$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: araEmbY5IK0dLfZYyRN/V0/+j2yx/IwaVF9PAGL6Il0= Subject key identifier: C3:8F:10:59:E1:43:A2:9E:79:3D:1A:2F:94:45:05:EC:64:32:E9:0B Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 0BA24E0C2B1918F3B69037870012212C3CDB6DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0560 Signing time: Wed 11 Mar 2026 18:06:08 +0000 Manifest this update: Wed 11 Mar 2026 18:01:08 +0000 Manifest next update: Thu 12 Mar 2026 19:52:08 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 2: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 4: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: Bv/naDpW1NgSCQSh6OH92/0rL2sLu9Hodf2K0RjB9Ls=) 5: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 6: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 7: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 8: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 9: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 10: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 11: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 12: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 13: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 19:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a2:4e:0c:2b:19:18:f3:b6:90:37:87:00:12:21:2c:3c:db:6d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Mar 11 18:01:08 2026 GMT Not After : Mar 12 19:52:08 2026 GMT Subject: CN=C38F1059E143A29E793D1A2F944505EC6432E90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:e1:8d:af:2d:62:bf:95:ec:a0:0b:99:bd: 98:b2:eb:3f:b8:2a:52:79:62:77:57:28:14:6d:fc: 2b:cb:b7:31:2e:f5:1f:57:90:53:47:d3:ac:11:19: 4f:71:59:4f:16:92:ae:24:cb:e8:f2:7c:27:15:3f: 88:95:9b:40:33:f7:08:6c:7b:2b:ab:31:18:52:8a: 6e:72:03:3a:34:23:07:dd:7f:3e:9f:b1:0f:a4:51: 4e:8a:30:b2:62:3b:10:a9:24:51:46:1c:9b:05:fe: 63:f8:cf:17:a8:29:a0:68:32:e2:d7:f3:53:7d:76: 25:d8:6d:fc:70:99:77:ce:23:fb:1f:f1:6e:b2:c2: b5:64:1c:53:ef:97:c8:aa:cf:91:66:a4:14:ed:2b: 96:9a:30:04:60:94:5e:09:6e:06:68:bd:a1:44:2f: 09:3a:0c:8b:22:ea:62:7f:d8:74:4b:fa:7b:59:c9: 39:5f:47:13:43:6e:fa:68:be:9b:a3:7f:f4:d2:ba: 28:30:eb:90:e7:03:d2:0f:51:7d:8f:5c:5b:f3:93: 2b:ca:ec:7c:3f:8d:c4:8e:71:d1:7f:52:6d:2b:43: bb:3e:83:7a:b9:ce:f5:fb:2f:b3:28:50:f9:2f:59: 3c:19:39:ef:bc:3b:d9:05:2b:db:28:07:8d:74:57: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8F:10:59:E1:43:A2:9E:79:3D:1A:2F:94:45:05:EC:64:32:E9:0B X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f5:b5:c0:8e:d0:01:70:c6:77:51:93:66:8e:93:13:e1:f2: dc:82:ef:30:51:7e:e3:c4:a4:45:d6:33:d3:35:18:19:c6:3d: 81:71:bd:43:d2:d9:5e:7b:06:13:10:b9:de:de:fa:f5:f6:b0: b2:1e:4e:60:76:8d:6b:20:f0:40:f8:96:54:c3:c0:95:cd:b2: 37:a7:73:e4:b3:05:f4:d1:6e:a3:00:c2:32:12:47:97:34:63: f0:2f:68:d2:82:ae:cc:8c:e2:ea:32:ad:ce:20:8f:f6:ab:12: b5:93:c5:ba:ce:a5:28:4e:9f:cd:14:5c:ed:8c:96:67:f1:87: e5:d7:da:55:f4:f3:25:b9:71:4a:82:9c:b2:ee:43:d4:04:5d: 22:d7:f7:5b:07:dc:8b:86:12:d9:5e:45:56:fd:56:f9:e7:47: fe:6f:c0:f4:70:a4:fb:5b:b6:d5:dc:d4:58:0a:b2:9e:61:1c: a6:71:9f:4b:0b:92:e0:e2:31:c6:7a:2e:44:14:d4:30:3d:6d: 98:7f:eb:07:56:f7:fc:f3:44:c7:12:4c:21:42:aa:d8:21:d3: e1:b4:72:3e:1b:9c:13:6e:b4:74:99:80:dc:6e:8d:47:b5:b5: e9:17:fb:48:04:0f:56:88:0a:e7:37:7c:c4:4c:42:e2:02:f4: 5c:6f:12:79 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC6JODCsZGPO2kDeHABIhLDzbbdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjAzMTExODAxMDhaFw0yNjAzMTIxOTUyMDhaMDMxMTAvBgNV BAMTKEMzOEYxMDU5RTE0M0EyOUU3OTNEMUEyRjk0NDUwNUVDNjQzMkU5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcOGNry1iv5XsoAuZvZiy6z+4 KlJ5YndXKBRt/CvLtzEu9R9XkFNH06wRGU9xWU8Wkq4ky+jyfCcVP4iVm0Az9whs eyurMRhSim5yAzo0Iwfdfz6fsQ+kUU6KMLJiOxCpJFFGHJsF/mP4zxeoKaBoMuLX 81N9diXYbfxwmXfOI/sf8W6ywrVkHFPvl8iqz5FmpBTtK5aaMARglF4JbgZovaFE Lwk6DIsi6mJ/2HRL+ntZyTlfRxNDbvpovpujf/TSuigw65DnA9IPUX2PXFvzkyvK 7Hw/jcSOcdF/Um0rQ7s+g3q5zvX7L7MoUPkvWTwZOe+8O9kFK9soB410V3vnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUw48QWeFDop55PRovlEUF7GQy6QswHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvW1wI7QAXDGd1GTZo6T E+Hy3ILvMFF+48SkRdYz0zUYGcY9gXG9Q9LZXnsGExC53t769fawsh5OYHaNayDw QPiWVMPAlc2yN6dz5LMF9NFuowDCMhJHlzRj8C9o0oKuzIzi6jKtziCP9qsStZPF us6lKE6fzRRc7YyWZ/GH5dfaVfTzJblxSoKcsu5D1ARdItf3Wwfci4YS2V5FVv1W +edH/m/A9HCk+1u21dzUWAqynmEcpnGfSwuS4OIxxnouRBTUMD1tmH/rB1b3/PNE xxJMIUKq2CHT4bRyPhucE260dJmA3G6NR7W16Rf7SAQPVogK5zd8xExC4gL0XG8S eQ== -----END CERTIFICATE-----Generated at Thu Mar 12 09:31:11 2026 by rpki-client