$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: G/ik4ZtahaLQOMWe5tbKs3SmQIp577+oXyKhVAtCk94= Subject key identifier: A3:1D:28:DE:01:99:C3:74:E7:EB:EB:95:BD:D0:10:07:BD:B9:1A:69 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 53D478D6344338A85317201C3D01CE853CCB3EF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 045C Signing time: Fri 13 Mar 2026 04:22:23 +0000 Manifest this update: Fri 13 Mar 2026 04:17:23 +0000 Manifest next update: Sat 14 Mar 2026 04:50:23 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 4: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 5: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 7: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: SgEzOFO8eqTb8DHmlL9lcBe6VPzdmflGimmpFlZoK/s=) 8: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 9: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 10: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 11: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 04:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:78:d6:34:43:38:a8:53:17:20:1c:3d:01:ce:85:3c:cb:3e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Mar 13 04:17:23 2026 GMT Not After : Mar 14 04:50:23 2026 GMT Subject: CN=A31D28DE0199C374E7EBEB95BDD01007BDB91A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:fd:60:d6:b3:3d:1f:00:f2:6d:3b:c4:08: b8:ac:f5:8f:f7:0f:70:3b:bb:a5:fc:40:a3:b5:cd: 02:26:9f:c2:9f:62:23:11:e3:85:a7:39:53:6b:58: c8:e2:b4:d6:37:a2:43:ee:a6:9f:83:92:95:29:96: e3:8f:98:7e:e8:de:e4:f4:5c:d9:52:b7:ee:ec:8d: cc:3e:8c:05:b9:77:b9:7e:f1:99:a7:7c:80:e3:81: 46:df:95:b0:4b:3d:75:d6:a9:d1:2e:72:c8:fa:79: be:9a:ba:f0:99:67:0a:0a:50:3d:99:bc:65:29:bf: ef:d4:99:d6:b6:56:a2:de:8d:34:22:5c:fb:cf:90: 35:5c:09:8b:d7:af:05:82:04:7f:f8:6f:62:b9:96: 93:73:ae:39:35:40:44:2f:27:c0:ec:92:35:3f:c6: b5:f1:12:41:18:39:9c:49:d4:fc:e4:21:08:9f:55: 31:c7:e3:d2:96:16:27:47:bd:28:ef:56:d9:12:75: fe:53:70:22:05:33:fa:1a:43:07:13:4a:2d:15:c8: 69:3f:0f:4a:65:c1:e2:f4:c3:07:0f:65:a6:93:38: 76:45:a3:26:dc:97:62:4c:f8:c5:55:dc:44:75:fb: a0:e8:75:14:34:8a:ad:7c:86:55:17:25:07:b9:9f: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:28:DE:01:99:C3:74:E7:EB:EB:95:BD:D0:10:07:BD:B9:1A:69 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f5:68:ae:27:9d:70:9e:73:f2:2b:ac:80:e4:2a:8f:82:6b: dd:b4:d6:ee:9e:8b:d6:bd:5d:88:42:85:75:be:06:c5:85:7e: 04:10:e6:3b:ec:c3:dc:78:8f:f4:7a:62:bc:01:a5:39:22:4a: a6:bc:10:8e:c4:b2:80:9f:b0:04:45:87:41:22:bc:12:ce:6b: 11:66:e8:ea:69:b4:ce:bd:ef:00:47:d5:81:86:23:32:ac:a1: fe:a0:c9:91:84:c8:d7:99:03:34:5c:09:09:d1:8d:49:3e:4a: e5:c5:9e:b8:35:92:1b:c9:8f:60:53:7d:60:a2:00:ec:8f:16: 60:b7:d8:3c:d5:ce:ae:6a:c1:0a:f5:68:2d:39:69:e5:d8:75: 93:28:b5:08:18:15:a7:f1:9b:e1:e4:b1:da:71:b6:e2:e8:2c: d5:01:f9:b5:82:7a:db:7d:f1:9c:13:86:70:36:0f:a0:54:29: 4c:61:72:d2:84:d1:5c:df:b3:e7:51:c5:fe:9b:70:60:96:f1: 28:39:86:01:a0:94:bf:6f:95:b7:c6:f5:bf:f4:2c:96:9f:60: a2:52:70:c9:9f:ef:11:f1:11:16:61:2c:2c:c7:96:80:d2:43: 13:cb:32:59:e3:07:3a:f2:44:1a:9e:07:86:7b:04:5c:dd:95: 9d:96:4b:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU9R41jRDOKhTFyAcPQHOhTzLPvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjAzMTMwNDE3MjNaFw0yNjAzMTQwNDUwMjNaMDMxMTAvBgNV BAMTKEEzMUQyOERFMDE5OUMzNzRFN0VCRUI5NUJERDAxMDA3QkRCOTFBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qf1g1rM9HwDybTvECLis9Y/3 D3A7u6X8QKO1zQImn8KfYiMR44WnOVNrWMjitNY3okPupp+DkpUpluOPmH7o3uT0 XNlSt+7sjcw+jAW5d7l+8ZmnfIDjgUbflbBLPXXWqdEucsj6eb6auvCZZwoKUD2Z vGUpv+/Umda2VqLejTQiXPvPkDVcCYvXrwWCBH/4b2K5lpNzrjk1QEQvJ8DskjU/ xrXxEkEYOZxJ1PzkIQifVTHH49KWFidHvSjvVtkSdf5TcCIFM/oaQwcTSi0VyGk/ D0plweL0wwcPZaaTOHZFoybcl2JM+MVV3ER1+6DodRQ0iq18hlUXJQe5n3nfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUox0o3gGZw3Tn6+uVvdAQB725GmkwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfVoriedcJ5z8iusgOQq j4Jr3bTW7p6L1r1diEKFdb4GxYV+BBDmO+zD3HiP9HpivAGlOSJKprwQjsSygJ+w BEWHQSK8Es5rEWbo6mm0zr3vAEfVgYYjMqyh/qDJkYTI15kDNFwJCdGNST5K5cWe uDWSG8mPYFN9YKIA7I8WYLfYPNXOrmrBCvVoLTlp5dh1kyi1CBgVp/Gb4eSx2nG2 4ugs1QH5tYJ6233xnBOGcDYPoFQpTGFy0oTRXN+z51HF/ptwYJbxKDmGAaCUv2+V t8b1v/Qslp9golJwyZ/vEfERFmEsLMeWgNJDE8syWeMHOvJEGp4HhnsEXN2VnZZL Zg== -----END CERTIFICATE-----Generated at Fri Mar 13 19:35:01 2026 by rpki-client