$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: aqjwqFhWZRF5vH2XH5k8264qAvBiXdsJIfYlwrDYvNY= Subject key identifier: E0:0D:AF:5F:93:CB:1D:1A:35:D3:C1:DE:D6:56:78:B9:01:3D:76:37 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 1226D1A5BA38D198AB639BC0C5DD49FCD609A182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0509 Signing time: Tue 12 May 2026 16:09:50 +0000 Manifest this update: Tue 12 May 2026 16:04:50 +0000 Manifest next update: Wed 13 May 2026 17:02:50 +0000 Files and hashes: 1: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 2: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 3: 39332e39352e3131322e302f32332d3234203d3e20383334.roa (hash: mqV1sF7cWGJdrP961M/eNACONo/bNa4sYRWJONeJWi0=) 4: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (hash: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=) 5: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 8x/T/WTXfTpOsRc3Bpbm9cofhBAxcyqlLCYINNGBy9Y=) 6: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 7: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:26:d1:a5:ba:38:d1:98:ab:63:9b:c0:c5:dd:49:fc:d6:09:a1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: May 12 16:04:50 2026 GMT Not After : May 13 17:02:50 2026 GMT Subject: CN=E00DAF5F93CB1D1A35D3C1DED65678B9013D7637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:70:93:68:14:5f:90:2b:07:7f:18:b6:81: bc:56:14:59:49:00:2e:30:07:17:c7:79:92:c0:c5: 50:6b:fe:79:07:83:8e:e5:97:61:79:56:b2:a4:66: 0a:15:0f:9e:3d:51:63:2a:71:3e:82:47:26:b0:6b: 71:99:7e:a6:3a:51:d8:92:c4:74:c8:fb:41:ff:57: 15:91:b6:42:8f:d8:96:31:cd:c6:b0:0d:3b:a4:1f: 82:bb:43:62:81:02:39:29:50:42:d8:bb:e0:be:75: dc:32:fc:52:36:25:52:8a:1d:62:6d:25:67:9a:d7: b2:07:80:1a:48:b0:85:94:46:bb:bd:07:83:70:2a: a4:16:39:2d:06:79:21:c7:15:fd:fb:4a:53:65:aa: 32:28:1f:64:99:bf:40:85:d4:6d:b5:8c:8b:0e:6e: 43:2c:21:56:d7:24:90:a9:b6:c1:f7:1b:f7:64:97: ba:48:28:2a:4a:de:35:18:9d:47:58:9c:e4:15:ca: 0d:51:30:7e:b4:91:01:45:6f:0d:9b:31:af:d3:c3: f9:63:92:a9:c0:3d:ad:06:ba:44:46:4b:53:f4:eb: 44:7c:e0:d9:b6:d7:0f:28:0a:46:4d:28:24:af:38: 1c:17:db:40:da:1b:99:98:16:14:26:ad:a7:cf:a7: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:AF:5F:93:CB:1D:1A:35:D3:C1:DE:D6:56:78:B9:01:3D:76:37 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:96:f3:67:92:f6:00:43:47:89:bb:72:13:51:37:16:06:09: ce:57:e5:93:56:88:ef:6b:94:94:26:3c:c0:35:df:eb:dc:2c: 59:10:c9:48:cb:8f:4b:1c:4a:5b:d8:45:1b:a1:ae:5d:85:15: 0f:d7:b4:fd:c5:4f:5e:36:9a:18:84:ab:c0:42:7d:24:8e:0d: 90:49:67:91:d1:68:a1:16:34:5a:28:de:9b:f5:9f:b4:7f:1c: 08:60:77:de:8f:de:32:fe:32:cf:d2:44:18:25:91:4e:97:e1: 1a:29:9e:78:f8:d5:87:ba:1d:82:d0:26:ac:eb:48:a8:81:2b: fe:aa:a3:22:5e:36:2f:35:80:9e:a3:fb:a0:b1:73:c3:06:86: 05:99:0c:16:2a:54:d8:7b:62:0e:1e:12:fa:11:c8:8b:71:9f: 73:68:c9:da:b9:7f:b0:b5:aa:f0:b1:74:74:7d:5e:98:ff:8f: 34:80:32:c1:16:d2:eb:92:11:6d:fa:02:6c:bb:30:94:cb:5b: 04:d4:fd:4e:d2:b6:09:6c:aa:ad:98:7d:b6:62:0a:eb:45:b7: ce:78:55:25:0e:1f:ec:dd:df:52:b5:bc:21:fc:07:94:18:65: 82:80:3a:21:5d:e3:49:e9:f6:2c:d6:32:18:12:18:98:60:20: bc:4a:ad:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEibRpbo40ZirY5vAxd1J/NYJoYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjA1MTIxNjA0NTBaFw0yNjA1MTMxNzAyNTBaMDMxMTAvBgNV BAMTKEUwMERBRjVGOTNDQjFEMUEzNUQzQzFERUQ2NTY3OEI5MDEzRDc2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw3CTaBRfkCsHfxi2gbxWFFlJ AC4wBxfHeZLAxVBr/nkHg47ll2F5VrKkZgoVD549UWMqcT6CRyawa3GZfqY6UdiS xHTI+0H/VxWRtkKP2JYxzcawDTukH4K7Q2KBAjkpUELYu+C+ddwy/FI2JVKKHWJt JWea17IHgBpIsIWURru9B4NwKqQWOS0GeSHHFf37SlNlqjIoH2SZv0CF1G21jIsO bkMsIVbXJJCptsH3G/dkl7pIKCpK3jUYnUdYnOQVyg1RMH60kQFFbw2bMa/Tw/lj kqnAPa0GukRGS1P060R84Nm21w8oCkZNKCSvOBwX20DaG5mYFhQmrafPpyp3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4A2vX5PLHRo108He1lZ4uQE9djcwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZbzZ5L2AENHibtyE1E3 FgYJzlflk1aI72uUlCY8wDXf69wsWRDJSMuPSxxKW9hFG6GuXYUVD9e0/cVPXjaa GISrwEJ9JI4NkElnkdFooRY0Wijem/WftH8cCGB33o/eMv4yz9JEGCWRTpfhGime ePjVh7odgtAmrOtIqIEr/qqjIl42LzWAnqP7oLFzwwaGBZkMFipU2HtiDh4S+hHI i3Gfc2jJ2rl/sLWq8LF0dH1emP+PNIAywRbS65IRbfoCbLswlMtbBNT9TtK2CWyq rZh9tmIK60W3znhVJQ4f7N3fUrW8IfwHlBhlgoA6IV3jSen2LNYyGBIYmGAgvEqt CQ== -----END CERTIFICATE-----Generated at Wed May 13 03:38:35 2026 by rpki-client