$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: sZ4cZR2A/+50nA51AtH89vsEowZkX1tJqPoJ7aPGEn4= Subject key identifier: 8B:5B:EB:99:ED:0E:00:FD:03:40:D4:61:0C:C9:F3:7B:F9:13:02:0F Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 660A867E8FD1088C6843986D36648B006361336E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 0657 Signing time: Thu 16 Apr 2026 19:39:42 +0000 Manifest this update: Thu 16 Apr 2026 19:34:42 +0000 Manifest next update: Fri 17 Apr 2026 21:13:42 +0000 Files and hashes: 1: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: CCWx5/mnzUAvPW2QXDisPqaJoMOmAAYfjlJp2z2VVX8=) 2: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 3: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 4: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=) 5: 38332e3135302e3231362e302f32342d3234203d3e20383334.roa (hash: yIerDS3BnxCTxkZm2IubfaXiz5eohPBi/h93FaQmFsw=) 6: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: nLtvC8u+G2wQDXhAgNrW8KG32IP0qBYrlPwszbjCA50=) 7: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=) 8: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: tsmsQBGdO1ruA5FwIWpzl+cddS0aq9lbotknOoUl0uM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:86:7e:8f:d1:08:8c:68:43:98:6d:36:64:8b:00:63:61:33:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Apr 16 19:34:42 2026 GMT Not After : Apr 17 21:13:42 2026 GMT Subject: CN=8B5BEB99ED0E00FD0340D4610CC9F37BF913020F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:9a:e8:d6:cd:e9:f0:e0:a4:68:82:0e:51: 79:02:36:b2:b0:b5:ca:2a:41:ba:aa:8f:8b:18:b9: c4:ff:e6:b3:72:cf:8f:0c:ff:28:eb:f9:08:79:2d: 90:59:ec:a6:2d:1a:33:57:77:f9:52:df:f7:49:2c: 42:01:2a:26:6d:61:49:26:6f:66:71:e5:5b:54:4a: 50:43:a8:1b:9d:57:d6:2b:fd:76:a1:c4:ec:4f:62: 0b:54:b5:ee:cb:ec:54:86:4e:bb:79:19:9a:44:8f: 7e:81:d3:e0:c4:82:03:fa:52:c8:3a:92:7d:7d:9e: ab:3d:8a:37:99:58:eb:f0:0e:68:64:82:96:12:7c: 02:79:fb:7e:d6:93:db:35:7e:87:81:6c:9d:fc:75: f9:dd:c7:2b:b4:2e:ad:e0:29:2f:55:04:94:6c:b2: cb:aa:44:fa:c5:da:73:5c:40:f2:24:68:18:5b:9b: 4e:6f:7a:ba:d0:f3:4a:d0:d3:a6:fe:75:a3:b4:bc: e2:e8:29:e0:98:6a:d1:62:a3:4f:17:b8:96:ad:57: ff:a2:6d:46:92:5d:d5:83:6b:72:62:62:b7:c8:bd: 43:1d:4d:b9:54:93:ec:b7:28:b7:00:31:14:3d:82: 84:92:ee:21:02:c1:18:fe:b2:ff:d7:66:35:9c:9e: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:EB:99:ED:0E:00:FD:03:40:D4:61:0C:C9:F3:7B:F9:13:02:0F X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:16:37:30:95:7a:db:c4:9c:ca:3f:1d:e8:ed:1f:66:67:88: 23:cd:d2:31:db:3a:bd:e8:4f:24:de:a8:08:25:99:8e:0a:0a: 71:45:85:66:ef:0e:43:87:8b:e1:4e:32:86:dd:bc:bb:b4:3c: d9:0b:a2:d8:89:3f:23:d2:89:26:bd:68:ee:c4:b6:03:f2:d5: 41:df:52:95:ce:4b:eb:af:99:83:0d:9b:e9:4b:6a:0a:75:ba: 62:cd:e5:53:2c:9e:31:89:70:d7:a4:01:82:39:b6:0c:6f:af: d3:44:43:41:0e:f8:f2:ef:1a:19:91:c3:4a:61:77:31:9d:6d: 8e:55:7a:46:91:d9:4e:26:e7:2e:57:bc:75:3c:16:76:72:68: c1:95:e1:a0:ab:a7:b5:68:e2:82:a7:42:90:8a:4b:5d:f4:1d: f4:25:8a:bc:57:62:6e:ad:72:4f:1c:1f:49:06:85:39:7f:a8: 02:d7:ed:43:60:62:c8:0d:8f:73:f1:42:6c:0e:8f:c3:b7:f0: 87:72:e0:c5:22:8d:a1:35:6a:4c:1d:5d:29:eb:9b:02:26:d0: 0a:e1:95:20:b0:3e:f0:0e:51:61:83:38:ba:f7:50:56:6e:5f: e7:c7:2c:47:6f:f3:75:13:4a:9a:96:5b:83:6b:98:5c:4e:3a: 30:b9:af:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZgqGfo/RCIxoQ5htNmSLAGNhM24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNjA0MTYxOTM0NDJaFw0yNjA0MTcyMTEzNDJaMDMxMTAvBgNV BAMTKDhCNUJFQjk5RUQwRTAwRkQwMzQwRDQ2MTBDQzlGMzdCRjkxMzAyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllZro1s3p8OCkaIIOUXkCNrKw tcoqQbqqj4sYucT/5rNyz48M/yjr+Qh5LZBZ7KYtGjNXd/lS3/dJLEIBKiZtYUkm b2Zx5VtUSlBDqBudV9Yr/XahxOxPYgtUte7L7FSGTrt5GZpEj36B0+DEggP6Usg6 kn19nqs9ijeZWOvwDmhkgpYSfAJ5+37Wk9s1foeBbJ38dfndxyu0Lq3gKS9VBJRs ssuqRPrF2nNcQPIkaBhbm05verrQ80rQ06b+daO0vOLoKeCYatFio08XuJatV/+i bUaSXdWDa3JiYrfIvUMdTblUk+y3KLcAMRQ9goSS7iECwRj+sv/XZjWcnkeLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi1vrme0OAP0DQNRhDMnze/kTAg8wHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBY3MJV628Scyj8d6O0f ZmeII83SMds6vehPJN6oCCWZjgoKcUWFZu8OQ4eL4U4yht28u7Q82Qui2Ik/I9KJ Jr1o7sS2A/LVQd9Slc5L66+Zgw2b6UtqCnW6Ys3lUyyeMYlw16QBgjm2DG+v00RD QQ748u8aGZHDSmF3MZ1tjlV6RpHZTibnLle8dTwWdnJowZXhoKuntWjigqdCkIpL XfQd9CWKvFdibq1yTxwfSQaFOX+oAtftQ2BiyA2Pc/FCbA6Pw7fwh3LgxSKNoTVq TB1dKeubAibQCuGVILA+8A5RYYM4uvdQVm5f58csR2/zdRNKmpZbg2uYXE46MLmv gQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:01 2026 by rpki-client