$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: hdi0PBwiQGU2LLbF7/j+di5pQqUr+4MlbyoGdpviN40= Subject key identifier: 40:B7:18:22:25:CA:C0:3A:85:B9:D7:27:75:BE:88:74:2D:2B:E5:75 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 7B5FA4C30EC693714D65A2FEDCDB67E54FD685E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: 0104 Signing time: Sun 19 Apr 2026 06:56:33 +0000 Manifest this update: Sun 19 Apr 2026 06:51:33 +0000 Manifest next update: Mon 20 Apr 2026 09:22:33 +0000 Files and hashes: 1: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=) 2: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) 3: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=) 4: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: 9E6EJvQ4tib3DxCmrtGANQLVkxUJwt6N07eYoZYAvik=) 5: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5f:a4:c3:0e:c6:93:71:4d:65:a2:fe:dc:db:67:e5:4f:d6:85:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: Apr 19 06:51:33 2026 GMT Not After : Apr 20 09:22:33 2026 GMT Subject: CN=40B7182225CAC03A85B9D72775BE88742D2BE575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:52:99:dd:0f:0b:35:c6:fc:1b:89:ac:b0: 65:10:f3:e3:35:37:9a:e1:76:d1:76:cc:55:dd:2f: eb:75:84:e3:60:12:a6:da:55:e7:f6:04:08:4e:cc: 1a:1e:c7:c2:e9:03:87:33:c6:20:c3:4d:b4:77:d9: 0d:98:9f:48:aa:0f:10:1e:e8:be:3f:4b:d9:aa:a5: 8f:9d:1c:bb:b3:f0:81:fb:9c:c0:de:fd:42:70:74: cc:14:08:e9:2a:88:27:6d:18:58:00:e0:23:e2:2a: b3:e2:61:83:c2:b6:e3:35:f2:58:7f:8f:1f:91:42: 25:a9:52:53:4c:52:b6:5b:42:7e:a5:72:f8:67:24: eb:9a:c5:bd:e2:e0:96:26:a1:a1:33:3f:8e:12:a6: 51:77:3c:e0:63:08:0c:f8:f8:4c:27:e3:72:d9:06: 34:bf:9e:c4:04:a6:54:14:ff:70:e1:95:22:6f:50: cc:cc:cb:79:12:a9:71:17:82:26:05:97:b8:f3:7e: 6a:b4:57:b0:16:6b:79:51:b2:35:49:d9:08:bc:af: d4:65:1a:c3:e4:b9:cd:ee:86:3c:61:d5:a6:55:7d: 44:d1:af:e2:9a:3f:7f:97:44:b4:ac:33:0d:2d:94: 0e:49:31:f1:57:f1:90:dc:44:d3:52:b8:9c:73:a8: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:18:22:25:CA:C0:3A:85:B9:D7:27:75:BE:88:74:2D:2B:E5:75 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:21:89:98:6f:98:bf:6d:1d:ba:43:54:7f:66:bc:4e:90:52: 91:dc:c7:61:33:2b:e1:9c:b5:ab:77:65:5d:d2:b1:c3:3d:0a: 5e:2b:05:d1:12:fa:eb:51:00:b7:43:55:a2:fd:6b:ab:73:d0: 9c:b2:09:22:25:8f:ac:0d:c9:09:0a:7f:41:f4:28:d2:b9:cc: 1f:56:d8:2b:01:80:bb:ad:04:1c:56:f8:94:6c:ba:3c:ff:ea: 4b:94:73:59:d3:14:1f:d7:bf:53:c1:45:68:00:85:c9:c2:75: f3:c9:4f:29:45:9b:d6:d9:b2:db:79:57:62:89:f2:e0:24:7e: 24:1e:82:bb:2b:8c:c6:38:eb:f0:05:8d:4b:b5:c0:24:0b:8c: 0d:1a:46:0c:bb:66:84:61:85:17:bc:df:4b:47:0c:2e:a8:51: 68:21:fa:47:44:c5:bc:ed:c4:06:62:15:b6:8d:49:3a:fe:0f: 9c:4f:3c:39:c9:d4:8d:56:4a:78:38:9a:d2:66:79:56:61:92: b4:b3:b4:35:00:eb:51:6d:36:3e:5c:34:1b:c2:72:7c:ec:80: e4:92:71:2a:82:a8:7f:2a:0e:c5:f1:19:d1:e1:4e:4a:e9:5c: b8:73:33:97:4a:70:b6:15:05:9e:be:9f:ba:6e:0f:f5:f5:1f: 5f:6c:d4:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe1+kww7Gk3FNZaL+3Ntn5U/WhecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNjA0MTkwNjUxMzNaFw0yNjA0MjAwOTIyMzNaMDMxMTAvBgNV BAMTKDQwQjcxODIyMjVDQUMwM0E4NUI5RDcyNzc1QkU4ODc0MkQyQkU1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYVKZ3Q8LNcb8G4mssGUQ8+M1 N5rhdtF2zFXdL+t1hONgEqbaVef2BAhOzBoex8LpA4czxiDDTbR32Q2Yn0iqDxAe 6L4/S9mqpY+dHLuz8IH7nMDe/UJwdMwUCOkqiCdtGFgA4CPiKrPiYYPCtuM18lh/ jx+RQiWpUlNMUrZbQn6lcvhnJOuaxb3i4JYmoaEzP44SplF3POBjCAz4+Ewn43LZ BjS/nsQEplQU/3DhlSJvUMzMy3kSqXEXgiYFl7jzfmq0V7AWa3lRsjVJ2Qi8r9Rl GsPkuc3uhjxh1aZVfUTRr+KaP3+XRLSsMw0tlA5JMfFX8ZDcRNNSuJxzqPgDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQLcYIiXKwDqFudcndb6IdC0r5XUwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiGJmG+Yv20dukNUf2a8 TpBSkdzHYTMr4Zy1q3dlXdKxwz0KXisF0RL661EAt0NVov1rq3PQnLIJIiWPrA3J CQp/QfQo0rnMH1bYKwGAu60EHFb4lGy6PP/qS5RzWdMUH9e/U8FFaACFycJ188lP KUWb1tmy23lXYony4CR+JB6CuyuMxjjr8AWNS7XAJAuMDRpGDLtmhGGFF7zfS0cM LqhRaCH6R0TFvO3EBmIVto1JOv4PnE88OcnUjVZKeDia0mZ5VmGStLO0NQDrUW02 Plw0G8JyfOyA5JJxKoKofyoOxfEZ0eFOSulcuHMzl0pwthUFnr6fum4P9fUfX2zU fw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:47:52 2026 by rpki-client