$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json) Hash identifier: 8e591inL+PZuihZlEuLDZ94yY4YyI7PWpWU+W11Yjas= Subject key identifier: 0E:63:4E:31:B9:21:E1:4F:26:D3:45:51:03:1B:F5:4A:A0:A2:31:9B Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 03C2DF8D42F45E9D135EE27BFFAB6324D62269E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft Manifest number: 52 Signing time: Fri 20 Mar 2026 07:10:50 +0000 Manifest this update: Fri 20 Mar 2026 07:05:50 +0000 Manifest next update: Sat 21 Mar 2026 09:33:50 +0000 Files and hashes: 1: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=) 2: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=) 3: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=) 4: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=) 5: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: 2NPo2yBltT5qNFK04Rz6Phe2zUKSuf1LSI/xdJ9YK7U=) 6: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=) 7: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=) 8: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=) 9: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=) 10: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=) 11: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=) 12: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c2:df:8d:42:f4:5e:9d:13:5e:e2:7b:ff:ab:63:24:d6:22:69:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Mar 20 07:05:50 2026 GMT Not After : Mar 21 09:33:50 2026 GMT Subject: CN=0E634E31B921E14F26D34551031BF54AA0A2319B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:d6:b4:06:99:30:54:bf:4c:04:a7:da:41: 48:36:b9:07:c6:06:68:94:4d:85:3a:33:4b:2b:6a: d0:d8:cd:68:52:81:38:b1:ea:ed:ae:3c:f3:50:33: be:37:b4:99:0b:1a:64:ba:fd:23:ba:56:c4:13:94: cf:61:2c:80:1c:f9:4f:2d:a9:e1:d9:a5:b7:ae:d7: 4a:d6:ba:ea:7d:78:27:97:28:27:0d:e7:77:ea:fb: 06:6a:f3:7c:40:a0:16:a0:16:15:c9:0c:ad:7a:4d: ea:df:2d:af:90:67:22:c2:a0:53:28:cc:5e:fc:d8: 71:28:2f:07:a1:54:43:a1:f0:3a:7f:ac:8a:6c:e0: af:1c:d4:b6:bd:49:74:2a:57:03:4b:51:ad:c4:f4: 0b:82:d1:2d:ca:bc:64:79:e5:61:4b:a4:84:d4:e4: 46:8f:1c:4c:c6:7c:bf:4d:1a:c4:af:6a:e7:f1:41: 39:c9:75:18:c0:27:aa:00:8b:f4:07:25:bd:43:dd: 01:1a:88:9f:9c:36:5b:a8:fd:72:c7:75:ee:6d:b4: 64:8d:1a:de:0c:ca:5c:42:8c:34:ef:d7:d6:22:15: 24:ff:3c:22:d7:04:e7:c7:cb:97:72:25:4a:06:77: b2:68:72:c3:e9:c1:da:c5:14:1a:cf:59:41:ef:a7: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:4E:31:B9:21:E1:4F:26:D3:45:51:03:1B:F5:4A:A0:A2:31:9B X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a1:4c:f3:28:a4:e1:a8:25:4d:b0:10:9a:55:d2:cd:9c:a2: 11:0e:ae:29:fc:88:dd:b1:b6:3c:4d:87:e9:21:05:8f:ff:de: ea:35:d7:4d:10:78:4a:a4:31:51:5c:61:1d:b9:de:6e:39:8c: d1:38:cb:1a:b4:2a:fc:7b:bd:6d:62:5f:3f:dd:09:11:2f:de: 40:2c:5b:20:1f:ba:f5:b2:73:2f:69:d4:d3:3e:bd:d9:a0:21: cb:e3:a9:91:03:fb:18:b1:53:a4:ea:57:b7:fb:d1:96:73:ee: 18:7a:fd:3b:7d:4c:4a:9c:a8:bf:b4:eb:2b:41:d9:39:6b:ff: e4:14:eb:cc:4d:82:02:49:e6:e3:08:82:5c:2c:0a:6b:ac:1a: a3:b0:32:7e:76:7b:c7:da:e8:ab:be:c9:15:97:8b:d5:38:5b: 8c:e3:3d:df:4a:94:52:d9:ce:2b:f0:38:35:20:58:88:ae:be: 6b:57:31:34:fb:28:db:9b:27:b8:05:87:1b:81:62:d8:ac:a8: 3a:b2:f2:aa:4f:36:12:2e:66:8b:a3:6f:43:af:4c:53:a2:0c: ac:3f:c7:32:96:ca:e5:cc:c8:f4:60:e9:db:d8:68:4c:69:17: 06:c1:b5:e4:92:40:72:a5:46:8a:a2:ab:22:96:a0:c2:58:98: d9:8d:f6:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA8LfjUL0Xp0TXuJ7/6tjJNYiaecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAzMjAwNzA1NTBaFw0yNjAzMjEwOTMzNTBaMDMxMTAvBgNV BAMTKDBFNjM0RTMxQjkyMUUxNEYyNkQzNDU1MTAzMUJGNTRBQTBBMjMxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd89a0BpkwVL9MBKfaQUg2uQfG BmiUTYU6M0sratDYzWhSgTix6u2uPPNQM743tJkLGmS6/SO6VsQTlM9hLIAc+U8t qeHZpbeu10rWuup9eCeXKCcN53fq+wZq83xAoBagFhXJDK16TerfLa+QZyLCoFMo zF782HEoLwehVEOh8Dp/rIps4K8c1La9SXQqVwNLUa3E9AuC0S3KvGR55WFLpITU 5EaPHEzGfL9NGsSvaufxQTnJdRjAJ6oAi/QHJb1D3QEaiJ+cNluo/XLHde5ttGSN Gt4MylxCjDTv19YiFST/PCLXBOfHy5dyJUoGd7JocsPpwdrFFBrPWUHvp0mPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDmNOMbkh4U8m00VRAxv1SqCiMZswHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5 OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQoUzz KKThqCVNsBCaVdLNnKIRDq4p/IjdsbY8TYfpIQWP/97qNddNEHhKpDFRXGEdud5u OYzROMsatCr8e71tYl8/3QkRL95ALFsgH7r1snMvadTTPr3ZoCHL46mRA/sYsVOk 6le3+9GWc+4Yev07fUxKnKi/tOsrQdk5a//kFOvMTYICSebjCIJcLAprrBqjsDJ+ dnvH2uirvskVl4vVOFuM4z3fSpRS2c4r8Dg1IFiIrr5rVzE0+yjbmye4BYcbgWLY rKg6svKqTzYSLmaLo29Dr0xTogysP8cylsrlzMj0YOnb2GhMaRcGwbXkkkBypUaK oqsilqDCWJjZjfYL -----END CERTIFICATE-----Generated at Fri Mar 20 12:26:43 2026 by rpki-client