$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: n67Gx5um/gRC+xe/cknXWQU+mc6hyi26Z9ZHXOcibQQ= Subject key identifier: 93:A1:6F:0B:DD:41:EC:AE:2D:56:0A:FA:2C:71:83:9C:CF:7F:23:E9 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 781C20D8A44A8E0EA2B9B27AC43605BB6FBB45FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 01E6 Signing time: Thu 19 Mar 2026 09:49:56 +0000 Manifest this update: Thu 19 Mar 2026 09:44:56 +0000 Manifest next update: Fri 20 Mar 2026 12:21:56 +0000 Files and hashes: 1: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=) 2: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=) 3: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=) 4: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 5: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=) 6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=) 7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 0zupShiNNc9JAucO7g06MITHwCRKhfmywj/gHZHUQwk=) 8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=) 9: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 10: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 12:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1c:20:d8:a4:4a:8e:0e:a2:b9:b2:7a:c4:36:05:bb:6f:bb:45:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Mar 19 09:44:56 2026 GMT Not After : Mar 20 12:21:56 2026 GMT Subject: CN=93A16F0BDD41ECAE2D560AFA2C71839CCF7F23E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:8c:3c:42:47:2b:85:94:25:86:1e:d0:66: 8b:39:47:72:99:bb:cd:15:bb:e8:a8:94:4d:f5:3b: db:ca:e9:6e:e8:a8:98:ad:51:da:de:c7:87:ad:4d: 6a:91:c6:fa:1c:9c:3b:88:8f:5d:8c:cc:e4:92:c5: e2:5c:f6:be:2a:b0:96:c8:4c:0e:dc:ff:13:56:cc: 3f:f2:42:2e:59:f9:49:b9:6e:a0:44:c8:c7:fa:51: 43:2a:52:92:d4:19:e6:d6:26:f4:49:fb:70:2b:43: 28:8a:b4:45:a2:ca:19:b3:36:05:35:b8:38:f5:72: 67:27:88:06:54:56:5e:d6:0c:3d:78:8b:a1:88:66: 92:da:f1:84:5d:8d:b5:9f:6f:fc:67:e5:08:f4:5e: 0c:25:3c:f5:8e:31:28:ba:21:fc:76:ac:bd:e9:10: 28:ff:bf:34:03:bf:ad:ac:52:bd:56:ca:44:9b:30: 4f:6d:0a:0b:0a:f6:cc:be:83:66:b9:fc:88:ee:33: 0b:c2:5d:7d:e5:56:8f:f0:83:4b:5e:e0:b5:a0:5c: 2f:87:0a:60:14:20:8a:9e:65:98:b5:b9:f1:03:b9: be:a5:8f:d4:95:c3:1c:f4:41:d7:83:e7:97:1a:b7: 2a:48:d9:c0:6c:f7:01:c0:7d:1d:46:1a:19:b7:d4: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:6F:0B:DD:41:EC:AE:2D:56:0A:FA:2C:71:83:9C:CF:7F:23:E9 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:80:83:27:47:21:01:65:08:70:61:f1:10:38:26:52:b9:57: 76:21:d9:04:4c:1c:60:e6:9d:65:b5:e9:ae:13:2e:3e:8a:28: 73:d6:74:83:67:40:9e:4c:93:95:82:d3:78:12:a9:5d:70:03: cf:b2:65:ae:32:d0:3a:36:b7:6a:13:5e:f4:d1:e5:a0:2b:17: 72:85:04:83:86:3e:7e:b7:61:f4:f4:5e:a4:c0:c2:8f:ac:6e: 45:b1:a2:c8:84:ba:38:d3:86:97:c2:6c:3b:03:f1:fe:6e:d1: c8:0f:55:d0:59:82:90:26:2f:57:37:34:bb:53:52:ab:5a:e3: b0:9f:4c:08:93:2e:af:67:86:84:da:62:70:97:c2:e2:0c:e6: ec:ee:18:06:6b:25:66:bb:44:ec:af:2e:8a:34:d5:4f:7b:f1: 94:a2:7a:25:f2:cc:3b:e2:91:bf:06:86:7c:5d:cd:e4:84:fe: 61:9f:45:b8:5b:a3:9a:2d:98:41:9b:39:f4:16:66:1b:e7:84: d9:c5:73:39:ec:e7:4b:c6:ad:b4:0e:43:49:99:51:6c:41:af: d8:5c:c0:b0:6a:ae:e2:e9:29:79:94:c4:e6:9b:be:3f:98:02: 71:ed:52:77:51:91:4e:aa:a6:3d:8d:c6:8e:84:b7:8f:44:99: 3d:71:40:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeBwg2KRKjg6iubJ6xDYFu2+7RfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjAzMTkwOTQ0NTZaFw0yNjAzMjAxMjIxNTZaMDMxMTAvBgNV BAMTKDkzQTE2RjBCREQ0MUVDQUUyRDU2MEFGQTJDNzE4MzlDQ0Y3RjIzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwd4w8QkcrhZQlhh7QZos5R3KZ u80Vu+iolE31O9vK6W7oqJitUdrex4etTWqRxvocnDuIj12MzOSSxeJc9r4qsJbI TA7c/xNWzD/yQi5Z+Um5bqBEyMf6UUMqUpLUGebWJvRJ+3ArQyiKtEWiyhmzNgU1 uDj1cmcniAZUVl7WDD14i6GIZpLa8YRdjbWfb/xn5Qj0XgwlPPWOMSi6Ifx2rL3p ECj/vzQDv62sUr1WykSbME9tCgsK9sy+g2a5/IjuMwvCXX3lVo/wg0te4LWgXC+H CmAUIIqeZZi1ufEDub6lj9SVwxz0QdeD55catypI2cBs9wHAfR1GGhm31CntAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUk6FvC91B7K4tVgr6LHGDnM9/I+kwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYCDJ0chAWUIcGHxEDgm UrlXdiHZBEwcYOadZbXprhMuPoooc9Z0g2dAnkyTlYLTeBKpXXADz7JlrjLQOja3 ahNe9NHloCsXcoUEg4Y+frdh9PRepMDCj6xuRbGiyIS6ONOGl8JsOwPx/m7RyA9V 0FmCkCYvVzc0u1NSq1rjsJ9MCJMur2eGhNpicJfC4gzm7O4YBmslZrtE7K8uijTV T3vxlKJ6JfLMO+KRvwaGfF3N5IT+YZ9FuFujmi2YQZs59BZmG+eE2cVzOeznS8at tA5DSZlRbEGv2FzAsGqu4ukpeZTE5pu+P5gCce1Sd1GRTqqmPY3GjoS3j0SZPXFA AQ== -----END CERTIFICATE-----Generated at Fri Mar 20 03:54:25 2026 by rpki-client