2MzhaMDMxMTAvBgNV BAMTKDQ1N0IwREQyOTBBMkQ5NTQwRUY2QTVGOTgzNUZBMERDNTkzRkRCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvej0O+ZayI2S9ZAq06yjdRUH AfHa3eb32EhglkT+ZaIS/FJ/ghLcMTtQxr+GMw1/ICLNDa0bcASHPj//fwfxuLfo Ryd6cpE3pcGy2TUhQFrM2E55zffciBuQ+emogoXgSWkixROea04aoifGQ6CsXwNR Svgpp9VLNIX1XlDMcILaZHiqP5Z6DLighn1uLRwpacAqQyuXb0rAesQLdH6PubBY LkfpfXON7pmegf2aI4SENqHeb2p+/xPCwxjoqhCEKU4nFY3/Vz3zDHA1A07wh5df FLGcHl6gZgUtzEHq0/HiVBByPKAVep5oSwSkGrwbt/Cac58wsA1OkvA1xdv/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURXsN0pCi2VQO9qX5g1+g3Fk/28cwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNeH5YJyiuPY95mlNkjB fiwFTwcdGygMylskXEav3MygyCiAC/Sinq0Z4m8Si+7alUjatMlGHu9SmUHGbZrR 3XEwxCC7i1kzfkbYCoAP4Z4ODj/nlDIV7s3+ebO5T/5Jc9PuXjcjl2nbWsUVuzY7 AUQQrfHcaSzemSai//hL6gaiVEL4qjNZo5+PsXRlZgp7ehlne4+LxIUjgl0lhA23 NluKOFIAAC79UylR5O7LuDPMqRp9SNB6CeusSLgHixFuWDy4B7pWErgISYDwU/JJ c6Zy8bKkmW7qJTMnjP/7pMIKYUUBAiRubpGm31xev5pA6y+upeIcTPkK6KxILOpP tg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:33 2026 by rpki-client