$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: /1IUd3tOYpGfmPyEGVmrAFmUfSMpZel2Po8Hy7uJnEg= Subject key identifier: 11:A4:07:57:E0:F7:E3:EF:6A:26:79:C2:ED:00:37:66:EA:18:0D:D7 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6445EB886DB29317B5145E18E7566EAB82B6FE70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0432 Signing time: Tue 25 Aug 2026 09:39:34 +0000 Manifest this update: Tue 25 Aug 2026 09:34:34 +0000 Manifest next update: Wed 26 Aug 2026 12:36:34 +0000 Files and hashes: 1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c=) 5: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 5vg//wNVRc4UASoUqb5uX0P/AnU0Ro0qvgJWu8grY+s=) 6: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 7: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog=) 10: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 11: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: qakccvnUPDhxgWs6V4ey4VS1lIk28ITvVo7N9ju+Qqk=) 13: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 14: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=) 16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow=) 17: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 64:45:eb:88:6d:b2:93:17:b5:14:5e:18:e7:56:6e:ab:82:b6:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 25 09:34:34 2026 GMT Not After : Aug 26 12:36:34 2026 GMT Subject: CN=11A40757E0F7E3EF6A2679C2ED003766EA180DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:bf:7f:e2:a0:a5:2f:0f:6d:70:b1:55:4e: 4d:09:96:b8:93:e6:d5:09:b9:05:f6:e9:ce:08:d7: c0:67:bb:26:71:dd:1a:b6:73:d2:6f:cb:5f:78:42: 9c:ad:55:bf:e1:eb:49:45:09:75:78:3c:2b:93:da: 1b:e8:c9:ac:1a:b4:90:ea:15:24:64:66:01:12:63: e3:29:11:51:3c:6d:9e:33:7e:f7:62:ef:a7:71:37: 4d:8b:73:26:a8:08:5d:18:46:0d:41:da:8c:21:2e: 64:b7:67:ab:68:48:4b:6a:f8:88:1f:4e:6c:4a:a1: 16:08:89:a6:a4:e6:00:ca:05:24:d2:45:8d:9b:89: e1:90:1c:77:43:b4:d8:3a:f9:a5:df:39:78:7f:5d: 8c:cd:63:d8:b6:33:de:2f:ad:46:57:71:f2:65:e0: 9b:41:73:7c:b5:21:75:a6:b9:f5:43:d1:61:42:f1: 54:17:d5:12:a5:de:56:f5:21:b8:bc:d1:91:5e:37: 2e:cf:1b:a6:20:05:0a:e0:2f:53:06:67:2d:26:e5: 9e:8b:92:ec:6f:24:30:19:d6:2b:17:e4:af:f3:f7: cb:48:a8:51:dd:fd:e5:c8:c7:f2:e1:eb:60:9f:63: 7d:b8:20:b2:d0:ac:c6:fd:43:5b:f3:70:8e:f4:ce: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:07:57:E0:F7:E3:EF:6A:26:79:C2:ED:00:37:66:EA:18:0D:D7 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:63:a4:f2:33:80:a8:a3:a8:70:ce:2e:ba:fd:d8:c7:48:73: bd:82:89:78:2f:e3:84:fb:6d:ee:5b:18:ba:bf:f1:51:a5:69: bf:47:1e:af:ab:ee:eb:92:41:91:7c:f9:ef:74:d2:14:09:41: dc:18:0b:cb:41:1a:64:3b:c1:f1:b5:77:53:d3:e5:e9:b1:38: a9:25:ce:12:24:1b:e2:6a:c2:19:75:b4:55:43:af:55:df:b8: 41:db:56:48:6d:38:13:a4:23:f3:e6:46:4b:41:86:a7:25:2a: e0:8c:e0:86:db:f6:d8:52:d8:d8:fd:9c:df:3b:8f:78:2a:26: 77:49:3d:fd:05:38:74:79:c0:25:4a:3c:bb:7e:6f:aa:51:e7: 83:ce:f0:55:c7:e5:a7:9e:55:f9:5d:55:72:69:4d:95:c8:fd: 70:94:55:a7:03:e0:21:b3:e4:d3:f8:f0:e2:60:cd:ae:09:69: 08:eb:a9:f9:37:f3:19:67:ce:65:74:28:34:78:15:d1:83:a6: 18:e3:78:61:d3:ca:15:27:db:e6:56:ec:57:bd:22:13:cf:40: fb:37:1d:4b:a3:e7:44:81:b7:51:cf:dc:32:4a:e4:d0:2d:6d: 09:c7:e9:ac:58:3a:9c:53:a9:cf:39:a3:ec:cc:75:39:40:66: bc:b4:65:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZEXriG2ykxe1FF4Y51Zuq4K2/nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA4MjUwOTM0MzRaFw0yNjA4MjYxMjM2MzRaMDMxMTAvBgNV BAMTKDExQTQwNzU3RTBGN0UzRUY2QTI2NzlDMkVEMDAzNzY2RUExODBERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTr9/4qClLw9tcLFVTk0JlriT 5tUJuQX26c4I18BnuyZx3Rq2c9Jvy194QpytVb/h60lFCXV4PCuT2hvoyawatJDq FSRkZgESY+MpEVE8bZ4zfvdi76dxN02LcyaoCF0YRg1B2owhLmS3Z6toSEtq+Igf TmxKoRYIiaak5gDKBSTSRY2bieGQHHdDtNg6+aXfOXh/XYzNY9i2M94vrUZXcfJl 4JtBc3y1IXWmufVD0WFC8VQX1RKl3lb1Ibi80ZFeNy7PG6YgBQrgL1MGZy0m5Z6L kuxvJDAZ1isX5K/z98tIqFHd/eXIx/Lh62CfY324ILLQrMb9Q1vzcI70zuDZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEaQHV+D34+9qJnnC7QA3ZuoYDdcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaY6Ty M4Coo6hwzi66/djHSHO9gol4L+OE+23uWxi6v/FRpWm/Rx6vq+7rkkGRfPnvdNIU CUHcGAvLQRpkO8HxtXdT0+XpsTipJc4SJBviasIZdbRVQ69V37hB21ZIbTgTpCPz 5kZLQYanJSrgjOCG2/bYUtjY/ZzfO494KiZ3ST39BTh0ecAlSjy7fm+qUeeDzvBV x+WnnlX5XVVyaU2VyP1wlFWnA+Ahs+TT+PDiYM2uCWkI66n5N/MZZ85ldCg0eBXR g6YY43hh08oVJ9vmVuxXvSITz0D7Nx1Lo+dEgbdRz9wySuTQLW0Jx+msWDqcU6nP OaPszHU5QGa8tGX1 -----END CERTIFICATE-----Generated at Sat Sep 12 12:03:49 2026 by rpki-client