$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json) Hash identifier: 3W5vSKEeSn3Wmgh1aa1jfzJ9GR10OtYUdu535EXtACM= Subject key identifier: EE:64:08:9E:1F:2D:86:D8:ED:7E:6A:CB:06:05:A6:36:79:D6:04:4E Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 7691E151BB4AFE723833170A094F1D9050395219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft Manifest number: 45 Signing time: Tue 17 Mar 2026 04:41:23 +0000 Manifest this update: Tue 17 Mar 2026 04:36:23 +0000 Manifest next update: Wed 18 Mar 2026 08:16:23 +0000 Files and hashes: 1: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=) 2: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: 2/5ENic0ehkLwbxNmbOZoi33xve+RnkXyEcPo2r9hjE=) 3: 3139332e32342e312e302f32342d3234203d3e203332383738.roa (hash: jrRiDyxuR6Y4UYjX7YX3ahpfr+PzoLBKEUrFS+P5Bgw=) 4: 3139332e32342e312e302f32342d3234203d3e203236373639.roa (hash: hWxkzR8ONtTYSmmBfJjY2JeiO+vwIeT6zjeMYES2dHU=) 5: 3139332e32342e342e302f32342d3234203d3e203539343332.roa (hash: 2szFDzNMiU++d5K+UAqAdfyAdV0l7//47s1tM+CWoPQ=) 6: 3139332e32342e312e302f32342d3234203d3e203633313939.roa (hash: 1Lzj3CDpDvCfZvv2HFemfqnFSTbx9h8ExNHpj1MEQno=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Mar 2026 08:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:91:e1:51:bb:4a:fe:72:38:33:17:0a:09:4f:1d:90:50:39:52:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Mar 17 04:36:23 2026 GMT Not After : Mar 18 08:16:23 2026 GMT Subject: CN=EE64089E1F2D86D8ED7E6ACB0605A63679D6044E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:6b:1c:93:94:4c:3d:20:ee:62:b7:09:42: 78:0b:50:a5:51:f3:c2:15:ff:62:31:d8:65:db:40: 8b:4d:9f:af:7a:90:51:8e:7f:49:7e:07:67:6b:ab: 90:96:25:3e:e6:c2:6f:29:e0:1e:77:97:8c:59:98: 00:33:2e:81:c4:cb:8d:08:8c:21:9d:98:e6:3f:5b: 8a:c1:1a:67:9d:b1:72:6b:9e:9f:7b:1b:35:4e:76: 01:81:4c:dd:d2:b6:50:a0:40:01:50:ed:19:42:4c: dc:63:27:ac:ff:92:2e:83:5d:b0:63:1f:87:fc:f7: 0d:de:16:54:83:d8:0b:67:e6:3a:be:f5:0f:f6:c7: a8:98:8c:58:95:5a:de:b5:b0:a4:fb:8f:0c:1a:ee: 39:80:15:9a:a1:65:58:2f:97:ce:08:a8:6a:29:94: 97:9d:48:c2:0b:99:8e:f0:a1:c7:c7:f1:ea:74:b8: ea:70:a4:91:86:de:9c:48:d3:6e:67:85:66:33:36: 2b:5e:fb:50:18:4e:f5:3d:4f:8e:ac:45:25:b2:05: fa:a3:f8:98:6e:a4:66:bf:14:59:b0:b2:30:28:9b: 1e:14:16:3e:11:66:84:6f:fc:5c:70:b1:4e:20:c9: 58:ae:07:57:09:4b:27:4d:bf:3b:27:c5:23:c1:62: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:64:08:9E:1F:2D:86:D8:ED:7E:6A:CB:06:05:A6:36:79:D6:04:4E X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2e:ee:13:5e:35:ee:f3:1d:66:7e:1a:a0:ab:32:54:53:a5: bb:88:0d:7e:4e:c2:3f:ec:e0:50:02:42:84:b9:57:ac:23:c6: 7b:54:cc:cb:c9:2a:46:69:43:c3:a3:ee:50:ae:85:7c:32:df: 51:54:f5:89:bc:1b:72:6a:c0:2b:c7:11:d8:ea:b3:42:28:54: f5:c1:71:8a:07:7f:8b:6e:4f:da:1e:4d:1a:2b:64:f9:69:64: 0f:39:85:cc:15:b5:46:15:5c:74:b2:26:5f:48:b6:97:4b:14: cb:be:e2:05:ac:af:89:65:7f:fa:ff:2e:1f:a2:20:73:50:a7: 19:6c:a6:79:d3:6e:c8:54:b7:b6:da:87:7f:b3:ee:5a:7f:f1: 48:9f:3e:45:22:da:9d:d7:ca:2f:98:87:5d:23:c3:37:c4:e5: bb:22:5e:13:ec:9c:aa:9f:db:21:fc:4a:17:f8:64:78:cb:6b: 4b:33:1e:5f:c2:9e:da:98:4e:5d:e9:e9:8a:38:7d:d7:55:05: 41:89:0b:5f:e6:89:0b:d7:38:8b:85:d1:55:7a:ec:5d:3d:23: 57:fa:1a:1e:f3:af:96:c8:d7:f7:0f:64:c8:70:27:7a:43:83: 3d:db:df:3c:5a:64:1d:f3:ed:cc:b6:a1:31:00:ac:57:6c:f1: c4:10:d7:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdpHhUbtK/nI4MxcKCU8dkFA5UhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAzMTcwNDM2MjNaFw0yNjAzMTgwODE2MjNaMDMxMTAvBgNV BAMTKEVFNjQwODlFMUYyRDg2RDhFRDdFNkFDQjA2MDVBNjM2NzlENjA0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq2sck5RMPSDuYrcJQngLUKVR 88IV/2Ix2GXbQItNn696kFGOf0l+B2drq5CWJT7mwm8p4B53l4xZmAAzLoHEy40I jCGdmOY/W4rBGmedsXJrnp97GzVOdgGBTN3StlCgQAFQ7RlCTNxjJ6z/ki6DXbBj H4f89w3eFlSD2Atn5jq+9Q/2x6iYjFiVWt61sKT7jwwa7jmAFZqhZVgvl84IqGop lJedSMILmY7wocfH8ep0uOpwpJGG3pxI025nhWYzNite+1AYTvU9T46sRSWyBfqj +JhupGa/FFmwsjAomx4UFj4RZoRv/FxwsU4gyViuB1cJSydNvzsnxSPBYqcNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7mQInh8thtjtfmrLBgWmNnnWBE4wHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NWU2NDhjMy0x NDgxLTQ3OGYtODNlMi1iMjUxMjdmYTk1Y2QvMC8xRjg0QTI0ODFEMjgwREUwQTEw MzU5ODI3NkRCMEM5NTQxOTNDNzU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly7uE1417vMdZn4aoKsy VFOlu4gNfk7CP+zgUAJChLlXrCPGe1TMy8kqRmlDw6PuUK6FfDLfUVT1ibwbcmrA K8cR2OqzQihU9cFxigd/i25P2h5NGitk+WlkDzmFzBW1RhVcdLImX0i2l0sUy77i BayviWV/+v8uH6Igc1CnGWymedNuyFS3ttqHf7PuWn/xSJ8+RSLandfKL5iHXSPD N8TluyJeE+ycqp/bIfxKF/hkeMtrSzMeX8Ke2phOXenpijh911UFQYkLX+aJC9c4 i4XRVXrsXT0jV/oaHvOvlsjX9w9kyHAnekODPdvfPFpkHfPtzLahMQCsV2zxxBDX 4g== -----END CERTIFICATE-----Generated at Tue Mar 17 10:28:06 2026 by rpki-client