$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: CE4+IQG00zdBDhwJ17+31em+3oRBhAZDHXCGB/c/MaA= Subject key identifier: 50:BB:52:BB:94:1B:0D:E6:2D:33:31:27:8D:13:19:B4:07:07:ED:C0 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 5AF2CB11ADE3E0CEF20FA1A2DF59A9A2BA89ADC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 0199 Signing time: Sat 21 Mar 2026 02:27:23 +0000 Manifest this update: Sat 21 Mar 2026 02:22:23 +0000 Manifest next update: Sun 22 Mar 2026 04:49:23 +0000 Files and hashes: 1: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 2: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 2OEIt4eQcAkmb9ZJ5E3fnl5N+4MF8FnfEkECNO7ITc0=) 4: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: sR62WH97nYoLOUNF2KvRD4SdkLQcNvP4QUYn3/hjJS0=) 5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:cb:11:ad:e3:e0:ce:f2:0f:a1:a2:df:59:a9:a2:ba:89:ad:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Mar 21 02:22:23 2026 GMT Not After : Mar 22 04:49:23 2026 GMT Subject: CN=50BB52BB941B0DE62D3331278D1319B40707EDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:e0:fc:80:29:ca:30:66:e4:b5:83:99:e8: d8:ed:ba:ef:d8:62:d7:46:4b:76:c4:86:27:eb:c4: ba:01:4c:51:3b:72:12:53:85:f8:2e:05:34:d4:dd: f5:30:b4:3b:3d:db:3c:1a:28:a1:2f:b7:e3:61:00: c8:66:f0:77:a0:60:59:f6:19:fc:a4:dc:cc:61:f6: 3b:de:c4:10:26:ff:3c:b7:12:b4:2e:a0:f5:67:42: c1:a0:72:13:83:50:8c:00:b9:64:93:f6:97:eb:ef: c0:fa:49:f0:af:60:5f:3a:38:24:01:ea:93:e0:85: e2:f4:a9:d5:6e:87:9d:46:ce:55:0a:3c:3f:c1:d5: 06:60:cf:9e:03:c4:ae:bc:30:4d:43:d3:b6:00:aa: b1:6f:c9:39:b5:69:35:0c:7d:f7:a9:b7:40:24:81: dc:bd:89:ef:b1:a7:74:fd:4f:b9:93:06:1f:a9:41: 63:15:c4:8d:df:18:b8:e5:3b:46:15:4c:3a:5c:88: 25:70:d7:e5:8b:63:d7:f1:c2:aa:4f:45:8c:c8:63: 52:cb:3d:aa:dc:d4:51:95:9c:d2:8b:8c:0b:9b:1c: 2c:d8:f2:69:82:85:3a:00:48:f2:de:dd:ec:8b:45: c1:63:0d:6a:aa:63:2b:bd:73:c7:1e:1a:18:9d:4d: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:52:BB:94:1B:0D:E6:2D:33:31:27:8D:13:19:B4:07:07:ED:C0 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:01:c3:66:d7:c8:80:0d:ba:8c:62:fd:8e:5e:00:45:a2:3e: 64:5d:ae:db:99:8d:7b:36:a8:50:e2:cf:8f:c4:0f:de:3c:8f: e0:30:b6:95:aa:2f:84:31:c5:4f:59:de:c0:13:c2:8b:2a:9c: 65:9b:f0:4e:85:70:89:c9:90:98:a3:79:94:12:ae:6b:aa:8c: 27:05:53:eb:9c:f1:f8:40:8c:f7:96:be:78:eb:42:99:eb:ff: b8:c2:95:c4:44:68:a4:d2:38:17:d3:37:3a:72:ea:2f:eb:7b: a2:29:e7:a9:8f:d7:14:0f:97:28:b4:7f:1a:e4:22:71:40:8b: 0a:a3:f7:60:08:1a:67:13:bf:e7:17:99:ef:5c:35:df:32:4b: f9:19:a9:5c:06:9f:8d:c4:27:23:26:ac:00:dc:bd:7d:c5:b9: 47:e1:a5:9e:e1:15:37:4f:a3:0c:64:b1:eb:90:9c:d4:cc:2f: f7:85:8e:66:f2:6e:bc:db:31:0e:f8:57:0b:fc:7e:ff:c7:cf: 28:24:2b:75:ab:c4:94:81:3a:a5:2e:26:14:96:77:99:24:a5: b3:5b:a7:04:05:a3:1a:11:22:e2:ee:50:ea:e8:dd:70:b1:40: 29:09:11:3f:ff:f6:71:76:9b:06:2d:81:99:2a:54:65:12:a7: 01:6f:cd:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWvLLEa3j4M7yD6Gi31mporqJrcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNjAzMjEwMjIyMjNaFw0yNjAzMjIwNDQ5MjNaMDMxMTAvBgNV BAMTKDUwQkI1MkJCOTQxQjBERTYyRDMzMzEyNzhEMTMxOUI0MDcwN0VEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LOD8gCnKMGbktYOZ6Njtuu/Y YtdGS3bEhifrxLoBTFE7chJThfguBTTU3fUwtDs92zwaKKEvt+NhAMhm8HegYFn2 Gfyk3Mxh9jvexBAm/zy3ErQuoPVnQsGgchODUIwAuWST9pfr78D6SfCvYF86OCQB 6pPgheL0qdVuh51GzlUKPD/B1QZgz54DxK68ME1D07YAqrFvyTm1aTUMffept0Ak gdy9ie+xp3T9T7mTBh+pQWMVxI3fGLjlO0YVTDpciCVw1+WLY9fxwqpPRYzIY1LL Parc1FGVnNKLjAubHCzY8mmChToASPLe3eyLRcFjDWqqYyu9c8ceGhidTb3tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUULtSu5QbDeYtMzEnjRMZtAcH7cAwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgHDZtfIgA26jGL9jl4A RaI+ZF2u25mNezaoUOLPj8QP3jyP4DC2laovhDHFT1newBPCiyqcZZvwToVwicmQ mKN5lBKua6qMJwVT65zx+ECM95a+eOtCmev/uMKVxERopNI4F9M3OnLqL+t7oinn qY/XFA+XKLR/GuQicUCLCqP3YAgaZxO/5xeZ71w13zJL+RmpXAafjcQnIyasANy9 fcW5R+GlnuEVN0+jDGSx65Cc1Mwv94WOZvJuvNsxDvhXC/x+/8fPKCQrdavElIE6 pS4mFJZ3mSSls1unBAWjGhEi4u5Q6ujdcLFAKQkRP//2cXabBi2BmSpUZRKnAW/N fQ== -----END CERTIFICATE-----Generated at Sat Mar 21 08:11:21 2026 by rpki-client