$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: z46ADJY0af+H+Lcn588Rdq7CTM1q44iZd4UWuxOw17g= Subject key identifier: 19:80:F4:2F:0C:86:D5:1E:E9:3B:F8:8C:4B:ED:80:97:65:8A:3F:01 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 139D2B82BA731A92C70D5F8F0216B7D102438233 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 03B6 Signing time: Sat 07 Mar 2026 03:27:19 +0000 Manifest this update: Sat 07 Mar 2026 03:22:19 +0000 Manifest next update: Sun 08 Mar 2026 07:13:19 +0000 Files and hashes: 1: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 2: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: prpQyWeWg2tkSautH/MxnR27azrc79SsgO2wJklGPKY=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 5: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 05:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9d:2b:82:ba:73:1a:92:c7:0d:5f:8f:02:16:b7:d1:02:43:82:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Mar 7 03:22:19 2026 GMT Not After : Mar 8 07:13:19 2026 GMT Subject: CN=1980F42F0C86D51EE93BF88C4BED8097658A3F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:56:c1:3f:c0:f7:05:eb:51:f5:fa:91:20:38: 28:19:af:38:a5:a6:dd:ff:79:4c:36:38:5d:58:1c: cb:0f:69:de:c4:4f:52:31:72:eb:b9:11:79:89:3e: ce:28:e3:36:7d:7a:69:de:1d:26:47:9a:fb:a0:ef: 40:ff:97:b5:5d:ee:f7:fd:20:56:45:fe:7f:59:64: 99:1a:72:7a:23:14:2f:23:78:91:09:36:10:d9:9c: 2b:48:5c:a7:1a:f5:10:66:17:d9:2b:25:5f:02:1a: ed:60:23:eb:ea:ea:8d:bf:ce:cb:83:c5:e5:29:f6: d2:b2:3e:48:bf:e2:b9:dd:b5:3e:ae:98:66:b7:0f: 3d:91:30:83:fd:27:c5:27:a0:c1:af:5c:34:da:27: 88:59:a4:f2:56:06:5c:fa:c3:2b:aa:94:1f:ba:88: 8c:c4:b9:f0:25:ec:5d:8a:3a:c2:2d:f3:18:3a:b9: be:8d:17:fa:d2:ad:77:ae:08:44:13:eb:f4:67:2c: ca:5a:59:cf:cd:d3:2f:1e:fc:8d:ae:c1:31:84:b0: 24:82:21:4b:f9:f6:6c:85:25:56:e9:01:85:ee:5e: a6:d7:31:ab:de:23:8c:c3:6f:b0:db:0b:bc:ef:f7: 1a:e0:b4:6c:d4:91:74:20:9a:15:50:ef:41:37:41: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:F4:2F:0C:86:D5:1E:E9:3B:F8:8C:4B:ED:80:97:65:8A:3F:01 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ed:39:27:52:07:b8:1b:88:75:11:56:c7:92:bf:fb:5f:8f: ec:c2:9d:6e:57:e1:ed:95:d7:c2:c7:12:ba:fb:09:c8:4f:a1: 5c:c4:4d:5c:bb:ed:01:32:82:05:31:8c:42:f1:7b:96:cd:ec: a9:4d:a8:2d:60:28:a6:06:78:c4:a7:76:1c:c4:e1:8d:03:cc: 23:c0:7f:a9:45:81:8c:4f:a9:ad:4e:2f:be:ec:57:ab:ee:64: 70:36:d0:1a:6d:17:3a:81:71:b7:8f:4a:6f:02:54:ba:9e:06: 52:fc:9a:0d:64:d7:9f:e0:ae:d6:bf:65:ef:49:22:f4:19:d0: 9a:0a:34:58:2b:ea:04:f9:db:8c:9c:90:52:77:07:17:28:43: b4:56:88:38:42:48:a1:b9:09:2d:65:1d:9f:57:13:b4:74:21: e6:b8:cb:2a:26:83:c8:bc:97:31:34:4a:7f:ae:a1:91:55:22: 41:63:3e:54:03:89:24:9b:21:9d:b1:f6:36:87:bb:1c:54:12: 47:5f:b5:f6:c9:25:7f:5d:ae:51:76:83:09:e1:a0:14:96:24: 26:a9:88:5f:df:44:38:53:24:9f:42:c4:a7:1b:cb:d7:27:a9: 16:43:c8:78:30:84:3a:45:b0:e5:c4:39:63:9b:e0:2c:04:ef: 74:d3:74:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUE50rgrpzGpLHDV+PAha30QJDgjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAzMDcwMzIyMTlaFw0yNjAzMDgwNzEzMTlaMDMxMTAvBgNV BAMTKDE5ODBGNDJGMEM4NkQ1MUVFOTNCRjg4QzRCRUQ4MDk3NjU4QTNGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtVsE/wPcF61H1+pEgOCgZrzil pt3/eUw2OF1YHMsPad7ET1Ixcuu5EXmJPs4o4zZ9emneHSZHmvug70D/l7Vd7vf9 IFZF/n9ZZJkacnojFC8jeJEJNhDZnCtIXKca9RBmF9krJV8CGu1gI+vq6o2/zsuD xeUp9tKyPki/4rndtT6umGa3Dz2RMIP9J8UnoMGvXDTaJ4hZpPJWBlz6wyuqlB+6 iIzEufAl7F2KOsIt8xg6ub6NF/rSrXeuCEQT6/RnLMpaWc/N0y8e/I2uwTGEsCSC IUv59myFJVbpAYXuXqbXMaveI4zDb7DbC7zv9xrgtGzUkXQgmhVQ70E3QQsBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGYD0LwyG1R7pO/iMS+2Al2WKPwEwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo7Tkn Uge4G4h1EVbHkr/7X4/swp1uV+HtldfCxxK6+wnIT6FcxE1cu+0BMoIFMYxC8XuW zeypTagtYCimBnjEp3YcxOGNA8wjwH+pRYGMT6mtTi++7Fer7mRwNtAabRc6gXG3 j0pvAlS6ngZS/JoNZNef4K7Wv2XvSSL0GdCaCjRYK+oE+duMnJBSdwcXKEO0Vog4 QkihuQktZR2fVxO0dCHmuMsqJoPIvJcxNEp/rqGRVSJBYz5UA4kkmyGdsfY2h7sc VBJHX7X2ySV/Xa5RdoMJ4aAUliQmqYhf30Q4UySfQsSnG8vXJ6kWQ8h4MIQ6RbDl xDljm+AsBO9003RN -----END CERTIFICATE-----Generated at Sat Mar 7 22:32:44 2026 by rpki-client