$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: 04PtywTzhmaGfT8XGtOimlJFFDsQtYIVieiS9huyqa8= Subject key identifier: 4C:22:68:D6:7E:7A:F4:6D:51:D7:43:DA:24:A5:22:FE:5A:08:3C:C4 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 3AA81EFBF0E75F1D6FF2097172A36EC0BD9A4A71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 0387 Signing time: Sun 26 Apr 2026 22:29:05 +0000 Manifest this update: Sun 26 Apr 2026 22:24:05 +0000 Manifest next update: Tue 28 Apr 2026 02:09:05 +0000 Files and hashes: 1: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 2: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 3: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 4: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 5: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 6: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 7: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 8: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 9: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 10: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 11: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 12: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 13: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 14: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 15: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 16: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 17: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: SSFWz7KRfIdF8kH6+FzlRWRin4vB2hv4rjGs0IwDKXc=) 18: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 19: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 20: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 02:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a8:1e:fb:f0:e7:5f:1d:6f:f2:09:71:72:a3:6e:c0:bd:9a:4a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Apr 26 22:24:05 2026 GMT Not After : Apr 28 02:09:05 2026 GMT Subject: CN=4C2268D67E7AF46D51D743DA24A522FE5A083CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:a7:13:ac:b2:fa:3f:b5:c8:ae:50:21:a0: 2f:25:a9:ab:e8:6a:28:e9:8e:f4:15:14:f3:f6:64: 67:7b:63:af:16:9d:f0:98:68:11:d1:4a:18:40:35: 33:d9:47:e2:05:e8:76:ce:08:b4:83:77:c1:54:1f: e8:eb:79:af:55:71:8b:67:48:15:26:ad:8f:49:7c: b3:b7:d3:ae:2b:4b:d3:c6:ad:f3:13:b5:b1:d6:ec: b3:86:df:ab:e0:85:67:98:f6:66:47:8c:fd:62:65: 29:6c:59:e4:d6:fa:d4:e6:6d:d5:b1:65:26:89:36: 61:10:37:a9:b4:fc:da:33:c1:43:85:b4:9c:bf:d7: 8f:77:6c:68:f9:d7:5a:ef:b5:56:df:b0:df:37:d5: cb:f0:e1:60:45:c2:a9:bd:90:a7:c4:74:15:cd:41: 0c:fc:05:73:03:dd:8b:23:49:d8:9d:5a:53:86:b6: 8f:59:5a:ff:05:6a:a7:83:ad:7d:f1:a5:41:86:1e: 0b:e4:09:23:92:09:14:1a:9c:10:86:22:54:ba:9e: 5c:65:18:a5:35:49:40:ed:12:36:6c:b8:4b:4f:b3: 24:c8:c7:da:98:d8:36:50:18:a1:fa:f0:31:46:8e: b9:17:be:56:5b:3c:3f:96:92:db:d5:bd:af:89:61: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:22:68:D6:7E:7A:F4:6D:51:D7:43:DA:24:A5:22:FE:5A:08:3C:C4 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8e:7a:87:f6:42:52:55:9b:c6:6e:41:cc:a8:2b:8b:fb:e5: 00:d7:19:80:09:a9:fb:4b:30:3a:b1:81:27:96:88:f4:6f:46: 48:00:14:a0:ad:95:2b:8d:aa:cc:42:d2:14:80:b7:5c:4a:d4: 4d:37:89:81:0d:3c:5c:61:c0:d3:b9:36:53:ca:7b:98:4f:2e: 68:50:77:4f:f6:32:a3:1d:7c:be:4b:05:61:5f:ba:2f:8d:4f: f2:cf:e5:83:02:65:05:67:7d:e5:4c:c1:24:cc:aa:ba:47:39: 20:bd:02:c9:69:f0:f8:93:45:ab:31:b0:c4:29:ba:c1:d5:ee: e1:ff:ab:fd:57:05:71:5a:3c:e9:3a:63:be:54:e1:e4:5f:4f: 76:46:59:8c:97:46:c3:01:82:c7:0e:af:c4:ea:de:51:9f:46: 4f:42:88:43:a9:34:17:8c:a4:a9:17:9a:03:78:7d:6e:36:51: 0b:66:c7:c4:f7:1d:30:a3:7f:1c:6a:04:df:a0:0c:bd:01:ae: d4:fe:30:04:8a:d5:a4:0b:2e:02:33:a1:1b:53:33:ca:df:4f: 06:bb:6a:c7:86:5e:13:a0:ec:33:82:c8:87:2c:ff:cc:32:73: 86:f1:85:24:5f:51:3b:5a:54:50:9c:75:8d:b6:58:3f:60:d0: 2d:53:e6:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOqge+/DnXx1v8glxcqNuwL2aSnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNjA0MjYyMjI0MDVaFw0yNjA0MjgwMjA5MDVaMDMxMTAvBgNV BAMTKDRDMjI2OEQ2N0U3QUY0NkQ1MUQ3NDNEQTI0QTUyMkZFNUEwODNDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRKcTrLL6P7XIrlAhoC8lqavo aijpjvQVFPP2ZGd7Y68WnfCYaBHRShhANTPZR+IF6HbOCLSDd8FUH+jrea9VcYtn SBUmrY9JfLO3064rS9PGrfMTtbHW7LOG36vghWeY9mZHjP1iZSlsWeTW+tTmbdWx ZSaJNmEQN6m0/NozwUOFtJy/1493bGj511rvtVbfsN831cvw4WBFwqm9kKfEdBXN QQz8BXMD3YsjSdidWlOGto9ZWv8FaqeDrX3xpUGGHgvkCSOSCRQanBCGIlS6nlxl GKU1SUDtEjZsuEtPsyTIx9qY2DZQGKH68DFGjrkXvlZbPD+WktvVva+JYTfTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTCJo1n569G1R10PaJKUi/loIPMQwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUjnqH 9kJSVZvGbkHMqCuL++UA1xmACan7SzA6sYEnloj0b0ZIABSgrZUrjarMQtIUgLdc StRNN4mBDTxcYcDTuTZTynuYTy5oUHdP9jKjHXy+SwVhX7ovjU/yz+WDAmUFZ33l TMEkzKq6RzkgvQLJafD4k0WrMbDEKbrB1e7h/6v9VwVxWjzpOmO+VOHkX092RlmM l0bDAYLHDq/E6t5Rn0ZPQohDqTQXjKSpF5oDeH1uNlELZsfE9x0wo38cagTfoAy9 Aa7U/jAEitWkCy4CM6EbUzPK308Gu2rHhl4ToOwzgsiHLP/MMnOG8YUkX1E7WlRQ nHWNtlg/YNAtU+Zr -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:34 2026 by rpki-client