$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft File: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json) Hash identifier: htwGnukjZ0b4WB1Q13ihtbd3Iy6Y4ZlCzHV2CCUGZWY= Subject key identifier: 1A:10:CE:ED:2E:0A:FB:88:EA:7C:7A:BB:32:9A:9B:EF:4C:05:3E:2F Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Certificate serial: 789DB2D684B6963D5CF6A0993437CD39935A04A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft Manifest number: 1C Signing time: Tue 07 Apr 2026 09:08:20 +0000 Manifest this update: Tue 07 Apr 2026 09:03:20 +0000 Manifest next update: Wed 08 Apr 2026 09:49:20 +0000 Files and hashes: 1: 3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa (hash: 6UdWfUX7KBZtt8PfrfenFEunK14genwVi/Drc7lSeRQ=) 2: 3139332e32352e3137312e302f32342d3234203d3e2032393134.roa (hash: arWXT2PubGe9M8bDcOmGqKzDFtv/A2/+wj2Z/kqOP7w=) 3: 3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa (hash: nWTO0lpwynwPzlypXWMi8OJsZ+pn3ksbbbieOy6HhBk=) 4: 3137362e3130322e3136392e302f32342d3234203d3e20323130353435.roa (hash: qdweDv/ArUKKn+iSNPlMNOmHnjG+yu3hh6MZ3RuN5Ks=) 5: 3137362e3130322e3137302e302f32342d3234203d3e20323130353435.roa (hash: iLAOFktgeNi6FXUckFRcsh0irPGm/7n9N5v2nHd4bNg=) 6: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=) 7: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (hash: yzeJy7dYT+jl4VhGxOCrUaWlHT1VskDn5phrnOjvQYI=) 8: 3137362e3130322e3137322e302f32322d3232203d3e2032393134.roa (hash: NeWINT0yzxeGbQAkYPSSTlBaATh7hwEdqMyxHoWCi2c=) 9: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=) 10: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: jzfHzJH0I9VNmW9bzKqJXMSnV3rFGXVGivVVgG64K2g=) 11: 39312e3233332e382e302f32342d3234203d3e20323135313532.roa (hash: QjQW+ZHXaZZs5QWfyh6YzF1NV5fXTeQF/UMJGjS1emY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Apr 2026 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9d:b2:d6:84:b6:96:3d:5c:f6:a0:99:34:37:cd:39:93:5a:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff Validity Not Before: Apr 7 09:03:20 2026 GMT Not After : Apr 8 09:49:20 2026 GMT Subject: CN=1A10CEED2E0AFB88EA7C7ABB329A9BEF4C053E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:ef:75:ce:d2:38:e4:ac:83:1e:cb:61:cb: 19:a3:1c:03:2d:9b:43:1c:85:3e:ec:8d:b0:3a:e8: b6:65:a0:55:9a:11:39:b1:be:db:99:4f:c0:e8:ca: b5:4f:6c:84:b2:25:52:e8:6f:f0:34:f7:72:71:68: f7:b3:c4:7b:2e:63:9d:f1:2d:49:4d:51:ce:1d:35: 97:b6:12:60:1b:c4:a8:18:3b:6c:b0:d3:ed:8e:1c: d0:7d:4d:60:f8:11:ef:dd:0f:ab:48:15:6e:74:22: f3:6d:40:d7:68:18:14:79:d0:8d:4f:2a:e5:16:12: 3e:93:52:fc:1d:c4:98:6d:81:bc:07:98:1b:09:47: 5d:1c:b8:ae:29:b7:30:80:d7:1c:a3:9f:fd:38:5f: 04:c3:c2:61:fd:8c:a0:e3:8c:05:b3:e2:09:9c:4c: 1f:ee:a3:1b:62:c4:92:e2:fe:3b:57:74:b0:17:ef: ca:fe:9a:6a:40:7f:a2:e1:bd:c3:53:74:92:37:a4: 81:40:cb:cd:ab:d3:b3:9f:6b:e9:f1:f5:f0:cb:ac: 4b:3c:05:57:bf:41:4a:da:42:4d:16:0e:07:d7:d4: e5:6d:c9:6f:3a:ec:eb:16:9b:0a:c4:b8:c8:d4:c7: 89:0b:3b:f4:52:20:46:63:18:60:f3:fa:6c:5c:53: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:CE:ED:2E:0A:FB:88:EA:7C:7A:BB:32:9A:9B:EF:4C:05:3E:2F X509v3 Authority Key Identifier: keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d0:06:14:3b:bf:cb:ef:7b:f8:89:9e:56:55:5a:b0:01:01: 2a:34:3b:6a:f1:ea:d3:23:3f:64:4d:67:fc:34:02:ea:4b:5f: 54:54:82:b2:f3:fe:2a:66:25:dc:aa:d5:59:11:e7:53:7d:eb: 7b:63:ab:18:94:73:87:e0:6a:c9:27:e1:c6:b3:7f:b6:50:c4: fa:21:99:bb:c6:dd:fa:a1:97:44:fc:97:f8:ef:5b:e6:9b:54: f6:73:3f:9f:24:05:fe:1b:6d:04:91:2b:91:90:e5:94:cf:02: 04:fa:2b:1e:a4:02:9d:02:c1:cc:40:33:f5:31:c4:5f:4f:09: eb:d2:61:72:f7:6d:05:88:1d:58:4f:18:7b:2e:e7:37:62:c7: d8:6d:cb:ee:2c:79:cb:0d:ba:14:a9:3a:7b:a3:be:10:5c:fe: da:b8:59:ec:55:0d:f3:31:12:65:46:bb:54:a4:bb:46:20:36: 14:e9:51:0d:f6:2d:fd:4c:c2:75:38:0d:c5:ef:53:a2:02:e3: 2a:c6:74:75:0d:19:e3:75:32:b3:04:1f:8a:9d:12:1a:9d:be: a7:5d:e6:bc:47:cc:6e:18:43:7c:8d:1a:b1:e4:2e:f0:07:40: 31:5c:af:2c:b4:5e:4a:34:c6:2d:8d:86:fb:d8:d8:4c:3d:b2: 8e:eb:4a:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeJ2y1oS2lj1c9qCZNDfNOZNaBKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj Yjk2NjdmZjAeFw0yNjA0MDcwOTAzMjBaFw0yNjA0MDgwOTQ5MjBaMDMxMTAvBgNV BAMTKDFBMTBDRUVEMkUwQUZCODhFQTdDN0FCQjMyOUE5QkVGNEMwNTNFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCan+91ztI45KyDHsthyxmjHAMt m0MchT7sjbA66LZloFWaETmxvtuZT8DoyrVPbISyJVLob/A093JxaPezxHsuY53x LUlNUc4dNZe2EmAbxKgYO2yw0+2OHNB9TWD4Ee/dD6tIFW50IvNtQNdoGBR50I1P KuUWEj6TUvwdxJhtgbwHmBsJR10cuK4ptzCA1xyjn/04XwTDwmH9jKDjjAWz4gmc TB/uoxtixJLi/jtXdLAX78r+mmpAf6LhvcNTdJI3pIFAy82r07Ofa+nx9fDLrEs8 BVe/QUraQk0WDgfX1OVtyW867OsWmwrEuMjUx4kLO/RSIEZjGGDz+mxcU8QbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGhDO7S4K+4jqfHq7Mpqb70wFPi8wHwYDVR0j BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4 ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1 V1pfOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMjAyM2M1My0x ODRiLTQ4NGItYjY3Ni01OThmNjRkODhmMjIvMC8xOTlDREQxNEMyN0ZCRjZCMDA1 QTBBREEwMDRENTNDQkNCOTY2N0ZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdAGFDu/y+97+ImeVlVa sAEBKjQ7avHq0yM/ZE1n/DQC6ktfVFSCsvP+KmYl3KrVWRHnU33re2OrGJRzh+Bq ySfhxrN/tlDE+iGZu8bd+qGXRPyX+O9b5ptU9nM/nyQF/httBJErkZDllM8CBPor HqQCnQLBzEAz9THEX08J69JhcvdtBYgdWE8Yey7nN2LH2G3L7ix5yw26FKk6e6O+ EFz+2rhZ7FUN8zESZUa7VKS7RiA2FOlRDfYt/UzCdTgNxe9TogLjKsZ0dQ0Z43Uy swQfip0SGp2+p13mvEfMbhhDfI0aseQu8AdAMVyvLLReSjTGLY2G+9jYTD2yjutK Pw== -----END CERTIFICATE-----Generated at Tue Apr 7 21:07:08 2026 by rpki-client