$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: lAS3XXSEOyOAjUYYBO0jwf99iNc5XmZ4mX7vm1ydz0c= Subject key identifier: C6:8B:CE:AA:C3:DA:B8:A0:2A:50:6A:50:18:DF:77:AF:E3:BA:31:42 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 40F1560C3EB9C1B6741E9BA7AC763CD0667E96EE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03AF Signing time: Sat 28 Mar 2026 20:58:21 +0000 Manifest this update: Sat 28 Mar 2026 20:53:21 +0000 Manifest next update: Sun 29 Mar 2026 23:22:21 +0000 Files and hashes: 1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: HoRyu0MVmMHUI1gvt2/ZCcL0R5LfkhW9eLMITNeiFzE=) 2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 4: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 9: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 10: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 11: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 12: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 14: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 15: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 17: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f1:56:0c:3e:b9:c1:b6:74:1e:9b:a7:ac:76:3c:d0:66:7e:96:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 28 20:53:21 2026 GMT Not After : Mar 29 23:22:21 2026 GMT Subject: CN=C68BCEAAC3DAB8A02A506A5018DF77AFE3BA3142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:ba:b3:99:2c:98:08:69:0c:ae:24:d6:1d: 2e:12:8e:ea:ef:e9:ac:86:71:4e:d8:e9:fc:65:1c: 67:80:55:d2:88:f0:0b:e7:b7:d2:fb:8d:00:49:a7: a3:f0:a1:37:09:63:1d:9d:b8:c3:d4:25:88:5b:1e: 9a:84:d2:fc:d4:ad:c9:e3:6d:01:5e:88:0b:39:b3: 7f:96:16:7b:e0:16:49:b0:6b:d9:15:93:11:c8:bb: c0:f8:7b:92:16:71:b8:ab:0a:de:4e:c1:0c:f7:46: f5:21:19:7a:e8:e8:02:33:1a:16:d2:79:ee:89:84: f6:1c:b9:fa:e3:f9:15:65:04:90:13:4b:c7:4a:72: 7c:b5:0e:64:33:1a:58:c6:0e:48:7d:31:4d:ef:3f: 9c:28:2a:bd:e9:c1:f4:13:18:86:14:f8:cf:fe:f6: 26:f6:a5:ca:b0:16:f2:f3:fb:6b:ed:58:8b:ba:14: c1:a0:ee:c4:80:05:83:37:7e:0d:fb:ac:8f:5f:0a: 12:d1:7f:3a:5b:e8:a8:d8:3c:04:5b:61:d5:7f:90: 40:7a:46:eb:c6:4d:60:9e:ad:1d:05:f9:29:b0:89: ff:68:f2:ef:b3:57:21:bb:e6:bc:00:2e:31:82:92: 08:5a:ef:60:7e:c5:26:7f:c0:ff:a2:f2:24:98:05: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:CE:AA:C3:DA:B8:A0:2A:50:6A:50:18:DF:77:AF:E3:BA:31:42 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bf:72:58:58:31:dd:0e:5d:0b:64:e6:f0:f9:09:8e:59:34: b1:aa:ab:3d:fb:ec:71:23:c6:c3:34:c4:32:03:74:06:6b:35: 36:33:bf:62:82:d5:7c:d4:32:43:4e:dd:8b:ae:50:f3:6b:62: ee:96:db:3c:12:c1:d9:af:81:52:c8:25:5d:39:ec:7f:bf:d7: 75:ed:d0:6e:9e:d2:a9:9d:3b:54:91:e6:cb:ae:80:01:c7:eb: 71:c8:23:21:d9:b5:90:26:ae:9c:93:62:a0:4c:9a:a8:95:71: 19:ad:5f:d3:c2:13:9a:d3:40:ba:07:d4:07:8c:72:d5:95:ed: 90:72:2c:92:da:d0:c0:45:d4:79:02:ec:90:67:8d:d4:ea:26: 29:93:94:1b:d4:ea:d3:b0:9c:65:de:34:2e:d9:ab:2a:20:48: be:4e:2c:17:5f:a7:1e:cd:af:38:95:a8:44:ee:28:61:54:c0: 77:68:ba:df:6c:a9:ac:b1:40:ab:40:de:b0:52:67:7f:54:d0: f7:a7:41:dc:82:d4:21:5d:46:69:71:5e:17:a5:08:ae:7a:46: 64:57:ca:f4:f1:11:99:89:87:8a:e2:77:fd:a2:2e:7f:82:6c: 4a:72:e8:fc:a1:48:a7:e8:57:6d:a7:89:e2:50:94:77:56:90: 49:38:27:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQPFWDD65wbZ0HpunrHY80GZ+lu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMjgyMDUzMjFaFw0yNjAzMjkyMzIyMjFaMDMxMTAvBgNV BAMTKEM2OEJDRUFBQzNEQUI4QTAyQTUwNkE1MDE4REY3N0FGRTNCQTMxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd7qzmSyYCGkMriTWHS4Sjurv 6ayGcU7Y6fxlHGeAVdKI8Avnt9L7jQBJp6PwoTcJYx2duMPUJYhbHpqE0vzUrcnj bQFeiAs5s3+WFnvgFkmwa9kVkxHIu8D4e5IWcbirCt5OwQz3RvUhGXro6AIzGhbS ee6JhPYcufrj+RVlBJATS8dKcny1DmQzGljGDkh9MU3vP5woKr3pwfQTGIYU+M/+ 9ib2pcqwFvLz+2vtWIu6FMGg7sSABYM3fg37rI9fChLRfzpb6KjYPARbYdV/kEB6 RuvGTWCerR0F+Smwif9o8u+zVyG75rwALjGCkgha72B+xSZ/wP+i8iSYBe6ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxovOqsPauKAqUGpQGN93r+O6MUIwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuv3JY WDHdDl0LZObw+QmOWTSxqqs9++xxI8bDNMQyA3QGazU2M79igtV81DJDTt2LrlDz a2Lults8EsHZr4FSyCVdOex/v9d17dBuntKpnTtUkebLroABx+txyCMh2bWQJq6c k2KgTJqolXEZrV/TwhOa00C6B9QHjHLVle2QciyS2tDARdR5AuyQZ43U6iYpk5Qb 1OrTsJxl3jQu2asqIEi+TiwXX6ceza84lahE7ihhVMB3aLrfbKmssUCrQN6wUmd/ VND3p0HcgtQhXUZpcV4XpQiuekZkV8r08RGZiYeK4nf9oi5/gmxKcuj8oUin6Fdt p4niUJR3VpBJOCcs -----END CERTIFICATE-----Generated at Sun Mar 29 04:27:19 2026 by rpki-client