$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: Yx5x157GwBAv9Z6Td4eEbg+8SeVzSHTQxGrW6tF0tiw= Subject key identifier: C3:BA:2D:16:0E:2B:6E:C4:6D:67:EB:DE:39:E0:CC:44:BB:E4:32:37 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 1F430262725D29EB26D73E55EE4D3CF653AA7EF7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0395 Signing time: Mon 09 Mar 2026 13:13:41 +0000 Manifest this update: Mon 09 Mar 2026 13:08:41 +0000 Manifest next update: Tue 10 Mar 2026 14:27:41 +0000 Files and hashes: 1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 2: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 3: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 4: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 6: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 8: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: tCputaEI8nanQgcdQFMTwAKoZUiV4nSw1E+T9ZqKFYE=) 9: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 13: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 14: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 16: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 17: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 14:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:43:02:62:72:5d:29:eb:26:d7:3e:55:ee:4d:3c:f6:53:aa:7e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 9 13:08:41 2026 GMT Not After : Mar 10 14:27:41 2026 GMT Subject: CN=C3BA2D160E2B6EC46D67EBDE39E0CC44BBE43237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:a4:e2:92:8a:6f:d1:7f:e7:52:68:f8:cc: 6b:13:49:86:91:d6:41:ff:39:bc:30:3a:08:d0:a0: f9:31:6c:22:6a:50:79:62:80:38:07:cb:02:86:cf: d8:a8:86:5b:af:f3:56:93:3c:95:d6:5b:24:83:12: f4:dc:7d:7d:20:19:a3:21:ee:3c:c7:d5:00:53:5b: f7:07:65:4b:7f:68:29:c5:64:a3:07:03:9e:b5:5a: 0e:60:7b:31:84:db:bf:f2:82:00:d8:6f:c9:ec:d1: 48:b5:2d:0d:3f:88:4e:63:d4:c7:db:e7:b9:1f:d4: cb:0a:93:31:42:4e:9d:87:89:ce:d6:8d:fd:7a:33: 2a:72:e8:47:45:fd:81:3f:0a:9f:25:f2:b5:19:a7: 0f:b8:29:11:3e:9e:74:c6:fa:8c:af:ca:0b:be:79: 65:70:c5:7a:4c:c0:f1:10:51:fd:a5:15:5e:7b:0d: b1:30:db:5e:ee:a8:fe:d1:88:f7:d2:0b:f6:95:b8: 2d:58:ee:61:f5:63:ff:76:e3:f2:3d:6a:d3:de:37: 9b:e8:87:a6:9c:9d:16:49:96:64:99:4c:fe:85:83: d0:80:fc:bd:be:a3:cc:2f:3e:e1:e9:45:2b:63:2f: 0e:c9:e2:48:21:28:24:30:07:4f:1e:f2:61:ea:dd: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:2D:16:0E:2B:6E:C4:6D:67:EB:DE:39:E0:CC:44:BB:E4:32:37 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:03:71:d6:18:73:d0:4b:06:53:13:38:4e:c0:18:b2:9f:5f: be:4e:8a:e4:de:5b:55:ec:11:d6:c2:7e:d5:95:47:0c:6b:14: 74:e4:39:9c:d1:99:4c:fb:d5:78:6d:4f:7c:ba:69:98:78:45: 3f:94:b3:2f:6b:90:1d:a7:19:0e:36:38:17:00:85:e4:96:dd: 44:7f:7e:59:7a:ea:3c:62:48:ac:91:23:e1:3a:9c:67:23:8b: 93:c4:7d:e7:c5:48:a6:05:80:77:73:60:75:1e:2e:2f:01:3a: 6d:08:a2:29:5c:96:1f:4d:28:1b:a2:f9:1c:12:1d:15:cb:1c: 47:0e:09:41:2c:d6:16:55:e7:99:00:78:82:ee:0f:30:ee:97: bb:1e:75:ae:2f:84:03:20:52:0e:e0:ed:4b:60:8c:e7:40:1c: 47:77:99:99:6b:85:f4:46:af:22:a4:ac:9a:83:e1:be:7f:41: ab:cb:64:de:bc:06:91:5c:f6:93:4d:24:23:70:ac:6a:2f:f6: 92:51:29:70:08:16:04:74:4a:ea:a6:da:44:a9:6b:0e:73:08: b8:2c:37:45:09:dc:01:03:13:bc:df:79:c1:82:ff:ac:fd:a2: 84:97:72:79:97:54:dd:5d:ca:21:96:52:27:d5:be:1c:d5:26: 57:78:3f:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH0MCYnJdKesm1z5V7k089lOqfvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMDkxMzA4NDFaFw0yNjAzMTAxNDI3NDFaMDMxMTAvBgNV BAMTKEMzQkEyRDE2MEUyQjZFQzQ2RDY3RUJERTM5RTBDQzQ0QkJFNDMyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmf6Tikopv0X/nUmj4zGsTSYaR 1kH/ObwwOgjQoPkxbCJqUHligDgHywKGz9iohluv81aTPJXWWySDEvTcfX0gGaMh 7jzH1QBTW/cHZUt/aCnFZKMHA561Wg5gezGE27/yggDYb8ns0Ui1LQ0/iE5j1Mfb 57kf1MsKkzFCTp2Hic7Wjf16Mypy6EdF/YE/Cp8l8rUZpw+4KRE+nnTG+oyvygu+ eWVwxXpMwPEQUf2lFV57DbEw217uqP7RiPfSC/aVuC1Y7mH1Y/924/I9atPeN5vo h6acnRZJlmSZTP6Fg9CA/L2+o8wvPuHpRStjLw7J4kghKCQwB08e8mHq3cVvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw7otFg4rbsRtZ+veOeDMRLvkMjcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGA3HW GHPQSwZTEzhOwBiyn1++Tork3ltV7BHWwn7VlUcMaxR05Dmc0ZlM+9V4bU98ummY eEU/lLMva5AdpxkONjgXAIXklt1Ef35Zeuo8YkiskSPhOpxnI4uTxH3nxUimBYB3 c2B1Hi4vATptCKIpXJYfTSgbovkcEh0VyxxHDglBLNYWVeeZAHiC7g8w7pe7HnWu L4QDIFIO4O1LYIznQBxHd5mZa4X0Rq8ipKyag+G+f0Gry2TevAaRXPaTTSQjcKxq L/aSUSlwCBYEdErqptpEqWsOcwi4LDdFCdwBAxO833nBgv+s/aKEl3J5l1TdXcoh llIn1b4c1SZXeD+2 -----END CERTIFICATE-----Generated at Tue Mar 10 03:29:13 2026 by rpki-client