$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: mhGIWObyUXaPnnd9GPBr8P8ps29snEVWSSyRBDXFm58= Subject key identifier: 0A:88:46:6B:F2:48:02:88:B9:BD:09:3E:47:65:1D:EF:E0:BF:1F:F2 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 4B1648F9D3E8F021D1830B0BE4D55AE2C4F8AD93 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03BD Signing time: Wed 08 Apr 2026 05:33:47 +0000 Manifest this update: Wed 08 Apr 2026 05:28:47 +0000 Manifest next update: Thu 09 Apr 2026 05:59:47 +0000 Files and hashes: 1: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 3: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 4: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 5: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 8: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 9: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 11: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: CL4QOzrgfOpj1BfuQUWHsL50ano+a7dIMQcrPsBCwF8=) 13: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 14: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 16: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 17: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Apr 2026 05:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:48:f9:d3:e8:f0:21:d1:83:0b:0b:e4:d5:5a:e2:c4:f8:ad:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 8 05:28:47 2026 GMT Not After : Apr 9 05:59:47 2026 GMT Subject: CN=0A88466BF2480288B9BD093E47651DEFE0BF1FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:f9:da:cb:b2:79:b8:da:8c:3b:94:d2:c7: fe:aa:37:18:c1:9d:ac:c8:38:d6:22:55:29:32:72: e4:a6:2a:2a:55:3f:5d:4d:8c:ef:1d:fe:c8:a9:ee: b2:5c:04:9f:2f:f1:1b:7b:ec:62:37:5b:f1:a9:d1: c7:d7:f7:e0:a0:d1:fa:fc:8f:3b:24:a0:17:5c:58: 32:6e:58:ca:d1:ed:61:7e:80:27:9e:a1:9a:80:e9: fc:1c:4c:1f:5e:0c:ea:e2:2b:ed:f7:34:3e:df:29: 52:c6:dd:1a:d4:03:68:a8:d1:c7:ed:27:05:93:1d: 0a:2f:be:cd:15:31:b3:0b:5c:19:14:08:4c:a5:b7: 1f:c3:0e:58:06:eb:d2:2b:fc:d2:aa:cb:c4:91:a4: 09:78:92:c9:ef:32:56:bd:fd:54:41:f8:c2:39:89: 4e:c4:5a:ea:4e:d2:d7:f0:ae:15:92:6d:2a:f6:54: dd:42:5e:10:bc:62:ab:28:b6:21:d0:33:9a:c6:c2: 25:4e:43:ae:1b:ad:0c:83:40:97:11:63:12:b4:bb: a2:b2:42:2f:5e:0d:7e:86:87:d0:6b:b3:68:3b:d0: 65:3e:59:fd:29:2d:46:82:43:7e:c0:ec:f4:1d:ac: b3:3c:66:55:01:d9:35:8e:fa:85:81:0a:53:06:87: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:46:6B:F2:48:02:88:B9:BD:09:3E:47:65:1D:EF:E0:BF:1F:F2 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:9f:0f:db:2a:a1:b2:ea:24:d2:a5:32:91:9c:97:82:ce: 0b:35:06:68:88:be:5a:c2:3b:26:e8:2e:3f:a9:f5:e1:a8:cf: c5:6d:ad:3a:e0:aa:36:8d:a4:dc:a7:36:28:7c:c8:66:49:94: 01:13:16:e7:9b:70:aa:02:e9:63:11:8f:ea:91:0d:f2:f6:2c: 51:b1:f5:b1:9a:1b:b1:8e:b8:6f:21:a5:df:94:57:bd:43:e5: 4f:b7:31:55:f2:c3:4e:91:e9:51:8d:2e:f8:52:36:ef:93:0f: 15:da:06:18:ea:81:0e:2a:d3:98:50:9f:7e:15:82:1c:b6:01: 66:4d:dc:61:86:bf:28:47:d6:45:4f:8b:87:68:24:b7:4c:ff: 20:30:f8:de:86:11:23:cb:6b:83:fa:c3:b3:3c:fa:a3:fd:c5: 88:94:d4:a3:66:3a:d0:19:48:a7:7d:b3:9f:4c:93:ac:bf:33: c1:6b:18:b7:9f:88:83:39:fa:b3:83:31:bd:f7:0d:9e:f2:2b: 24:73:82:56:94:d0:a0:65:e9:42:cc:64:02:0f:c0:84:4e:7b: 46:94:ba:0e:70:76:f2:5d:8d:26:90:02:13:93:25:08:38:69: 1c:dc:b9:87:93:70:b0:99:0a:fe:58:df:84:b0:da:e2:40:7a: 6c:b4:a1:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSxZI+dPo8CHRgwsL5NVa4sT4rZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA0MDgwNTI4NDdaFw0yNjA0MDkwNTU5NDdaMDMxMTAvBgNV BAMTKDBBODg0NjZCRjI0ODAyODhCOUJEMDkzRTQ3NjUxREVGRTBCRjFGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAfnay7J5uNqMO5TSx/6qNxjB nazIONYiVSkycuSmKipVP11NjO8d/sip7rJcBJ8v8Rt77GI3W/Gp0cfX9+Cg0fr8 jzskoBdcWDJuWMrR7WF+gCeeoZqA6fwcTB9eDOriK+33ND7fKVLG3RrUA2io0cft JwWTHQovvs0VMbMLXBkUCEyltx/DDlgG69Ir/NKqy8SRpAl4ksnvMla9/VRB+MI5 iU7EWupO0tfwrhWSbSr2VN1CXhC8YqsotiHQM5rGwiVOQ64brQyDQJcRYxK0u6Ky Qi9eDX6Gh9Brs2g70GU+Wf0pLUaCQ37A7PQdrLM8ZlUB2TWO+oWBClMGh6PXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCohGa/JIAoi5vQk+R2Ud7+C/H/IwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCnJ8P 2yqhsuok0qUykZyXgs4LNQZoiL5awjsm6C4/qfXhqM/Fba064Ko2jaTcpzYofMhm SZQBExbnm3CqAuljEY/qkQ3y9ixRsfWxmhuxjrhvIaXflFe9Q+VPtzFV8sNOkelR jS74Ujbvkw8V2gYY6oEOKtOYUJ9+FYIctgFmTdxhhr8oR9ZFT4uHaCS3TP8gMPje hhEjy2uD+sOzPPqj/cWIlNSjZjrQGUinfbOfTJOsvzPBaxi3n4iDOfqzgzG99w2e 8iskc4JWlNCgZelCzGQCD8CETntGlLoOcHbyXY0mkAITkyUIOGkc3LmHk3CwmQr+ WN+EsNriQHpstKFi -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:38 2026 by rpki-client