$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: Ca7FNpTCk9aFYVngGXkWi3tNcpDxdBu2oRdPL5k4lck= Subject key identifier: 11:3F:7A:B8:9D:02:DE:77:5A:A2:2E:95:6B:D6:A7:1B:C9:8F:BA:61 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 3F83484D04ED86E9CB989239C47AA1699706122D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 04C7 Signing time: Wed 25 Mar 2026 21:46:54 +0000 Manifest this update: Wed 25 Mar 2026 21:41:54 +0000 Manifest next update: Fri 27 Mar 2026 00:54:54 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e20343032303434.roa (hash: AtOuXGHz2DTlb1k/SfCWhLHsL8OPE1HWzZC1wZunOVo=) 2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: jNlSCsSEpvgPPmETdwOigDzHuu/QUZ9OCO9AA++LPMw=) 3: 39332e39352e3131332e302f32342d3234203d3e20313530323933.roa (hash: sFKJ+/43Q0TDsK2fITN6YuDzrhvf9oDqMZEN2TxnHz4=) 4: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 5: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (hash: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=) 6: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 7: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 9: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 10: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:48:4d:04:ed:86:e9:cb:98:92:39:c4:7a:a1:69:97:06:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Mar 25 21:41:54 2026 GMT Not After : Mar 27 00:54:54 2026 GMT Subject: CN=113F7AB89D02DE775AA22E956BD6A71BC98FBA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:ca:31:ea:62:64:a0:96:3d:c3:db:99:09: 93:b8:bb:fd:b1:d5:55:15:8f:47:3c:bc:74:d7:23: 1b:a1:4f:f2:58:ae:5a:04:38:19:af:fb:f3:ff:9f: ab:84:bd:f7:70:bc:12:05:d5:1a:d7:05:47:f1:75: 8b:0a:1c:8b:bf:5d:fb:58:1a:e5:6e:4a:b6:d7:02: c0:7e:8c:a7:9c:6a:fe:9e:ac:81:08:9c:d7:2f:a8: 48:15:0f:3f:d7:bb:9d:05:de:ce:00:06:52:f7:75: a2:7f:d1:20:65:31:5d:79:27:79:fb:e0:17:4f:1a: 0f:18:21:53:d4:b9:98:ec:4e:b8:c6:44:c0:1f:e6: 6e:7f:b3:c6:f5:60:e0:1f:2c:81:65:fb:f6:63:c7: d2:5f:a6:8d:33:f2:4d:06:15:15:0a:51:7b:c4:11: 98:a9:5b:b5:a3:44:bc:e1:02:e7:e8:0e:07:aa:3d: a9:bb:e7:5d:f0:0f:92:67:b3:6e:27:0f:0d:4e:39: a4:c6:b0:0c:f3:9c:af:06:13:07:00:c2:4f:48:32: 55:03:a4:76:90:d8:65:bf:c6:7a:e9:cc:75:c9:7e: 64:ba:d5:63:39:c8:41:3e:be:72:49:41:2f:2b:8e: 61:ff:5d:e2:db:86:b7:95:0d:a2:eb:77:67:d8:d1: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:7A:B8:9D:02:DE:77:5A:A2:2E:95:6B:D6:A7:1B:C9:8F:BA:61 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:19:94:4f:f0:1f:76:91:69:d0:e2:0d:e8:b2:54:7f:be:e1: 71:ca:8c:ca:5c:06:f3:41:51:69:f2:28:e9:47:a8:f4:cc:03: f5:3c:ab:f1:80:2d:c1:fa:ec:30:38:26:30:f1:d6:2f:d9:57: 08:85:14:9a:28:0f:a8:b3:7e:6f:a0:17:03:27:79:42:de:e5: 51:21:07:e5:ae:19:99:83:3c:73:b1:ac:f7:f9:44:54:c6:72: 26:bd:4d:b7:90:77:51:5e:12:b9:37:7d:ac:ac:59:6f:48:eb: 2e:0b:f7:4b:3d:da:bf:3e:d6:a6:bc:ab:94:02:a0:b2:60:e7: 5e:f8:25:b4:3f:b2:90:12:bd:8f:2f:43:5d:c2:fa:35:4a:98: 6c:65:67:21:b6:31:06:76:6b:c9:8e:e8:be:e0:6b:7a:23:9c: 8d:10:5d:88:9d:bd:b0:eb:09:a5:6e:2c:fa:86:37:dd:0d:5b: 1e:da:5b:52:fd:b6:ab:93:fa:80:d1:70:3a:88:0c:f1:c0:1c: 4d:00:23:f8:88:42:25:e1:3a:57:a3:b9:68:cf:dc:0d:59:79: c1:3d:8f:04:3d:88:ff:0b:31:75:b3:56:9d:36:63:18:ee:d7: 93:02:b3:6b:bd:18:17:c5:09:a3:6e:4d:03:d5:5d:b6:ea:f7: 66:02:fa:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP4NITQTthunLmJI5xHqhaZcGEi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjAzMjUyMTQxNTRaFw0yNjAzMjcwMDU0NTRaMDMxMTAvBgNV BAMTKDExM0Y3QUI4OUQwMkRFNzc1QUEyMkU5NTZCRDZBNzFCQzk4RkJBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEa8ox6mJkoJY9w9uZCZO4u/2x 1VUVj0c8vHTXIxuhT/JYrloEOBmv+/P/n6uEvfdwvBIF1RrXBUfxdYsKHIu/XftY GuVuSrbXAsB+jKecav6erIEInNcvqEgVDz/Xu50F3s4ABlL3daJ/0SBlMV15J3n7 4BdPGg8YIVPUuZjsTrjGRMAf5m5/s8b1YOAfLIFl+/Zjx9Jfpo0z8k0GFRUKUXvE EZipW7WjRLzhAufoDgeqPam7513wD5Jns24nDw1OOaTGsAzznK8GEwcAwk9IMlUD pHaQ2GW/xnrpzHXJfmS61WM5yEE+vnJJQS8rjmH/XeLbhreVDaLrd2fY0bb1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUET96uJ0C3ndaoi6Va9anG8mPumEwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhmUT/AfdpFp0OIN6LJU f77hccqMylwG80FRafIo6Ueo9MwD9Tyr8YAtwfrsMDgmMPHWL9lXCIUUmigPqLN+ b6AXAyd5Qt7lUSEH5a4ZmYM8c7Gs9/lEVMZyJr1Nt5B3UV4SuTd9rKxZb0jrLgv3 Sz3avz7WpryrlAKgsmDnXvgltD+ykBK9jy9DXcL6NUqYbGVnIbYxBnZryY7ovuBr eiOcjRBdiJ29sOsJpW4s+oY33Q1bHtpbUv22q5P6gNFwOogM8cAcTQAj+IhCJeE6 V6O5aM/cDVl5wT2PBD2I/wsxdbNWnTZjGO7XkwKza70YF8UJo25NA9Vdtur3ZgL6 qw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:53:07 2026 by rpki-client