$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: 82HXckpz+Fr9e69Nvza9LRIHU8siil5kqZRnCJ2CWT4= Subject key identifier: AE:84:1A:10:CF:5F:2D:33:EC:B1:5B:97:DC:3F:3C:D5:01:5D:E2:84 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 152F050D876A8ED80ADB14903C9406B78018D3A4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 039A Signing time: Fri 13 Mar 2026 06:48:15 +0000 Manifest this update: Fri 13 Mar 2026 06:43:15 +0000 Manifest next update: Sat 14 Mar 2026 10:46:15 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 2: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 3: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 5: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 6: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 9: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: zYXQSTlqiV2D03tpw0CzssAxJnNwLv+jvJbnd9WSlvE=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 17: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2f:05:0d:87:6a:8e:d8:0a:db:14:90:3c:94:06:b7:80:18:d3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 13 06:43:15 2026 GMT Not After : Mar 14 10:46:15 2026 GMT Subject: CN=AE841A10CF5F2D33ECB15B97DC3F3CD5015DE284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:4e:19:97:8b:95:21:1d:81:59:5a:4b:13: 14:b6:b7:d7:ba:e3:06:b9:24:83:13:2d:2c:61:f3: 99:c6:5e:c9:13:1e:aa:29:6a:39:b4:58:37:73:43: ac:c7:dc:84:5b:52:68:d7:82:62:a2:b0:48:cd:99: db:91:e5:35:3e:6f:4d:53:8f:d5:95:9b:e2:93:3c: f7:78:8c:40:dd:2c:f8:c9:8e:61:63:3b:4b:f3:ca: ff:05:4c:8f:4c:1e:a3:94:09:3e:c4:14:bb:30:85: a1:1f:55:04:4c:99:be:16:4f:bd:96:47:2f:05:ab: 18:6c:5d:bf:8d:94:d0:61:ab:56:d6:d7:bc:51:c7: 78:f4:47:fc:9b:60:92:15:f5:5c:ca:51:fb:44:e3: 8a:53:e9:a5:e8:d4:a6:1b:e0:36:f3:16:f9:19:a3: b7:42:ed:ad:f1:22:c1:b1:cb:8b:0b:1d:0b:9b:40: 93:4e:c3:17:0d:a9:cc:1d:79:03:06:55:3f:3b:b5: ce:32:9c:fd:e6:56:bf:27:13:3b:73:dd:97:ad:e8: 3e:a5:b8:95:c2:71:79:ff:6c:a8:01:d3:07:1c:71: e4:32:52:89:14:28:a6:33:fb:ef:59:3f:da:9f:cc: 39:a9:bb:08:06:d3:f7:e3:9f:2e:de:7b:83:b3:46: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:84:1A:10:CF:5F:2D:33:EC:B1:5B:97:DC:3F:3C:D5:01:5D:E2:84 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a3:1f:1e:db:dd:c3:0e:b3:06:ab:4e:48:67:a7:80:f7:65: 58:3b:52:15:d9:3f:b0:0f:62:6b:51:b8:9d:d0:9d:33:65:12: 9a:3f:f6:3a:8a:6b:2a:b5:04:db:f4:60:74:12:74:3f:8b:e9: da:ea:18:ef:96:64:df:eb:c9:f6:e1:74:ea:54:a2:c6:df:fb: 46:e6:d7:09:b4:41:7d:54:57:a7:d1:04:4b:ce:b1:bc:3b:e8: 0f:b2:06:2e:f7:88:b4:06:82:fa:91:cd:16:7e:ee:d3:96:4c: 07:a1:9e:02:ef:bf:93:36:2d:a4:6f:93:f8:a1:61:c6:b0:5b: d9:64:51:a4:dc:18:da:56:27:8d:51:96:84:17:95:a0:63:98: 87:c3:3b:ac:bc:4b:30:99:27:32:9f:a8:7c:e0:a0:40:0a:06: e2:ff:66:62:d7:9c:77:2a:20:74:9d:26:f5:4d:2e:c2:57:00: c3:7a:73:e0:d8:77:9f:fd:34:16:16:f6:fb:fb:8e:4a:1b:b3: 4a:99:01:2e:be:b5:45:0c:cc:76:cb:61:2b:01:9c:72:74:b9: d0:2d:b3:c2:2a:ce:e5:3f:f7:6e:f4:81:bb:ea:55:3b:96:b8: a9:04:5b:b8:d3:6b:26:da:1a:bf:1f:07:78:a2:91:6a:2e:6f: c6:1c:28:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFS8FDYdqjtgK2xSQPJQGt4AY06QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMTMwNjQzMTVaFw0yNjAzMTQxMDQ2MTVaMDMxMTAvBgNV BAMTKEFFODQxQTEwQ0Y1RjJEMzNFQ0IxNUI5N0RDM0YzQ0Q1MDE1REUyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxa04Zl4uVIR2BWVpLExS2t9e6 4wa5JIMTLSxh85nGXskTHqopajm0WDdzQ6zH3IRbUmjXgmKisEjNmduR5TU+b01T j9WVm+KTPPd4jEDdLPjJjmFjO0vzyv8FTI9MHqOUCT7EFLswhaEfVQRMmb4WT72W Ry8FqxhsXb+NlNBhq1bW17xRx3j0R/ybYJIV9VzKUftE44pT6aXo1KYb4DbzFvkZ o7dC7a3xIsGxy4sLHQubQJNOwxcNqcwdeQMGVT87tc4ynP3mVr8nEztz3Zet6D6l uJXCcXn/bKgB0wccceQyUokUKKYz++9ZP9qfzDmpuwgG0/fjny7ee4OzRtWLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUroQaEM9fLTPssVuX3D881QFd4oQwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaox8e 293DDrMGq05IZ6eA92VYO1IV2T+wD2JrUbid0J0zZRKaP/Y6imsqtQTb9GB0EnQ/ i+na6hjvlmTf68n24XTqVKLG3/tG5tcJtEF9VFen0QRLzrG8O+gPsgYu94i0BoL6 kc0Wfu7TlkwHoZ4C77+TNi2kb5P4oWHGsFvZZFGk3BjaVieNUZaEF5WgY5iHwzus vEswmScyn6h84KBACgbi/2Zi15x3KiB0nSb1TS7CVwDDenPg2Hef/TQWFvb7+45K G7NKmQEuvrVFDMx2y2ErAZxydLnQLbPCKs7lP/du9IG76lU7lripBFu402sm2hq/ Hwd4opFqLm/GHCgs -----END CERTIFICATE-----Generated at Fri Mar 13 16:47:46 2026 by rpki-client