$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: ZLm8WZGuTvAHEaQLxlssHo/LcyxxX4+VHNQMBfMTD5A= Subject key identifier: 4E:E2:C0:80:73:C1:E2:3F:F1:C3:94:E5:11:7A:0A:62:2A:48:74:2A Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 0F6445115D7DC38279D5C35E3127B61F86960327 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 038B Signing time: Mon 02 Mar 2026 06:16:42 +0000 Manifest this update: Mon 02 Mar 2026 06:11:42 +0000 Manifest next update: Tue 03 Mar 2026 08:52:42 +0000 Files and hashes: 1: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 5: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 6: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 7: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 12: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 13: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 14: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: vWmmBZpP/FhdmTtkzAOjZXKVFkGh75DdsafE/A1lGOU=) 15: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 16: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 17: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 08:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:45:11:5d:7d:c3:82:79:d5:c3:5e:31:27:b6:1f:86:96:03:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 2 06:11:42 2026 GMT Not After : Mar 3 08:52:42 2026 GMT Subject: CN=4EE2C08073C1E23FF1C394E5117A0A622A48742A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:9a:e3:9f:64:c4:c1:10:41:08:1f:4d:0e: 2e:13:d7:7f:b2:8b:35:cd:d5:88:76:75:4c:05:3f: dc:e1:ec:2a:64:e0:f3:e8:06:75:98:72:07:08:3c: 84:5a:0c:5a:c0:83:eb:13:da:20:a4:9a:36:5c:a3: ed:ab:1a:27:94:34:55:06:e7:ac:ef:f3:6f:88:3e: 44:5f:54:17:ae:9c:e2:a5:1f:b4:2b:df:35:05:73: 7c:40:e3:72:fc:2e:f2:10:6f:d6:33:1c:59:1b:54: 7a:04:0e:7e:32:7c:98:69:cd:00:84:a7:c8:e7:dd: 1a:42:2c:5f:d9:76:55:6e:5b:76:d8:62:e6:c2:4d: f7:d5:d7:07:81:44:4b:1a:72:ac:cd:0f:3d:87:d6: 90:63:d5:13:70:2e:db:28:91:c6:5e:19:af:dc:09: 46:4d:bf:17:e9:f9:0f:fd:17:c0:f1:7f:c8:5f:49: 71:6b:76:3f:85:a1:79:9e:5c:da:a3:a5:74:a4:5f: cf:c8:22:6a:9d:f0:d8:99:50:22:d6:fd:6e:12:77: 53:d8:b3:07:0e:c4:95:bc:8e:a1:c0:75:62:ec:b6: e4:c1:95:ea:13:8d:ca:00:65:e2:f1:2a:66:77:e1: 8d:36:02:46:d6:14:59:35:a1:6f:29:60:00:9b:53: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E2:C0:80:73:C1:E2:3F:F1:C3:94:E5:11:7A:0A:62:2A:48:74:2A X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9a:a6:c7:70:67:c8:01:6d:a9:70:03:b9:4d:1f:9c:31:93: ae:50:0f:5a:20:d5:08:23:35:1d:b9:dd:2d:21:cd:cf:0c:e4: ae:2c:db:27:b3:d4:f9:3c:16:99:60:76:41:f3:7e:3c:04:b3: 12:90:c1:93:67:9b:c2:e3:b1:30:ea:33:e0:3a:d7:13:1c:da: dd:13:df:b2:67:43:51:d3:0f:61:d4:dd:02:7e:46:36:38:df: 0a:2b:13:19:c7:ee:9a:f5:3e:05:e1:9b:db:f8:9b:43:44:6b: 7b:f2:d0:41:06:1e:37:ec:50:1e:fe:21:3d:1c:11:97:96:22: 9b:ec:cf:0e:75:c5:ee:5d:5a:c0:7a:99:de:2e:f8:91:a5:cb: f6:f3:3d:6c:98:ed:8d:3a:92:81:39:39:38:c8:a0:c1:05:91: ff:99:60:40:a8:f5:f4:c9:7d:62:e1:dc:7a:0e:d4:bd:06:de: 5a:e0:cd:2b:94:4d:68:ba:ac:7c:0b:36:c7:76:82:25:58:19: 24:eb:73:6a:a5:47:8d:47:4b:db:9a:1e:98:5e:5d:ed:21:00: 78:5f:85:e9:68:ba:bd:d2:a6:f4:a8:01:f5:2b:43:5b:54:b8: a2:d1:c4:19:7a:94:07:bf:5f:3e:37:b1:a9:29:f0:03:f2:e4: 29:ee:17:14 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD2RFEV19w4J51cNeMSe2H4aWAycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMDIwNjExNDJaFw0yNjAzMDMwODUyNDJaMDMxMTAvBgNV BAMTKDRFRTJDMDgwNzNDMUUyM0ZGMUMzOTRFNTExN0EwQTYyMkE0ODc0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzprjn2TEwRBBCB9NDi4T13+y izXN1Yh2dUwFP9zh7Cpk4PPoBnWYcgcIPIRaDFrAg+sT2iCkmjZco+2rGieUNFUG 56zv82+IPkRfVBeunOKlH7Qr3zUFc3xA43L8LvIQb9YzHFkbVHoEDn4yfJhpzQCE p8jn3RpCLF/ZdlVuW3bYYubCTffV1weBREsacqzNDz2H1pBj1RNwLtsokcZeGa/c CUZNvxfp+Q/9F8Dxf8hfSXFrdj+FoXmeXNqjpXSkX8/IImqd8NiZUCLW/W4Sd1PY swcOxJW8jqHAdWLstuTBleoTjcoAZeLxKmZ34Y02AkbWFFk1oW8pYACbU/aHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTuLAgHPB4j/xw5TlEXoKYipIdCowHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYmqbH cGfIAW2pcAO5TR+cMZOuUA9aINUIIzUdud0tIc3PDOSuLNsns9T5PBaZYHZB8348 BLMSkMGTZ5vC47Ew6jPgOtcTHNrdE9+yZ0NR0w9h1N0CfkY2ON8KKxMZx+6a9T4F 4Zvb+JtDRGt78tBBBh437FAe/iE9HBGXliKb7M8OdcXuXVrAepneLviRpcv28z1s mO2NOpKBOTk4yKDBBZH/mWBAqPX0yX1i4dx6DtS9Bt5a4M0rlE1ouqx8CzbHdoIl WBkk63NqpUeNR0vbmh6YXl3tIQB4X4XpaLq90qb0qAH1K0NbVLii0cQZepQHv18+ N7GpKfAD8uQp7hcU -----END CERTIFICATE-----Generated at Mon Mar 2 20:56:32 2026 by rpki-client