$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: O7qFkxLEK7vehyFKP0adJhGFnrOv8MJwwbwl1THUM4I= Subject key identifier: CF:4E:51:48:50:94:C6:27:73:AC:15:01:CA:00:19:FC:61:AA:6B:0F Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 7D5D62B567A8DE69186254AB51CBB02DFF0AA9A1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 0119 Signing time: Thu 12 Mar 2026 12:17:37 +0000 Manifest this update: Thu 12 Mar 2026 12:12:37 +0000 Manifest next update: Fri 13 Mar 2026 14:59:37 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 3: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 5: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 7: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: Xn1NtkvtHIvXFCilPV8dVVzyrBYWY0CxI6enYBjSQcc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 04:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5d:62:b5:67:a8:de:69:18:62:54:ab:51:cb:b0:2d:ff:0a:a9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Mar 12 12:12:37 2026 GMT Not After : Mar 13 14:59:37 2026 GMT Subject: CN=CF4E51485094C62773AC1501CA0019FC61AA6B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:68:7f:10:36:5e:95:43:d0:dc:08:65:e2: 99:b8:53:8d:30:e5:e1:7e:d6:f3:9a:65:75:46:73: ad:45:db:93:ea:c8:31:b8:fa:0a:b3:9b:5f:b5:ac: c6:de:62:69:b1:5a:5e:20:77:d1:0a:bb:03:56:ba: d2:b0:2a:19:d2:bc:97:3f:59:84:25:c3:59:25:c0: f6:cc:0c:f2:d1:d1:2b:1f:5a:f6:3f:2c:5d:fe:d6: e0:bb:ce:b2:70:64:ff:f9:51:16:c0:5d:0b:69:24: 30:1e:65:fe:80:45:70:e5:75:03:e3:13:32:24:3f: 48:da:ed:fc:7c:75:b1:d4:b2:34:61:0c:92:6c:0d: f6:6a:83:4f:a1:76:58:f3:73:da:cd:4d:7d:d2:2e: 5d:76:68:ed:41:8e:81:9a:c4:5d:27:8d:77:16:9a: bd:6d:30:b8:7d:4d:e6:83:c8:c9:09:51:d7:a3:80: e5:1b:d1:73:4a:01:d5:ef:ed:9b:f5:1e:27:7f:c7: 99:20:d4:10:cf:ed:85:f7:63:82:ad:53:ba:3a:d8: 83:a6:3b:7d:df:76:6f:3e:4a:be:cb:ed:07:05:fd: 35:28:5c:26:ae:b1:b3:53:62:55:a1:28:a4:13:04: 18:c4:3a:11:72:d0:69:e4:f2:54:59:69:ba:1f:1d: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4E:51:48:50:94:C6:27:73:AC:15:01:CA:00:19:FC:61:AA:6B:0F X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6b:ff:14:8b:13:07:26:d4:c8:0b:78:53:7c:59:79:fc:78: 1d:ae:dd:63:84:4b:19:c3:ba:ba:ef:17:76:49:b0:cc:d9:9a: a5:6d:9c:da:66:d7:9a:89:3a:f4:6f:de:d9:ae:27:21:b0:dc: 28:7f:40:aa:81:99:26:1c:40:b2:62:12:66:c4:e1:3c:dd:4a: bb:86:35:04:9d:e4:0e:36:57:53:d0:1e:40:2e:aa:65:7d:be: b6:13:7f:08:81:f3:3d:64:4e:d7:0c:16:1b:54:e3:60:94:56: 8e:a9:33:cf:30:c8:02:37:b9:54:ac:f0:04:d5:ef:75:fc:67: d7:f9:91:57:55:a3:68:aa:4d:3b:04:ce:14:ff:47:b9:f2:3d: 97:93:8b:27:e5:04:b5:a1:c7:44:79:cb:b0:73:e8:92:c9:ac: e7:81:29:7d:70:3e:16:ec:ed:ee:2c:62:f0:70:e8:32:7e:04: 13:c6:7b:61:5f:38:4f:c0:e9:cd:8e:01:b7:50:08:53:8e:b9: 38:21:9c:ae:fa:8a:a7:f1:43:3f:35:1d:48:43:b0:90:38:d7: 57:33:34:ad:75:8c:a4:03:be:7c:85:3a:a5:03:87:8e:18:b0: bd:ba:c9:01:88:20:c4:5b:58:0c:f4:a4:f4:c9:46:53:38:ba: 9a:cd:aa:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfV1itWeo3mkYYlSrUcuwLf8KqaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjAzMTIxMjEyMzdaFw0yNjAzMTMxNDU5MzdaMDMxMTAvBgNV BAMTKENGNEU1MTQ4NTA5NEM2Mjc3M0FDMTUwMUNBMDAxOUZDNjFBQTZCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRN2h/EDZelUPQ3Ahl4pm4U40w 5eF+1vOaZXVGc61F25PqyDG4+gqzm1+1rMbeYmmxWl4gd9EKuwNWutKwKhnSvJc/ WYQlw1klwPbMDPLR0SsfWvY/LF3+1uC7zrJwZP/5URbAXQtpJDAeZf6ARXDldQPj EzIkP0ja7fx8dbHUsjRhDJJsDfZqg0+hdljzc9rNTX3SLl12aO1BjoGaxF0njXcW mr1tMLh9TeaDyMkJUdejgOUb0XNKAdXv7Zv1Hid/x5kg1BDP7YX3Y4KtU7o62IOm O33fdm8+Sr7L7QcF/TUoXCausbNTYlWhKKQTBBjEOhFy0Gnk8lRZabofHYD/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUz05RSFCUxidzrBUBygAZ/GGqaw8wHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSa/8U ixMHJtTIC3hTfFl5/Hgdrt1jhEsZw7q67xd2SbDM2ZqlbZzaZteaiTr0b97Zrich sNwof0CqgZkmHECyYhJmxOE83Uq7hjUEneQONldT0B5ALqplfb62E38IgfM9ZE7X DBYbVONglFaOqTPPMMgCN7lUrPAE1e91/GfX+ZFXVaNoqk07BM4U/0e58j2Xk4sn 5QS1ocdEecuwc+iSyazngSl9cD4W7O3uLGLwcOgyfgQTxnthXzhPwOnNjgG3UAhT jrk4IZyu+oqn8UM/NR1IQ7CQONdXMzStdYykA758hTqlA4eOGLC9uskBiCDEW1gM 9KT0yUZTOLqazar0 -----END CERTIFICATE-----Generated at Thu Mar 12 20:09:51 2026 by rpki-client