$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: c5MqTflMba5csm5ZeONFrh57Yi5OV9s+JISqeQNxpYU= Subject key identifier: A2:C7:EA:A6:1B:32:30:6F:49:F5:0A:5B:D0:BD:8E:AF:D5:01:6A:8B Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 4B20CB2C72FA986A45AE282CC5D51FD2BBC11320 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0396 Signing time: Mon 27 Apr 2026 13:59:34 +0000 Manifest this update: Mon 27 Apr 2026 13:54:34 +0000 Manifest next update: Tue 28 Apr 2026 16:44:34 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 2: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 3: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 6: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: JNU7M/KrfkyCo70iQh0x3mD/YlP3tAn4p72hZvctyhU=) 8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 9: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 14:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:20:cb:2c:72:fa:98:6a:45:ae:28:2c:c5:d5:1f:d2:bb:c1:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Apr 27 13:54:34 2026 GMT Not After : Apr 28 16:44:34 2026 GMT Subject: CN=A2C7EAA61B32306F49F50A5BD0BD8EAFD5016A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:f3:37:0c:71:03:af:63:1d:cc:c7:61:11: 8e:b5:8d:19:9d:90:fb:f3:ec:14:99:91:34:e2:58: f6:5b:00:dc:35:2b:a5:f7:c9:28:eb:bb:bf:13:9a: 03:b7:66:5e:15:a5:94:69:ef:63:81:a2:90:47:30: b0:97:89:17:6a:7c:a1:7b:67:cf:c6:26:17:ee:52: 80:b8:3d:f9:bf:f8:fc:b0:6c:35:73:4d:87:9e:ec: 18:ac:e3:82:9c:b0:1e:f7:7c:c4:2b:b9:1d:91:e0: c6:50:73:71:16:2f:9d:f5:dc:52:d2:9c:4a:e5:35: 31:b1:38:59:74:32:93:d9:e1:00:d5:cd:59:22:5f: 00:03:4d:90:61:e3:fe:c3:85:86:15:d1:eb:2d:65: 3e:16:05:8f:f4:9a:a0:55:db:cd:3e:06:c5:ca:f2: 77:6f:5f:80:26:89:a1:1e:05:db:55:d7:e3:d1:a5: 08:fd:82:2b:e9:43:75:4b:08:30:89:fd:86:30:72: fb:50:1e:c1:c7:36:4f:25:a7:b4:41:52:0b:7f:08: e7:86:1f:b5:81:14:59:12:24:23:af:6d:6c:aa:8b: 41:99:0a:e7:0e:82:9f:f8:4b:42:09:c4:84:ce:e8: 72:f6:13:61:cd:c6:76:db:c5:cf:ba:e3:c7:9d:d6: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:EA:A6:1B:32:30:6F:49:F5:0A:5B:D0:BD:8E:AF:D5:01:6A:8B X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:fe:85:d6:c4:57:6d:42:8d:c9:6b:b4:7a:95:b6:e7:36: 11:ca:5a:c7:b6:b1:42:f6:93:6a:dd:58:52:7a:1f:7b:0e:7c: db:aa:66:df:77:4b:2d:c8:8a:b6:aa:05:03:cf:2f:79:b1:c9: 60:fd:0f:27:c0:56:16:f1:83:54:91:7f:a9:47:e7:c6:97:3f: 17:16:f6:ce:e8:98:2b:76:b2:e6:e5:70:35:ef:99:f6:99:5f: 52:2a:96:e8:13:19:5d:66:4d:ba:14:ea:cf:d9:67:84:b1:90: 7b:6b:65:e7:b8:74:28:de:87:e5:0f:f0:ae:fd:0b:1d:21:12: 8f:e1:3a:22:4c:34:2d:53:ac:94:f4:2e:3b:d4:0a:90:5a:90: 35:51:e5:7f:ed:87:ee:f5:9d:66:75:5c:1e:db:2e:aa:a3:24: 7a:9e:1a:e6:84:1d:d5:86:e5:46:d4:78:78:e1:18:29:60:de: ab:a0:ee:bf:fc:f5:d9:86:fb:5c:92:5c:95:9c:a5:07:61:e6: 28:ab:78:3e:ab:ad:ef:30:23:d9:bc:a2:44:4f:3e:ea:73:dc: 54:40:f4:69:35:86:21:7c:c8:22:0c:90:f3:85:b1:a5:c4:bf: 62:aa:c7:b7:fd:fa:82:80:42:07:f3:bc:83:36:db:f7:0f:e6: 50:be:bd:96 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSyDLLHL6mGpFrigsxdUf0rvBEyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA0MjcxMzU0MzRaFw0yNjA0MjgxNjQ0MzRaMDMxMTAvBgNV BAMTKEEyQzdFQUE2MUIzMjMwNkY0OUY1MEE1QkQwQkQ4RUFGRDUwMTZBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwd/M3DHEDr2MdzMdhEY61jRmd kPvz7BSZkTTiWPZbANw1K6X3ySjru78TmgO3Zl4VpZRp72OBopBHMLCXiRdqfKF7 Z8/GJhfuUoC4Pfm/+PywbDVzTYee7Bis44KcsB73fMQruR2R4MZQc3EWL5313FLS nErlNTGxOFl0MpPZ4QDVzVkiXwADTZBh4/7DhYYV0estZT4WBY/0mqBV280+BsXK 8ndvX4AmiaEeBdtV1+PRpQj9givpQ3VLCDCJ/YYwcvtQHsHHNk8lp7RBUgt/COeG H7WBFFkSJCOvbWyqi0GZCucOgp/4S0IJxITO6HL2E2HNxnbbxc+648ed1qUNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUosfqphsyMG9J9Qpb0L2Or9UBaoswHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxM/6F 1sRXbUKNyWu0epW25zYRylrHtrFC9pNq3VhSeh97Dnzbqmbfd0styIq2qgUDzy95 sclg/Q8nwFYW8YNUkX+pR+fGlz8XFvbO6JgrdrLm5XA175n2mV9SKpboExldZk26 FOrP2WeEsZB7a2XnuHQo3oflD/Cu/QsdIRKP4ToiTDQtU6yU9C471AqQWpA1UeV/ 7Yfu9Z1mdVwe2y6qoyR6nhrmhB3VhuVG1Hh44RgpYN6roO6//PXZhvtcklyVnKUH YeYoq3g+q63vMCPZvKJETz7qc9xUQPRpNYYhfMgiDJDzhbGlxL9iqse3/fqCgEIH 87yDNtv3D+ZQvr2W -----END CERTIFICATE-----Generated at Mon Apr 27 19:07:32 2026 by rpki-client