$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: O6jJcaPxc2S2vn/suOLvNKt/bN2nxSzlGF+XPYyYzc8= Subject key identifier: 46:8E:8A:9D:24:E4:1B:89:1B:D6:4D:35:F4:ED:C6:1B:EB:99:16:00 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 08C4B207378849949F74BB0DE399942E71BB6440 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03BB Signing time: Mon 06 Apr 2026 15:53:39 +0000 Manifest this update: Mon 06 Apr 2026 15:48:39 +0000 Manifest next update: Tue 07 Apr 2026 18:50:39 +0000 Files and hashes: 1: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 2: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 4: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 5: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 7: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 11: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: AbjkOmJMPwnrXWyDQY5cpx9JvTWNZwGJSYeaMO1+o+E=) 13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 14: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 15: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 16: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 17: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Apr 2026 18:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c4:b2:07:37:88:49:94:9f:74:bb:0d:e3:99:94:2e:71:bb:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 6 15:48:39 2026 GMT Not After : Apr 7 18:50:39 2026 GMT Subject: CN=468E8A9D24E41B891BD64D35F4EDC61BEB991600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:a3:3b:51:f0:26:d8:7b:c2:55:c5:bb:ca: a2:77:b1:68:14:48:3e:fc:35:63:38:8b:7b:41:d8: a6:99:50:67:d6:27:6c:94:e5:44:7f:0a:83:b3:d8: c9:39:54:0e:96:9f:20:14:7a:32:d2:25:06:0e:43: 75:11:af:f6:e8:14:11:a4:4c:52:d3:8b:04:58:4d: b7:45:05:04:4e:99:20:7c:27:71:38:d4:53:e3:9a: 9c:2e:c5:67:f3:13:40:5e:2c:7c:f5:0d:2d:fb:da: 97:56:5d:bc:46:de:bf:77:11:ab:05:87:5b:ea:de: 12:f6:ec:25:62:c8:3c:2c:37:69:c5:ef:ca:d5:1c: 2b:ee:14:89:45:91:95:f5:70:f9:38:88:c1:49:3c: d0:5a:cb:a4:15:e9:d5:7a:4a:93:1d:04:72:9d:99: 9a:3c:ce:97:8a:1f:79:a8:fa:f9:04:0f:cd:1a:52: 55:fe:f6:8a:3a:99:48:18:49:af:15:46:04:9f:36: d5:18:2d:fd:23:b5:2a:dc:f5:08:31:5b:f2:3b:14: 43:8b:46:af:4d:98:2e:62:14:55:b1:7e:6a:dd:63: f1:fa:30:91:e4:4c:16:63:b0:8f:3f:3d:29:b0:84: 12:f6:0c:59:a6:13:06:7f:19:71:3f:92:15:39:9d: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:8A:9D:24:E4:1B:89:1B:D6:4D:35:F4:ED:C6:1B:EB:99:16:00 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:bd:8b:4d:22:e9:5e:02:85:b5:b5:e5:11:2f:d6:16:f0:1d: f3:c6:34:d6:68:33:00:c5:24:76:99:fc:0d:e3:af:93:a5:f4: c4:d0:3d:a4:ed:9b:d0:65:45:71:fa:28:a3:d1:f2:61:5a:dc: 1e:01:f8:d0:6c:a2:a5:fe:d4:97:96:16:cf:1e:09:81:1d:ce: 95:a4:1e:d8:93:89:4c:38:f7:f6:85:59:64:01:c6:3f:2f:e6: 1f:b5:48:18:13:2b:6f:93:a7:ac:7d:c9:ce:bf:88:ec:b3:34: cc:df:1b:9f:81:fa:b4:1e:a5:f1:66:c9:68:9e:20:1a:9d:23: 0b:dd:bd:21:29:0b:59:c2:45:cf:a8:4d:d0:ed:47:a1:1d:6c: 86:78:17:d5:ae:3d:97:a3:3e:98:89:b2:da:6e:0c:a5:4b:e8: a7:71:eb:2e:02:f4:f1:f7:0b:78:a8:4a:cd:bf:69:f7:6d:0b: 5f:76:52:81:05:2b:ed:e2:b7:af:5e:ca:90:0f:1f:35:d6:fa: c2:5b:55:32:f6:9f:48:48:9e:92:26:6a:45:07:93:f8:15:f3: 15:be:36:44:b0:a0:f0:21:77:8d:cb:22:96:b9:9c:54:5c:df: 34:e8:39:ee:7f:b6:ce:ce:0e:56:1b:fc:85:6d:ea:51:df:b6: 88:c0:14:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCMSyBzeISZSfdLsN45mULnG7ZEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA0MDYxNTQ4MzlaFw0yNjA0MDcxODUwMzlaMDMxMTAvBgNV BAMTKDQ2OEU4QTlEMjRFNDFCODkxQkQ2NEQzNUY0RURDNjFCRUI5OTE2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoaM7UfAm2HvCVcW7yqJ3sWgU SD78NWM4i3tB2KaZUGfWJ2yU5UR/CoOz2Mk5VA6WnyAUejLSJQYOQ3URr/boFBGk TFLTiwRYTbdFBQROmSB8J3E41FPjmpwuxWfzE0BeLHz1DS372pdWXbxG3r93EasF h1vq3hL27CViyDwsN2nF78rVHCvuFIlFkZX1cPk4iMFJPNBay6QV6dV6SpMdBHKd mZo8zpeKH3mo+vkED80aUlX+9oo6mUgYSa8VRgSfNtUYLf0jtSrc9QgxW/I7FEOL Rq9NmC5iFFWxfmrdY/H6MJHkTBZjsI8/PSmwhBL2DFmmEwZ/GXE/khU5nRFFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURo6KnSTkG4kb1k019O3GG+uZFgAwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClvYtN IuleAoW1teURL9YW8B3zxjTWaDMAxSR2mfwN46+TpfTE0D2k7ZvQZUVx+iij0fJh WtweAfjQbKKl/tSXlhbPHgmBHc6VpB7Yk4lMOPf2hVlkAcY/L+YftUgYEytvk6es fcnOv4jsszTM3xufgfq0HqXxZsloniAanSML3b0hKQtZwkXPqE3Q7UehHWyGeBfV rj2Xoz6YibLabgylS+incesuAvTx9wt4qErNv2n3bQtfdlKBBSvt4revXsqQDx81 1vrCW1Uy9p9ISJ6SJmpFB5P4FfMVvjZEsKDwIXeNyyKWuZxUXN806Dnuf7bOzg5W G/yFbepR37aIwBR0 -----END CERTIFICATE-----Generated at Tue Apr 7 06:26:32 2026 by rpki-client