$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: kYBofu8ZeqFaRj3w5PAnDeY5HA+FBVYiEoR8igaxRmM= Subject key identifier: AC:0B:55:41:6D:8F:B2:52:0C:12:22:06:62:72:1B:58:75:32:9C:8E Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 442AC820D990B77E66683377D46A3CD5A63E68A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 06D2 Signing time: Sat 28 Mar 2026 09:54:22 +0000 Manifest this update: Sat 28 Mar 2026 09:49:22 +0000 Manifest next update: Sun 29 Mar 2026 10:36:22 +0000 Files and hashes: 1: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=) 2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=) 3: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=) 4: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=) 5: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=) 6: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=) 7: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=) 8: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=) 9: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=) 10: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=) 11: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=) 12: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=) 13: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=) 14: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=) 15: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=) 16: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=) 17: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=) 18: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=) 19: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=) 20: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=) 21: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=) 22: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=) 23: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=) 24: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: Bltx7j23ev0QHq+1JPsHYqX7bXOMz4YMASOove/3CQw=) 25: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=) 26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=) 27: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=) 28: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=) 29: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=) 30: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=) 31: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=) 32: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=) 33: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=) 34: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=) 35: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=) 36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=) 37: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=) 38: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=) 39: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=) 40: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=) 41: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=) 42: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=) 43: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 10:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2a:c8:20:d9:90:b7:7e:66:68:33:77:d4:6a:3c:d5:a6:3e:68:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Mar 28 09:49:22 2026 GMT Not After : Mar 29 10:36:22 2026 GMT Subject: CN=AC0B55416D8FB2520C12220662721B5875329C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:cb:8f:16:e3:e8:41:2a:97:78:95:e5:e0: a5:a4:0a:e6:2f:1d:27:06:32:24:2b:68:b7:4d:70: ba:dd:d2:17:3d:dd:2d:e5:b4:91:d3:d6:24:cb:bd: 79:74:89:44:35:54:1c:96:9a:70:cf:6f:e5:04:c3: 8c:4e:c6:56:57:3c:70:7a:c3:15:ae:d6:f7:29:0f: 49:73:13:c1:11:1c:72:58:af:10:23:6d:c7:3a:cb: 5a:40:fe:df:a8:29:83:b0:97:4c:96:38:73:dd:bc: 3f:56:57:65:af:a3:67:8b:fd:8e:d0:af:83:17:c2: c2:c4:ea:10:18:cd:7a:11:9d:98:24:6f:2b:7e:fa: 9c:58:a0:b4:61:e2:60:29:e7:47:ae:fa:ee:62:40: 8e:cf:e5:49:70:36:a7:38:ad:f2:e4:83:50:92:02: 69:b2:47:2d:02:f1:08:17:e1:af:5d:27:1b:92:a7: e4:58:ed:8e:8f:7d:a1:a7:4a:d4:d1:d5:bb:26:31: 3e:2c:4a:33:78:1e:1e:10:26:4c:a7:46:76:76:5b: 52:8d:d0:77:48:ff:24:7f:59:eb:ad:34:1b:b9:e3: 28:7d:fe:5b:f9:8a:31:e0:a0:0e:01:40:38:76:47: 21:35:17:44:b2:28:09:71:90:e5:fb:9c:3b:40:73: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0B:55:41:6D:8F:B2:52:0C:12:22:06:62:72:1B:58:75:32:9C:8E X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:65:44:b9:5d:83:23:37:0e:22:4a:14:53:89:8d:b6:9e:ff: 6d:71:83:00:26:b8:43:b9:1e:d5:48:ad:54:35:68:60:91:f7: e4:8e:19:0e:e6:dc:ac:4d:88:1b:a3:f5:ee:84:31:87:67:18: 16:4c:9c:2a:6a:10:d6:4b:cd:7f:a4:74:a0:21:aa:7f:02:e4: 21:ea:44:dd:a8:94:d3:57:7f:ee:22:52:6c:e0:c1:3e:fc:7d: 6c:1c:b0:d3:71:12:26:c6:6f:65:83:f1:2d:87:3b:1d:da:86: 40:0d:07:42:5b:69:b2:c6:3e:3a:e7:30:4e:f5:65:3e:7e:ed: a2:26:47:d0:a7:d1:23:39:dd:71:62:6d:19:e3:99:56:14:bf: 2f:23:4f:60:f5:1a:54:24:01:9e:93:c5:cb:c9:27:75:85:f4: 11:3e:e1:75:79:f7:67:2e:90:d5:93:42:3b:88:c5:7b:d5:1c: 2f:88:40:aa:31:5a:94:1c:2a:4d:e0:01:da:92:79:da:89:09: 45:3b:8c:36:c5:3b:cd:57:81:4b:8e:ef:e1:58:7e:e0:bb:6f: b0:a8:91:ff:c3:15:60:b8:af:3a:71:9d:57:dd:db:10:83:96: 11:a6:26:dd:1c:99:94:24:59:76:ff:8d:11:52:21:18:d0:7a: dd:9b:e8:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURCrIINmQt35maDN31Go81aY+aKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAzMjgwOTQ5MjJaFw0yNjAzMjkxMDM2MjJaMDMxMTAvBgNV BAMTKEFDMEI1NTQxNkQ4RkIyNTIwQzEyMjIwNjYyNzIxQjU4NzUzMjlDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ksuPFuPoQSqXeJXl4KWkCuYv HScGMiQraLdNcLrd0hc93S3ltJHT1iTLvXl0iUQ1VByWmnDPb+UEw4xOxlZXPHB6 wxWu1vcpD0lzE8ERHHJYrxAjbcc6y1pA/t+oKYOwl0yWOHPdvD9WV2Wvo2eL/Y7Q r4MXwsLE6hAYzXoRnZgkbyt++pxYoLRh4mAp50eu+u5iQI7P5UlwNqc4rfLkg1CS AmmyRy0C8QgX4a9dJxuSp+RY7Y6PfaGnStTR1bsmMT4sSjN4Hh4QJkynRnZ2W1KN 0HdI/yR/WeutNBu54yh9/lv5ijHgoA4BQDh2RyE1F0SyKAlxkOX7nDtAc2iXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrAtVQW2PslIMEiIGYnIbWHUynI4wHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGVEuV2DIzcOIkoUU4mN tp7/bXGDACa4Q7ke1UitVDVoYJH35I4ZDubcrE2IG6P17oQxh2cYFkycKmoQ1kvN f6R0oCGqfwLkIepE3aiU01d/7iJSbODBPvx9bByw03ESJsZvZYPxLYc7HdqGQA0H QltpssY+OucwTvVlPn7toiZH0KfRIzndcWJtGeOZVhS/LyNPYPUaVCQBnpPFy8kn dYX0ET7hdXn3Zy6Q1ZNCO4jFe9UcL4hAqjFalBwqTeAB2pJ52okJRTuMNsU7zVeB S47v4Vh+4LtvsKiR/8MVYLivOnGdV93bEIOWEaYm3RyZlCRZdv+NEVIhGNB63Zvo zA== -----END CERTIFICATE-----Generated at Sat Mar 28 21:27:42 2026 by rpki-client