$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: eMxaG1C4o3gZLzlKhrQPag56a/lw7/vSGzdSWCA6IFY= Subject key identifier: 83:5F:2A:01:87:47:40:CB:F5:D6:87:FD:02:EA:BA:E8:0C:96:4E:80 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 20738F942E2DA3680207CAA1D73ECB6088E66532 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 0156 Signing time: Sun 26 Apr 2026 20:55:30 +0000 Manifest this update: Sun 26 Apr 2026 20:50:30 +0000 Manifest next update: Mon 27 Apr 2026 23:17:30 +0000 Files and hashes: 1: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 4: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 5: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 7: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: 0hXSnYgv6cVyTGoqeYP4oUEAKo8vGwCtRYYaB7R/F+4=) 8: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:73:8f:94:2e:2d:a3:68:02:07:ca:a1:d7:3e:cb:60:88:e6:65:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Apr 26 20:50:30 2026 GMT Not After : Apr 27 23:17:30 2026 GMT Subject: CN=835F2A01874740CBF5D687FD02EABAE80C964E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:46:df:58:2d:fe:59:04:a1:bb:4e:be:0c: 06:06:ed:5b:c6:21:fd:5c:65:de:13:c6:bf:1d:f9: 0b:99:a6:8c:18:e5:96:27:6c:ca:63:ef:a8:b1:c9: 9d:ae:fc:a7:87:fc:5f:a2:20:b9:28:df:38:ba:1e: 1c:d1:5f:cf:8d:c1:63:a0:db:aa:32:2f:c5:5f:7e: 7b:de:01:35:9c:ee:4e:27:71:a5:b2:e5:55:0d:b8: 4f:1f:9a:e4:0e:73:84:c3:cb:15:26:19:df:cb:a1: 72:e0:87:22:0f:c1:8f:bd:f4:b8:f2:73:8b:0d:c3: da:fb:4b:85:84:5b:d8:51:48:4f:96:c5:f5:5b:38: 51:9f:18:90:28:50:8f:6e:02:99:a4:96:6f:77:98: 10:5c:a8:c4:d3:39:1a:4c:62:a6:83:9f:68:87:62: 85:14:3e:98:6f:b8:c3:1c:0b:7e:d1:98:60:6b:d2: 63:98:da:c4:4c:1a:2e:4e:a3:4b:e3:49:b9:43:c9: 95:b7:56:34:cb:c9:49:42:a9:8a:40:be:07:00:eb: ea:42:e2:a6:34:b2:4b:1a:7f:ac:aa:eb:4c:ee:f9: 45:d8:32:52:01:c8:06:a2:26:fe:e2:5c:75:d3:64: 4b:06:dd:22:ed:9f:82:e0:5a:75:89:2b:81:c0:45: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5F:2A:01:87:47:40:CB:F5:D6:87:FD:02:EA:BA:E8:0C:96:4E:80 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a7:d4:1d:ca:61:4a:35:25:ff:8c:61:9c:d8:34:f9:2a:da: d9:ff:da:ce:e8:ef:57:95:8f:24:02:fe:df:f4:70:44:64:09: e1:8e:bc:4a:0d:72:4e:be:77:0e:c7:83:76:47:78:4f:ce:25: ad:17:38:d6:55:4b:4e:bc:1e:1c:cd:9c:e6:f4:4a:7c:84:08: 7d:5a:2c:3d:9e:8a:b4:b0:ab:00:74:fa:4d:46:12:14:39:80: 58:d8:c6:86:49:93:c7:b6:49:d6:02:83:0b:00:69:b8:14:33: 38:ff:7b:06:30:27:5e:df:90:e2:24:3f:49:10:ac:d2:1c:0d: 29:78:27:df:7b:12:f4:93:20:9b:95:84:30:31:f3:16:27:80: e8:32:89:26:be:69:86:26:42:25:5e:df:24:5a:98:e2:10:cd: 13:da:7b:54:55:80:07:60:80:60:6a:ca:d7:7b:82:7c:80:02: 46:c5:7f:3d:e2:09:15:25:c8:ab:29:1a:b1:8f:f2:b0:8a:27: 3d:3a:98:43:ad:1c:2e:37:ef:51:eb:c5:98:3a:e5:56:7e:00: f8:99:63:89:57:93:0f:7b:52:d1:d6:b0:20:4a:76:52:11:e6: 6e:f4:cd:1e:b5:e2:fa:7f:26:e5:cb:26:5b:83:88:ae:b9:ec: ea:0d:bb:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIHOPlC4to2gCB8qh1z7LYIjmZTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA0MjYyMDUwMzBaFw0yNjA0MjcyMzE3MzBaMDMxMTAvBgNV BAMTKDgzNUYyQTAxODc0NzQwQ0JGNUQ2ODdGRDAyRUFCQUU4MEM5NjRFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq0bfWC3+WQShu06+DAYG7VvG If1cZd4Txr8d+QuZpowY5ZYnbMpj76ixyZ2u/KeH/F+iILko3zi6HhzRX8+NwWOg 26oyL8VffnveATWc7k4ncaWy5VUNuE8fmuQOc4TDyxUmGd/LoXLghyIPwY+99Ljy c4sNw9r7S4WEW9hRSE+WxfVbOFGfGJAoUI9uApmklm93mBBcqMTTORpMYqaDn2iH YoUUPphvuMMcC37RmGBr0mOY2sRMGi5Oo0vjSblDyZW3VjTLyUlCqYpAvgcA6+pC 4qY0sksaf6yq60zu+UXYMlIByAaiJv7iXHXTZEsG3SLtn4LgWnWJK4HARflRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUg18qAYdHQMv11of9Auq66AyWToAwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9p9Qd ymFKNSX/jGGc2DT5KtrZ/9rO6O9XlY8kAv7f9HBEZAnhjrxKDXJOvncOx4N2R3hP ziWtFzjWVUtOvB4czZzm9Ep8hAh9Wiw9noq0sKsAdPpNRhIUOYBY2MaGSZPHtknW AoMLAGm4FDM4/3sGMCde35DiJD9JEKzSHA0peCffexL0kyCblYQwMfMWJ4DoMokm vmmGJkIlXt8kWpjiEM0T2ntUVYAHYIBgasrXe4J8gAJGxX894gkVJcirKRqxj/Kw iic9OphDrRwuN+9R68WYOuVWfgD4mWOJV5MPe1LR1rAgSnZSEeZu9M0eteL6fybl yyZbg4iuuezqDbuh -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:18 2026 by rpki-client