$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: bWiw6Yn9fnx+N2arFnq1IXNm3t9QJ74P5wzI6vIZ1H8= Subject key identifier: E2:57:94:F8:0F:10:92:D6:81:C3:57:D2:D0:72:B9:AC:A6:74:B1:E4 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 04395F8A6EC48DC6D2CA0FC334CF980A0DA776CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: 0205 Signing time: Sun 26 Apr 2026 23:10:57 +0000 Manifest this update: Sun 26 Apr 2026 23:05:57 +0000 Manifest next update: Mon 27 Apr 2026 23:25:57 +0000 Files and hashes: 1: 39352e3231342e3138332e302f32342d3234203d3e20313938323530.roa (hash: Ov/x1oZaBVg9UzR84S4kZKaf9zCxK3034xSjk7KKlY4=) 2: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=) 3: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=) 4: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: vcQjjrd4LrzEWLJ4GvzfU7rTN0GRXfJ01XCuhpYjWSM=) 5: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=) 6: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=) 7: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=) 8: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=) 9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=) 10: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=) 11: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=) 12: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=) 13: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=) 14: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: 7k+RlsbEAvDIHt5Is/doveA233QJ/dZMJOIDSEPgfCs=) 15: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=) 16: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=) 17: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:39:5f:8a:6e:c4:8d:c6:d2:ca:0f:c3:34:cf:98:0a:0d:a7:76:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Apr 26 23:05:57 2026 GMT Not After : Apr 27 23:25:57 2026 GMT Subject: CN=E25794F80F1092D681C357D2D072B9ACA674B1E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:ef:ae:01:b5:06:47:04:b7:04:f6:67:1b: f7:1d:22:13:d3:f1:f9:e1:c3:27:cb:7d:2e:67:79: 04:66:e1:73:3f:19:bc:9d:c8:48:ee:75:67:9e:56: 19:b6:4e:01:14:45:37:86:7e:ad:ce:85:47:6a:ac: eb:a1:2f:b5:1a:57:38:b7:49:8a:d8:6d:38:47:5a: 7c:aa:e1:02:cf:92:eb:7b:99:0f:96:b4:14:41:b1: 67:67:e7:4e:1f:fd:7b:f7:3e:6a:0b:72:fd:eb:9d: 92:ba:54:e4:51:3e:fb:de:f3:2c:40:6a:a7:e3:14: 14:57:c3:4b:56:f8:23:29:fa:e0:d7:49:cb:b0:c8: cb:a5:18:b9:d3:25:71:85:d9:d0:ff:52:01:5c:a8: b9:16:19:11:e3:50:8a:1b:b4:0e:af:fb:05:48:76: 96:e9:1b:fb:e8:36:cd:9d:53:b1:45:fc:c3:32:4c: 12:40:04:77:e1:f1:3d:4b:a3:02:4e:f5:a4:4d:6e: e0:13:fa:14:b8:4a:68:da:e9:2d:49:34:ca:ea:ac: ca:54:d9:e1:d1:f0:a2:da:0f:89:0e:e2:0f:7a:5d: 81:25:d3:cb:ff:85:39:23:a8:e0:b3:09:8e:cd:e3: 39:33:e3:6d:5a:81:c4:a9:85:11:29:22:23:ec:53: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:94:F8:0F:10:92:D6:81:C3:57:D2:D0:72:B9:AC:A6:74:B1:E4 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:84:fd:0b:7e:01:f7:68:79:14:47:0a:a6:da:26:de:37:81: 0b:a7:35:ba:3f:9f:d9:ab:3b:72:08:35:81:01:97:e3:f8:d7: 6b:08:42:d5:8b:81:b2:52:77:66:c9:59:36:ab:66:e5:64:b2: 6a:48:e1:f1:85:b9:b6:4d:bb:47:23:7f:12:5b:a3:c0:8d:22: b0:9b:d5:a7:e5:ea:d1:eb:52:3b:0f:05:b4:12:d3:19:2f:e2: fc:09:56:fc:2f:ee:b1:a5:6d:e0:8d:7f:9c:b7:15:9d:57:7a: 24:25:a1:0e:da:e0:88:a4:9f:ca:65:65:6b:05:ed:41:11:72: 96:c0:89:c0:58:75:16:20:79:79:ff:41:7c:08:31:08:02:3a: 88:24:cd:0d:f6:1f:ba:6b:64:f5:62:6f:ec:e7:2a:ac:42:8b: 1d:46:ea:49:e5:f5:19:59:a2:b0:91:44:0f:ca:59:49:85:f3: 15:ab:42:47:2c:db:45:80:09:17:63:49:8c:e9:20:80:2f:01: ef:4f:51:78:2a:25:73:3d:72:74:5b:e8:89:f0:ef:3a:31:37: b4:c2:bf:e2:cf:4b:a3:f9:b3:0e:bb:2d:f8:90:60:10:26:68: e2:0a:3b:15:05:4a:9c:9c:79:8b:8a:af:ce:64:9b:fc:bf:8b: 74:aa:6b:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBDlfim7EjcbSyg/DNM+YCg2nds0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNjA0MjYyMzA1NTdaFw0yNjA0MjcyMzI1NTdaMDMxMTAvBgNV BAMTKEUyNTc5NEY4MEYxMDkyRDY4MUMzNTdEMkQwNzJCOUFDQTY3NEIxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ne+uAbUGRwS3BPZnG/cdIhPT 8fnhwyfLfS5neQRm4XM/GbydyEjudWeeVhm2TgEURTeGfq3OhUdqrOuhL7UaVzi3 SYrYbThHWnyq4QLPkut7mQ+WtBRBsWdn504f/Xv3PmoLcv3rnZK6VORRPvve8yxA aqfjFBRXw0tW+CMp+uDXScuwyMulGLnTJXGF2dD/UgFcqLkWGRHjUIobtA6v+wVI dpbpG/voNs2dU7FF/MMyTBJABHfh8T1LowJO9aRNbuAT+hS4Smja6S1JNMrqrMpU 2eHR8KLaD4kO4g96XYEl08v/hTkjqOCzCY7N4zkz421agcSphREpIiPsU86ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4leU+A8QktaBw1fS0HK5rKZ0seQwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYT9C34B92h5FEcKptom 3jeBC6c1uj+f2as7cgg1gQGX4/jXawhC1YuBslJ3ZslZNqtm5WSyakjh8YW5tk27 RyN/ElujwI0isJvVp+Xq0etSOw8FtBLTGS/i/AlW/C/usaVt4I1/nLcVnVd6JCWh DtrgiKSfymVlawXtQRFylsCJwFh1FiB5ef9BfAgxCAI6iCTNDfYfumtk9WJv7Ocq rEKLHUbqSeX1GVmisJFED8pZSYXzFatCRyzbRYAJF2NJjOkggC8B709ReColcz1y dFvoifDvOjE3tMK/4s9Lo/mzDrst+JBgECZo4go7FQVKnJx5i4qvzmSb/L+LdKpr 5g== -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:34 2026 by rpki-client