$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft File: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft (raw, json) Hash identifier: j/u84d9RNjmpKto8hgewdw2+K43aUMQJMlwAp6ZqDEc= Subject key identifier: DA:11:8C:B2:07:FB:9A:40:4D:F0:11:AC:70:39:5D:B8:93:57:D6:A8 Authority key identifier: 01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 Certificate issuer: /CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Certificate serial: 19E2AC64D14480694AB7AEF197BC4F8A2397850B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 05:46:28 +0000 Manifest this update: Fri 17 Apr 2026 05:41:28 +0000 Manifest next update: Sat 18 Apr 2026 07:33:28 +0000 Files and hashes: 1: 326131333a376663303a313031303a3a2f34382d3438203d3e20323134353837.roa (hash: qkAnu8n5ZwhWIiFOozTwrJIaIzyzsrR64v/E5gw6fnU=) 2: 326131333a376663303a313031663a3a2f34382d3438203d3e20323134353837.roa (hash: NILQ8/k8RWx9Jp9dOJ2tdW/rwY6dVyE3d3RQvgfQQ7Q=) 3: 3139342e36312e302e302f32342d3234203d3e20323133323136.roa (hash: cDv+tCpd/eaVv7HBUSB+v0knElafCYH9RP9hQp1KhK8=) 4: AS213216.asa (hash: E44tygSJlhvbcH//RusbDcWbj+tZTXOnGQ3XzZ2jCqQ=) 5: 326131333a376663303a613432613a3a2f34382d3438203d3e20323133323136.roa (hash: lt17UYcjIOUOPLVOK/FWXABZZQuRCYc0AYsajAWcNG0=) 6: 0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl (hash: fmuV64h1jz0pfi8GhF0rJNqReT8DZUR9UExtfgQCMgk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e2:ac:64:d1:44:80:69:4a:b7:ae:f1:97:bc:4f:8a:23:97:85:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0177dcd7bee1190629437ca4c8ab83e3ad15c7a9 Validity Not Before: Apr 17 05:41:28 2026 GMT Not After : Apr 18 07:33:28 2026 GMT Subject: CN=DA118CB207FB9A404DF011AC70395DB89357D6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:91:75:8d:7d:df:e6:02:13:18:98:fc:64: 9d:5f:26:72:8e:1e:c3:a9:fa:ae:f0:f4:d0:85:0b: 22:72:63:07:bb:8b:11:a9:5e:fb:f6:d9:8b:9f:da: 63:37:3b:45:bf:44:e4:fc:4b:03:af:4d:87:7a:9d: ce:77:e8:da:6d:f7:29:bc:d4:d8:aa:1b:a2:cf:8d: c2:54:18:75:04:73:d1:7e:12:53:fa:e0:4b:9c:b2: 3b:5a:28:17:cf:28:b0:94:b7:66:aa:f6:b0:de:4a: 05:2d:95:d2:82:14:10:dd:24:b2:ff:0f:5d:b4:07: 0a:a1:06:df:a4:43:f8:e0:06:af:85:ad:79:09:b8: 80:04:31:e3:cd:28:f5:e3:d1:62:a7:0d:b7:5a:07: 1c:61:2f:97:ae:f4:2e:de:5d:ed:64:cf:9b:fd:6e: 87:9b:5b:f3:80:72:cd:57:58:8b:1d:18:df:3e:68: bb:15:62:ba:5f:9f:3a:54:17:19:00:e5:3e:51:c9: 65:e4:35:34:16:e1:c0:c1:a8:49:4e:25:c1:19:73: 07:32:ce:ad:4e:fd:00:7b:98:c8:16:2a:ef:9b:4a: bc:aa:0a:44:38:0e:d1:1f:d6:8b:b3:4f:37:22:36: 6d:7d:9e:63:14:be:c4:50:c8:3e:97:38:b5:b6:31: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:8C:B2:07:FB:9A:40:4D:F0:11:AC:70:39:5D:B8:93:57:D6:A8 X509v3 Authority Key Identifier: keyid:01:77:DC:D7:BE:E1:19:06:29:43:7C:A4:C8:AB:83:E3:AD:15:C7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXfc177hGQYpQ3ykyKuD460Vx6k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0e48da2-bf3d-4f94-9c13-c08c1190de18/0/0177DCD7BEE1190629437CA4C8AB83E3AD15C7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:92:4d:df:c5:bd:2e:fb:a5:ad:2c:16:f7:3f:07:47:af:79: 70:76:6b:6b:ec:bf:26:74:53:e4:ff:27:0f:3a:bb:fa:2f:52: e3:8d:1a:02:fb:63:67:db:af:77:65:1a:4c:cb:c4:08:35:ff: 79:b6:36:cb:cf:b3:26:08:c6:6e:58:87:6b:a9:db:2b:81:46: 43:7d:89:fe:e8:85:30:7e:a3:fe:33:db:64:9b:52:a2:ab:b8: 80:1c:2b:b1:c3:93:3a:84:4d:b3:f8:85:b0:ce:af:51:6d:cd: c5:0f:17:b1:81:56:5f:8b:36:b7:21:9c:7b:0a:90:f3:88:8d: 02:bb:bc:ed:70:ae:66:f4:76:8d:f8:7a:e1:66:15:b1:3d:a1: d4:9b:6e:2c:63:52:8e:44:06:3d:27:f6:ed:06:e7:d9:f7:b7: 0a:0d:49:02:1f:df:2a:03:8a:f7:17:6b:4a:be:91:b4:bf:b8: 52:ee:b3:44:fa:ea:f8:be:28:b0:7f:2b:15:ad:f5:70:d9:39: d1:df:80:f2:ec:b1:ea:a1:9b:aa:b1:e3:10:d7:fc:e3:87:44: ef:ea:8c:23:eb:a8:40:65:5e:f5:ae:9d:8d:58:15:e3:c4:36: d2:10:65:fa:ec:f1:c2:12:71:1e:44:99:0c:87:be:a5:5b:84: a3:18:d9:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGeKsZNFEgGlKt67xl7xPiiOXhQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3N2RjZDdiZWUxMTkwNjI5NDM3Y2E0YzhhYjgzZTNh ZDE1YzdhOTAeFw0yNjA0MTcwNTQxMjhaFw0yNjA0MTgwNzMzMjhaMDMxMTAvBgNV BAMTKERBMTE4Q0IyMDdGQjlBNDA0REYwMTFBQzcwMzk1REI4OTM1N0Q2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVZF1jX3f5gITGJj8ZJ1fJnKO HsOp+q7w9NCFCyJyYwe7ixGpXvv22Yuf2mM3O0W/ROT8SwOvTYd6nc536Npt9ym8 1NiqG6LPjcJUGHUEc9F+ElP64EucsjtaKBfPKLCUt2aq9rDeSgUtldKCFBDdJLL/ D120BwqhBt+kQ/jgBq+FrXkJuIAEMePNKPXj0WKnDbdaBxxhL5eu9C7eXe1kz5v9 boebW/OAcs1XWIsdGN8+aLsVYrpfnzpUFxkA5T5RyWXkNTQW4cDBqElOJcEZcwcy zq1O/QB7mMgWKu+bSryqCkQ4DtEf1ouzTzciNm19nmMUvsRQyD6XOLW2McmfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2hGMsgf7mkBN8BGscDlduJNX1qgwHwYDVR0j BBgwFoAUAXfc177hGQYpQ3ykyKuD460Vx6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBlNDhkYTItYmYzZC00Zjk0LTljMTMtYzA4YzExOTBk ZTE4LzAvMDE3N0RDRDdCRUUxMTkwNjI5NDM3Q0E0QzhBQjgzRTNBRDE1QzdBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FYZmMxNzdoR1FZcFEzeWt5S3VENDYw Vng2ay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGU0OGRhMi1i ZjNkLTRmOTQtOWMxMy1jMDhjMTE5MGRlMTgvMC8wMTc3RENEN0JFRTExOTA2Mjk0 MzdDQTRDOEFCODNFM0FEMTVDN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpJN38W9LvulrSwW9z8H R695cHZra+y/JnRT5P8nDzq7+i9S440aAvtjZ9uvd2UaTMvECDX/ebY2y8+zJgjG bliHa6nbK4FGQ32J/uiFMH6j/jPbZJtSoqu4gBwrscOTOoRNs/iFsM6vUW3NxQ8X sYFWX4s2tyGcewqQ84iNAru87XCuZvR2jfh64WYVsT2h1JtuLGNSjkQGPSf27Qbn 2fe3Cg1JAh/fKgOK9xdrSr6RtL+4Uu6zRPrq+L4osH8rFa31cNk50d+A8uyx6qGb qrHjENf844dE7+qMI+uoQGVe9a6djVgV48Q20hBl+uzxwhJxHkSZDIe+pVuEoxjZ Tg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:39 2026 by rpki-client