$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: EzBUCioRZvCvbOlG7iClrOcQ2IUHwtFjs8yC4gkPiVY= Subject key identifier: D8:71:54:51:6D:B2:18:E3:BF:66:77:49:B5:7C:26:5A:D4:14:9A:5F Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 0DA0D325B84D3E523F48EACD3E945CA00DB0A2B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 02EF Signing time: Tue 28 Jul 2026 13:28:40 +0000 Manifest this update: Tue 28 Jul 2026 13:23:40 +0000 Manifest next update: Wed 29 Jul 2026 14:57:40 +0000 Files and hashes: 1: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 2: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: zAWH3BGH2A9e+d6/m7S3N7ZfOL3DRM54bYVGuORwuzo=) 3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) 4: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 5: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: atjmZHyN0fpnZVZKw7T2mpLloOaroEYoclDUcL8HXvA=) 6: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=) 7: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: IW8FjUpVS0iI6RC9RIFr2AEmaBZjVvIqMqCaCd1GGZ8=) 8: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) 9: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a0:d3:25:b8:4d:3e:52:3f:48:ea:cd:3e:94:5c:a0:0d:b0:a2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Jul 28 13:23:40 2026 GMT Not After : Jul 29 14:57:40 2026 GMT Subject: CN=D87154516DB218E3BF667749B57C265AD4149A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:9e:96:ac:4e:c2:e6:c8:7c:01:b7:22:81: 38:04:e0:82:67:d8:7b:7b:56:2a:e7:3c:bd:4f:7e: 50:46:f2:e8:fb:1f:03:d8:44:8e:c4:95:3a:f3:21: 06:5e:27:11:08:9d:f9:8a:ff:3d:95:ac:3f:91:03: e0:64:e6:13:80:d9:75:2a:aa:60:e1:82:18:18:bc: bb:0a:f2:c5:66:06:60:77:b7:65:f9:8c:74:bf:74: 52:42:bb:6f:c6:dc:4d:0c:12:ee:1c:51:01:ff:37: d8:f0:95:40:bf:54:9d:54:52:3c:61:83:be:ac:0c: 70:09:80:d5:cd:50:ed:61:d6:bd:6d:54:9e:d9:1e: 8c:8a:e4:8a:3a:9a:d1:b0:53:68:eb:76:54:e5:b9: bd:b1:d0:92:cb:40:e8:59:65:ef:bf:91:4f:13:43: d9:f4:13:33:9a:d1:04:c3:5b:53:25:4e:42:b2:b5: 48:e3:92:4f:3a:11:b1:1b:f6:24:84:70:bb:b7:bc: 80:7f:a6:2d:4e:c2:70:d1:5e:e9:ea:33:33:67:13: 95:1f:8c:85:d2:e1:c8:60:35:df:38:df:e4:c9:cf: cf:ac:72:e4:7b:47:d4:2f:a5:ce:d7:69:8d:97:d3: 22:c2:e2:e1:11:6c:1d:09:e2:fc:e6:16:73:99:92: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:54:51:6D:B2:18:E3:BF:66:77:49:B5:7C:26:5A:D4:14:9A:5F X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:86:4e:ee:73:58:da:2c:39:7e:98:11:de:a9:ef:61:c5:fd: 47:cc:36:fc:03:b6:de:7c:81:a9:7a:50:13:e5:f4:e3:59:42: e8:83:20:bc:ec:59:85:bd:51:0d:9f:af:0b:c9:d8:bd:b8:f4: b3:5d:1e:b7:9c:01:b5:86:1b:78:e5:8e:9a:60:90:4c:ff:6c: b0:45:a7:4e:60:30:f7:9c:b0:6d:cf:21:1e:cc:25:89:cd:2d: 14:2d:b3:86:9a:1c:93:91:c5:10:2c:1a:49:63:e2:38:ac:08: 99:ae:94:31:b5:2a:f4:bc:ec:00:53:96:d3:d7:dd:65:25:30: 64:bf:53:af:47:96:fd:ab:44:4f:d5:72:18:b9:ea:e1:ef:66: ae:83:3b:1b:c6:a7:83:a5:5f:0f:8c:b4:87:13:cc:03:58:d7: 7e:17:90:13:bd:9e:e4:fe:96:d1:cc:f9:81:f8:ee:9f:6d:fd: fa:d3:6a:5b:2e:f5:17:60:9f:17:34:af:87:50:7b:76:1f:d8: 0a:f8:41:6b:48:10:fe:72:5a:e4:91:1b:57:56:09:e8:4e:82: 3d:c7:e4:71:5b:6e:a7:40:d7:1b:18:47:c2:11:fb:f1:17:db: 8d:5e:ad:1a:94:d8:81:24:6f:2c:06:14:52:f9:6c:c0:9d:c5: 7e:4a:27:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDaDTJbhNPlI/SOrNPpRcoA2worQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNjA3MjgxMzIzNDBaFw0yNjA3MjkxNDU3NDBaMDMxMTAvBgNV BAMTKEQ4NzE1NDUxNkRCMjE4RTNCRjY2Nzc0OUI1N0MyNjVBRDQxNDlBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dJ6WrE7C5sh8AbcigTgE4IJn 2Ht7VirnPL1PflBG8uj7HwPYRI7ElTrzIQZeJxEInfmK/z2VrD+RA+Bk5hOA2XUq qmDhghgYvLsK8sVmBmB3t2X5jHS/dFJCu2/G3E0MEu4cUQH/N9jwlUC/VJ1UUjxh g76sDHAJgNXNUO1h1r1tVJ7ZHoyK5Io6mtGwU2jrdlTlub2x0JLLQOhZZe+/kU8T Q9n0EzOa0QTDW1MlTkKytUjjkk86EbEb9iSEcLu3vIB/pi1OwnDRXunqMzNnE5Uf jIXS4chgNd843+TJz8+scuR7R9Qvpc7XaY2X0yLC4uERbB0J4vzmFnOZkrohAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2HFUUW2yGOO/ZndJtXwmWtQUml8wHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIZO7nNY2iw5fpgR3qnv YcX9R8w2/AO23nyBqXpQE+X041lC6IMgvOxZhb1RDZ+vC8nYvbj0s10et5wBtYYb eOWOmmCQTP9ssEWnTmAw95ywbc8hHswlic0tFC2zhpock5HFECwaSWPiOKwIma6U MbUq9LzsAFOW09fdZSUwZL9Tr0eW/atET9VyGLnq4e9mroM7G8ang6VfD4y0hxPM A1jXfheQE72e5P6W0cz5gfjun239+tNqWy71F2CfFzSvh1B7dh/YCvhBa0gQ/nJa 5JEbV1YJ6E6CPcfkcVtup0DXGxhHwhH78RfbjV6tGpTYgSRvLAYUUvlswJ3Ffkon mw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:44 2026 by rpki-client