$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: umRzVlgKUT+uHbjHeHMkFLdSaAOVoNmTi6KSMRHn+G8= Subject key identifier: 0B:73:9C:1C:58:54:9D:28:6E:1C:81:D9:CF:45:4A:DE:65:E0:1A:D0 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 76A1D17DB5E662470374ADD74A515A476AF96BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 05B3 Signing time: Fri 17 Apr 2026 03:39:42 +0000 Manifest this update: Fri 17 Apr 2026 03:34:42 +0000 Manifest next update: Sat 18 Apr 2026 04:47:42 +0000 Files and hashes: 1: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 2: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: hSyC6GBm91OzFAnDLFO+ovyHg6v0l+mgZabFdVz4FTY=) 4: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 5: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (hash: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=) 6: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 7: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 8: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 9: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) 10: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 11: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 12: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a1:d1:7d:b5:e6:62:47:03:74:ad:d7:4a:51:5a:47:6a:f9:6b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Apr 17 03:34:42 2026 GMT Not After : Apr 18 04:47:42 2026 GMT Subject: CN=0B739C1C58549D286E1C81D9CF454ADE65E01AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4d:33:59:ff:cb:b8:8f:16:4b:c5:f8:e0:d3: 13:7f:22:ab:fe:b7:98:93:de:1f:ba:8d:cd:3e:40: 04:94:f2:9d:0d:72:13:5a:67:dd:56:5e:63:ad:c5: 8f:8f:0f:12:55:96:8b:f4:ed:30:da:af:1d:ec:ea: 98:47:fd:4d:66:56:91:6c:17:2f:a9:83:52:d3:a8: 86:20:28:00:5c:3b:dd:40:36:d8:9a:80:b2:1c:0a: c4:c4:93:9b:15:f0:99:4c:b1:94:fe:bb:77:ca:49: 0b:f4:56:72:4b:6a:c0:2c:46:53:06:00:55:79:ab: c9:50:cb:ec:f1:a8:31:e3:f8:53:d2:a4:04:56:e1: 4d:cc:d2:ec:31:c0:1d:fe:a0:9f:fd:66:d1:48:87: bb:af:77:2a:be:dc:16:ca:60:10:cb:90:6d:ff:c4: 59:e4:63:d8:bc:2d:ff:c0:3c:58:86:23:e5:6c:ca: 62:35:a3:15:ac:88:34:b5:b1:c3:d9:f6:eb:54:59: 39:c0:06:88:0c:94:b7:15:e3:a4:36:76:63:c7:5d: bf:39:29:7d:70:82:96:7b:8d:a0:8b:43:97:17:96: 59:07:ec:1b:43:66:4f:24:96:33:80:c6:4a:c8:93: 51:18:3d:60:62:84:a6:56:89:a4:25:d6:cb:b3:8a: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:73:9C:1C:58:54:9D:28:6E:1C:81:D9:CF:45:4A:DE:65:E0:1A:D0 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:42:68:2c:a4:29:45:56:05:53:ed:f3:ea:bd:fe:0c:9f:68: a6:aa:7c:78:65:25:cd:99:ec:f8:4f:3f:92:61:86:82:c9:35: 01:93:b2:93:c8:79:23:e3:0c:24:4f:ab:66:1b:ea:b0:92:65: 25:7a:59:bf:e9:17:66:b0:dd:47:47:d5:27:26:7c:35:b5:22: 65:88:1c:03:bf:8c:81:61:f5:87:aa:f7:9d:58:cc:7a:f0:ae: 7c:93:bc:2e:ce:7c:a4:9c:e9:85:55:63:9a:d7:a2:c9:91:2a: 19:64:25:c4:e5:1f:f7:7c:3e:39:51:9b:4f:00:75:d4:00:20: 6e:42:17:0b:a1:cd:15:3c:3b:f3:ab:ff:2f:44:b9:91:57:e7: f1:04:dd:d7:b8:58:be:2a:9b:ab:08:bf:3c:b8:88:28:0c:d1: 79:c1:a2:f2:17:fb:f6:ec:53:f2:16:f8:e9:d0:b1:ef:a4:b0: 2d:65:9c:3c:bd:39:cc:f3:81:6a:61:90:51:31:db:0f:93:cd: 01:24:bc:95:49:ec:1c:f3:c3:12:9b:ce:a7:77:eb:14:f5:93: 34:33:2d:48:e9:87:cc:6a:01:95:27:80:17:6c:29:ee:95:60: 18:f2:46:b6:dd:09:e0:2c:f6:4d:a7:75:26:32:f4:cc:67:50: 34:93:f5:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdqHRfbXmYkcDdK3XSlFaR2r5a6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA0MTcwMzM0NDJaFw0yNjA0MTgwNDQ3NDJaMDMxMTAvBgNV BAMTKDBCNzM5QzFDNTg1NDlEMjg2RTFDODFEOUNGNDU0QURFNjVFMDFBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOTTNZ/8u4jxZLxfjg0xN/Iqv+ t5iT3h+6jc0+QASU8p0NchNaZ91WXmOtxY+PDxJVlov07TDarx3s6phH/U1mVpFs Fy+pg1LTqIYgKABcO91ANtiagLIcCsTEk5sV8JlMsZT+u3fKSQv0VnJLasAsRlMG AFV5q8lQy+zxqDHj+FPSpARW4U3M0uwxwB3+oJ/9ZtFIh7uvdyq+3BbKYBDLkG3/ xFnkY9i8Lf/APFiGI+VsymI1oxWsiDS1scPZ9utUWTnABogMlLcV46Q2dmPHXb85 KX1wgpZ7jaCLQ5cXllkH7BtDZk8kljOAxkrIk1EYPWBihKZWiaQl1suzilqZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC3OcHFhUnShuHIHZz0VK3mXgGtAwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0JoLKQpRVYFU+3z6r3+ DJ9opqp8eGUlzZns+E8/kmGGgsk1AZOyk8h5I+MMJE+rZhvqsJJlJXpZv+kXZrDd R0fVJyZ8NbUiZYgcA7+MgWH1h6r3nVjMevCufJO8Ls58pJzphVVjmteiyZEqGWQl xOUf93w+OVGbTwB11AAgbkIXC6HNFTw786v/L0S5kVfn8QTd17hYviqbqwi/PLiI KAzRecGi8hf79uxT8hb46dCx76SwLWWcPL05zPOBamGQUTHbD5PNASS8lUnsHPPD EpvOp3frFPWTNDMtSOmHzGoBlSeAF2wp7pVgGPJGtt0J4Cz2Tad1JjL0zGdQNJP1 0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:04:45 2026 by rpki-client