$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: M49yJr5qafhUjNwVhfd9B3cFDa4rzrIR59pQOtGtcH4= Subject key identifier: 17:3B:AE:4B:3D:69:4B:87:99:14:E2:D7:99:34:86:26:26:70:4C:A8 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 6C604B86CE5B00A1093FC363950556EDBB2B4522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 033B Signing time: Mon 21 Sep 2026 03:45:45 +0000 Manifest this update: Mon 21 Sep 2026 03:40:45 +0000 Manifest next update: Tue 22 Sep 2026 05:30:45 +0000 Files and hashes: 1: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: P4AuBQsYLVnrIyTEGNsNBdHkEYx0SPbatkNPI79H8KA=) 2: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: dsfGcmcJQswtY9cB3QnNBLneqmF8yKEFmEG/dOKBVMo=) 3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 4: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 5: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 6: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: vlJfBcwtIKeI7cvrJFR1icwxTkuss/ql4sPRJGgIw+Y=) 7: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) 8: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 00hOd26IV3x36K3CYE+vyoL3Xi58Glc2rEBi0ucwetk=) 9: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:60:4b:86:ce:5b:00:a1:09:3f:c3:63:95:05:56:ed:bb:2b:45:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Sep 21 03:40:45 2026 GMT Not After : Sep 22 05:30:45 2026 GMT Subject: CN=173BAE4B3D694B879914E2D79934862626704CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:de:df:e0:0a:76:d2:6b:ce:8b:4d:10:06: 77:70:9b:7f:a7:8c:6e:9b:58:6b:59:a9:1f:8e:50: b6:3c:fe:8d:3f:6b:b8:c8:bf:65:6f:60:ba:1a:9b: f2:42:8c:10:7d:bc:be:1c:07:2f:d0:65:a0:c7:cc: c1:32:dc:47:06:e0:7e:36:f6:7f:d2:d2:8f:ee:fa: 2b:38:37:22:f2:44:4f:8b:55:e1:0f:0f:3e:35:4c: c1:64:9c:5b:84:7c:ae:95:f7:4f:36:25:50:ce:88: 43:1e:55:cb:f6:4b:e3:5f:fc:89:82:69:de:37:1c: de:48:40:59:58:62:23:74:e7:b0:d9:69:24:66:27: 7c:11:5e:79:2e:fc:8b:0e:dc:45:59:2c:77:1d:6e: f0:be:47:b9:8f:85:35:43:4d:5f:c8:ed:d3:d3:81: 8e:56:b5:ef:52:43:93:45:f2:cb:70:12:cd:8d:5a: 00:e3:13:a2:94:1e:9a:e2:10:2d:7e:a6:37:44:b4: 8a:52:e2:bb:49:00:d8:bb:dc:ec:b2:4c:af:68:fc: d8:ce:93:08:ae:2d:d8:77:81:2b:b7:1f:b1:88:a7: 21:f3:1f:d1:e5:58:a8:29:e2:86:c1:68:3f:86:3e: 8f:20:8b:04:ed:41:58:e5:0c:9f:20:60:07:01:19: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3B:AE:4B:3D:69:4B:87:99:14:E2:D7:99:34:86:26:26:70:4C:A8 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a8:02:7a:3e:31:a2:38:1a:23:18:0d:34:44:29:13:86:ff: 36:df:71:f7:fe:99:a5:ec:e4:31:d5:c7:10:55:23:ac:4f:d6: a5:3a:20:d8:ff:50:ab:16:0b:34:a0:b7:14:aa:1f:99:92:08: ea:66:61:be:7a:88:6b:b1:13:8f:43:33:1f:af:08:50:6a:42: 0f:cf:f8:3b:67:57:53:67:e2:5d:02:9e:6f:70:c4:7f:04:43: 60:9c:52:f9:d4:f9:8d:be:15:b7:bf:8d:60:11:ce:d0:da:8c: 50:96:57:33:7d:db:2d:6d:6a:bd:cb:69:18:2d:ab:9e:87:73: 92:57:74:ed:75:2d:01:0b:44:fa:1d:d6:47:3e:1b:51:5d:d4: b1:01:7f:d3:fd:4a:c0:80:b4:9a:44:5b:aa:7c:15:30:7c:70: 92:6b:a7:4b:14:7f:fd:9b:87:15:ed:a2:3f:b9:1d:21:91:ed: 01:2b:b9:99:3c:32:f3:9d:6f:dc:e0:a4:89:72:85:ff:cf:e0: 19:0a:a2:6e:3f:14:e1:47:23:7d:1f:49:91:70:cd:d6:ed:fa: bb:90:91:eb:23:1c:69:5c:37:f8:db:f2:9e:1a:33:89:fa:96: 3d:e0:da:81:fa:f5:b8:7c:07:23:ba:43:5d:67:19:37:a9:b2: ac:77:36:18 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbGBLhs5bAKEJP8NjlQVW7bsrRSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA5MjEwMzQwNDVaFw0yNjA5MjIwNTMwNDVaMDMxMTAvBgNV BAMTKDE3M0JBRTRCM0Q2OTRCODc5OTE0RTJENzk5MzQ4NjI2MjY3MDRDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5T97f4Ap20mvOi00QBndwm3+n jG6bWGtZqR+OULY8/o0/a7jIv2VvYLoam/JCjBB9vL4cBy/QZaDHzMEy3EcG4H42 9n/S0o/u+is4NyLyRE+LVeEPDz41TMFknFuEfK6V9082JVDOiEMeVcv2S+Nf/ImC ad43HN5IQFlYYiN057DZaSRmJ3wRXnku/IsO3EVZLHcdbvC+R7mPhTVDTV/I7dPT gY5Wte9SQ5NF8stwEs2NWgDjE6KUHpriEC1+pjdEtIpS4rtJANi73OyyTK9o/NjO kwiuLdh3gSu3H7GIpyHzH9HlWKgp4obBaD+GPo8giwTtQVjlDJ8gYAcBGVVZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFzuuSz1pS4eZFOLXmTSGJiZwTKgwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKgCej4xojgaIxgNNEQp E4b/Nt9x9/6ZpezkMdXHEFUjrE/WpTog2P9QqxYLNKC3FKofmZII6mZhvnqIa7ET j0MzH68IUGpCD8/4O2dXU2fiXQKeb3DEfwRDYJxS+dT5jb4Vt7+NYBHO0NqMUJZX M33bLW1qvctpGC2rnodzkld07XUtAQtE+h3WRz4bUV3UsQF/0/1KwIC0mkRbqnwV MHxwkmunSxR//ZuHFe2iP7kdIZHtASu5mTwy851v3OCkiXKF/8/gGQqibj8U4Ucj fR9JkXDN1u36u5CR6yMcaVw3+NvynhozifqWPeDagfr1uHwHI7pDXWcZN6myrHc2 GA== -----END CERTIFICATE-----Generated at Mon Sep 21 22:24:48 2026 by rpki-client