$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: ESZMHopecMKD8dnTjFL6WTyThotR6lGStALRileiVWo= Subject key identifier: 78:7F:54:B0:21:44:AA:4C:86:0E:D3:CA:80:F0:FA:75:1A:34:4B:CA Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 375D33E3C3FA5E87317DBB7F61CEC40103B3227B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 60 Signing time: Fri 03 Apr 2026 00:45:34 +0000 Manifest this update: Fri 03 Apr 2026 00:40:34 +0000 Manifest next update: Sat 04 Apr 2026 01:47:34 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 2: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: hL3hKYMSqIRkgUDOnL0iYA3cPsdKJpAiV/Cjo4anvnQ=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Apr 2026 01:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5d:33:e3:c3:fa:5e:87:31:7d:bb:7f:61:ce:c4:01:03:b3:22:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Apr 3 00:40:34 2026 GMT Not After : Apr 4 01:47:34 2026 GMT Subject: CN=787F54B02144AA4C860ED3CA80F0FA751A344BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:c4:ed:98:42:8a:5d:c1:6e:ec:c6:c2:76: 1a:da:a1:77:f1:bc:54:17:02:e1:8f:98:1f:dc:c4: d9:d3:6f:eb:2a:5b:01:e1:b4:ba:be:e3:19:54:3f: 67:c8:b4:b7:e8:ba:88:e7:f9:e4:11:71:f2:4f:10: cb:31:05:ea:30:a2:a3:79:ab:7b:60:6a:f2:ed:8b: b9:0a:e5:70:85:72:a0:04:cd:a1:4e:46:0c:bb:1c: fe:ae:30:2e:23:b1:9d:51:ec:51:c1:19:82:a4:51: f7:8d:76:32:30:1d:e9:93:67:a7:85:bd:37:6d:f9: 7c:21:f8:f3:cf:80:d9:45:22:65:53:20:8e:14:67: 71:45:40:fa:a0:8b:ae:b0:1f:8a:64:37:4f:26:e5: 41:f4:35:a4:f2:0b:13:94:8d:73:e7:09:bc:31:de: 44:c6:02:f8:79:09:b8:b8:ae:73:1d:03:9b:36:b6: de:14:98:da:da:a1:36:09:f8:5a:a5:7e:4d:68:b1: fb:4a:b5:9d:d3:a8:cd:7e:0e:55:bb:59:71:33:6d: eb:f6:7f:e8:e2:37:71:78:49:05:f5:d4:d4:22:5a: a9:8e:c9:1e:bd:7c:68:68:1f:b9:a7:51:47:45:5e: d5:0f:8f:e1:3e:16:2d:fd:4b:ed:9e:41:bf:d0:9e: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:54:B0:21:44:AA:4C:86:0E:D3:CA:80:F0:FA:75:1A:34:4B:CA X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cd:10:eb:30:a8:3e:ef:4a:15:31:2b:50:97:d5:86:53:7d: f5:33:e2:cc:89:66:b4:d6:6d:8a:0a:48:f6:6c:e1:f3:b2:c2: f9:ac:88:4a:5c:ea:89:05:d1:a4:ab:eb:3c:35:d4:3f:8f:37: d3:dd:73:71:4a:25:77:6d:5a:9b:38:86:c4:ff:0f:bd:46:a7: 9b:e1:da:1c:fb:ff:73:dd:d1:08:bb:59:0f:a0:ff:6e:22:91: 44:0a:4f:81:69:91:ed:59:ef:b2:6f:b9:30:00:81:de:4d:ce: c7:d7:32:d7:6c:ed:6c:5c:54:ec:1c:c0:13:28:f1:81:e6:7a: ca:8c:6d:f9:23:e2:39:36:ff:8d:fb:13:a2:47:9c:cc:48:33: 17:96:ce:a5:75:06:d6:17:f4:dc:4e:86:8a:19:46:a0:1d:cb: 53:a0:1b:00:97:68:fe:42:db:85:b9:5b:0c:15:a1:f8:18:49: 71:b7:58:65:4c:98:bf:ea:83:8a:c8:79:35:39:05:99:d9:81: b6:1f:28:87:eb:43:8d:8c:15:69:a2:5a:69:ba:b1:a6:d0:5e: f0:56:9a:24:4d:2d:17:47:d7:be:af:5e:69:21:b6:a2:51:0d: 26:91:07:99:c3:63:ff:2d:97:3f:bf:9f:36:6a:02:2a:c4:a2: ff:e8:af:96 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN10z48P6Xocxfbt/Yc7EAQOzInswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjA0MDMwMDQwMzRaFw0yNjA0MDQwMTQ3MzRaMDMxMTAvBgNV BAMTKDc4N0Y1NEIwMjE0NEFBNEM4NjBFRDNDQTgwRjBGQTc1MUEzNDRCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbncTtmEKKXcFu7MbCdhraoXfx vFQXAuGPmB/cxNnTb+sqWwHhtLq+4xlUP2fItLfouojn+eQRcfJPEMsxBeowoqN5 q3tgavLti7kK5XCFcqAEzaFORgy7HP6uMC4jsZ1R7FHBGYKkUfeNdjIwHemTZ6eF vTdt+Xwh+PPPgNlFImVTII4UZ3FFQPqgi66wH4pkN08m5UH0NaTyCxOUjXPnCbwx 3kTGAvh5Cbi4rnMdA5s2tt4UmNraoTYJ+Fqlfk1osftKtZ3TqM1+DlW7WXEzbev2 f+jiN3F4SQX11NQiWqmOyR69fGhoH7mnUUdFXtUPj+E+Fi39S+2eQb/Qnp/5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeH9UsCFEqkyGDtPKgPD6dRo0S8owHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPzRDr MKg+70oVMStQl9WGU331M+LMiWa01m2KCkj2bOHzssL5rIhKXOqJBdGkq+s8NdQ/ jzfT3XNxSiV3bVqbOIbE/w+9Rqeb4doc+/9z3dEIu1kPoP9uIpFECk+BaZHtWe+y b7kwAIHeTc7H1zLXbO1sXFTsHMATKPGB5nrKjG35I+I5Nv+N+xOiR5zMSDMXls6l dQbWF/TcToaKGUagHctToBsAl2j+QtuFuVsMFaH4GElxt1hlTJi/6oOKyHk1OQWZ 2YG2HyiH60ONjBVpolppurGm0F7wVpokTS0XR9e+r15pIbaiUQ0mkQeZw2P/LZc/ v582agIqxKL/6K+W -----END CERTIFICATE-----Generated at Fri Apr 3 10:15:15 2026 by rpki-client