$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: d9U8jGfhAoJfg402TRNXl2O7JExFqasKzibPJrrjHoE= Subject key identifier: CB:1B:50:92:04:A1:7B:F3:34:89:0A:DB:09:39:22:32:4E:01:CF:BF Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 79EBA700F9A409270E8C247E573B03B6A8DD0BE3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: AC Signing time: Sat 14 Mar 2026 02:32:01 +0000 Manifest this update: Sat 14 Mar 2026 02:27:01 +0000 Manifest next update: Sun 15 Mar 2026 03:53:01 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: QclYKo11q+3KkphYdF3LjxMFMamxWIGKw/+Dm1k6yWg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 03:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:a7:00:f9:a4:09:27:0e:8c:24:7e:57:3b:03:b6:a8:dd:0b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Mar 14 02:27:01 2026 GMT Not After : Mar 15 03:53:01 2026 GMT Subject: CN=CB1B509204A17BF334890ADB093922324E01CFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:c1:68:09:e3:4c:1b:5c:29:d4:da:86:81: 52:77:eb:a7:07:04:64:54:f5:df:a4:fb:ef:b2:a2: 04:13:35:44:d1:25:c8:f4:f5:e9:c6:e7:f4:de:98: a3:a8:bc:38:ff:3f:70:07:ed:8d:59:12:64:ba:bf: d8:0c:b1:02:4e:0b:5c:e0:e9:a2:32:a4:ed:f7:91: 71:51:c7:a2:0e:13:70:04:7f:69:f8:96:6d:21:b3: 74:02:9c:2f:4c:fd:a0:35:ea:d1:71:57:ef:9d:cd: 74:0b:e1:19:c4:07:9c:50:c8:55:82:34:cf:3b:fe: 3b:dc:ad:56:3e:3a:ff:95:29:9c:72:17:9f:c4:4e: 9f:e7:e2:38:b8:f7:8b:6b:bf:d4:a0:c5:9b:fa:cb: c9:0e:72:f2:d7:5f:28:0c:26:f1:6e:5e:32:56:b8: 93:b5:4b:5b:81:fe:f1:ad:42:ba:96:78:e7:ef:70: b3:2b:43:2a:3c:88:1d:30:f4:1d:04:14:d3:46:12: 64:d6:1c:41:a9:4d:89:db:be:2f:1a:0f:ae:20:b1: b3:84:69:24:e1:53:35:2b:42:82:3c:a9:e5:3b:50: bb:aa:9c:0f:b2:e9:b7:48:15:c9:a6:f0:db:fe:07: 71:f0:3a:3a:66:7f:e3:53:b9:a5:49:59:64:ba:df: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:50:92:04:A1:7B:F3:34:89:0A:DB:09:39:22:32:4E:01:CF:BF X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c8:16:35:1e:3e:2d:bb:74:c7:23:20:62:0e:0d:b8:a1:04: 27:fb:27:c0:90:9c:ed:ab:6c:ca:d4:77:4d:3b:ee:97:87:5c: f0:05:70:b1:5e:b4:a9:67:1a:87:34:86:61:ad:51:83:6d:94: 7b:0b:24:8b:14:06:48:59:e8:e6:a1:a7:be:72:f1:d8:61:82: 35:7c:77:ed:4d:1f:7a:b4:a7:44:84:b0:38:85:68:d5:40:29: 86:ac:d4:75:b1:ab:26:00:d6:f5:2f:13:42:30:ee:30:34:2b: 3b:eb:5f:ad:96:c9:f8:4c:2e:0c:18:5b:cb:48:ee:ac:7a:da: 20:26:53:f5:c4:8d:25:ee:4d:3a:fd:c9:f5:b7:b4:c4:84:bb: f6:5a:27:fc:a6:88:a7:53:f0:5a:34:a5:0e:83:5d:c6:95:7b: 69:93:90:4e:14:fd:a2:cd:74:92:3c:3b:5e:0d:88:70:87:c3: bc:4d:c3:ec:49:c9:e9:b3:65:0d:ba:95:b8:15:cd:5d:c1:db: f4:19:d3:b1:f4:b2:97:e9:48:6e:fb:c0:48:99:5d:5a:31:a1: 46:81:e6:fd:35:33:ea:7f:83:29:95:5e:61:0b:f1:1a:b0:b4: 4b:c0:d0:a6:74:44:d5:a7:46:e8:16:fc:43:92:4f:63:4e:c1: 89:b7:36:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeeunAPmkCScOjCR+VzsDtqjdC+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAzMTQwMjI3MDFaFw0yNjAzMTUwMzUzMDFaMDMxMTAvBgNV BAMTKENCMUI1MDkyMDRBMTdCRjMzNDg5MEFEQjA5MzkyMjMyNEUwMUNGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgMFoCeNMG1wp1NqGgVJ366cH BGRU9d+k+++yogQTNUTRJcj09enG5/TemKOovDj/P3AH7Y1ZEmS6v9gMsQJOC1zg 6aIypO33kXFRx6IOE3AEf2n4lm0hs3QCnC9M/aA16tFxV++dzXQL4RnEB5xQyFWC NM87/jvcrVY+Ov+VKZxyF5/ETp/n4ji494trv9SgxZv6y8kOcvLXXygMJvFuXjJW uJO1S1uB/vGtQrqWeOfvcLMrQyo8iB0w9B0EFNNGEmTWHEGpTYnbvi8aD64gsbOE aSThUzUrQoI8qeU7ULuqnA+y6bdIFcmm8Nv+B3HwOjpmf+NTuaVJWWS63xV7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyxtQkgShe/M0iQrbCTkiMk4Bz78wHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYyBY1 Hj4tu3THIyBiDg24oQQn+yfAkJztq2zK1HdNO+6Xh1zwBXCxXrSpZxqHNIZhrVGD bZR7CySLFAZIWejmoae+cvHYYYI1fHftTR96tKdEhLA4hWjVQCmGrNR1sasmANb1 LxNCMO4wNCs761+tlsn4TC4MGFvLSO6setogJlP1xI0l7k06/cn1t7TEhLv2Wif8 poinU/BaNKUOg13GlXtpk5BOFP2izXSSPDteDYhwh8O8TcPsScnps2UNupW4Fc1d wdv0GdOx9LKX6Uhu+8BImV1aMaFGgeb9NTPqf4MplV5hC/EasLRLwNCmdETVp0bo FvxDkk9jTsGJtzY+ -----END CERTIFICATE-----Generated at Sat Mar 14 14:37:39 2026 by rpki-client