$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: Ly8FIjcj2Va3ovloB5ORm5TMVXKP+y2Wo+NfMDBFbfk= Subject key identifier: AD:17:19:DB:48:7F:E1:00:44:8A:6B:C5:30:27:D5:3B:50:58:3D:88 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 299B79DBA397CD197B48142A39C681A9D94D07D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 04E4 Signing time: Fri 17 Apr 2026 02:29:42 +0000 Manifest this update: Fri 17 Apr 2026 02:24:42 +0000 Manifest next update: Sat 18 Apr 2026 03:28:42 +0000 Files and hashes: 1: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 2: 39332e39352e3131332e302f32342d3234203d3e20313530323933.roa (hash: sFKJ+/43Q0TDsK2fITN6YuDzrhvf9oDqMZEN2TxnHz4=) 3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 4: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 6: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 7: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (hash: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=) 8: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 3N+94CvelB5GEyKbo0F9BEUK0+ZqceNR8FO7PQOcOnw=) 9: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 10: 39332e39352e3131332e302f32342d3234203d3e20343032303434.roa (hash: AtOuXGHz2DTlb1k/SfCWhLHsL8OPE1HWzZC1wZunOVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9b:79:db:a3:97:cd:19:7b:48:14:2a:39:c6:81:a9:d9:4d:07:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Apr 17 02:24:42 2026 GMT Not After : Apr 18 03:28:42 2026 GMT Subject: CN=AD1719DB487FE100448A6BC53027D53B50583D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:b9:2c:74:7c:ab:97:c5:04:6b:98:67:2c: 7b:f3:f2:fe:1c:ea:fc:3f:7e:68:47:5a:4a:2c:8b: f8:36:3d:12:a6:43:34:ac:25:49:19:2f:f1:f2:8d: ea:e7:a7:4a:0a:b2:82:ef:a2:d7:4f:04:15:1b:91: 72:80:3d:0d:88:cf:2b:3f:b2:61:c2:03:c9:90:0c: f9:32:39:86:a4:bb:40:2e:99:12:58:1c:6b:8d:a9: 18:e1:47:b1:ad:28:a7:3f:09:92:b3:20:51:67:7d: dd:9c:71:e3:99:4f:65:2b:6e:06:af:6a:92:6d:f0: b9:7f:98:24:73:c1:43:9c:0a:b0:6b:de:2f:8d:45: 9f:5a:16:87:ce:41:2c:67:e1:fb:d0:6c:bb:3c:8c: 2b:46:68:c5:ad:3b:ae:b8:38:fd:99:ca:85:41:f6: 6a:a8:1e:4a:9f:49:80:b1:16:b7:49:13:1b:51:9e: fc:02:7f:36:c2:92:4d:d7:11:65:bd:2b:0d:ff:97: d5:2e:d0:c8:36:32:f1:7d:33:b8:86:7b:71:81:77: aa:38:79:b2:3a:fc:54:b2:42:9a:62:70:b7:8e:5f: 49:e3:fd:36:02:85:3e:4f:f7:45:dd:52:ed:f1:9a: 8e:bb:1b:34:99:b1:0e:3d:24:b6:cc:b7:c5:eb:a1: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:19:DB:48:7F:E1:00:44:8A:6B:C5:30:27:D5:3B:50:58:3D:88 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:24:09:87:c4:a9:02:50:a6:c6:3e:e0:c8:2c:55:8b:84:d4: 9c:a3:7c:2a:49:49:2b:4f:71:14:22:78:1c:e1:b4:04:20:94: 7c:a5:38:62:f9:0b:85:28:a5:ef:5a:fb:05:5f:95:b8:9c:21: 12:5c:9d:50:e5:13:2a:11:b6:09:5c:64:de:9b:cb:9b:40:21: 16:96:43:f2:b7:97:2d:8a:aa:d2:07:bc:a8:ff:e1:be:e9:e0: 93:f1:58:4a:04:50:f0:31:ac:07:a3:d2:58:16:70:64:16:95: 4c:d0:fc:86:cf:bb:7a:e7:56:30:ac:e8:4c:1c:ef:7e:54:ba: 13:66:60:ce:ca:67:bf:35:81:a2:54:39:0a:f6:6d:51:81:f0: f2:7a:00:fc:d1:d3:41:cc:5e:02:1f:17:e8:99:07:b9:d7:68: 90:99:a3:bc:fa:cb:75:00:31:56:3a:48:0e:d6:34:ec:13:cf: b3:ec:62:3d:41:1c:7b:85:e2:24:25:66:38:0f:d9:71:8f:46: af:ad:7c:47:c5:1d:f6:5a:04:df:3a:56:8f:b6:d1:b5:5c:47: 13:63:19:a7:e3:20:f4:c5:c1:c7:31:eb:63:f7:5c:1f:a9:4d: 65:a8:33:f3:17:0b:9d:ce:aa:d2:48:da:ff:32:64:53:43:4e: 21:45:15:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKZt526OXzRl7SBQqOcaBqdlNB9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjA0MTcwMjI0NDJaFw0yNjA0MTgwMzI4NDJaMDMxMTAvBgNV BAMTKEFEMTcxOURCNDg3RkUxMDA0NDhBNkJDNTMwMjdENTNCNTA1ODNEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxS7ksdHyrl8UEa5hnLHvz8v4c 6vw/fmhHWkosi/g2PRKmQzSsJUkZL/Hyjernp0oKsoLvotdPBBUbkXKAPQ2Izys/ smHCA8mQDPkyOYaku0AumRJYHGuNqRjhR7GtKKc/CZKzIFFnfd2cceOZT2Urbgav apJt8Ll/mCRzwUOcCrBr3i+NRZ9aFofOQSxn4fvQbLs8jCtGaMWtO664OP2ZyoVB 9mqoHkqfSYCxFrdJExtRnvwCfzbCkk3XEWW9Kw3/l9Uu0Mg2MvF9M7iGe3GBd6o4 ebI6/FSyQppicLeOX0nj/TYChT5P90XdUu3xmo67GzSZsQ49JLbMt8XroeNLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrRcZ20h/4QBEimvFMCfVO1BYPYgwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryQJh8SpAlCmxj7gyCxV i4TUnKN8KklJK09xFCJ4HOG0BCCUfKU4YvkLhSil71r7BV+VuJwhElydUOUTKhG2 CVxk3pvLm0AhFpZD8reXLYqq0ge8qP/hvungk/FYSgRQ8DGsB6PSWBZwZBaVTND8 hs+7eudWMKzoTBzvflS6E2ZgzspnvzWBolQ5CvZtUYHw8noA/NHTQcxeAh8X6JkH uddokJmjvPrLdQAxVjpIDtY07BPPs+xiPUEce4XiJCVmOA/ZcY9Gr618R8Ud9loE 3zpWj7bRtVxHE2MZp+Mg9MXBxzHrY/dcH6lNZagz8xcLnc6q0kja/zJkU0NOIUUV CQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:09:40 2026 by rpki-client