$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: AcCfYqlT2/ECrLdi5aFam8CZzi8UY5ZYvHTtuZPsIFE= Subject key identifier: 3B:0D:55:49:69:B2:5C:85:5F:5B:E7:1B:A4:49:21:60:63:4D:9B:2F Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 49AF570B724337A37DACD1F1CBD29E2B2EF60A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0636 Signing time: Fri 17 Apr 2026 04:49:42 +0000 Manifest this update: Fri 17 Apr 2026 04:44:42 +0000 Manifest next update: Sat 18 Apr 2026 06:51:42 +0000 Files and hashes: 1: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 2: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 3: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 5: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 6ky9FKY3M+5I7LGIoXHEBlST29w9w7zCK2NBX6Y3KIQ=) 6: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 7: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 8: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 9: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:af:57:0b:72:43:37:a3:7d:ac:d1:f1:cb:d2:9e:2b:2e:f6:0a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Apr 17 04:44:42 2026 GMT Not After : Apr 18 06:51:42 2026 GMT Subject: CN=3B0D554969B25C855F5BE71BA4492160634D9B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:04:dc:19:eb:05:71:14:ab:98:78:25:a8: b8:35:69:8d:12:82:1d:a0:cf:85:a1:6b:22:d3:1f: 20:1e:68:5e:82:71:0e:b1:3e:7b:68:cc:5c:31:21: 59:7a:0b:db:c8:a9:f2:81:63:48:93:8c:93:03:4a: 2c:9e:b3:01:bb:9f:0b:76:b2:c4:06:92:ea:a9:ac: 6e:be:82:9e:30:39:39:c8:0b:25:76:f5:ec:31:59: d9:3e:d2:57:4e:4b:84:96:b8:54:9c:6d:50:74:38: 29:da:0d:82:c9:e0:b8:87:6a:b5:5d:f5:41:27:a0: b0:03:d2:72:2d:d7:37:7e:d4:2c:ce:d9:d4:d4:fb: 83:a7:e1:c8:60:cb:56:d4:c1:d4:8c:f7:29:8f:4c: 7f:6b:0f:85:65:38:aa:25:ca:66:62:c8:96:5d:cc: 2a:01:ae:f9:a5:d3:f7:45:d7:16:6c:f5:f4:b9:fb: bd:bf:35:08:56:3e:f5:c1:13:4d:1e:24:54:e7:3d: d2:7a:63:12:f4:9c:a5:64:49:80:5f:d6:f5:59:0b: f8:e6:6f:2e:c4:a9:6a:5b:3d:7b:e2:8b:26:0c:d3: dd:c3:64:51:67:4c:1b:b4:66:ac:63:e3:88:84:9e: f1:10:3e:46:89:91:72:a4:52:04:66:13:42:05:71: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:55:49:69:B2:5C:85:5F:5B:E7:1B:A4:49:21:60:63:4D:9B:2F X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:77:b4:21:e9:98:02:a1:7a:55:87:05:1e:cb:17:b9:75:f9: 99:86:ca:68:70:c9:88:44:be:18:94:6c:dd:23:35:3a:7e:1d: 16:f6:ba:94:0c:c4:48:5c:93:61:2f:8b:72:45:c6:59:36:58: 82:32:b7:ce:8d:ef:03:a4:d1:23:b9:4f:c2:2d:be:28:c8:c1: 6d:2c:98:11:34:32:65:9e:16:86:07:8a:c0:1c:24:f7:47:c0: de:c4:d2:58:2d:2e:c4:dd:98:77:51:ab:c4:37:2f:d9:f4:67: 5b:d3:5e:a0:25:70:fc:ae:ae:06:ae:b5:de:7a:36:58:cc:de: 83:06:72:16:3f:7f:a3:80:aa:fa:cc:49:34:e5:26:1e:61:21: c3:1c:ac:ba:af:44:97:37:ca:bc:82:e2:95:e3:27:6f:32:79: 6c:fa:a6:b7:a0:7b:72:76:4b:ab:52:66:03:b8:7a:c9:2f:33: f9:7a:22:49:24:22:af:7b:de:2b:77:9f:c4:32:e0:6d:4c:84: c5:7f:d3:ea:6d:2a:5b:92:e1:2f:80:0b:97:b7:09:1e:e2:3e: 41:67:21:c0:e9:59:09:11:1a:52:8f:a9:9b:c2:c5:fc:cd:d0: 0f:72:0c:d8:e2:a2:2a:d1:65:e7:bb:de:88:44:82:ff:ad:bb: ae:e5:36:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSa9XC3JDN6N9rNHxy9KeKy72CpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjA0MTcwNDQ0NDJaFw0yNjA0MTgwNjUxNDJaMDMxMTAvBgNV BAMTKDNCMEQ1NTQ5NjlCMjVDODU1RjVCRTcxQkE0NDkyMTYwNjM0RDlCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcQTcGesFcRSrmHglqLg1aY0S gh2gz4WhayLTHyAeaF6CcQ6xPntozFwxIVl6C9vIqfKBY0iTjJMDSiyeswG7nwt2 ssQGkuqprG6+gp4wOTnICyV29ewxWdk+0ldOS4SWuFScbVB0OCnaDYLJ4LiHarVd 9UEnoLAD0nIt1zd+1CzO2dTU+4On4chgy1bUwdSM9ymPTH9rD4VlOKolymZiyJZd zCoBrvml0/dF1xZs9fS5+72/NQhWPvXBE00eJFTnPdJ6YxL0nKVkSYBf1vVZC/jm by7EqWpbPXviiyYM093DZFFnTBu0Zqxj44iEnvEQPkaJkXKkUgRmE0IFcWXjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOw1VSWmyXIVfW+cbpEkhYGNNmy8wHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACne0IemYAqF6VYcFHssX uXX5mYbKaHDJiES+GJRs3SM1On4dFva6lAzESFyTYS+LckXGWTZYgjK3zo3vA6TR I7lPwi2+KMjBbSyYETQyZZ4WhgeKwBwk90fA3sTSWC0uxN2Yd1GrxDcv2fRnW9Ne oCVw/K6uBq613no2WMzegwZyFj9/o4Cq+sxJNOUmHmEhwxysuq9ElzfKvILileMn bzJ5bPqmt6B7cnZLq1JmA7h6yS8z+XoiSSQir3veK3efxDLgbUyExX/T6m0qW5Lh L4ALl7cJHuI+QWchwOlZCREaUo+pm8LF/M3QD3IM2OKiKtFl57veiESC/627ruU2 Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:59:55 2026 by rpki-client