$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: UmaE0F3oP6DsA53iqWkE85X4Wch9D6jkshTYIsC7dro= Subject key identifier: 0A:17:D8:AB:51:3F:A5:DC:BF:0A:DB:50:BA:7B:4B:A0:6C:3D:B8:B3 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 3657F1F62D74F316DB3E62BED49729EABBA61D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0659 Signing time: Wed 13 May 2026 00:45:19 +0000 Manifest this update: Wed 13 May 2026 00:40:19 +0000 Manifest next update: Thu 14 May 2026 02:36:19 +0000 Files and hashes: 1: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) 3: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 4: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: zK+wO41kQA1PN5Kz6yffgPkRCL5HI9shz10QseSe6gE=) 5: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 6: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 8: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 9: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:57:f1:f6:2d:74:f3:16:db:3e:62:be:d4:97:29:ea:bb:a6:1d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: May 13 00:40:19 2026 GMT Not After : May 14 02:36:19 2026 GMT Subject: CN=0A17D8AB513FA5DCBF0ADB50BA7B4BA06C3DB8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:96:82:10:38:f4:4e:61:c5:f7:e6:26:ee: cb:6a:84:4e:5a:b9:c1:97:fa:bb:7e:94:af:50:05: fa:ee:ff:09:ed:ce:74:4f:45:b0:46:04:ae:cb:ca: c2:a3:ac:c8:d0:ed:1d:26:d3:fb:1b:86:3a:2e:7d: 19:ca:44:c0:e3:0c:67:06:e0:2d:94:5f:1a:ac:65: 20:0e:b3:88:8a:f5:8e:c0:4e:0a:cf:0c:35:6d:83: ee:12:da:f1:2e:d9:de:c6:80:4b:11:25:18:24:9f: 96:75:58:fb:7f:d6:10:e6:e3:a6:35:ef:6f:7e:79: 83:a9:31:b9:65:bc:1c:0f:ec:a3:4b:60:9c:55:c2: d4:5f:b1:74:bd:6f:d0:c1:d2:1b:37:a2:b4:4a:7c: be:bf:a5:8a:53:d2:94:e8:c9:81:c4:00:17:d5:01: 0a:73:74:9c:2a:5d:1c:0c:2e:da:8a:88:8b:67:94: be:26:08:fd:e0:66:2a:53:6d:2a:d7:7c:cb:26:20: cc:00:1c:73:33:77:96:bd:9d:58:0d:5c:1c:6c:4f: 3d:9c:34:94:f1:f5:b2:26:66:e2:bd:a5:ca:df:0c: ac:b2:d7:99:37:a7:38:95:ae:25:48:c0:62:8d:d8: 27:8f:8c:e6:da:46:9d:31:45:d7:96:a0:cc:33:ea: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:D8:AB:51:3F:A5:DC:BF:0A:DB:50:BA:7B:4B:A0:6C:3D:B8:B3 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:91:99:b3:9b:90:6b:78:e0:9f:1b:de:31:62:67:4d:54:b6: f9:ca:43:3e:eb:38:78:ab:9d:19:48:ff:b5:fc:bb:0f:2c:62: fa:9e:6e:52:97:3c:a2:97:8e:49:27:19:90:72:80:24:85:53: d6:af:f6:31:e0:75:ca:e7:aa:d0:2b:5f:f2:df:af:d6:09:c3: 2e:6b:92:14:a2:b1:12:57:51:e2:ac:76:46:49:f5:6b:1c:a8: 77:37:8d:85:45:7c:b9:6f:5c:89:25:ab:77:cb:15:9b:97:2d: af:30:70:db:ea:21:b4:0e:eb:ae:97:c4:f4:57:c9:ee:4b:28: 91:8c:c3:ed:68:95:64:4d:5a:93:26:4e:b3:83:1c:df:19:74: 93:6d:5d:88:a8:aa:51:7c:47:f9:7a:3a:be:ec:16:2e:ab:14: a9:86:ef:9f:41:ca:c0:18:a7:79:54:5e:79:fb:c7:95:2a:87: b2:da:3b:36:6d:44:e5:ef:40:c0:67:be:6a:21:1f:03:7d:45: 8a:6e:ec:c1:a2:d4:34:d6:59:45:60:e9:2e:45:10:8f:6b:78: 00:3d:9b:7e:84:24:0c:db:50:67:7f:56:4e:1b:4a:ca:39:e9: 42:6d:6f:ae:30:a6:1d:23:0f:e9:f2:1b:4c:e6:d9:ef:af:00: 0c:d4:25:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNlfx9i108xbbPmK+1Jcp6rumHSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA1MTMwMDQwMTlaFw0yNjA1MTQwMjM2MTlaMDMxMTAvBgNV BAMTKDBBMTdEOEFCNTEzRkE1RENCRjBBREI1MEJBN0I0QkEwNkMzREI4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gJaCEDj0TmHF9+Ym7stqhE5a ucGX+rt+lK9QBfru/wntznRPRbBGBK7LysKjrMjQ7R0m0/sbhjoufRnKRMDjDGcG 4C2UXxqsZSAOs4iK9Y7ATgrPDDVtg+4S2vEu2d7GgEsRJRgkn5Z1WPt/1hDm46Y1 729+eYOpMbllvBwP7KNLYJxVwtRfsXS9b9DB0hs3orRKfL6/pYpT0pToyYHEABfV AQpzdJwqXRwMLtqKiItnlL4mCP3gZipTbSrXfMsmIMwAHHMzd5a9nVgNXBxsTz2c NJTx9bImZuK9pcrfDKyy15k3pziVriVIwGKN2CePjObaRp0xRdeWoMwz6keHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUChfYq1E/pdy/CttQuntLoGw9uLMwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZGZs5uQa3jgnxveMWJn TVS2+cpDPus4eKudGUj/tfy7Dyxi+p5uUpc8opeOSScZkHKAJIVT1q/2MeB1yueq 0Ctf8t+v1gnDLmuSFKKxEldR4qx2Rkn1axyodzeNhUV8uW9ciSWrd8sVm5ctrzBw 2+ohtA7rrpfE9FfJ7ksokYzD7WiVZE1akyZOs4Mc3xl0k21diKiqUXxH+Xo6vuwW LqsUqYbvn0HKwBineVReefvHlSqHsto7Nm1E5e9AwGe+aiEfA31Fim7swaLUNNZZ RWDpLkUQj2t4AD2bfoQkDNtQZ39WThtKyjnpQm1vrjCmHSMP6fIbTObZ768ADNQl Fg== -----END CERTIFICATE-----Generated at Wed May 13 08:44:41 2026 by rpki-client