$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: RPbdiB/ut/BJ6mOK/I+ie/KgqYBMYXVu13DEa5khULc= Subject key identifier: B8:32:D3:6E:E9:1C:37:38:C9:31:75:9A:97:89:5F:B7:E7:22:00:03 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 2B965749FCB68C42FDFB5D8C069BE9FDE7EDAFB7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 74 Signing time: Fri 17 Apr 2026 14:05:50 +0000 Manifest this update: Fri 17 Apr 2026 14:00:50 +0000 Manifest next update: Sat 18 Apr 2026 17:13:50 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 4: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: ixXoLUMaqmzKe0NOHwfPE8YBrMyvsPEETIyvgopAtBM=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:96:57:49:fc:b6:8c:42:fd:fb:5d:8c:06:9b:e9:fd:e7:ed:af:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Apr 17 14:00:50 2026 GMT Not After : Apr 18 17:13:50 2026 GMT Subject: CN=B832D36EE91C3738C931759A97895FB7E7220003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:c0:f9:37:50:fd:c2:14:e7:4e:13:61:84: 4e:c1:1b:d8:38:09:d2:f5:ec:93:87:0e:06:72:44: f0:33:b3:e5:ac:36:07:d5:7f:aa:59:00:68:51:7d: a0:c4:a1:fe:9a:d3:5a:96:4e:ae:35:76:f7:17:d3: 8b:fb:e3:a0:f1:7d:27:17:ca:82:e4:71:8d:ac:49: 4b:bc:6c:19:8a:3e:7d:ca:20:4b:57:c0:20:3c:b7: 39:10:f9:43:0f:4c:62:8b:51:f1:3a:d1:a4:4f:4f: e3:fa:01:e2:a4:8e:7f:96:b7:dc:22:0c:17:a7:dc: 00:97:04:1e:2a:3e:38:59:51:ef:33:36:83:25:16: cd:32:b3:a6:15:38:c5:60:de:d5:61:65:cf:f8:73: 43:02:2d:bb:c6:ca:44:8d:5b:29:18:0f:a9:19:0d: bf:3d:30:49:d4:f4:93:7f:45:92:4c:49:c7:9e:35: 84:05:9a:4d:41:99:cb:78:80:c0:cd:95:c0:a1:d4: 14:5c:6b:2f:d4:3c:64:6c:f0:c2:ec:6d:39:a2:31: 58:79:d2:aa:16:df:19:36:e7:ad:cc:ac:37:26:bd: 43:4e:0b:bd:23:a8:eb:35:1c:6d:bf:5e:82:e2:75: db:04:3a:9c:3c:9b:cc:16:5d:6d:8e:73:dc:60:4f: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:32:D3:6E:E9:1C:37:38:C9:31:75:9A:97:89:5F:B7:E7:22:00:03 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4c:bb:5e:df:c6:69:d2:7f:65:79:c3:8c:b4:e8:96:42:4f: 54:e7:f1:ba:73:4f:bd:04:ec:09:c9:31:c4:86:d1:7a:aa:f2: 41:34:68:dc:a7:40:a7:1e:f2:4a:e6:87:15:13:8a:fe:25:f7: 9e:6b:fc:40:a9:1c:13:7f:dc:78:fb:f5:3c:1a:b2:dc:18:91: 79:9b:50:dc:cf:62:2d:9e:25:b0:61:6c:3a:19:0e:fa:7c:23: 66:24:d4:12:b5:7d:04:50:c2:67:d8:7b:04:3c:1d:b1:f4:b2: 2b:f7:59:46:76:86:8a:92:21:1d:db:e3:80:38:d1:9d:17:94: c5:98:af:48:55:9c:db:a9:e0:2f:90:df:4e:e9:2c:28:b6:7c: e9:93:b0:13:f4:21:13:8e:00:6a:1b:03:52:73:01:46:b8:ab: b5:64:a9:10:b2:7f:2f:e4:a7:92:40:8e:96:b9:6d:60:02:ac: 6f:f8:a5:78:75:43:ac:9a:c1:3e:1a:2e:43:32:9e:fd:19:7f: 9b:94:9c:91:f9:14:59:62:ac:6e:1f:6d:78:18:2f:8f:a8:0b: f9:c6:aa:d1:28:a6:49:0b:64:0c:c5:9b:1d:22:93:72:f8:d6: e3:94:32:66:38:de:d8:43:4d:7d:a6:ab:98:a8:7f:d4:af:07: f6:a0:4c:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK5ZXSfy2jEL9+12MBpvp/eftr7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA0MTcxNDAwNTBaFw0yNjA0MTgxNzEzNTBaMDMxMTAvBgNV BAMTKEI4MzJEMzZFRTkxQzM3MzhDOTMxNzU5QTk3ODk1RkI3RTcyMjAwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4MD5N1D9whTnThNhhE7BG9g4 CdL17JOHDgZyRPAzs+WsNgfVf6pZAGhRfaDEof6a01qWTq41dvcX04v746DxfScX yoLkcY2sSUu8bBmKPn3KIEtXwCA8tzkQ+UMPTGKLUfE60aRPT+P6AeKkjn+Wt9wi DBen3ACXBB4qPjhZUe8zNoMlFs0ys6YVOMVg3tVhZc/4c0MCLbvGykSNWykYD6kZ Db89MEnU9JN/RZJMSceeNYQFmk1Bmct4gMDNlcCh1BRcay/UPGRs8MLsbTmiMVh5 0qoW3xk2563MrDcmvUNOC70jqOs1HG2/XoLiddsEOpw8m8wWXW2Oc9xgT8lZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuDLTbukcNzjJMXWal4lft+ciAAMwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfTLte 38Zp0n9lecOMtOiWQk9U5/G6c0+9BOwJyTHEhtF6qvJBNGjcp0CnHvJK5ocVE4r+ Jfeea/xAqRwTf9x4+/U8GrLcGJF5m1Dcz2ItniWwYWw6GQ76fCNmJNQStX0EUMJn 2HsEPB2x9LIr91lGdoaKkiEd2+OAONGdF5TFmK9IVZzbqeAvkN9O6Swotnzpk7AT 9CETjgBqGwNScwFGuKu1ZKkQsn8v5KeSQI6WuW1gAqxv+KV4dUOsmsE+Gi5DMp79 GX+blJyR+RRZYqxuH214GC+PqAv5xqrRKKZJC2QMxZsdIpNy+NbjlDJmON7YQ019 pquYqH/Urwf2oEzx -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:03 2026 by rpki-client