$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: zEeOhy+h7Z2rPHQjqxVvm6Adfa8tfhjyqljpxNJKVi8= Subject key identifier: 3D:F5:F6:A0:D4:61:71:0F:8F:31:9F:CA:A3:B3:86:9B:41:A7:AD:FB Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 10E6AE55AE8DDDD2F0789BF66912D104F379B739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 033E Signing time: Wed 23 Sep 2026 09:50:49 +0000 Manifest this update: Wed 23 Sep 2026 09:45:49 +0000 Manifest next update: Thu 24 Sep 2026 10:51:49 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: vlJfBcwtIKeI7cvrJFR1icwxTkuss/ql4sPRJGgIw+Y=) 2: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) 3: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: ytEJS3Vzyg2CJoXxXCfjYKnAurTSY0uNxO8KHH0WWE4=) 4: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 5: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 6: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 7: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: dsfGcmcJQswtY9cB3QnNBLneqmF8yKEFmEG/dOKBVMo=) 8: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: P4AuBQsYLVnrIyTEGNsNBdHkEYx0SPbatkNPI79H8KA=) 9: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e6:ae:55:ae:8d:dd:d2:f0:78:9b:f6:69:12:d1:04:f3:79:b7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Sep 23 09:45:49 2026 GMT Not After : Sep 24 10:51:49 2026 GMT Subject: CN=3DF5F6A0D461710F8F319FCAA3B3869B41A7ADFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:a6:46:26:59:9c:b0:30:60:eb:dc:21:0f: a1:6e:86:d8:79:a6:90:42:fa:31:a5:64:58:1c:8d: b9:46:0e:05:a9:2c:d0:74:c6:4e:71:18:dd:67:58: 1e:29:72:0b:bc:9c:8e:99:c9:1c:4d:5f:20:f5:72: 32:75:b7:b2:9f:00:79:7d:87:5a:9d:06:e1:5d:0d: 9a:ce:70:70:d1:da:4b:e1:02:4e:a8:76:65:3c:45: 8e:fe:89:26:ec:41:c7:97:c4:14:96:7a:3c:e4:22: fd:69:2c:db:b8:85:fb:83:01:ea:f7:e2:89:17:f7: 47:1f:bc:e0:b3:1a:96:39:73:88:5c:60:4d:9a:d6: 57:41:71:71:84:70:a9:a5:d8:13:59:82:de:56:a0: 76:16:3c:1f:90:2d:0c:6c:dc:e3:62:30:ea:b6:8b: d6:f9:44:e3:97:52:b0:31:ee:21:f4:52:d1:3d:ab: 88:5e:eb:ca:95:66:cb:f0:73:d8:a1:f2:26:05:9c: 5d:e8:90:6e:fe:f3:2a:f0:d0:e7:fe:6f:4b:b8:78: 04:b1:ad:c6:63:64:a9:5e:a1:0a:ef:00:d9:62:9e: 56:bd:ba:a9:2c:44:0c:7c:b0:69:47:c7:bd:81:52: 5c:7b:a7:21:c3:63:ed:17:97:43:ed:a5:fd:92:e9: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:F6:A0:D4:61:71:0F:8F:31:9F:CA:A3:B3:86:9B:41:A7:AD:FB X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:d9:d0:71:00:e7:28:dd:ac:fd:e0:59:1c:98:5d:30:19: 09:20:a1:14:51:1d:a9:33:d6:72:9a:c1:b2:d1:29:0f:3d:80: 1a:ad:f1:31:10:40:f4:2c:4d:d6:c2:a0:66:e5:78:5c:a6:9d: 73:ec:df:bb:e5:cb:af:08:2d:db:31:2f:5e:fd:25:bb:f6:73: 62:26:95:61:8a:03:21:36:21:56:7d:d2:04:2f:8b:12:49:1e: d3:ea:a6:d4:6b:e6:70:1b:3f:3f:b6:7d:fa:21:7d:5a:c3:dd: 26:b7:96:39:0a:c6:2a:20:ad:29:e2:c5:93:6f:d7:1d:f3:30: 78:51:17:7f:e0:f2:a9:fd:64:6b:b0:42:05:f3:7f:c3:6d:48: b3:52:7f:dc:c6:8d:f6:2d:1f:69:08:97:ce:4e:9b:ed:12:fc: 22:3c:e0:81:8c:cf:02:d0:fe:e1:ba:d1:e4:48:fd:5d:b9:20: 1e:94:00:cb:e5:bb:95:84:94:42:ef:1c:da:c7:7d:28:1f:e0: 3b:ae:f7:f1:f8:80:e9:4f:27:25:6c:00:6e:6c:19:ce:8c:96: 22:68:e2:9a:4c:df:e5:22:6e:bb:d1:ba:ec:f0:1a:52:27:3d: 19:83:6c:86:93:13:c6:6b:53:be:8b:17:ae:69:7d:0a:45:ff: 71:8b:7d:4d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEOauVa6N3dLweJv2aRLRBPN5tzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA5MjMwOTQ1NDlaFw0yNjA5MjQxMDUxNDlaMDMxMTAvBgNV BAMTKDNERjVGNkEwRDQ2MTcxMEY4RjMxOUZDQUEzQjM4NjlCNDFBN0FERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEKZGJlmcsDBg69whD6Fuhth5 ppBC+jGlZFgcjblGDgWpLNB0xk5xGN1nWB4pcgu8nI6ZyRxNXyD1cjJ1t7KfAHl9 h1qdBuFdDZrOcHDR2kvhAk6odmU8RY7+iSbsQceXxBSWejzkIv1pLNu4hfuDAer3 4okX90cfvOCzGpY5c4hcYE2a1ldBcXGEcKml2BNZgt5WoHYWPB+QLQxs3ONiMOq2 i9b5ROOXUrAx7iH0UtE9q4he68qVZsvwc9ih8iYFnF3okG7+8yrw0Of+b0u4eASx rcZjZKleoQrvANlinla9uqksRAx8sGlHx72BUlx7pyHDY+0Xl0Ptpf2S6UrxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPfX2oNRhcQ+PMZ/Ko7OGm0GnrfswHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPInZ0HEA5yjdrP3gWRyY XTAZCSChFFEdqTPWcprBstEpDz2AGq3xMRBA9CxN1sKgZuV4XKadc+zfu+XLrwgt 2zEvXv0lu/ZzYiaVYYoDITYhVn3SBC+LEkke0+qm1GvmcBs/P7Z9+iF9WsPdJreW OQrGKiCtKeLFk2/XHfMweFEXf+Dyqf1ka7BCBfN/w21Is1J/3MaN9i0faQiXzk6b 7RL8IjzggYzPAtD+4brR5Ej9XbkgHpQAy+W7lYSUQu8c2sd9KB/gO6738fiA6U8n JWwAbmwZzoyWImjimkzf5SJuu9G67PAaUic9GYNshpMTxmtTvosXrml9CkX/cYt9 TQ== -----END CERTIFICATE-----Generated at Wed Sep 23 13:26:36 2026 by rpki-client