$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: cGH937HN1z8IBMcmIH8ZbjVRhw87EDjvrpxRj640QkU= Subject key identifier: 24:2A:7A:13:71:CB:17:05:69:09:35:50:11:EB:FC:A5:43:9D:82:7F Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 0C1FD08AB83FF7078F424F08BA3DD577BD397916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 0110 Signing time: Tue 28 Jul 2026 01:31:46 +0000 Manifest this update: Tue 28 Jul 2026 01:26:46 +0000 Manifest next update: Wed 29 Jul 2026 03:05:46 +0000 Files and hashes: 1: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 2: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 3: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 4: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 5: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 6: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 7: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 8: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 9: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: AiLt6ujfsDXlgJdFvm4gdOfSBDj4dRt+fBP6YKJmV/E=) 10: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 11: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 12: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 13: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1f:d0:8a:b8:3f:f7:07:8f:42:4f:08:ba:3d:d5:77:bd:39:79:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jul 28 01:26:46 2026 GMT Not After : Jul 29 03:05:46 2026 GMT Subject: CN=242A7A1371CB17056909355011EBFCA5439D827F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:80:a0:f5:73:45:f4:1f:d5:1c:d4:2f:bd:43: 54:47:fe:bc:bb:cd:7b:52:ad:6f:23:6e:1d:72:77: b0:76:bd:c3:44:9b:86:ba:31:96:93:e3:b8:90:de: 2b:8d:e2:53:bd:25:7e:35:77:88:1b:2c:34:66:12: 50:fa:a2:2b:e9:ae:e9:ec:f6:47:51:33:ff:71:12: 20:91:05:a7:31:d5:10:a9:30:34:5a:56:91:c8:48: 67:4c:f0:88:ff:03:7d:42:28:9d:a3:bc:8f:d9:91: 0d:ac:cf:97:bc:d9:a2:1a:37:4d:55:4a:8b:c9:2d: ab:ad:68:65:54:bd:36:80:6c:7d:0d:9f:ab:c6:a7: 72:70:cc:bd:1e:34:44:42:9f:f1:dd:57:82:96:00: 0d:41:63:dd:be:00:7d:7f:b8:0b:2d:36:c8:d9:33: 75:b0:1f:14:8c:d4:3d:16:2a:9c:1b:85:99:aa:d5: b1:4e:76:5a:41:f1:f6:9c:62:94:bc:73:65:7b:86: 4c:d5:15:50:74:fc:f9:30:26:1a:83:4f:3e:2d:0d: 86:d5:09:65:c5:0c:7b:5a:1c:6e:88:31:8e:05:cf: 98:e7:33:19:ed:aa:25:e9:c7:78:31:b5:c1:c8:52: 78:3d:3a:23:62:38:8e:23:2e:09:05:91:a5:be:0f: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:7A:13:71:CB:17:05:69:09:35:50:11:EB:FC:A5:43:9D:82:7F X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:dc:5a:e6:15:24:ef:05:61:eb:2f:d5:5e:ed:b8:5b:7e:cd: 9f:ad:95:76:f8:60:1a:f8:65:54:2e:17:95:7e:db:08:44:4b: 9e:fb:1f:82:4b:f4:d0:8f:93:93:47:0f:e9:77:bb:34:29:7f: eb:d6:01:93:0e:2f:99:64:52:20:e3:86:60:92:4b:71:f9:d7: 1a:10:82:82:76:d6:05:5c:9a:6a:5e:8e:50:8a:04:97:16:28: 1a:b7:11:5e:b7:27:3c:3e:f6:e4:a1:f0:f7:57:39:04:bf:c8: 1e:e3:c6:0e:74:16:d1:a5:c6:1a:53:d0:c4:6d:2c:5b:26:5c: b4:9e:4e:1b:b2:db:b3:e7:94:3c:4f:5d:34:0f:43:f2:b7:2e: 47:22:d5:4e:2a:64:67:38:c6:53:71:f1:ff:22:0a:46:d3:ab: 53:ee:51:a8:65:e1:a4:79:63:4a:96:73:a4:30:97:e2:b1:47: 56:35:4c:b9:43:f9:38:92:54:29:e3:f9:28:f8:b5:e3:e8:2f: 7b:85:9c:3a:10:52:d6:3f:f0:c6:9f:20:35:32:76:a4:88:71: 93:e7:e7:dc:38:fd:09:8f:96:ad:48:4c:cf:8f:9e:f3:e4:0d: 23:5d:f5:f2:72:1d:a4:80:d1:7e:e5:a3:b0:b3:0a:63:7b:b9: 4f:99:a5:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDB/Qirg/9wePQk8Iuj3Vd705eRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA3MjgwMTI2NDZaFw0yNjA3MjkwMzA1NDZaMDMxMTAvBgNV BAMTKDI0MkE3QTEzNzFDQjE3MDU2OTA5MzU1MDExRUJGQ0E1NDM5RDgyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwgKD1c0X0H9Uc1C+9Q1RH/ry7 zXtSrW8jbh1yd7B2vcNEm4a6MZaT47iQ3iuN4lO9JX41d4gbLDRmElD6oivpruns 9kdRM/9xEiCRBacx1RCpMDRaVpHISGdM8Ij/A31CKJ2jvI/ZkQ2sz5e82aIaN01V SovJLautaGVUvTaAbH0Nn6vGp3JwzL0eNERCn/HdV4KWAA1BY92+AH1/uAstNsjZ M3WwHxSM1D0WKpwbhZmq1bFOdlpB8facYpS8c2V7hkzVFVB0/PkwJhqDTz4tDYbV CWXFDHtaHG6IMY4Fz5jnMxntqiXpx3gxtcHIUng9OiNiOI4jLgkFkaW+D5VvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJCp6E3HLFwVpCTVQEev8pUOdgn8wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNxa5hUk7wVh6y/VXu24 W37Nn62VdvhgGvhlVC4XlX7bCERLnvsfgkv00I+Tk0cP6Xe7NCl/69YBkw4vmWRS IOOGYJJLcfnXGhCCgnbWBVyaal6OUIoElxYoGrcRXrcnPD725KHw91c5BL/IHuPG DnQW0aXGGlPQxG0sWyZctJ5OG7Lbs+eUPE9dNA9D8rcuRyLVTipkZzjGU3Hx/yIK RtOrU+5RqGXhpHljSpZzpDCX4rFHVjVMuUP5OJJUKeP5KPi14+gve4WcOhBS1j/w xp8gNTJ2pIhxk+fn3Dj9CY+WrUhMz4+e8+QNI1318nIdpIDRfuWjsLMKY3u5T5ml Yg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:30:01 2026 by rpki-client