$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: fi63JK71LV1MLH/3WVSfVAO3IZGc5q58IcSlNJ0AqQ4= Subject key identifier: 2A:1C:1D:D0:5A:51:FB:1B:A7:65:9F:47:D0:BF:EF:6C:10:E5:06:33 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 3A2772536865E140874D068402A21EF9281F0DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: D4 Signing time: Sat 13 Jun 2026 05:33:42 +0000 Manifest this update: Sat 13 Jun 2026 05:28:42 +0000 Manifest next update: Sun 14 Jun 2026 07:52:42 +0000 Files and hashes: 1: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 2: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 3: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 4: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: 5UKvC1kfeMs2TBXX4V3UyID4RSKxS6rM8kJXv31BAh8=) 5: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 6: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 7: 34352e3134302e3234362e302f32342d3234203d3e20313337353137.roa (hash: w+9JhKTm42+qCh267CfnZBy1lWmblpCEcvu07OVFVoE=) 8: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (hash: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I=) 9: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 10: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 11: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 12: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 13: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:27:72:53:68:65:e1:40:87:4d:06:84:02:a2:1e:f9:28:1f:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jun 13 05:28:42 2026 GMT Not After : Jun 14 07:52:42 2026 GMT Subject: CN=2A1C1DD05A51FB1BA7659F47D0BFEF6C10E50633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:7c:9b:8d:e0:dc:8e:2a:36:d9:f2:42:c2: dc:83:68:64:72:56:b0:91:e0:3c:0a:cb:c9:5d:e6: 8e:a6:85:bf:89:b4:e4:0f:eb:d5:ec:f0:53:90:c7: 29:12:72:b8:41:b5:48:64:e0:ff:2b:3b:62:00:61: 0c:07:76:99:c7:10:c0:99:60:4f:19:d6:1f:fc:1d: 95:b7:18:61:6b:4c:bf:17:0e:1a:c3:93:ea:6f:9b: 69:e6:77:89:65:a3:38:05:0a:68:8c:63:01:99:80: d3:08:c1:8f:b3:1d:79:7b:4c:da:3d:1e:61:46:a8: 38:5a:0f:e2:c2:26:11:a3:4d:74:de:0f:75:33:c2: 22:1e:17:7d:15:4c:fc:0a:08:39:c4:07:27:11:d7: 5b:99:27:68:a2:66:aa:84:3a:d5:6c:57:4b:e2:b5: bc:3e:ed:a7:29:6e:23:0d:95:19:28:8b:4e:12:57: 30:6e:f8:8f:16:7c:d4:c3:d9:62:09:89:23:b6:d5: 22:b5:58:5f:bd:a6:fb:26:3c:b5:9f:78:d9:61:6f: ff:29:25:6f:79:1f:4d:14:cf:f5:5f:e9:72:2c:cb: c7:12:eb:dd:3c:b5:71:86:4c:d3:74:30:18:f3:8d: 7c:ef:7e:8c:3e:7f:80:e8:61:81:cf:86:08:9d:f1: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:1D:D0:5A:51:FB:1B:A7:65:9F:47:D0:BF:EF:6C:10:E5:06:33 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3d:2d:d2:8b:6c:51:0e:f1:f8:ce:e1:0f:2b:f5:22:6c:75: 0c:b4:d1:bf:c7:85:8d:e5:9a:b8:c2:8d:c2:74:0b:31:13:4b: aa:46:f5:90:37:2d:bf:1c:ed:fc:01:7c:58:fa:5b:9e:5c:a1: e8:ef:ef:e1:de:6b:b6:8d:25:4f:18:dd:99:88:80:77:20:73: eb:ea:e1:06:db:33:ef:bc:43:a8:1c:25:1c:0c:1d:bd:93:a7: 1a:ed:96:72:10:39:0b:a8:71:17:5e:79:9c:f4:68:a7:b6:9e: bd:af:b2:27:1e:6f:59:e4:d2:90:63:6e:ce:64:98:61:cf:0d: 8f:c7:f6:7a:10:51:4f:d1:81:6f:b3:4b:33:58:5f:48:07:e0: 00:69:77:a3:3b:c7:da:0f:23:43:42:f3:1b:32:73:86:17:d5: ad:74:52:74:5e:57:f6:13:23:8d:36:24:29:73:d6:37:0d:a1: 25:5b:fa:03:a1:8f:3b:bd:e7:53:9d:55:3f:bd:65:f3:95:e3: 97:42:cb:61:00:24:3d:c4:8e:1a:d9:11:62:ca:8a:b8:8f:1b: ed:83:10:1e:64:58:75:19:b8:47:a5:8e:58:23:63:72:75:85: 49:80:97:9b:45:6d:71:11:f6:51:87:74:fd:b8:7d:8d:c0:9e: 75:cf:71:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOidyU2hl4UCHTQaEAqIe+SgfDd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjA2MTMwNTI4NDJaFw0yNjA2MTQwNzUyNDJaMDMxMTAvBgNV BAMTKDJBMUMxREQwNUE1MUZCMUJBNzY1OUY0N0QwQkZFRjZDMTBFNTA2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbF3ybjeDcjio22fJCwtyDaGRy VrCR4DwKy8ld5o6mhb+JtOQP69Xs8FOQxykScrhBtUhk4P8rO2IAYQwHdpnHEMCZ YE8Z1h/8HZW3GGFrTL8XDhrDk+pvm2nmd4llozgFCmiMYwGZgNMIwY+zHXl7TNo9 HmFGqDhaD+LCJhGjTXTeD3UzwiIeF30VTPwKCDnEBycR11uZJ2iiZqqEOtVsV0vi tbw+7acpbiMNlRkoi04SVzBu+I8WfNTD2WIJiSO21SK1WF+9pvsmPLWfeNlhb/8p JW95H00Uz/Vf6XIsy8cS6908tXGGTNN0MBjzjXzvfow+f4DoYYHPhgid8Q5/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKhwd0FpR+xunZZ9H0L/vbBDlBjMwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz0t0otsUQ7x+M7hDyv1 Imx1DLTRv8eFjeWauMKNwnQLMRNLqkb1kDctvxzt/AF8WPpbnlyh6O/v4d5rto0l TxjdmYiAdyBz6+rhBtsz77xDqBwlHAwdvZOnGu2WchA5C6hxF155nPRop7aeva+y Jx5vWeTSkGNuzmSYYc8Nj8f2ehBRT9GBb7NLM1hfSAfgAGl3ozvH2g8jQ0LzGzJz hhfVrXRSdF5X9hMjjTYkKXPWNw2hJVv6A6GPO73nU51VP71l85Xjl0LLYQAkPcSO GtkRYsqKuI8b7YMQHmRYdRm4R6WOWCNjcnWFSYCXm0VtcRH2UYd0/bh9jcCedc9x Gw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:22:01 2026 by rpki-client