$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: 3EIFwqZcewveIYbkKLWP4WXtyavIZeNossiWhpHy6z0= Subject key identifier: 41:94:AD:70:34:F3:23:AA:DB:A0:90:8B:7F:C8:46:32:DD:9D:52:B2 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 66A2BE140332090AD7D96B87D4C27EFD2397F095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 88 Signing time: Thu 16 Apr 2026 23:34:42 +0000 Manifest this update: Thu 16 Apr 2026 23:29:42 +0000 Manifest next update: Sat 18 Apr 2026 00:22:42 +0000 Files and hashes: 1: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 2: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 3: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 4: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 5: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 6: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 7: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 8: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 9: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 10: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: SFzoF+hyHxfU3VgJ5iDEL5OZijnxprHQ1hxKhUMkDZw=) 11: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 12: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 13: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a2:be:14:03:32:09:0a:d7:d9:6b:87:d4:c2:7e:fd:23:97:f0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Apr 16 23:29:42 2026 GMT Not After : Apr 18 00:22:42 2026 GMT Subject: CN=4194AD7034F323AADBA0908B7FC84632DD9D52B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:05:71:1e:d0:28:d8:c7:47:40:0f:16:34: 5e:a2:8e:e3:b3:ba:03:e5:5e:c5:ae:1c:2b:b0:ee: 1b:ab:65:78:b8:d7:e8:72:57:3d:fc:13:97:eb:8f: e4:03:ff:d7:fe:f9:65:82:e5:60:0a:02:4c:f3:23: 24:22:e3:b2:cc:a7:e7:d9:0b:62:fc:c2:08:45:b2: 46:bc:0a:dc:af:89:3d:cf:5b:6a:d4:19:b7:65:5e: 74:68:a0:a3:d2:41:fa:17:25:d2:9f:10:8b:61:3b: a7:40:2c:de:44:f1:fb:09:62:a0:17:11:35:4e:94: 7c:f7:9b:d3:4b:8d:07:4b:5d:09:ba:ab:ae:6d:2a: c8:de:d4:a5:be:8b:35:6e:30:cd:46:ef:84:c9:94: 93:d2:6a:83:b6:89:dd:b9:81:86:3b:40:c6:ae:08: d7:08:75:0d:e3:af:06:cb:bc:b8:5a:dd:50:e4:38: a0:1c:11:6b:3a:5d:a0:42:ac:97:11:1c:ef:c2:8c: cb:e9:4e:bd:93:54:86:69:66:5b:29:3e:6b:8f:e3: 77:e4:04:ab:ff:da:7a:26:26:d7:f5:55:87:db:04: 17:70:c0:e8:1d:d5:fd:0f:07:c8:ad:6b:0a:5d:d1: 14:b3:95:39:4e:6f:a6:88:df:8c:fe:24:85:28:16: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:AD:70:34:F3:23:AA:DB:A0:90:8B:7F:C8:46:32:DD:9D:52:B2 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:a9:ba:dc:d2:34:b9:4f:a4:f8:09:61:e4:ba:c7:15:11: 66:06:72:19:d0:84:0b:d3:59:1c:63:bd:c7:bd:2b:0d:fe:e8: c7:41:bf:1f:12:3c:7b:6b:ad:43:5e:f0:ab:45:97:cc:ad:e0: ae:44:36:1d:ad:6c:5e:71:ea:55:58:27:5c:4f:60:e1:93:83: c7:b3:9f:16:d3:69:95:68:11:7e:4e:5f:88:98:20:cd:62:2c: 9d:cb:29:95:b1:48:3c:e3:54:d0:ec:24:db:54:00:28:ca:eb: c1:d7:03:e7:21:17:e9:c3:21:c2:6f:25:93:1c:ae:c4:c0:7a: df:ff:eb:ed:12:d7:39:36:6c:89:fd:64:dc:54:c5:a0:e4:d4: c6:71:ce:63:f8:6f:f0:1b:05:ee:10:73:f7:b4:4d:ce:57:43: fe:cb:43:81:19:4e:c2:00:3d:b7:08:3d:cd:d9:35:bc:7b:62: 65:4a:62:75:f2:d8:f9:50:5c:cb:a7:e7:84:e5:41:76:b6:a3: d1:30:72:50:97:17:8e:7a:fe:93:3a:8f:64:27:2e:41:6e:46: 00:8f:c6:02:c4:e9:17:6e:d4:f3:fc:de:aa:e6:52:64:88:e3: ab:3b:8b:a5:c3:c5:cf:d1:08:92:77:71:73:a6:69:85:b1:9f: a9:f8:fa:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZqK+FAMyCQrX2WuH1MJ+/SOX8JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA0MTYyMzI5NDJaFw0yNjA0MTgwMDIyNDJaMDMxMTAvBgNV BAMTKDQxOTRBRDcwMzRGMzIzQUFEQkEwOTA4QjdGQzg0NjMyREQ5RDUyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQogVxHtAo2MdHQA8WNF6ijuOz ugPlXsWuHCuw7hurZXi41+hyVz38E5frj+QD/9f++WWC5WAKAkzzIyQi47LMp+fZ C2L8wghFska8CtyviT3PW2rUGbdlXnRooKPSQfoXJdKfEIthO6dALN5E8fsJYqAX ETVOlHz3m9NLjQdLXQm6q65tKsje1KW+izVuMM1G74TJlJPSaoO2id25gYY7QMau CNcIdQ3jrwbLvLha3VDkOKAcEWs6XaBCrJcRHO/CjMvpTr2TVIZpZlspPmuP43fk BKv/2nomJtf1VYfbBBdwwOgd1f0PB8itawpd0RSzlTlOb6aI34z+JIUoFuCfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQZStcDTzI6rboJCLf8hGMt2dUrIwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffOputzSNLlPpPgJYeS6 xxURZgZyGdCEC9NZHGO9x70rDf7ox0G/HxI8e2utQ17wq0WXzK3grkQ2Ha1sXnHq VVgnXE9g4ZODx7OfFtNplWgRfk5fiJggzWIsncsplbFIPONU0Owk21QAKMrrwdcD 5yEX6cMhwm8lkxyuxMB63//r7RLXOTZsif1k3FTFoOTUxnHOY/hv8BsF7hBz97RN zldD/stDgRlOwgA9twg9zdk1vHtiZUpidfLY+VBcy6fnhOVBdraj0TByUJcXjnr+ kzqPZCcuQW5GAI/GAsTpF27U8/zequZSZIjjqzuLpcPFz9EIkndxc6ZphbGfqfj6 dQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:23:15 2026 by rpki-client