$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: dI5yzH7MUDIsMAmo3kx9J8VIKcS4bkmC5JIyhoGZfEg= Subject key identifier: A0:CF:75:54:27:4B:40:CE:B7:7C:36:ED:90:39:1C:61:1C:90:F3:D8 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 2F6056F35F17533086CF76B3D4D292A9DCEF7965 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 63 Signing time: Sat 07 Mar 2026 08:47:56 +0000 Manifest this update: Sat 07 Mar 2026 08:42:56 +0000 Manifest next update: Sun 08 Mar 2026 11:55:56 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: xABJuUhPGEynYhCGEu76KUdPlYHt4q2Guuq0bt4ujnM=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 21:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:60:56:f3:5f:17:53:30:86:cf:76:b3:d4:d2:92:a9:dc:ef:79:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Mar 7 08:42:56 2026 GMT Not After : Mar 8 11:55:56 2026 GMT Subject: CN=A0CF7554274B40CEB77C36ED90391C611C90F3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:c6:74:1c:eb:e2:1b:8e:73:49:96:89:40: f2:c6:ae:46:5d:cc:90:c7:46:32:b3:dd:c2:77:21: 70:d2:1f:87:4b:cf:0d:73:ac:8e:e6:67:e4:1b:8c: 2a:74:a2:bc:be:d1:24:f3:87:b9:6a:f7:b1:7e:cc: 3e:0e:6d:f4:e8:86:0a:48:89:1d:09:8d:26:66:0b: 60:61:c0:70:cc:d4:ef:f9:f8:27:65:b0:44:fb:52: bd:ae:66:0d:a3:17:e5:d5:ef:96:a3:af:c0:ed:6f: f4:0f:b7:9e:6a:17:33:b6:05:93:fd:6b:ef:13:2e: 77:45:a9:50:fe:bf:2f:5c:53:b5:5e:62:01:6c:88: a8:93:9b:71:f8:06:bc:80:98:10:89:22:88:13:44: d2:86:a2:33:1f:53:e5:19:2e:86:7c:8c:4b:00:3c: 64:e6:0f:2a:87:36:d4:8c:0d:12:39:d4:e1:63:f6: 99:5d:84:be:0e:38:65:70:6c:30:4f:a8:45:f1:78: 03:f0:86:ab:a7:87:b6:15:d7:b7:ad:12:ff:32:45: a0:1b:8d:08:bc:4f:06:2d:58:24:3a:b5:bc:44:66: f8:cb:4c:cb:a5:b0:9a:af:aa:ed:ff:8e:ee:b1:48: 86:22:67:45:63:a2:cd:22:9c:cd:6f:21:d0:8e:83: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:75:54:27:4B:40:CE:B7:7C:36:ED:90:39:1C:61:1C:90:F3:D8 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:b9:6b:60:07:c2:a2:28:62:a8:e7:27:d4:d1:9a:ef:32: a5:c8:49:5c:87:46:32:aa:8c:10:00:01:6e:df:02:c0:4b:9b: 05:0c:d8:5f:88:34:b3:b5:14:65:ff:05:d6:4c:d0:1e:7d:78: 93:a2:61:ca:42:c0:12:6f:54:5e:d9:9f:de:1a:8d:c2:e0:7a: 0d:3e:87:cc:5b:5c:2a:4c:df:16:29:06:f1:ee:dd:15:dc:e1: f0:16:ca:bd:01:e2:8b:12:42:ad:ac:08:83:65:95:8f:33:00: bc:0b:56:94:99:c3:22:5e:cc:20:c1:49:4a:42:62:c3:39:48: 87:cb:fe:21:ff:44:e5:a6:d2:fd:11:81:76:ff:1f:77:e8:68: 84:af:07:44:1b:e4:8d:29:f9:e0:64:03:62:ec:4b:40:13:29: 57:3f:81:5a:ba:2b:56:bc:78:77:26:2b:11:41:74:10:7b:c3: ff:31:5f:fa:a4:8c:88:53:c6:6f:e9:32:85:fa:a6:29:23:45: fd:54:2b:6f:a9:c8:3d:96:0c:81:25:19:4e:d7:ab:23:3e:c9: 73:43:6b:86:e3:c7:9a:6d:15:2e:83:75:4b:fb:ad:d8:d0:12: ac:68:2c:ff:44:b5:a7:5c:99:fc:cd:6d:1a:6e:5b:7b:d0:73: 63:50:40:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL2BW818XUzCGz3az1NKSqdzveWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjAzMDcwODQyNTZaFw0yNjAzMDgxMTU1NTZaMDMxMTAvBgNV BAMTKEEwQ0Y3NTU0Mjc0QjQwQ0VCNzdDMzZFRDkwMzkxQzYxMUM5MEYzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZb8Z0HOviG45zSZaJQPLGrkZd zJDHRjKz3cJ3IXDSH4dLzw1zrI7mZ+QbjCp0ory+0STzh7lq97F+zD4ObfTohgpI iR0JjSZmC2BhwHDM1O/5+CdlsET7Ur2uZg2jF+XV75ajr8Dtb/QPt55qFzO2BZP9 a+8TLndFqVD+vy9cU7VeYgFsiKiTm3H4BryAmBCJIogTRNKGojMfU+UZLoZ8jEsA PGTmDyqHNtSMDRI51OFj9pldhL4OOGVwbDBPqEXxeAPwhqunh7YV17etEv8yRaAb jQi8TwYtWCQ6tbxEZvjLTMulsJqvqu3/ju6xSIYiZ0Vjos0inM1vIdCOgzVPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoM91VCdLQM63fDbtkDkcYRyQ89gwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgfblr YAfCoihiqOcn1NGa7zKlyElch0YyqowQAAFu3wLAS5sFDNhfiDSztRRl/wXWTNAe fXiTomHKQsASb1Re2Z/eGo3C4HoNPofMW1wqTN8WKQbx7t0V3OHwFsq9AeKLEkKt rAiDZZWPMwC8C1aUmcMiXswgwUlKQmLDOUiHy/4h/0TlptL9EYF2/x936GiErwdE G+SNKfngZANi7EtAEylXP4FauitWvHh3JisRQXQQe8P/MV/6pIyIU8Zv6TKF+qYp I0X9VCtvqcg9lgyBJRlO16sjPslzQ2uG48eabRUug3VL+63Y0BKsaCz/RLWnXJn8 zW0ablt70HNjUECq -----END CERTIFICATE-----Generated at Sat Mar 7 11:05:19 2026 by rpki-client