$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: IvzaziVlWkNGZ1j1S9++P+S76XpcOO0mrKGygEQHo5Y= Subject key identifier: 06:22:9F:4E:06:D7:7D:A8:DA:39:D5:12:2E:3E:1F:52:5A:A0:85:90 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 410EB69CC566BBA6FC1EF0C7C5C3CD38A2A234C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: 0123 Signing time: Tue 12 May 2026 14:31:40 +0000 Manifest this update: Tue 12 May 2026 14:26:40 +0000 Manifest next update: Wed 13 May 2026 16:49:40 +0000 Files and hashes: 1: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=) 2: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) 3: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=) 4: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) 5: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: OHlWtxDIdSnUYUv5Po9hbpmDP9wTlMm1Xw2vJxmfPgw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0e:b6:9c:c5:66:bb:a6:fc:1e:f0:c7:c5:c3:cd:38:a2:a2:34:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: May 12 14:26:40 2026 GMT Not After : May 13 16:49:40 2026 GMT Subject: CN=06229F4E06D77DA8DA39D5122E3E1F525AA08590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:58:d6:d2:c6:a7:01:fc:15:b8:ac:08:2b: d3:e2:bc:9e:64:58:c5:15:dd:a7:ee:94:16:de:0b: a1:0c:52:7c:d9:80:4f:20:b4:07:8f:82:d3:e2:24: 69:30:a3:69:c9:a0:d0:1e:c7:7e:25:c6:2c:fd:c4: 89:dc:aa:27:15:fb:e8:a6:1e:cc:63:49:d2:14:07: 44:d7:f1:52:0f:4f:7e:b4:9c:cf:cd:08:c3:d3:80: 71:ef:a7:27:2a:0b:5b:59:99:25:f0:86:f1:1f:0f: 05:8d:a1:cb:ca:2b:20:eb:18:89:aa:b9:72:03:53: 65:8e:5a:16:8a:89:d6:2e:83:58:18:a7:40:9e:90: d0:f8:49:d8:bb:57:66:fa:2c:67:76:33:c1:de:34: 38:be:b0:53:22:27:01:a8:bd:c9:e7:78:ad:f3:f1: b7:04:82:3b:37:f4:e5:85:6a:9f:c2:0e:9c:a3:f5: fa:57:77:e8:6a:f6:a6:2c:87:3b:32:64:f2:f9:d4: f2:14:ce:28:64:2f:53:c8:34:8f:42:b6:34:49:be: 4a:3a:8f:56:11:30:fb:0a:24:49:5a:f9:7a:53:5a: b4:38:37:3a:ba:46:9b:c9:6b:b3:c7:39:51:bc:60: 17:87:65:6b:73:5f:be:65:e8:dd:c1:54:3e:2d:98: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:22:9F:4E:06:D7:7D:A8:DA:39:D5:12:2E:3E:1F:52:5A:A0:85:90 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ac:1a:51:bd:9f:6c:b8:aa:23:c0:94:1e:44:74:4f:ac:4f: d1:c7:23:0f:f7:f8:8c:18:e1:cd:2f:18:f9:05:d6:fa:ab:43: 14:93:cb:ab:f4:48:06:59:6b:1e:27:94:b5:36:9f:6a:4c:aa: 23:e4:53:1e:39:40:c2:be:31:cd:cf:13:b6:2a:8d:7c:73:6e: fe:13:a5:f0:8a:7d:4b:12:22:14:ff:cc:88:4a:27:38:51:70: dd:06:80:7f:13:77:d4:63:c1:2d:b9:77:42:8d:ab:a1:a6:1c: 47:da:4c:31:21:76:91:c7:72:21:b9:dd:e2:f1:fb:55:03:98: 8e:b2:55:17:e7:09:97:8f:7a:85:d5:7c:90:d2:1f:15:38:a0: 02:94:6b:4b:c5:78:bf:4e:ef:6a:d9:15:52:4c:2e:df:19:46: f9:c1:09:44:50:85:de:88:bf:4d:70:93:01:a9:7e:26:ae:f5: 57:c0:8c:bc:89:38:0f:1f:7c:36:ab:c3:35:4b:ec:a2:9d:75: f7:23:df:1e:24:76:36:56:3b:92:95:0b:c0:ce:dd:9f:5b:ea: b5:e2:5c:e0:7d:4b:ed:a7:c5:e2:d0:22:3a:6a:e8:60:f2:13: 12:62:25:83:9c:1e:79:32:26:fd:c0:18:66:89:62:1b:7c:a3: 59:b4:89:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQQ62nMVmu6b8HvDHxcPNOKKiNMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNjA1MTIxNDI2NDBaFw0yNjA1MTMxNjQ5NDBaMDMxMTAvBgNV BAMTKDA2MjI5RjRFMDZENzdEQThEQTM5RDUxMjJFM0UxRjUyNUFBMDg1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayVjW0sanAfwVuKwIK9PivJ5k WMUV3afulBbeC6EMUnzZgE8gtAePgtPiJGkwo2nJoNAex34lxiz9xIncqicV++im HsxjSdIUB0TX8VIPT360nM/NCMPTgHHvpycqC1tZmSXwhvEfDwWNocvKKyDrGImq uXIDU2WOWhaKidYug1gYp0CekND4Sdi7V2b6LGd2M8HeNDi+sFMiJwGovcnneK3z 8bcEgjs39OWFap/CDpyj9fpXd+hq9qYshzsyZPL51PIUzihkL1PINI9CtjRJvko6 j1YRMPsKJEla+XpTWrQ4Nzq6RpvJa7PHOVG8YBeHZWtzX75l6N3BVD4tmBQpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBiKfTgbXfajaOdUSLj4fUlqghZAwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6waUb2fbLiqI8CUHkR0 T6xP0ccjD/f4jBjhzS8Y+QXW+qtDFJPLq/RIBllrHieUtTafakyqI+RTHjlAwr4x zc8TtiqNfHNu/hOl8Ip9SxIiFP/MiEonOFFw3QaAfxN31GPBLbl3Qo2roaYcR9pM MSF2kcdyIbnd4vH7VQOYjrJVF+cJl496hdV8kNIfFTigApRrS8V4v07vatkVUkwu 3xlG+cEJRFCF3oi/TXCTAal+Jq71V8CMvIk4Dx98NqvDNUvsop119yPfHiR2NlY7 kpULwM7dn1vqteJc4H1L7afF4tAiOmroYPITEmIlg5weeTIm/cAYZoliG3yjWbSJ bg== -----END CERTIFICATE-----Generated at Tue May 12 22:00:02 2026 by rpki-client