$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: cyWYE7dLu74+8xd4OdIzGYKm5yz4zxuwqM0datzv86Q= Subject key identifier: 1E:72:2C:8A:73:B8:53:75:D4:A2:B2:D8:FF:CB:8C:25:1E:45:95:A5 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 10404F8ABE088A21E5647822B96985C428147296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 04A5 Signing time: Sun 01 Mar 2026 17:27:11 +0000 Manifest this update: Sun 01 Mar 2026 17:22:11 +0000 Manifest next update: Mon 02 Mar 2026 19:03:11 +0000 Files and hashes: 1: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 2: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (hash: PJrA85sLaMrz06diEat3Ui02BumAGRiMY4YcEc22v08=) 3: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: hKqB71m7zokTWqIrOB0/OctfmUqW4Cqjaw9NVrAeiwI=) 4: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 6: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 8: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 9: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:40:4f:8a:be:08:8a:21:e5:64:78:22:b9:69:85:c4:28:14:72:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Mar 1 17:22:11 2026 GMT Not After : Mar 2 19:03:11 2026 GMT Subject: CN=1E722C8A73B85375D4A2B2D8FFCB8C251E4595A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:c1:bf:c2:df:63:02:fb:06:21:9d:b8:22: 3f:20:c1:8f:62:e2:03:2d:7f:dc:4e:fd:5c:72:d8: 6d:d5:cb:ff:64:d0:b2:d5:29:a1:e1:34:23:61:a7: 5c:51:51:cd:a6:86:0b:a3:1a:f3:d9:40:01:41:90: 61:94:88:39:7a:b2:33:82:10:a9:54:2a:3e:36:70: 8f:51:de:ee:a2:d1:c7:4a:68:0a:98:4d:df:fe:3e: bd:76:a5:8d:79:5d:10:7a:20:41:91:67:3b:f4:5c: 38:e4:7e:69:45:b5:95:90:c3:49:50:58:90:aa:9c: 18:98:19:74:0f:a5:87:a8:76:2a:e1:d3:14:35:30: ce:24:1b:ed:f6:8e:2c:06:16:24:16:89:da:48:bf: 6b:42:77:45:06:d0:8b:d5:32:ec:a4:c3:9a:09:ff: 00:9c:16:4a:a5:d2:8f:99:3e:dc:36:f6:e5:01:02: 77:2f:6a:82:d4:74:e7:88:46:c6:64:0d:40:ab:ee: 4b:28:4d:2c:03:f2:7c:be:a7:61:f4:b0:b7:a4:f2: 3e:3b:b6:ca:6f:99:a8:98:c2:df:45:8d:bd:4a:01: 25:4a:95:b4:0e:be:53:9e:e3:07:4d:2f:80:9c:aa: c2:23:83:25:46:c7:dc:d6:75:b8:c8:a3:4b:d9:fc: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:72:2C:8A:73:B8:53:75:D4:A2:B2:D8:FF:CB:8C:25:1E:45:95:A5 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:50:87:13:7c:08:23:5a:ef:ce:8b:69:fd:56:88:a5:22:f3: 07:b2:ce:27:46:da:2d:be:51:62:2e:5b:ef:61:f2:a0:d3:86: ae:e8:b2:d3:9f:2b:ba:d8:40:fe:3d:c5:de:6f:7b:5d:b2:70: e2:c7:cd:d5:5c:de:98:24:ba:b5:86:9c:81:92:4a:b8:4b:dd: d3:55:13:0d:f6:97:a2:7c:70:f4:eb:f8:b3:a4:94:16:58:85: 47:6c:7f:04:fe:a8:07:f3:a3:a2:a2:f4:c8:ba:fd:79:9a:93: ca:e3:0b:c8:b3:80:98:ac:5f:3a:c4:b2:db:31:0e:e0:b6:4e: 56:9e:ab:9a:5c:14:ef:92:c2:5a:bd:78:54:be:da:85:78:35: 2b:1a:55:39:ab:92:97:b9:cd:56:6c:9d:3b:f7:db:7b:bf:95: f8:36:a4:64:0d:4a:57:20:d5:26:34:f7:0e:f1:b9:85:ec:a6: 5d:1c:ae:95:40:18:e2:4a:bf:f0:1f:09:5e:2d:e8:c6:00:cc: 80:ce:63:0c:23:09:a9:3d:33:a1:8e:00:a2:98:27:d3:b1:ab: 3b:1b:34:13:19:07:b4:de:a5:3b:86:34:67:c1:86:46:7e:ed: 5d:c8:1e:e4:41:bc:1a:cc:84:8d:c8:e6:fb:93:ac:d7:11:8f: 05:62:c2:f9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEEBPir4IiiHlZHgiuWmFxCgUcpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjAzMDExNzIyMTFaFw0yNjAzMDIxOTAzMTFaMDMxMTAvBgNV BAMTKDFFNzIyQzhBNzNCODUzNzVENEEyQjJEOEZGQ0I4QzI1MUU0NTk1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0MG/wt9jAvsGIZ24Ij8gwY9i 4gMtf9xO/Vxy2G3Vy/9k0LLVKaHhNCNhp1xRUc2mhgujGvPZQAFBkGGUiDl6sjOC EKlUKj42cI9R3u6i0cdKaAqYTd/+Pr12pY15XRB6IEGRZzv0XDjkfmlFtZWQw0lQ WJCqnBiYGXQPpYeodirh0xQ1MM4kG+32jiwGFiQWidpIv2tCd0UG0IvVMuykw5oJ /wCcFkql0o+ZPtw29uUBAncvaoLUdOeIRsZkDUCr7ksoTSwD8ny+p2H0sLek8j47 tspvmaiYwt9Fjb1KASVKlbQOvlOe4wdNL4CcqsIjgyVGx9zWdbjIo0vZ/FLjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHnIsinO4U3XUorLY/8uMJR5FlaUwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6lCHE3wII1rvzotp/VaI pSLzB7LOJ0baLb5RYi5b72HyoNOGruiy058ruthA/j3F3m97XbJw4sfN1VzemCS6 tYacgZJKuEvd01UTDfaXonxw9Ov4s6SUFliFR2x/BP6oB/OjoqL0yLr9eZqTyuML yLOAmKxfOsSy2zEO4LZOVp6rmlwU75LCWr14VL7ahXg1KxpVOauSl7nNVmydO/fb e7+V+DakZA1KVyDVJjT3DvG5heymXRyulUAY4kq/8B8JXi3oxgDMgM5jDCMJqT0z oY4Aopgn07GrOxs0ExkHtN6lO4Y0Z8GGRn7tXcge5EG8GsyEjcjm+5Os1xGPBWLC +Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:27 2026 by rpki-client