$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: vJRwhAV//RlivrNMduX8fE7qtrKfbSG9ZaaKSPRTERk= Subject key identifier: A0:59:4D:EA:6B:82:73:36:05:46:A2:AE:6E:E0:42:C4:E7:76:7F:66 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 4404E01CC83E9FB2FDF5F4A9FA98FD71088C1B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 4A Signing time: Sun 01 Mar 2026 04:05:20 +0000 Manifest this update: Sun 01 Mar 2026 04:00:20 +0000 Manifest next update: Mon 02 Mar 2026 07:16:20 +0000 Files and hashes: 1: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 2: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 3: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 4: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 5: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 6: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 7: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 8: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 9: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 10: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: 0LC+uhMJfHE8eiXmNH0ozo8IdvCWHH8Q+PUhv70GfY4=) 11: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 12: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 13: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 07:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:04:e0:1c:c8:3e:9f:b2:fd:f5:f4:a9:fa:98:fd:71:08:8c:1b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Mar 1 04:00:20 2026 GMT Not After : Mar 2 07:16:20 2026 GMT Subject: CN=A0594DEA6B8273360546A2AE6EE042C4E7767F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:f8:b0:5a:30:35:36:2b:d3:f0:e3:53:0e: ba:2a:3f:b5:46:bd:1f:24:ee:f0:b4:48:73:41:b2: 31:71:c1:a5:5d:67:d8:94:4c:2e:e4:f2:af:f0:bd: 27:8d:14:97:ae:94:f2:58:af:47:60:8e:dd:05:2f: 97:78:41:30:60:eb:24:90:83:f9:9c:b0:ef:c6:dd: e5:c4:a7:7c:ed:bb:0d:f0:f4:f4:88:c7:36:bb:f8: 72:c9:24:f0:d2:f8:eb:e3:5a:4b:f5:e7:ec:6c:7c: fb:4d:09:40:8c:cb:a6:61:ac:6d:7b:5f:51:db:f4: cb:b7:5a:9b:8f:f1:9a:c9:44:10:50:f5:40:24:f7: ca:d0:8a:8e:8a:d3:6b:6e:18:80:3c:19:73:63:48: 04:b0:e3:bd:18:b6:4e:76:a8:dd:45:e5:c2:10:0e: 54:7b:0b:5d:12:f7:50:52:9a:e1:48:ed:5f:2d:7f: ef:a7:44:68:1a:ee:fe:20:b5:89:44:aa:d5:b0:0e: a5:cf:c6:d3:41:81:79:38:3f:f8:74:5c:24:79:9b: 28:f3:e3:ec:f4:d4:40:e3:14:da:99:1a:bf:0c:c5: 1b:1b:bd:de:3b:df:69:47:d3:ec:e9:4d:2f:8d:02: 85:61:09:49:de:d8:8c:9d:be:6a:b5:6b:2f:49:90: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:4D:EA:6B:82:73:36:05:46:A2:AE:6E:E0:42:C4:E7:76:7F:66 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:10:15:2d:90:b6:29:ae:1c:85:92:06:ff:0d:56:74:06:f4: c2:b9:83:c3:fa:ec:31:bf:b1:c3:84:29:5f:a9:d9:34:ff:e3: 9c:84:61:11:c8:a7:db:45:7f:d9:0d:32:93:c7:90:51:1f:2b: d0:44:48:22:6e:b4:97:c6:b3:7e:ae:4e:dd:fd:1e:62:6c:02: 3c:c1:ad:38:13:9b:90:99:51:5f:8b:82:dc:3a:18:8d:51:9b: c1:4b:36:61:7f:4d:b1:17:7b:50:53:bb:c7:cd:40:5c:83:92: 65:0c:f4:3a:4e:4e:8f:56:48:25:15:71:ec:9c:31:aa:12:9e: 23:d7:dd:33:08:fe:2b:b8:13:9f:e9:ec:b0:f7:eb:ff:98:c8: ec:67:73:6a:ab:02:09:d6:c0:de:f1:73:2a:2a:a3:4b:3a:1e: f9:bf:4f:29:61:6e:65:e7:ea:0e:42:80:2d:7a:fe:82:70:12: 55:67:45:5f:03:76:d9:c3:eb:2e:ec:57:e1:4e:8d:5d:b8:b4: ae:08:d3:49:e1:3d:b6:2b:4a:42:d4:88:7b:71:ae:c9:46:3c: 3a:8a:66:21:83:18:47:a4:bd:44:57:13:5e:02:03:04:3c:ff: 24:7c:1d:3c:74:55:ea:f4:4b:73:78:26:cf:01:1e:7e:72:87: f6:09:eb:c6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURATgHMg+n7L99fSp+pj9cQiMGwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAzMDEwNDAwMjBaFw0yNjAzMDIwNzE2MjBaMDMxMTAvBgNV BAMTKEEwNTk0REVBNkI4MjczMzYwNTQ2QTJBRTZFRTA0MkM0RTc3NjdGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfn/iwWjA1NivT8ONTDroqP7VG vR8k7vC0SHNBsjFxwaVdZ9iUTC7k8q/wvSeNFJeulPJYr0dgjt0FL5d4QTBg6ySQ g/mcsO/G3eXEp3ztuw3w9PSIxza7+HLJJPDS+OvjWkv15+xsfPtNCUCMy6ZhrG17 X1Hb9Mu3WpuP8ZrJRBBQ9UAk98rQio6K02tuGIA8GXNjSASw470Ytk52qN1F5cIQ DlR7C10S91BSmuFI7V8tf++nRGga7v4gtYlEqtWwDqXPxtNBgXk4P/h0XCR5myjz 4+z01EDjFNqZGr8MxRsbvd4732lH0+zpTS+NAoVhCUne2Iydvmq1ay9JkPotAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoFlN6muCczYFRqKubuBCxOd2f2YwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihAVLZC2Ka4chZIG/w1W dAb0wrmDw/rsMb+xw4QpX6nZNP/jnIRhEcin20V/2Q0yk8eQUR8r0ERIIm60l8az fq5O3f0eYmwCPMGtOBObkJlRX4uC3DoYjVGbwUs2YX9NsRd7UFO7x81AXIOSZQz0 Ok5Oj1ZIJRVx7JwxqhKeI9fdMwj+K7gTn+nssPfr/5jI7GdzaqsCCdbA3vFzKiqj Szoe+b9PKWFuZefqDkKALXr+gnASVWdFXwN22cPrLuxX4U6NXbi0rgjTSeE9titK QtSIe3GuyUY8OopmIYMYR6S9RFcTXgIDBDz/JHwdPHRV6vRLc3gmzwEefnKH9gnr xg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:58:19 2026 by rpki-client