$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: skr1kLsCtCFFQS5hPaz2Cqx1I7G4gq7NsND3uSsXBa0= Subject key identifier: F9:22:B3:06:75:F6:6E:BC:AA:00:C6:66:9E:01:81:46:74:93:51:5A Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 5D26B85BB6B11D33D713BAB84EC0AD4A81148443 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03D0 Signing time: Sat 13 Jun 2026 21:01:23 +0000 Manifest this update: Sat 13 Jun 2026 20:56:23 +0000 Manifest next update: Sun 14 Jun 2026 21:20:23 +0000 Files and hashes: 1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 4: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 5: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=) 6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 8: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 9: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 7+/pU4H89KYOfltRlDxxkhVS3bXXT1Q7KM1rG35v6YY=) 11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 12: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 14: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 15: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 16: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:b8:5b:b6:b1:1d:33:d7:13:ba:b8:4e:c0:ad:4a:81:14:84:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jun 13 20:56:23 2026 GMT Not After : Jun 14 21:20:23 2026 GMT Subject: CN=F922B30675F66EBCAA00C6669E0181467493515A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:d2:d5:46:ad:9d:82:9a:c4:7f:ef:75:e0: 69:45:31:a8:3a:15:73:4c:6c:63:64:f8:18:a6:4d: 57:e5:53:c4:8f:17:6f:9b:93:9f:d8:7d:64:18:24: de:a7:4e:06:02:85:58:a9:c1:29:e6:6b:f3:f7:2e: 53:8d:54:90:52:35:eb:75:5f:4e:1f:3b:cc:fa:5a: 99:27:0b:b9:9c:2a:7e:b7:7a:07:95:12:97:9a:61: 54:5f:c4:6b:8b:c4:14:35:05:f8:0e:6e:d4:71:26: 3b:e9:ed:1a:5b:b8:77:c0:22:ae:c9:bd:6e:0f:48: a9:f8:b2:6c:49:1b:4f:96:12:a4:b4:bb:72:87:17: 41:33:54:ed:e3:73:5a:09:25:ae:a5:20:80:0f:6c: 01:f0:8b:99:66:27:e8:99:a4:71:4c:4c:1d:1c:e5: 9c:7c:92:1f:3c:9a:3e:cf:0e:81:72:68:0d:17:15: c3:30:b2:4c:d2:ba:13:ac:4a:05:26:62:97:8a:49: 21:02:f0:1d:8a:53:60:47:f8:4c:95:2e:91:98:cb: 43:17:d1:59:5d:e0:f2:de:be:a5:67:f8:94:66:2f: c6:25:6e:c6:a6:52:da:02:ff:f8:0a:f6:b0:76:d8: 62:0c:56:aa:2e:3e:92:f4:28:eb:7c:b7:e2:8e:d1: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:22:B3:06:75:F6:6E:BC:AA:00:C6:66:9E:01:81:46:74:93:51:5A X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:68:78:5d:50:25:5b:e3:e7:53:2a:99:11:4e:c3:70:07:97: ef:ec:cd:fa:a3:aa:54:5e:d2:a3:c0:3b:25:3e:4c:2a:36:32: 46:2f:99:73:99:a1:90:11:bc:3b:22:4a:03:6c:1a:88:9c:47: 58:4e:24:b9:8a:21:27:6e:4e:7b:19:77:b7:c1:c1:bd:1d:70: e7:ff:b5:73:08:80:06:10:52:9c:19:6d:2c:9b:52:72:21:b5: 6d:f9:83:45:77:59:06:8f:3c:0c:bc:58:4c:af:61:7b:4e:6d: 3b:20:d9:39:e7:08:af:9e:77:c0:67:8f:b1:2b:d9:b9:b2:bd: b9:84:b9:b9:5a:ef:50:b0:f2:f7:db:ab:b4:74:0a:4c:5d:2e: bc:93:db:cb:20:f8:96:07:cb:a3:53:1a:c0:e3:fd:9e:33:0c: 61:4f:99:b2:67:52:70:cb:86:4d:38:34:58:95:11:9d:f2:cd: 03:ee:fe:a5:18:dd:6f:8c:9f:e9:93:cc:e7:5c:38:9b:55:ed: 04:bc:f9:28:24:49:ee:ce:fb:00:7d:bb:59:d7:f7:71:7a:b2: ed:b8:fc:a2:6b:ae:1a:2f:40:7a:48:10:26:f0:9c:8a:b0:d4: c3:14:7c:ee:b6:fa:31:f7:51:e6:f2:76:f4:6e:06:3a:f9:7b: ea:ba:e0:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXSa4W7axHTPXE7q4TsCtSoEUhEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA2MTMyMDU2MjNaFw0yNjA2MTQyMTIwMjNaMDMxMTAvBgNV BAMTKEY5MjJCMzA2NzVGNjZFQkNBQTAwQzY2NjlFMDE4MTQ2NzQ5MzUxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gtLVRq2dgprEf+914GlFMag6 FXNMbGNk+BimTVflU8SPF2+bk5/YfWQYJN6nTgYChVipwSnma/P3LlONVJBSNet1 X04fO8z6WpknC7mcKn63egeVEpeaYVRfxGuLxBQ1BfgObtRxJjvp7RpbuHfAIq7J vW4PSKn4smxJG0+WEqS0u3KHF0EzVO3jc1oJJa6lIIAPbAHwi5lmJ+iZpHFMTB0c 5Zx8kh88mj7PDoFyaA0XFcMwskzSuhOsSgUmYpeKSSEC8B2KU2BH+EyVLpGYy0MX 0Vld4PLevqVn+JRmL8YlbsamUtoC//gK9rB22GIMVqouPpL0KOt8t+KO0Q+zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+SKzBnX2bryqAMZmngGBRnSTUVowHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+aHhd UCVb4+dTKpkRTsNwB5fv7M36o6pUXtKjwDslPkwqNjJGL5lzmaGQEbw7IkoDbBqI nEdYTiS5iiEnbk57GXe3wcG9HXDn/7VzCIAGEFKcGW0sm1JyIbVt+YNFd1kGjzwM vFhMr2F7Tm07INk55wivnnfAZ4+xK9m5sr25hLm5Wu9QsPL326u0dApMXS68k9vL IPiWB8ujUxrA4/2eMwxhT5myZ1Jwy4ZNODRYlRGd8s0D7v6lGN1vjJ/pk8znXDib Ve0EvPkoJEnuzvsAfbtZ1/dxerLtuPyia64aL0B6SBAm8JyKsNTDFHzutvox91Hm 8nb0bgY6+XvquuDn -----END CERTIFICATE-----Generated at Sun Jun 14 10:24:28 2026 by rpki-client