$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json) Hash identifier: KNwhNLi1MSliJA5UwxaeDElc8GJrX6s01FUiE+SyhEE= Subject key identifier: A1:2B:70:F5:71:34:81:51:CF:59:7D:94:3C:B6:6F:82:A6:E9:5B:66 Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 6D9D452BFDFB0E2624BDC448E1E82DFF411CA75D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft Manifest number: 5E Signing time: Fri 17 Apr 2026 10:50:22 +0000 Manifest this update: Fri 17 Apr 2026 10:45:22 +0000 Manifest next update: Sat 18 Apr 2026 12:46:22 +0000 Files and hashes: 1: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=) 2: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=) 3: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=) 4: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: +3jUuyRmfXwmTRmzlHbDYCzM7k9AI3jaT+9D8NEbUFM=) 5: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9d:45:2b:fd:fb:0e:26:24:bd:c4:48:e1:e8:2d:ff:41:1c:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: Apr 17 10:45:22 2026 GMT Not After : Apr 18 12:46:22 2026 GMT Subject: CN=A12B70F571348151CF597D943CB66F82A6E95B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:a7:5d:86:97:8c:3c:ce:61:93:e5:91:64: cd:fc:c5:e0:91:28:05:04:33:c6:ca:1d:c5:8a:44: a2:d0:9b:63:4a:26:c1:fd:1f:ac:1b:f6:7f:89:a5: 85:84:72:7c:13:1b:7d:34:1c:a4:2a:80:f3:d7:ae: 75:5d:78:e3:e4:c7:3f:7e:a8:a7:78:f1:55:0c:81: fa:2f:3b:35:6b:f2:90:03:ab:36:83:b8:7f:3e:d7: f1:9f:b9:5d:0d:e4:e8:d7:57:c9:57:e1:cd:24:ea: 98:15:67:f8:64:15:cb:44:83:2f:a9:f6:8b:d3:31: fa:92:33:0a:bb:22:0c:06:37:0b:2d:20:71:57:f0: 6a:cb:3a:f6:cd:cb:b7:ee:5e:e7:28:29:ea:dc:b9: 7e:5c:00:94:60:40:a7:f4:b5:8c:99:2e:6f:c6:35: f8:56:1f:ee:38:a1:c9:b3:8f:f9:6c:68:c5:b0:7b: 27:6f:ce:1a:9c:6e:69:00:e5:4e:8d:33:ad:0e:b5: 40:a6:11:bb:7a:31:a5:a6:7d:53:55:f4:60:b1:33: f6:9d:be:66:32:28:d7:be:95:56:8a:53:15:74:5a: ce:de:6b:fa:19:54:51:02:0b:c6:77:4e:75:b6:bd: 5e:d1:93:9a:77:23:01:ee:0a:44:f1:a8:f6:64:e5: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2B:70:F5:71:34:81:51:CF:59:7D:94:3C:B6:6F:82:A6:E9:5B:66 X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6f:9f:3f:3b:b3:5a:d6:92:d4:f0:7b:75:fc:39:b6:e1:18: a7:48:02:b7:86:4d:eb:16:b0:7f:05:23:ac:be:b1:f1:83:a7: 77:4c:b4:1a:5a:22:c7:52:14:be:b7:71:ba:2d:00:92:de:54: 87:6c:bf:13:91:b0:93:76:b1:c0:7e:66:89:ba:1f:5c:ab:04: 4f:ab:8f:ac:23:4b:59:4b:2b:55:83:66:5e:a6:21:9a:bf:12: 47:66:76:39:95:51:73:80:81:2c:7a:0b:01:0f:67:4f:58:37: a4:e1:74:20:1a:17:0a:a4:02:dc:1d:f3:c1:28:2c:9f:0d:bd: 53:92:b6:d3:3f:95:4d:49:9f:9a:f9:67:52:05:ec:91:23:fc: 51:ed:2c:39:ec:73:b4:51:d4:5d:09:b5:75:4e:34:3c:25:d4: dd:ea:10:ca:49:5f:49:b5:eb:ec:df:f7:f8:4f:68:4b:da:eb: 3a:be:23:33:b8:10:96:0b:0d:77:61:1a:19:fd:a6:e7:70:39: 7a:9a:f9:d8:aa:0d:6a:4a:21:7f:f6:a6:5f:ce:93:b4:bf:8f: 9a:37:ae:0c:7b:36:2b:fc:c9:be:3b:b3:17:09:94:6c:f4:02: 7c:90:c5:a2:5d:bd:da:d3:99:38:c8:41:86:1c:f0:6c:80:75: a6:3b:2b:d9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbZ1FK/37DiYkvcRI4egt/0Ecp10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjA0MTcxMDQ1MjJaFw0yNjA0MTgxMjQ2MjJaMDMxMTAvBgNV BAMTKEExMkI3MEY1NzEzNDgxNTFDRjU5N0Q5NDNDQjY2RjgyQTZFOTVCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhKddhpeMPM5hk+WRZM38xeCR KAUEM8bKHcWKRKLQm2NKJsH9H6wb9n+JpYWEcnwTG300HKQqgPPXrnVdeOPkxz9+ qKd48VUMgfovOzVr8pADqzaDuH8+1/GfuV0N5OjXV8lX4c0k6pgVZ/hkFctEgy+p 9ovTMfqSMwq7IgwGNwstIHFX8GrLOvbNy7fuXucoKercuX5cAJRgQKf0tYyZLm/G NfhWH+44ocmzj/lsaMWweydvzhqcbmkA5U6NM60OtUCmEbt6MaWmfVNV9GCxM/ad vmYyKNe+lVaKUxV0Ws7ea/oZVFECC8Z3TnW2vV7Rk5p3IwHuCkTxqPZk5XKxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUoStw9XE0gVHPWX2UPLZvgqbpW2YwHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZjE2OWE3YS1l MDQzLTQzMzctYWVlYy0yNGQyYWI5MWYxMzgvMS83OUFBMTJCQUQ3RTJDNTAyNzg4 OTBGMkRGOUNDRTAyQjg4RTE4NDg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW+fPzuzWtaS1PB7dfw5 tuEYp0gCt4ZN6xawfwUjrL6x8YOnd0y0Gloix1IUvrdxui0Akt5Uh2y/E5Gwk3ax wH5mibofXKsET6uPrCNLWUsrVYNmXqYhmr8SR2Z2OZVRc4CBLHoLAQ9nT1g3pOF0 IBoXCqQC3B3zwSgsnw29U5K20z+VTUmfmvlnUgXskSP8Ue0sOexztFHUXQm1dU40 PCXU3eoQyklfSbXr7N/3+E9oS9rrOr4jM7gQlgsNd2EaGf2m53A5epr52KoNakoh f/amX86TtL+PmjeuDHs2K/zJvjuzFwmUbPQCfJDFol292tOZOMhBhhzwbIB1pjsr 2Q== -----END CERTIFICATE-----Generated at Sat Apr 18 03:00:42 2026 by rpki-client