$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: cFn17atACugdY1XU+vhN9LmWD8heOrPJvzAF+r6NuhA= Subject key identifier: B4:8C:DB:9C:63:F6:1A:69:59:E5:3D:18:97:10:ED:13:B5:D1:46:DA Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 519FD04C8B862FB57B65BA0B8BCDAD80D592E1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 015C Signing time: Mon 21 Sep 2026 20:20:46 +0000 Manifest this update: Mon 21 Sep 2026 20:15:46 +0000 Manifest next update: Tue 22 Sep 2026 23:06:46 +0000 Files and hashes: 1: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 2: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 3: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 4: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 5: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 6: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 7: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 8: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 9: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 10: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 11: 38312e3139392e32382e302f32342d3234203d3e20383334.roa (hash: EaFSPc5f4++qCDszznUpM3YrjVHSde7BhTz3eA4Q3/I=) 12: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: KU8SKRK8++Oa5LoaVzBwUx4CwNAGqaD0dC0UTY6rssU=) 13: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9f:d0:4c:8b:86:2f:b5:7b:65:ba:0b:8b:cd:ad:80:d5:92:e1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Sep 21 20:15:46 2026 GMT Not After : Sep 22 23:06:46 2026 GMT Subject: CN=B48CDB9C63F61A6959E53D189710ED13B5D146DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:50:e6:ee:f1:52:55:64:64:dd:2f:bd:b3: a0:54:74:71:5f:f9:54:8a:5b:71:87:6e:5b:b8:cc: 17:ac:29:02:68:24:97:5c:c0:43:f2:3c:85:37:06: c2:89:fd:88:55:38:b3:93:bb:7f:71:81:75:ae:00: c3:63:2d:6e:cc:01:e0:e3:02:2d:6a:8f:7b:3a:80: 93:ae:26:0d:b6:d6:ea:2e:3a:84:d2:4e:68:6a:bd: da:de:76:7d:ae:1c:a6:33:61:d1:c3:7d:ef:93:34: e9:7b:c2:40:d3:45:19:8f:4a:52:04:4b:ea:86:ae: 89:d7:d5:fe:7b:8b:60:92:64:34:ce:86:21:3f:e3: cc:65:da:bb:b3:30:7a:99:fd:1d:61:af:78:27:c9: 5d:b8:76:54:d7:ea:11:2a:49:81:72:1e:9a:09:23: 3b:e3:b5:19:66:32:18:de:ad:3a:4f:42:a9:79:fa: 30:96:0f:55:25:1f:bf:46:98:d4:f6:f1:51:02:cc: 9a:24:09:20:95:b8:e8:f1:fd:b3:76:08:3a:a9:e4: f2:79:35:ca:41:09:b4:f6:1e:07:f0:ee:e5:6c:b0: 5d:ef:ba:62:99:eb:1a:9f:d3:cb:d1:48:80:df:a6: 5c:2f:d6:52:74:f7:3e:05:eb:38:44:83:e0:8c:60: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8C:DB:9C:63:F6:1A:69:59:E5:3D:18:97:10:ED:13:B5:D1:46:DA X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ca:23:21:22:eb:fd:b5:e6:a8:fd:10:08:e8:ca:0b:1d:6a: ca:af:10:84:9d:05:db:f7:00:02:d2:b7:b8:c3:0f:bb:0d:f9: 96:ea:7a:0a:c7:df:ec:32:0c:f4:05:1c:20:b3:7c:e4:fa:36: 95:15:3d:cd:10:d5:e9:bb:34:4e:4f:29:d7:db:ce:b3:b3:88: e6:df:aa:76:7b:5d:c8:6c:28:7b:22:3f:76:a6:07:69:d6:28: a5:98:e6:90:e5:1d:14:4d:4e:67:4f:19:11:eb:bf:9b:75:ac: ed:ae:8c:83:93:7a:4d:df:8e:55:f3:67:b7:ef:b0:d6:a1:e0: de:0d:e5:65:cd:07:8d:ba:f9:c1:ed:89:5d:d3:0e:de:fc:b4: 61:ba:91:16:93:7d:6c:a2:60:e1:3c:e0:e1:e3:69:9e:1d:c3: 37:fd:50:85:83:4b:75:5a:60:9a:84:26:a8:d0:52:60:26:4c: 36:35:56:60:0d:d9:14:c7:16:9f:f5:64:9a:aa:a7:e8:b9:1d: 0b:a6:e6:eb:8d:0a:17:04:2e:ef:d3:a9:b3:89:57:4b:b9:65: e3:2e:fb:96:e7:9f:17:8f:8f:5c:e7:59:a9:53:02:1e:9c:77: 08:37:bf:ab:8a:b7:53:cd:82:2f:b4:f0:4b:9c:f1:98:90:71: bd:40:f3:8c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUZ/QTIuGL7V7ZboLi82tgNWS4bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA5MjEyMDE1NDZaFw0yNjA5MjIyMzA2NDZaMDMxMTAvBgNV BAMTKEI0OENEQjlDNjNGNjFBNjk1OUU1M0QxODk3MTBFRDEzQjVEMTQ2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTFDm7vFSVWRk3S+9s6BUdHFf +VSKW3GHblu4zBesKQJoJJdcwEPyPIU3BsKJ/YhVOLOTu39xgXWuAMNjLW7MAeDj Ai1qj3s6gJOuJg221uouOoTSTmhqvdredn2uHKYzYdHDfe+TNOl7wkDTRRmPSlIE S+qGronX1f57i2CSZDTOhiE/48xl2ruzMHqZ/R1hr3gnyV24dlTX6hEqSYFyHpoJ IzvjtRlmMhjerTpPQql5+jCWD1UlH79GmNT28VECzJokCSCVuOjx/bN2CDqp5PJ5 NcpBCbT2Hgfw7uVssF3vumKZ6xqf08vRSIDfplwv1lJ09z4F6zhEg+CMYPp/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtIzbnGP2GmlZ5T0YlxDtE7XRRtowHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcojISLr/bXmqP0QCOjK Cx1qyq8QhJ0F2/cAAtK3uMMPuw35lup6Csff7DIM9AUcILN85Po2lRU9zRDV6bs0 Tk8p19vOs7OI5t+qdntdyGwoeyI/dqYHadYopZjmkOUdFE1OZ08ZEeu/m3Ws7a6M g5N6Td+OVfNnt++w1qHg3g3lZc0Hjbr5we2JXdMO3vy0YbqRFpN9bKJg4Tzg4eNp nh3DN/1QhYNLdVpgmoQmqNBSYCZMNjVWYA3ZFMcWn/Vkmqqn6LkdC6bm640KFwQu 79Ops4lXS7ll4y77luefF4+PXOdZqVMCHpx3CDe/q4q3U82CL7TwS5zxmJBxvUDz jA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:01:40 2026 by rpki-client