$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: RaVfpUcQKZdK9782tEXx0KDCHDLitYAY2Nl422w0YyY= Subject key identifier: 0E:29:91:DC:56:38:8F:45:55:EF:50:3B:B9:D9:48:AC:23:A9:6A:DB Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 4E6E37C4FB67B0DE25D13020AC34633894A8CF48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0575 Signing time: Mon 23 Mar 2026 04:39:53 +0000 Manifest this update: Mon 23 Mar 2026 04:34:53 +0000 Manifest next update: Tue 24 Mar 2026 06:07:53 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 3: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=) 4: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: oSdGGgCmZ1GdS7Tfb1xISnBbIX0o6sj3SHTjpnWUb0M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6e:37:c4:fb:67:b0:de:25:d1:30:20:ac:34:63:38:94:a8:cf:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Mar 23 04:34:53 2026 GMT Not After : Mar 24 06:07:53 2026 GMT Subject: CN=0E2991DC56388F4555EF503BB9D948AC23A96ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:86:a2:48:98:a2:3f:0d:c7:5d:64:bd:5e: 1c:c9:e0:a3:43:03:1f:7d:0f:e8:9b:5b:eb:5a:89: c8:e6:40:e1:32:e2:87:0c:22:bf:1a:ab:44:48:24: 8c:60:9c:f7:4c:d6:f5:d5:76:48:2e:44:fa:be:6a: b2:d0:ec:82:c6:97:c4:b2:c4:bd:f4:eb:1d:82:a4: 15:9d:a7:3a:96:c1:b2:4c:1e:e2:d8:b9:ae:28:c7: 51:5f:f3:87:0a:e0:a3:7e:46:f7:4b:37:02:c8:59: f1:8f:c6:fb:27:ba:1b:7e:5f:e4:22:38:dc:e9:d1: f8:a9:6d:86:58:b6:6f:f2:e3:33:a3:6d:ec:fa:07: 74:d1:f9:07:85:a0:95:23:df:3e:54:63:6d:7a:fb: e4:d6:5a:3b:53:27:85:67:f6:a1:ad:8d:88:a6:39: b3:d9:9b:90:0b:f6:20:c5:23:00:35:4a:c9:59:ee: b2:dc:3a:a3:bc:43:4d:4b:6f:86:ea:37:2b:1f:f6: 6e:88:c6:ed:47:90:d3:b1:ba:15:d7:2a:dd:40:58: 11:c7:8e:eb:00:55:26:ec:b8:58:8f:09:45:ce:32: 03:31:67:0d:e6:ad:9b:40:df:89:fe:67:85:4a:c3: fa:a0:ae:1f:eb:33:1b:df:b3:1a:7b:26:f7:52:b4: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:91:DC:56:38:8F:45:55:EF:50:3B:B9:D9:48:AC:23:A9:6A:DB X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ad:10:fd:cb:d2:10:15:2b:32:9c:e4:77:23:10:7d:72:2a: 5e:d6:32:c2:f5:60:49:56:70:c1:2c:28:6b:55:97:cb:4f:ec: 74:39:34:5f:ae:cd:72:f1:42:f3:74:e6:9c:5b:e7:90:6c:5d: ef:8d:ef:e9:66:61:4b:b6:e3:ce:02:84:85:74:5d:ab:64:80: af:21:1f:11:98:df:2b:c5:f6:52:4b:8f:aa:5f:53:a4:6d:e6: 89:58:cf:5f:1b:ee:14:f8:b0:64:a6:0a:68:92:8d:72:9c:ab: b0:a2:1e:a4:e3:68:85:36:9e:be:9a:88:bb:37:4d:cf:9a:7a: ff:8c:d9:33:7d:89:8e:e1:1f:77:34:58:5c:19:59:30:3b:a9: 75:38:7a:41:0c:6f:5e:c6:43:c4:e3:d0:bc:54:46:8b:94:00: d3:6d:d6:9e:45:36:d0:19:cf:6d:e9:28:1e:74:f4:8d:ee:54: 46:7f:11:95:98:7b:3f:bc:45:68:c6:3f:c7:31:32:14:7d:81: 68:02:40:f5:56:86:1b:b9:c3:b0:c1:ca:bd:32:cc:8e:28:23: 98:9b:78:54:2f:81:a3:ac:6d:6a:97:1c:0e:d8:6e:9c:3e:1c: b8:1f:6f:ca:5f:cc:3b:af:b1:16:25:81:ca:76:61:30:9a:c4: cf:29:e7:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTm43xPtnsN4l0TAgrDRjOJSoz0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjAzMjMwNDM0NTNaFw0yNjAzMjQwNjA3NTNaMDMxMTAvBgNV BAMTKDBFMjk5MURDNTYzODhGNDU1NUVGNTAzQkI5RDk0OEFDMjNBOTZBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ooaiSJiiPw3HXWS9XhzJ4KND Ax99D+ibW+taicjmQOEy4ocMIr8aq0RIJIxgnPdM1vXVdkguRPq+arLQ7ILGl8Sy xL306x2CpBWdpzqWwbJMHuLYua4ox1Ff84cK4KN+RvdLNwLIWfGPxvsnuht+X+Qi ONzp0fipbYZYtm/y4zOjbez6B3TR+QeFoJUj3z5UY216++TWWjtTJ4Vn9qGtjYim ObPZm5AL9iDFIwA1SslZ7rLcOqO8Q01Lb4bqNysf9m6Ixu1HkNOxuhXXKt1AWBHH jusAVSbsuFiPCUXOMgMxZw3mrZtA34n+Z4VKw/qgrh/rMxvfsxp7JvdStC2hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDimR3FY4j0VV71A7udlIrCOpatswHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd60Q/cvSEBUrMpzkdyMQ fXIqXtYywvVgSVZwwSwoa1WXy0/sdDk0X67NcvFC83TmnFvnkGxd743v6WZhS7bj zgKEhXRdq2SAryEfEZjfK8X2UkuPql9TpG3miVjPXxvuFPiwZKYKaJKNcpyrsKIe pONohTaevpqIuzdNz5p6/4zZM32JjuEfdzRYXBlZMDupdTh6QQxvXsZDxOPQvFRG i5QA023WnkU20BnPbekoHnT0je5URn8RlZh7P7xFaMY/xzEyFH2BaAJA9VaGG7nD sMHKvTLMjigjmJt4VC+Bo6xtapccDthunD4cuB9vyl/MO6+xFiWBynZhMJrEzynn +g== -----END CERTIFICATE-----Generated at Mon Mar 23 09:49:57 2026 by rpki-client