$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft File: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft (raw, json) Hash identifier: pEBVG2Df9EOk3cqdtzbOm6leLO0ZaFYy0MhXG5UqmRw= Subject key identifier: E7:99:07:2B:D8:66:42:4F:84:F1:4D:C3:68:C4:49:C0:2B:D0:7D:B2 Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 6EAB04E4102C840E44BD7B71513797FE9B8C3E7C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft Manifest number: 7C Signing time: Thu 16 Apr 2026 16:55:57 +0000 Manifest this update: Thu 16 Apr 2026 16:50:57 +0000 Manifest next update: Fri 17 Apr 2026 18:39:57 +0000 Files and hashes: 1: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (hash: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I=) 2: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (hash: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo=) 3: 326131343a373538303a666135303a3a2f34342d3438203d3e20323134333434.roa (hash: KQmpW+UL/NNi8eTj4Ye5vTeBzI2eZUOSEdHc2KCosKk=) 4: 326131343a373538303a666130303a3a2f34342d3438203d3e20323134333434.roa (hash: UqCNzDGtU5aD3Sfhq0hDlqQDB4EqJwXqpH7M/ZgJ89U=) 5: 326131343a373538303a666133303a3a2f34342d3438203d3e20323134333434.roa (hash: lZi2rz69yJ2BC+doYbaqrHrJGm4sWCLa8BxeQ92G0Hs=) 6: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl (hash: oxXipTXlQbsTcvSCuWvOztAMWyoEhdMAhytlDbc+Gvo=) 7: 326131343a373538303a666132303a3a2f34342d3438203d3e20323134333434.roa (hash: q8V2y9WUGOeaflB9on/TGNr/ZKQwKQK7OMK/V1fxCUE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ab:04:e4:10:2c:84:0e:44:bd:7b:71:51:37:97:fe:9b:8c:3e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Apr 16 16:50:57 2026 GMT Not After : Apr 17 18:39:57 2026 GMT Subject: CN=E799072BD866424F84F14DC368C449C02BD07DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:27:dc:cd:b2:74:10:2a:d9:f5:be:91:d6: cc:6c:63:17:2a:cb:cc:2d:24:17:24:78:7b:90:73: a4:2e:b1:2c:9f:be:b9:52:95:a5:72:32:f2:54:9a: b8:6d:c3:35:39:0c:1d:99:42:fc:08:5c:ec:49:9b: c4:b9:c3:9b:64:bc:f5:a7:31:ce:3b:68:ef:2e:d7: 5f:3d:86:b0:c4:c7:1c:bd:cb:53:0a:aa:39:e3:9b: 2a:15:74:55:5b:db:7b:f9:cc:5b:31:dd:b5:76:d2: 6c:68:73:1c:17:b8:5a:55:96:d0:62:02:ae:c4:e4: 24:4e:a0:a3:c3:4d:de:e4:03:1a:1e:1d:e9:6e:60: a7:9b:9f:ed:78:d6:97:fc:67:8d:d5:af:7c:bd:f4: 6f:91:d4:a6:1a:6c:20:cc:83:b4:93:34:86:1b:a5: bf:c1:90:07:90:ff:3f:2f:94:f1:6d:6c:c8:c3:7b: d4:cf:1d:3d:5c:77:dd:19:79:df:2f:9b:b0:8c:f6: 94:48:ce:3e:51:e6:3a:66:d2:53:18:89:1a:82:6a: 9c:74:a6:cf:81:36:2e:a0:53:ca:b0:fb:c3:80:44: f8:24:fd:61:a5:c0:68:8c:c4:67:19:21:05:b9:2e: e3:9a:8d:c7:43:64:d5:bf:96:a7:75:34:c6:bf:2d: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:07:2B:D8:66:42:4F:84:F1:4D:C3:68:C4:49:C0:2B:D0:7D:B2 X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ec:db:5e:b0:25:d8:6c:7b:7a:51:60:ca:0a:85:4c:4c:54: 87:ca:ee:2c:f5:89:53:47:b6:90:2f:27:37:bf:66:a3:b5:3f: 79:09:9e:cf:0a:14:c4:ca:02:98:71:b2:b9:ab:ba:10:d8:fa: be:c8:e7:10:09:55:15:b8:1e:83:bb:7a:c4:4d:e3:92:c4:c2: 25:b1:2b:9a:01:a4:a8:97:f1:fc:b7:5e:c0:1c:c3:b5:28:24: 85:3b:3b:f0:2a:9e:54:5e:5d:2d:de:cf:53:78:ad:c5:57:24: af:f3:c2:e7:24:32:a2:ea:d8:54:52:78:5b:54:79:65:9b:33: f7:ff:87:8a:86:84:36:b1:cc:15:41:ff:4d:12:3e:a8:70:c4: db:a7:a0:d5:6c:b5:d1:2a:ff:69:cf:ba:c4:9d:a0:0a:8a:3b: fc:50:ca:ce:4c:f5:72:60:84:ad:3f:4f:86:92:33:c7:36:11: 8a:7c:f4:ac:05:80:b0:db:e0:c0:c6:0c:e6:60:a2:57:98:a9: 8b:8e:0c:a3:82:72:43:d4:41:33:57:06:b3:e1:0d:88:80:3d: 33:cf:b2:12:74:5d:fa:76:79:d6:04:98:05:fb:ac:c2:dc:41: 48:0a:54:1b:a6:0b:5a:e0:95:07:e6:70:15:a3:c7:4f:53:2f: 74:67:31:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbqsE5BAshA5EvXtxUTeX/puMPnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjA0MTYxNjUwNTdaFw0yNjA0MTcxODM5NTdaMDMxMTAvBgNV BAMTKEU3OTkwNzJCRDg2NjQyNEY4NEYxNERDMzY4QzQ0OUMwMkJEMDdEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmyfczbJ0ECrZ9b6R1sxsYxcq y8wtJBckeHuQc6QusSyfvrlSlaVyMvJUmrhtwzU5DB2ZQvwIXOxJm8S5w5tkvPWn Mc47aO8u1189hrDExxy9y1MKqjnjmyoVdFVb23v5zFsx3bV20mxocxwXuFpVltBi Aq7E5CROoKPDTd7kAxoeHeluYKebn+141pf8Z43Vr3y99G+R1KYabCDMg7STNIYb pb/BkAeQ/z8vlPFtbMjDe9TPHT1cd90Zed8vm7CM9pRIzj5R5jpm0lMYiRqCapx0 ps+BNi6gU8qw+8OARPgk/WGlwGiMxGcZIQW5LuOajcdDZNW/lqd1NMa/LUrRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU55kHK9hmQk+E8U3DaMRJwCvQfbIwHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS80L0ZFRjM0RkIw MTg3NTA5NUVEQTU2RTE1NTQ3NDZEMkE1RUMxRUNFNTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH7Nte sCXYbHt6UWDKCoVMTFSHyu4s9YlTR7aQLyc3v2ajtT95CZ7PChTEygKYcbK5q7oQ 2Pq+yOcQCVUVuB6Du3rETeOSxMIlsSuaAaSol/H8t17AHMO1KCSFOzvwKp5UXl0t 3s9TeK3FVySv88LnJDKi6thUUnhbVHllmzP3/4eKhoQ2scwVQf9NEj6ocMTbp6DV bLXRKv9pz7rEnaAKijv8UMrOTPVyYIStP0+GkjPHNhGKfPSsBYCw2+DAxgzmYKJX mKmLjgyjgnJD1EEzVwaz4Q2IgD0zz7ISdF36dnnWBJgF+6zC3EFIClQbpgta4JUH 5nAVo8dPUy90ZzGT -----END CERTIFICATE-----Generated at Fri Apr 17 09:41:41 2026 by rpki-client