$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: Za+HzfdQQPcYZ0VuZrrqxuuQlpumeMkWPqxwe/JcJa8= Subject key identifier: 8D:14:7D:DF:D3:18:40:33:7A:C9:F5:48:E8:A0:CB:C6:2B:B1:05:ED Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 30E58011B7F6A0AB450F30BD29AC583CDDB77ADC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 026A Signing time: Wed 04 Mar 2026 04:00:18 +0000 Manifest this update: Wed 04 Mar 2026 03:55:18 +0000 Manifest next update: Thu 05 Mar 2026 04:52:18 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: t58puq+fHspooNFFClTrh42wN0llX60iwLNbz361k/Y=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 04:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e5:80:11:b7:f6:a0:ab:45:0f:30:bd:29:ac:58:3c:dd:b7:7a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Mar 4 03:55:18 2026 GMT Not After : Mar 5 04:52:18 2026 GMT Subject: CN=8D147DDFD31840337AC9F548E8A0CBC62BB105ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:29:2f:86:02:e0:6d:cd:56:b9:09:ef:94: 30:22:2b:85:4e:d2:67:36:65:28:02:21:07:a3:ee: 68:ba:23:ec:5f:e5:e5:9d:fa:d0:07:6a:65:7a:c0: ef:1d:59:48:e6:00:48:86:85:c5:5c:4a:2f:f0:3a: 6f:a3:38:22:01:c3:a4:84:ec:c7:6e:32:46:58:d4: 60:51:07:d6:2e:2d:b8:3a:37:2f:32:55:0b:8d:48: f2:40:a2:89:0e:62:29:57:56:41:2d:20:01:0b:a1: 4b:af:89:88:48:e1:8e:f6:b9:40:fb:91:35:6f:77: ed:be:86:05:e9:bb:5c:3c:23:7a:25:08:43:7e:49: 36:1f:7d:5a:b8:0b:1a:16:65:bc:f9:d4:a6:e8:88: 28:c3:1e:b7:8d:3e:55:b5:01:b2:05:3a:03:2c:dc: 06:a2:e9:27:43:36:57:be:5a:c8:29:fb:93:95:98: e6:cd:32:c1:bb:c2:61:44:ff:91:1f:9c:e0:f2:c3: 9d:e6:89:da:c7:59:99:f6:78:48:74:91:02:06:70: 4d:4e:e5:d9:f7:11:b5:ee:ec:4e:1c:bd:48:5c:76: d2:ef:db:d2:f3:e7:2f:a9:59:2a:ab:5c:47:36:4e: fa:7d:3b:25:2d:2a:b7:7d:5e:62:cf:47:47:38:d7: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:14:7D:DF:D3:18:40:33:7A:C9:F5:48:E8:A0:CB:C6:2B:B1:05:ED X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:16:91:2c:de:45:84:07:29:b0:1d:43:2b:4d:d4:5d:69:5a: d0:ef:97:6f:02:18:c8:f8:40:1c:64:ef:89:9e:88:bc:5b:99: 8c:b7:aa:4e:a7:30:a5:63:98:e8:d4:4e:c4:b3:fe:53:d2:78: eb:54:32:7a:ed:cb:a0:07:12:47:c2:73:ee:3a:3a:24:31:8c: 2e:03:df:2f:d6:66:b0:02:64:a1:5f:2f:68:88:e1:2f:a8:4b: af:1f:dd:10:c1:7e:e1:a1:19:dd:bc:85:2b:53:f8:67:fb:94: 6a:f4:49:31:49:05:32:c8:61:07:65:1e:c6:d4:0b:e9:10:17: de:0a:02:b3:78:c6:42:67:9c:55:6e:50:bb:c4:9d:40:95:40: 0b:dc:d2:dc:ba:0c:61:3a:ce:ae:c9:59:0a:2b:c3:96:73:9d: 5c:fa:d8:0f:00:9c:f0:31:0c:dd:cf:a9:0b:ba:47:77:1f:d1: 50:f4:2d:f2:86:0c:cc:f1:44:ed:e5:52:76:6f:b0:4d:5e:73: e3:cc:15:0e:3b:4c:87:75:9f:fa:af:00:e7:f1:0d:74:f1:2f: be:58:6f:b4:6d:54:69:8e:8c:3f:76:a2:1f:93:47:c2:5c:3a: 4d:85:db:4a:b4:62:e8:12:77:a9:a4:2c:cf:61:e1:75:a6:15: 10:0d:ef:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMOWAEbf2oKtFDzC9KaxYPN23etwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjAzMDQwMzU1MThaFw0yNjAzMDUwNDUyMThaMDMxMTAvBgNV BAMTKDhEMTQ3RERGRDMxODQwMzM3QUM5RjU0OEU4QTBDQkM2MkJCMTA1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtSkvhgLgbc1WuQnvlDAiK4VO 0mc2ZSgCIQej7mi6I+xf5eWd+tAHamV6wO8dWUjmAEiGhcVcSi/wOm+jOCIBw6SE 7MduMkZY1GBRB9YuLbg6Ny8yVQuNSPJAookOYilXVkEtIAELoUuviYhI4Y72uUD7 kTVvd+2+hgXpu1w8I3olCEN+STYffVq4CxoWZbz51KboiCjDHreNPlW1AbIFOgMs 3Aai6SdDNle+Wsgp+5OVmObNMsG7wmFE/5EfnODyw53midrHWZn2eEh0kQIGcE1O 5dn3EbXu7E4cvUhcdtLv29Lz5y+pWSqrXEc2Tvp9OyUtKrd9XmLPR0c41yjdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjRR939MYQDN6yfVI6KDLxiuxBe0wHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJFpEs 3kWEBymwHUMrTdRdaVrQ75dvAhjI+EAcZO+Jnoi8W5mMt6pOpzClY5jo1E7Es/5T 0njrVDJ67cugBxJHwnPuOjokMYwuA98v1mawAmShXy9oiOEvqEuvH90QwX7hoRnd vIUrU/hn+5Rq9EkxSQUyyGEHZR7G1AvpEBfeCgKzeMZCZ5xVblC7xJ1AlUAL3NLc ugxhOs6uyVkKK8OWc51c+tgPAJzwMQzdz6kLukd3H9FQ9C3yhgzM8UTt5VJ2b7BN XnPjzBUOO0yHdZ/6rwDn8Q108S++WG+0bVRpjow/dqIfk0fCXDpNhdtKtGLoEnep pCzPYeF1phUQDe+4 -----END CERTIFICATE-----Generated at Wed Mar 4 20:54:06 2026 by rpki-client