$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: HdzA4JT8a982+ASEYgZEnkipQIDvZmTzs/Gk6qkbScM= Subject key identifier: D3:50:FE:2F:71:AA:85:67:F7:0A:06:73:D8:96:C2:7F:40:10:6E:5C Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 2C17F1230FABEDCE761A09591C2C7CD6F72515A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: E4 Signing time: Thu 26 Mar 2026 05:12:16 +0000 Manifest this update: Thu 26 Mar 2026 05:07:16 +0000 Manifest next update: Fri 27 Mar 2026 05:57:16 +0000 Files and hashes: 1: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: 01jalpzPLUR9W6TaIWsMeLmpfXyHoIRdZegtrTk5/HU=) 2: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) 3: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=) 4: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=) 5: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:17:f1:23:0f:ab:ed:ce:76:1a:09:59:1c:2c:7c:d6:f7:25:15:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: Mar 26 05:07:16 2026 GMT Not After : Mar 27 05:57:16 2026 GMT Subject: CN=D350FE2F71AA8567F70A0673D896C27F40106E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:03:d7:bb:ea:3d:35:0b:5e:08:1c:6d:3c: f4:ee:04:97:01:54:9b:0b:fd:3a:76:a6:3f:d6:97: a5:a3:a5:79:cb:07:34:14:67:d7:0f:dd:8a:85:b9: 9c:95:e4:2d:17:dd:d9:2e:aa:8a:d2:3b:35:34:34: f7:8a:86:17:ab:e9:96:65:21:51:52:5e:9a:23:93: 00:85:de:0d:6b:3c:38:13:e2:f4:f1:a2:27:9e:99: 2b:e7:57:7b:33:55:2c:b8:86:b3:08:1b:86:09:db: 8a:c3:00:de:4f:e6:cf:2e:7e:db:bd:86:de:09:19: ac:6e:b8:2c:89:93:86:95:6e:2c:7f:19:4f:dc:96: 41:c6:04:b6:8f:da:32:f7:ed:77:f1:2b:56:22:bc: 69:5e:2e:bc:b3:45:a0:e1:44:5e:bb:11:f5:bd:85: e1:3b:26:42:85:61:61:23:99:13:ef:09:d3:0a:8a: 80:62:f5:b3:5b:29:50:2f:80:93:01:c1:d2:f5:51: 82:04:e1:f7:43:b0:b2:47:08:ff:a3:e5:63:c4:40: 3d:14:34:b7:ea:39:5c:2d:a0:8a:38:a9:79:8b:96: 5b:29:74:5f:8f:9d:69:0a:11:4a:25:06:f1:d8:82: 67:54:56:8f:4b:66:e4:11:37:5d:b5:e7:92:a1:16: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:FE:2F:71:AA:85:67:F7:0A:06:73:D8:96:C2:7F:40:10:6E:5C X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:41:ec:34:5a:11:f1:b5:f9:a8:9c:bb:95:6c:65:4b:6c:a4: e7:bc:c4:e2:e6:3a:5e:62:a8:bc:b1:0c:8c:42:e6:0c:fe:8b: 5a:f0:5e:ca:d3:f9:77:ab:94:9e:92:31:27:d5:92:0b:0e:5d: 8e:09:9a:de:01:65:8c:3d:0e:35:3d:1a:7c:a0:6d:de:57:6e: 20:8a:9d:63:bd:79:4c:39:dc:2a:46:30:17:9f:08:31:ce:43: 8c:77:66:0b:05:1d:4c:3b:34:16:59:78:b4:52:21:64:48:93: b8:4e:3e:9e:f4:0a:f6:3b:b6:26:b3:a9:12:13:6d:a1:fe:72: 22:2d:6b:5c:15:3e:92:b5:b8:75:08:c6:48:2a:51:0c:11:f5: 19:8f:50:04:9d:b2:9d:a9:ee:d8:bd:25:a0:4c:a6:20:02:6c: 54:52:95:d1:4a:fb:f5:ab:97:e1:83:b2:c9:c3:f1:e4:80:5e: dc:cc:42:de:52:93:f6:7b:8d:35:95:f4:b9:9c:c7:86:b4:43: b5:6b:77:0b:9e:c7:fb:60:4b:ef:d6:78:8b:12:07:3a:b5:f5: ec:94:00:6f:88:e5:1b:11:64:2f:79:08:30:57:69:bb:e1:8e: 37:b1:b7:36:d3:27:80:4a:2c:c3:a7:02:19:71:9d:00:12:ed: 89:7a:c5:28 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULBfxIw+r7c52GglZHCx81vclFacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNjAzMjYwNTA3MTZaFw0yNjAzMjcwNTU3MTZaMDMxMTAvBgNV BAMTKEQzNTBGRTJGNzFBQTg1NjdGNzBBMDY3M0Q4OTZDMjdGNDAxMDZFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/APXu+o9NQteCBxtPPTuBJcB VJsL/Tp2pj/Wl6WjpXnLBzQUZ9cP3YqFuZyV5C0X3dkuqorSOzU0NPeKhher6ZZl IVFSXpojkwCF3g1rPDgT4vTxoieemSvnV3szVSy4hrMIG4YJ24rDAN5P5s8uftu9 ht4JGaxuuCyJk4aVbix/GU/clkHGBLaP2jL37XfxK1YivGleLryzRaDhRF67EfW9 heE7JkKFYWEjmRPvCdMKioBi9bNbKVAvgJMBwdL1UYIE4fdDsLJHCP+j5WPEQD0U NLfqOVwtoIo4qXmLllspdF+PnWkKEUolBvHYgmdUVo9LZuQRN12155KhFh5rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU01D+L3GqhWf3CgZz2JbCf0AQblwwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUHsNFoR8bX5qJy7lWxl S2yk57zE4uY6XmKovLEMjELmDP6LWvBeytP5d6uUnpIxJ9WSCw5djgma3gFljD0O NT0afKBt3lduIIqdY715TDncKkYwF58IMc5DjHdmCwUdTDs0Fll4tFIhZEiTuE4+ nvQK9ju2JrOpEhNtof5yIi1rXBU+krW4dQjGSCpRDBH1GY9QBJ2ynanu2L0loEym IAJsVFKV0Ur79auX4YOyycPx5IBe3MxC3lKT9nuNNZX0uZzHhrRDtWt3C57H+2BL 79Z4ixIHOrX17JQAb4jlGxFkL3kIMFdpu+GON7G3NtMngEosw6cCGXGdABLtiXrF KA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:44:43 2026 by rpki-client