$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: 7NdAhR5tkcolSAZyUMkv44NDNgMa9PLskOiHi0OvHHY= Subject key identifier: D0:36:A7:9C:14:E4:8F:16:17:EA:4F:C1:F7:11:FA:4E:F0:42:22:E2 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 735D3BCA7A120EB133DDDB5BBC095A047A985F80 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0394 Signing time: Sun 08 Mar 2026 18:28:41 +0000 Manifest this update: Sun 08 Mar 2026 18:23:41 +0000 Manifest next update: Mon 09 Mar 2026 21:09:41 +0000 Files and hashes: 1: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 2: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 2aXFJNkO1RafApnknUEzllL1C5sTib/vJHtHDbOuCz8=) 5: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 6: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 7: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 8: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 9: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 12: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 14: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 15: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 16: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 17: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Mar 2026 21:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5d:3b:ca:7a:12:0e:b1:33:dd:db:5b:bc:09:5a:04:7a:98:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 8 18:23:41 2026 GMT Not After : Mar 9 21:09:41 2026 GMT Subject: CN=D036A79C14E48F1617EA4FC1F711FA4EF04222E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:40:f9:81:74:d8:20:ea:b2:6f:ef:3e:96: 91:30:05:cb:38:8d:e6:df:5f:5d:02:4b:2a:c1:84: a5:c7:3d:83:49:f4:62:3f:23:6c:0a:ba:df:40:06: 6d:dd:3f:2c:93:2c:3f:25:33:da:ba:74:9c:d3:4f: 5d:91:71:19:92:d5:b5:01:a9:13:bd:05:fa:e6:27: 99:01:f7:61:6b:ff:16:74:d2:05:78:c2:3b:a3:60: 69:fe:89:53:b5:ae:a1:fa:e2:a8:3d:52:42:58:52: 3c:06:22:2d:97:32:73:72:12:a6:a6:a3:1a:7e:26: d7:73:ee:46:2d:25:30:ee:80:c6:ed:83:e0:ae:14: f6:e5:3d:64:b3:fa:25:ac:a2:0e:9f:64:45:16:10: e0:80:7a:6b:4b:cc:93:2b:d3:ee:a4:6a:93:d5:ff: dd:12:8d:93:33:21:2d:5f:78:5e:bc:af:e5:55:11: dd:88:cc:e6:59:83:f2:af:1d:e8:74:01:3e:85:16: 48:6d:2f:1d:35:bb:83:aa:c5:e1:5b:66:8e:02:12: 03:65:57:dd:dd:ea:27:59:e9:8d:47:e0:07:39:36: cb:aa:97:e0:62:a0:8d:ca:3b:e2:a7:0c:c9:f8:16: 85:2b:59:96:f6:63:86:72:bd:f0:90:cb:30:d7:92: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:A7:9C:14:E4:8F:16:17:EA:4F:C1:F7:11:FA:4E:F0:42:22:E2 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:68:ab:a1:b4:45:5a:39:85:e0:68:82:75:68:e1:68:fe:3a: ee:99:b9:48:e4:80:46:28:aa:cd:d6:5e:24:03:29:b2:6f:ec: 45:ce:b1:44:1e:c7:ec:c6:a6:b4:3f:d5:82:4e:1e:4d:c1:bb: 53:92:51:f4:96:5c:44:76:8b:30:0f:21:1b:d7:6d:ed:4e:11: 83:49:22:b0:6d:ca:47:56:8d:20:2d:6f:f7:0d:28:9b:c0:a4: 41:a4:2e:fb:e8:04:fb:9b:06:11:30:96:7e:69:7a:ee:00:a8: a2:12:70:69:15:f5:7b:ac:6f:c2:f3:03:86:61:89:70:b5:9b: a1:c2:07:dc:1b:ff:1f:a4:c5:60:10:24:75:ad:bd:5a:f3:23: 3e:24:eb:f4:97:e3:d4:34:cc:08:9a:ba:4e:fd:ac:c3:55:ec: a2:4a:71:8b:c4:06:d4:35:1c:ed:5c:ce:71:67:aa:f5:64:d2: 26:fb:6b:5f:cc:b3:22:8e:fa:67:a2:be:42:4e:b9:cc:4c:e7: 07:67:13:d0:c1:fd:8d:38:4d:35:47:ad:1f:b9:bc:2b:6b:9d: d1:b4:c1:57:b9:9d:bc:7e:12:1d:1d:49:b2:62:af:9f:b2:ff: fd:d0:bd:95:02:c7:1e:d2:b5:34:b6:80:2b:2a:04:be:96:60: d2:ed:f7:55 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUc107ynoSDrEz3dtbvAlaBHqYX4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMDgxODIzNDFaFw0yNjAzMDkyMTA5NDFaMDMxMTAvBgNV BAMTKEQwMzZBNzlDMTRFNDhGMTYxN0VBNEZDMUY3MTFGQTRFRjA0MjIyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW8UD5gXTYIOqyb+8+lpEwBcs4 jebfX10CSyrBhKXHPYNJ9GI/I2wKut9ABm3dPyyTLD8lM9q6dJzTT12RcRmS1bUB qRO9BfrmJ5kB92Fr/xZ00gV4wjujYGn+iVO1rqH64qg9UkJYUjwGIi2XMnNyEqam oxp+Jtdz7kYtJTDugMbtg+CuFPblPWSz+iWsog6fZEUWEOCAemtLzJMr0+6kapPV /90SjZMzIS1feF68r+VVEd2IzOZZg/KvHeh0AT6FFkhtLx01u4OqxeFbZo4CEgNl V93d6idZ6Y1H4Ac5Nsuql+BioI3KO+KnDMn4FoUrWZb2Y4ZyvfCQyzDXkulfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0DannBTkjxYX6k/B9xH6TvBCIuIwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsaKuh tEVaOYXgaIJ1aOFo/jrumblI5IBGKKrN1l4kAymyb+xFzrFEHsfsxqa0P9WCTh5N wbtTklH0llxEdoswDyEb123tThGDSSKwbcpHVo0gLW/3DSibwKRBpC776AT7mwYR MJZ+aXruAKiiEnBpFfV7rG/C8wOGYYlwtZuhwgfcG/8fpMVgECR1rb1a8yM+JOv0 l+PUNMwImrpO/azDVeyiSnGLxAbUNRztXM5xZ6r1ZNIm+2tfzLMijvpnor5CTrnM TOcHZxPQwf2NOE01R60fubwra53RtMFXuZ28fhIdHUmyYq+fsv/90L2VAsce0rU0 toArKgS+lmDS7fdV -----END CERTIFICATE-----Generated at Mon Mar 9 14:07:03 2026 by rpki-client