$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: aMHOHeM4mZ6G7k7uekGYr4bj4ECM3Y1XMfHx71qGWEQ= Subject key identifier: A6:00:67:CB:4B:2E:A9:60:FA:83:B6:45:77:4F:A5:16:CB:E9:DB:C2 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 5BFE25C62AF9B492FFD1A91786C534C60D2C2FA4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0397 Signing time: Wed 11 Mar 2026 00:03:43 +0000 Manifest this update: Tue 10 Mar 2026 23:58:43 +0000 Manifest next update: Thu 12 Mar 2026 03:24:43 +0000 Files and hashes: 1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: PkoFXeQNTcQ4+8t0EUv9I7E6YD56Tgf+0zwVA5jH5Tg=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 3: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 4: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 6: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 14: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 16: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 03:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fe:25:c6:2a:f9:b4:92:ff:d1:a9:17:86:c5:34:c6:0d:2c:2f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 10 23:58:43 2026 GMT Not After : Mar 12 03:24:43 2026 GMT Subject: CN=A60067CB4B2EA960FA83B645774FA516CBE9DBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:11:fb:59:96:e9:2e:e3:2c:fc:9d:4f:22: e8:b5:ab:c4:72:0c:60:f8:68:35:a8:d3:d0:4c:47: ed:8e:af:4f:b1:ff:82:da:ba:73:85:e7:ff:f0:80: c6:c1:b9:eb:8b:fa:68:37:b2:f6:ba:c4:a7:59:7a: 2e:dd:d5:83:c6:9c:5c:74:99:d6:3b:4d:ba:1a:c5: 73:83:d5:5d:1d:30:fa:f6:fd:60:bc:b1:67:d8:17: 16:f8:79:a8:62:16:c0:35:89:45:6b:4e:1e:23:36: 1b:6e:3d:33:ed:4b:40:7e:21:2b:25:0c:f8:38:f9: 8b:40:24:90:a3:dd:b7:ba:dd:14:42:49:ae:ff:bb: 72:84:e2:c8:85:39:57:7b:f9:fb:da:10:40:f6:27: 11:3b:16:75:b4:08:a5:d8:97:46:46:cf:59:27:70: f2:2a:ba:22:44:67:3b:b3:7a:48:49:22:71:4f:f4: e9:f6:29:90:d3:f1:f9:f5:2f:19:7b:91:8c:fc:b9: 30:50:c2:61:f2:80:8f:70:51:ef:49:c1:58:58:08: 3d:f9:2b:d2:13:28:cb:ba:44:af:4e:3a:44:2a:d2: 0a:d7:c7:00:ca:94:c5:02:38:0a:72:26:99:f2:72: 35:fb:82:c7:8f:1f:04:1c:dc:98:2d:ab:85:41:7d: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:00:67:CB:4B:2E:A9:60:FA:83:B6:45:77:4F:A5:16:CB:E9:DB:C2 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:08:3d:1c:21:29:94:7c:2c:d9:05:f0:d0:e9:51:29:d0: a5:f4:f0:f6:36:b8:76:7b:c1:53:2f:c0:53:88:ce:fc:13:7f: 8f:59:3e:6c:be:67:fa:c7:13:c8:18:42:72:32:39:bb:47:c8: 07:af:33:cb:bf:b6:99:d8:cb:94:c1:9c:60:ee:d9:25:52:e7: b0:b1:20:b5:34:81:62:2c:5c:57:e7:25:ef:d2:47:47:60:67: 3c:d7:3d:c6:67:6e:49:15:0a:b2:a0:d8:61:78:9f:83:a6:9d: 08:d8:af:5c:f8:4f:1b:14:ba:37:94:bd:e9:72:55:36:e1:c3: 2d:72:8b:4c:16:a2:64:f2:3d:1c:75:09:fa:d1:5b:1d:cd:c5: 33:ac:86:d3:e8:ae:b4:dc:d5:09:f1:7b:3c:43:2c:fd:03:70: 57:73:f2:9f:dc:a1:ad:82:a2:59:73:27:6f:8b:93:86:e7:a0: 75:e9:3d:99:03:c6:0b:cf:95:71:eb:8d:1d:64:f4:8b:a1:ec: cb:68:06:87:74:a7:2d:83:a4:ff:de:5f:03:75:b2:fe:03:6f: fe:e2:ba:19:c4:39:76:97:b1:e5:b1:dd:c2:63:8c:d0:02:71: 5d:02:d0:a5:69:59:13:69:56:4a:29:de:11:b6:08:b0:31:42: 2e:a1:21:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUW/4lxir5tJL/0akXhsU0xg0sL6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMTAyMzU4NDNaFw0yNjAzMTIwMzI0NDNaMDMxMTAvBgNV BAMTKEE2MDA2N0NCNEIyRUE5NjBGQTgzQjY0NTc3NEZBNTE2Q0JFOURCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIRH7WZbpLuMs/J1PIui1q8Ry DGD4aDWo09BMR+2Or0+x/4LaunOF5//wgMbBueuL+mg3sva6xKdZei7d1YPGnFx0 mdY7TboaxXOD1V0dMPr2/WC8sWfYFxb4eahiFsA1iUVrTh4jNhtuPTPtS0B+ISsl DPg4+YtAJJCj3be63RRCSa7/u3KE4siFOVd7+fvaEED2JxE7FnW0CKXYl0ZGz1kn cPIquiJEZzuzekhJInFP9On2KZDT8fn1Lxl7kYz8uTBQwmHygI9wUe9JwVhYCD35 K9ITKMu6RK9OOkQq0grXxwDKlMUCOApyJpnycjX7gsePHwQc3Jgtq4VBfaxnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpgBny0suqWD6g7ZFd0+lFsvp28IwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHZwg9 HCEplHws2QXw0OlRKdCl9PD2Nrh2e8FTL8BTiM78E3+PWT5svmf6xxPIGEJyMjm7 R8gHrzPLv7aZ2MuUwZxg7tklUuewsSC1NIFiLFxX5yXv0kdHYGc81z3GZ25JFQqy oNhheJ+Dpp0I2K9c+E8bFLo3lL3pclU24cMtcotMFqJk8j0cdQn60VsdzcUzrIbT 6K603NUJ8Xs8Qyz9A3BXc/Kf3KGtgqJZcydvi5OG56B16T2ZA8YLz5Vx640dZPSL oezLaAaHdKctg6T/3l8DdbL+A2/+4roZxDl2l7Hlsd3CY4zQAnFdAtClaVkTaVZK Kd4RtgiwMUIuoSH6 -----END CERTIFICATE-----Generated at Wed Mar 11 10:37:25 2026 by rpki-client