$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: DypQCmJxIjEwIzR+OIAMvVU5Mi2J+/y8T1kBHHFhszc= Subject key identifier: 8A:C0:D3:5F:5C:03:02:67:42:46:2E:D6:05:DE:65:EE:78:29:67:C9 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 7A830D5FDB0C6B9910CEBF1AD4FC0393D983FE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 05D3 Signing time: Mon 21 Sep 2026 06:10:18 +0000 Manifest this update: Mon 21 Sep 2026 06:05:18 +0000 Manifest next update: Tue 22 Sep 2026 07:55:18 +0000 Files and hashes: 1: 39332e39352e3131362e302f32342d3234203d3e2039333034.roa (hash: plCfGSXPfhTajm4cdjMqyYr1YrnQY7w3e6xDMUQOQyY=) 2: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 4: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (hash: 7ZgcCpYFR8HMsnY8UXDNPfwnRDp4xij9/4U/GxNHhy8=) 5: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (hash: 8VgwWSsnsM9p/J2+q6Eb6nFU9lWBzTkvoQCsZ4F1sbs=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: nFspSic9nknNJNdEp8wBUZ0ler8OWUogmHyfs7JkHHM=) 7: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=) 8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=) 9: 39332e39352e3131342e302f32342d3234203d3e20343032323635.roa (hash: XpI1frjDCdiqqdjI8V0/ftv5/Y6j8UuAYvwRLMQoOgQ=) 10: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 07:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:83:0d:5f:db:0c:6b:99:10:ce:bf:1a:d4:fc:03:93:d9:83:fe:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Sep 21 06:05:18 2026 GMT Not After : Sep 22 07:55:18 2026 GMT Subject: CN=8AC0D35F5C03026742462ED605DE65EE782967C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:ab:14:8f:33:3a:aa:b6:34:7e:e0:be:c3: 65:dc:c2:22:53:97:71:d8:7d:09:b7:b6:bf:05:86: ea:42:80:44:52:a7:9a:81:f7:a6:8c:e5:09:93:05: cf:a9:4b:c1:c6:f9:3a:5c:1d:6b:36:d9:90:7b:a9: 05:11:88:f3:c5:83:c6:a7:53:ae:4e:3c:fa:5b:74: a9:69:a5:20:80:0f:0b:d4:31:05:2f:2b:30:69:26: 49:ec:86:89:5f:d9:64:03:e6:ee:0f:bb:f6:a9:eb: ea:47:b6:71:4a:42:7b:d5:68:16:c2:a7:74:65:a7: 8c:58:cd:f6:cc:25:1e:eb:9d:35:90:5c:74:9d:00: 0b:28:a8:6f:ab:ef:2b:e1:e9:7f:a1:db:82:6c:4c: d3:65:48:10:77:00:a6:02:01:e4:75:52:6f:aa:41: 07:f4:9d:6a:c3:d2:9e:99:d1:05:0a:b3:a0:a3:cf: 17:1e:08:4f:13:2a:39:80:1b:ed:04:dc:e6:66:a2: 41:ab:bd:0b:12:d5:2b:40:ff:8e:9d:04:d6:1b:1e: e2:3d:33:b9:84:43:17:6a:04:28:8a:d0:c8:9c:fb: 7a:c1:f8:d8:b9:ec:43:03:f5:f6:aa:e4:e8:9b:f1: 94:f7:38:05:d9:e7:bf:74:69:b6:1f:08:be:0c:10: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:D3:5F:5C:03:02:67:42:46:2E:D6:05:DE:65:EE:78:29:67:C9 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:62:4e:d7:f9:b6:be:71:9e:19:d6:f4:4c:fe:c0:0d:cf:b5: e6:27:0a:a7:38:20:4a:81:7b:e2:58:5a:7a:54:a0:c8:62:a3: 41:02:07:5f:71:d0:d6:5c:2c:c4:5f:64:5e:21:18:b8:58:52: 46:28:70:dc:58:b1:85:76:bb:5e:89:ff:23:3c:ca:16:2d:cb: 01:cb:d0:a7:2e:d8:22:7b:31:2e:ae:37:de:9f:66:8b:14:f9: b0:68:d0:29:6e:a7:ee:f5:4c:d5:4e:58:25:63:e4:72:24:a9: 2d:f2:41:bc:3b:e5:61:91:1d:85:c4:7b:83:26:bf:89:57:1c: ed:c7:4d:70:ea:37:81:ef:ea:80:2d:48:02:4e:6c:a1:8b:61: 9b:98:c9:41:03:72:85:64:39:67:d4:2d:65:2f:a1:cd:ee:3d: 50:9e:60:5d:5a:81:04:57:c7:e0:86:7a:eb:89:b7:cd:f2:d2: 61:47:c1:a2:12:1f:e7:76:e3:c3:36:de:77:6f:6a:2d:50:4f: 60:03:20:6a:f1:2d:7b:bd:66:f9:9b:13:9e:29:71:23:ac:a6: 07:66:9d:a2:d2:d3:0a:3d:e3:db:d5:e4:3a:b7:98:c1:b0:18: 39:19:08:47:c5:01:a1:04:46:ab:f3:87:97:30:85:cf:75:b5: 3d:a9:47:eb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeoMNX9sMa5kQzr8a1PwDk9mD/iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjA5MjEwNjA1MThaFw0yNjA5MjIwNzU1MThaMDMxMTAvBgNV BAMTKDhBQzBEMzVGNUMwMzAyNjc0MjQ2MkVENjA1REU2NUVFNzgyOTY3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeKsUjzM6qrY0fuC+w2XcwiJT l3HYfQm3tr8FhupCgERSp5qB96aM5QmTBc+pS8HG+TpcHWs22ZB7qQURiPPFg8an U65OPPpbdKlppSCADwvUMQUvKzBpJknsholf2WQD5u4Pu/ap6+pHtnFKQnvVaBbC p3Rlp4xYzfbMJR7rnTWQXHSdAAsoqG+r7yvh6X+h24JsTNNlSBB3AKYCAeR1Um+q QQf0nWrD0p6Z0QUKs6CjzxceCE8TKjmAG+0E3OZmokGrvQsS1StA/46dBNYbHuI9 M7mEQxdqBCiK0Mic+3rB+Ni57EMD9faq5Oib8ZT3OAXZ5790abYfCL4MENc/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUisDTX1wDAmdCRi7WBd5l7ngpZ8kwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7WJO1/m2vnGeGdb0TP7A Dc+15icKpzggSoF74lhaelSgyGKjQQIHX3HQ1lwsxF9kXiEYuFhSRihw3FixhXa7 Xon/IzzKFi3LAcvQpy7YInsxLq433p9mixT5sGjQKW6n7vVM1U5YJWPkciSpLfJB vDvlYZEdhcR7gya/iVcc7cdNcOo3ge/qgC1IAk5soYthm5jJQQNyhWQ5Z9QtZS+h ze49UJ5gXVqBBFfH4IZ664m3zfLSYUfBohIf53bjwzbed29qLVBPYAMgavEte71m +ZsTnilxI6ymB2adotLTCj3j29XkOreYwbAYORkIR8UBoQRGq/OHlzCFz3W1PalH 6w== -----END CERTIFICATE-----Generated at Mon Sep 21 17:56:19 2026 by rpki-client