$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: a4HQF0TNhihH0TZ6VKhcsHXnIttCRwrHE8YDij9Q9pg= Subject key identifier: 88:9A:05:B2:CF:A4:5F:5E:D5:60:13:34:3C:A0:FC:62:7B:5A:90:2C Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 05D3A0CA9B9BAAE7CEE8E8CA52896DC1A4365267 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03A4 Signing time: Fri 20 Mar 2026 20:08:15 +0000 Manifest this update: Fri 20 Mar 2026 20:03:15 +0000 Manifest next update: Sat 21 Mar 2026 22:40:15 +0000 Files and hashes: 1: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 3: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 5: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 7: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 8: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 9: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 12: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 13: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 14: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 15: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 16: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: v0EgF575poX/F8MqW/zyRQ5FwnqxOXjQYwaESN/ooUw=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 22:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d3:a0:ca:9b:9b:aa:e7:ce:e8:e8:ca:52:89:6d:c1:a4:36:52:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 20 20:03:15 2026 GMT Not After : Mar 21 22:40:15 2026 GMT Subject: CN=889A05B2CFA45F5ED56013343CA0FC627B5A902C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:4e:3a:b3:95:77:8a:11:36:2a:d8:7f:7d: a0:d6:c9:9e:27:1c:3d:34:09:31:bf:99:49:ae:ce: cb:08:91:6e:9b:28:c0:a7:99:d5:71:24:1b:10:91: d8:79:3e:98:52:ea:ac:01:a6:31:67:1a:1b:5b:ed: 07:6c:99:12:09:49:6b:f3:e3:28:6b:d5:6f:a7:f8: e3:d0:82:62:7e:35:e2:98:44:4d:c6:a6:d4:71:50: 35:26:b4:cc:80:be:f8:b7:5f:3d:7a:5c:be:ee:28: 77:c1:23:ef:fb:94:da:5d:6a:bd:18:eb:0e:8d:7a: 63:42:9d:c8:15:e9:d2:90:09:5c:a1:8b:df:f0:3b: 8d:0c:22:97:f7:03:db:30:86:b6:32:da:37:5d:c4: fc:88:89:ba:c4:38:31:01:7d:d6:26:ca:c3:0a:de: d8:2b:1c:70:14:fd:73:df:a0:b0:7c:d2:2b:c2:bf: 2d:df:61:b6:f7:30:44:e1:26:e1:d5:6e:b5:8c:6f: da:80:0d:ec:56:a1:15:ab:dc:19:0d:c7:84:70:65: 82:67:fb:db:89:e7:b0:d0:24:d2:d4:0b:14:5d:fd: ec:b0:e5:7d:a1:73:06:ee:d3:52:b8:2d:21:47:92: 41:84:c1:8c:d6:be:3a:72:27:5e:ed:57:92:68:0a: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9A:05:B2:CF:A4:5F:5E:D5:60:13:34:3C:A0:FC:62:7B:5A:90:2C X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1c:7a:17:ff:17:77:42:55:e9:a9:20:d5:f8:aa:3d:0a:d5: 6d:2e:c5:85:fa:42:a9:b5:6e:08:62:83:8a:87:4f:c2:8e:fc: 69:3f:aa:46:70:a5:1f:de:b0:84:a1:b2:9b:fc:06:66:47:f3: 63:3f:d7:2e:0c:96:68:80:49:41:6a:a3:a2:57:4b:f9:46:1f: f4:72:c8:80:10:c5:c6:e3:46:0f:c7:74:6f:22:68:89:17:2c: 3e:3d:03:7c:5f:c7:58:eb:8f:4c:62:1e:2b:7a:1b:15:4f:79: d0:26:5d:85:89:b5:a7:89:51:53:5d:21:43:9e:1a:34:b7:0c: b3:8f:f4:db:9d:32:4d:c9:5a:5c:55:15:85:5c:69:2e:47:33: 21:a8:b6:d9:cf:97:cb:4f:e2:af:1c:dd:cc:8a:83:5c:1f:c5: 1a:13:4e:a7:08:10:b4:32:95:1a:1a:1b:bc:ae:10:1d:49:a9: 1c:af:64:58:d1:8b:9b:5e:96:4f:55:50:4f:14:26:de:68:55: bc:f9:cf:5d:47:90:10:a0:88:b3:be:30:6d:82:ea:eb:81:33: d2:3a:36:b1:d1:87:cd:be:72:64:85:c5:83:85:11:ca:72:b0: 45:a7:ac:33:49:0a:0b:23:5d:bc:06:da:bb:6f:ad:ac:d6:63: 87:37:0c:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBdOgypubqufO6OjKUoltwaQ2UmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMjAyMDAzMTVaFw0yNjAzMjEyMjQwMTVaMDMxMTAvBgNV BAMTKDg4OUEwNUIyQ0ZBNDVGNUVENTYwMTMzNDNDQTBGQzYyN0I1QTkwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVU46s5V3ihE2Kth/faDWyZ4n HD00CTG/mUmuzssIkW6bKMCnmdVxJBsQkdh5PphS6qwBpjFnGhtb7QdsmRIJSWvz 4yhr1W+n+OPQgmJ+NeKYRE3GptRxUDUmtMyAvvi3Xz16XL7uKHfBI+/7lNpdar0Y 6w6NemNCncgV6dKQCVyhi9/wO40MIpf3A9swhrYy2jddxPyIibrEODEBfdYmysMK 3tgrHHAU/XPfoLB80ivCvy3fYbb3METhJuHVbrWMb9qADexWoRWr3BkNx4RwZYJn +9uJ57DQJNLUCxRd/eyw5X2hcwbu01K4LSFHkkGEwYzWvjpyJ17tV5JoCnSBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiJoFss+kX17VYBM0PKD8YntakCwwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKHHoX /xd3QlXpqSDV+Ko9CtVtLsWF+kKptW4IYoOKh0/CjvxpP6pGcKUf3rCEobKb/AZm R/NjP9cuDJZogElBaqOiV0v5Rh/0csiAEMXG40YPx3RvImiJFyw+PQN8X8dY649M Yh4rehsVT3nQJl2FibWniVFTXSFDnho0twyzj/TbnTJNyVpcVRWFXGkuRzMhqLbZ z5fLT+KvHN3MioNcH8UaE06nCBC0MpUaGhu8rhAdSakcr2RY0YubXpZPVVBPFCbe aFW8+c9dR5AQoIizvjBtgurrgTPSOjax0YfNvnJkhcWDhRHKcrBFp6wzSQoLI128 Btq7b62s1mOHNwxL -----END CERTIFICATE-----Generated at Sat Mar 21 11:33:33 2026 by rpki-client