$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: 8k8cWEJ1f3mVEdZVhu40TZzqwg2PQzIvRQ2Z8IhVltQ= Subject key identifier: 0E:BD:ED:47:3B:20:36:0D:85:5A:0E:B4:7F:1C:21:83:F3:71:32:20 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 38BC149C28B6AB7D8538C36934A1CD1657561302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0622 Signing time: Sun 15 Nov 2026 07:00:17 +0000 Manifest this update: Sun 15 Nov 2026 06:55:17 +0000 Manifest next update: Mon 16 Nov 2026 07:45:17 +0000 Files and hashes: 1: 39332e39352e3131362e302f32332d3234203d3e20383334.roa (hash: zE810mHdbiXdYuZn8GXUXH+9TIR0J58yLM93cBwnbeA=) 2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: TvlnI+9vT+r3ticVv+ck2XwQowCsrp8PmD9IUo8K+U0=) 3: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=) 4: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=) 5: 39332e39352e3131342e302f32342d3234203d3e20343032323635.roa (hash: XpI1frjDCdiqqdjI8V0/ftv5/Y6j8UuAYvwRLMQoOgQ=) 6: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: 7D44z6xLp+NWT+JNRmxNHn/TxGu7Gwn+STgluSXXDGU=) 7: 39332e39352e3131322e302f32342d3234203d3e20323130373332.roa (hash: PX19irLQHpIFWltGzv3XYJnikwfnyHbTOA1bjEAIlcw=) 8: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 9: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:14:9c:28:b6:ab:7d:85:38:c3:69:34:a1:cd:16:57:56:13:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Nov 15 06:55:17 2026 GMT Not After : Nov 16 07:45:17 2026 GMT Subject: CN=0EBDED473B20360D855A0EB47F1C2183F3713220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:7b:14:80:9a:97:96:c7:7b:1b:e4:67:88: 46:a6:90:52:16:ab:be:75:6a:ba:32:64:23:53:39: f2:57:b3:d7:4d:ef:7a:1b:96:3e:2c:08:bf:3e:47: bc:f0:37:72:31:35:73:c9:b1:ad:34:d0:4e:28:fa: 61:0a:1f:31:49:71:ff:36:11:d8:27:f5:48:1c:3d: 8e:24:6f:56:5a:3f:4b:49:50:cc:67:78:b1:f3:5d: 21:48:88:ba:50:80:28:50:4b:85:b0:e2:92:02:fc: 0b:2c:31:c3:c9:a7:78:a3:d2:0b:ae:42:37:91:42: 47:37:a5:1d:86:e8:dc:0c:e7:70:68:df:ed:b3:4e: 7d:46:d7:fd:a5:f5:a7:38:74:2b:56:0b:78:af:ac: 16:aa:94:e8:c2:8c:5a:69:f8:8a:44:85:f6:79:78: e9:37:c2:12:bb:76:f1:a6:cb:d3:52:40:92:53:23: ad:41:de:22:11:89:0b:39:77:fb:b5:d7:1d:f7:3f: 7e:c7:bf:52:a5:ee:d9:da:af:79:c4:6e:0b:d6:d6: 6d:06:90:58:74:86:6c:5c:23:f4:fe:7a:d7:b3:f2: d1:c1:2a:ca:f2:e4:f0:b7:60:bd:65:e1:ee:0c:59: d7:24:57:02:4b:2b:9a:48:4f:b0:76:20:c1:43:86: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:ED:47:3B:20:36:0D:85:5A:0E:B4:7F:1C:21:83:F3:71:32:20 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8e:71:a1:cf:da:bd:dc:51:ba:4b:09:3d:4c:61:ec:3d:18: 6f:8b:be:72:be:e5:85:3b:70:f1:c2:05:4e:db:64:97:0d:22: 68:d1:05:0f:1a:8f:87:88:42:a9:19:1b:de:d0:c5:04:a1:17: 2c:d6:78:bc:21:b7:01:e4:73:1c:55:b6:63:d8:1b:ab:be:68: 74:01:8c:6c:89:75:30:49:dc:70:d6:3c:0a:88:f7:91:a4:a4: 31:dd:c7:be:f5:28:c1:91:19:b4:ae:1b:69:1f:69:7f:17:7e: 55:6b:4c:83:2e:78:83:a5:13:9a:a7:75:40:b2:af:9e:ba:44: 20:5f:ca:12:6a:76:fb:d0:a1:d3:06:96:73:cb:11:97:8b:54: ff:18:4c:48:bf:e5:bb:06:a2:91:ba:7f:9f:20:fc:a6:7c:94: 23:8e:1f:35:14:c9:2e:e0:60:fe:c4:c8:f8:69:bc:eb:72:4e: d7:dd:17:2d:9d:cb:18:ca:80:fb:7f:a0:28:b7:cc:db:ec:5d: 2c:64:e1:00:50:1f:86:56:56:89:62:34:4c:76:52:5e:7e:ff: 0d:19:11:6d:79:c4:1c:d8:79:8c:fc:f5:a5:ed:cb:c1:95:f8: b0:9b:6e:0d:21:cc:5d:b8:4f:67:81:08:4a:09:e7:c9:cf:12: 5a:d5:8c:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOLwUnCi2q32FOMNpNKHNFldWEwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjExMTUwNjU1MTdaFw0yNjExMTYwNzQ1MTdaMDMxMTAvBgNV BAMTKDBFQkRFRDQ3M0IyMDM2MEQ4NTVBMEVCNDdGMUMyMTgzRjM3MTMyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLXsUgJqXlsd7G+RniEamkFIW q751aroyZCNTOfJXs9dN73oblj4sCL8+R7zwN3IxNXPJsa000E4o+mEKHzFJcf82 Edgn9UgcPY4kb1ZaP0tJUMxneLHzXSFIiLpQgChQS4Ww4pIC/AssMcPJp3ij0guu QjeRQkc3pR2G6NwM53Bo3+2zTn1G1/2l9ac4dCtWC3ivrBaqlOjCjFpp+IpEhfZ5 eOk3whK7dvGmy9NSQJJTI61B3iIRiQs5d/u11x33P37Hv1Kl7tnar3nEbgvW1m0G kFh0hmxcI/T+etez8tHBKsry5PC3YL1l4e4MWdckVwJLK5pIT7B2IMFDhi0tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDr3tRzsgNg2FWg60fxwhg/NxMiAwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY5xoc/avdxRuksJPUxh 7D0Yb4u+cr7lhTtw8cIFTttklw0iaNEFDxqPh4hCqRkb3tDFBKEXLNZ4vCG3AeRz HFW2Y9gbq75odAGMbIl1MEnccNY8Coj3kaSkMd3HvvUowZEZtK4baR9pfxd+VWtM gy54g6UTmqd1QLKvnrpEIF/KEmp2+9Ch0waWc8sRl4tU/xhMSL/luwaikbp/nyD8 pnyUI44fNRTJLuBg/sTI+Gm863JO190XLZ3LGMqA+3+gKLfM2+xdLGThAFAfhlZW iWI0THZSXn7/DRkRbXnEHNh5jPz1pe3LwZX4sJtuDSHMXbhPZ4EISgnnyc8SWtWM bA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:07:06 2026 by rpki-client