$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: tVcaiF3Sd3EdN/IM0AFlWugEgc8je0Kvw2ffzq/OXg4= Subject key identifier: 34:76:B7:38:05:E0:33:41:EC:E7:9B:B5:DA:AE:26:04:D4:8D:1B:4F Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 412CD5889AEE9423D48AEC106940F4F964BFDE1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 039C Signing time: Sat 14 Mar 2026 21:13:15 +0000 Manifest this update: Sat 14 Mar 2026 21:08:15 +0000 Manifest next update: Mon 16 Mar 2026 01:03:15 +0000 Files and hashes: 1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: vPleK8J0b/i7bgOfYzN6IB3wzcGHnQfKMWXQkyy9QkA=) 2: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 3: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 7: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 11: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 15: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 17: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2c:d5:88:9a:ee:94:23:d4:8a:ec:10:69:40:f4:f9:64:bf:de:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 14 21:08:15 2026 GMT Not After : Mar 16 01:03:15 2026 GMT Subject: CN=3476B73805E03341ECE79BB5DAAE2604D48D1B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:03:c5:72:57:76:2c:6b:eb:48:03:76:ba:2b: 38:19:51:72:0a:22:09:9f:41:b8:23:d3:b9:8f:2e: c0:76:55:be:de:1e:5a:fb:a5:0a:17:50:05:65:be: f9:7d:83:c5:82:97:98:83:40:41:dc:7c:a9:0c:a6: 4a:3c:50:a9:80:01:b5:cb:4d:7e:91:bd:97:6b:d7: 87:6f:bc:bb:56:d8:22:84:7e:cd:43:17:5e:cd:ec: 06:8b:67:48:39:58:a0:6f:d8:97:8f:3b:0b:42:02: f3:fa:77:02:85:41:cd:a8:16:c7:a6:37:80:ad:9c: 30:41:c3:31:d2:30:98:bd:07:84:17:25:54:13:36: e3:e7:30:80:87:48:f1:dc:20:77:2a:01:dd:6c:26: 15:97:4d:05:38:de:c6:02:59:bb:9c:d2:62:ac:e2: 2a:be:a9:3e:f0:b5:c9:67:10:29:cc:bf:de:c6:3d: 64:45:49:a4:23:e9:80:c1:4c:4a:ad:0c:07:af:51: 8e:e4:21:8e:3c:ac:20:5a:8f:71:a1:d3:06:e7:d1: b4:30:b3:8d:66:01:5d:da:5a:50:b4:cf:28:91:17: bd:59:72:d8:74:d3:cc:2c:43:63:71:b5:72:8c:d2: e2:f5:ef:7f:99:cc:3f:1d:7d:47:ef:51:f0:c1:61: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:76:B7:38:05:E0:33:41:EC:E7:9B:B5:DA:AE:26:04:D4:8D:1B:4F X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0c:f9:78:f0:7e:ce:b1:d2:f4:65:58:b1:82:40:32:af:ab: 4b:ac:a5:9a:6d:15:e4:81:fe:7e:60:2d:08:09:ad:10:f5:a7: 70:9f:be:8c:54:14:7b:0e:c2:8f:03:57:da:95:fd:8a:76:d0: 2f:7e:93:fd:a0:ce:f7:ea:e2:be:ec:6d:bc:2e:a6:62:8c:5d: 58:53:19:41:4d:95:b6:f0:0c:27:d4:67:0a:03:33:2b:5e:10: 3b:41:f1:fe:b8:87:61:38:0b:94:ae:ae:65:20:5e:a6:b5:af: 84:46:7f:d5:5e:e2:6d:8f:a4:e9:d4:40:d9:68:0f:c1:2e:ae: 40:27:e4:ad:47:7b:72:c3:8f:15:a3:75:40:78:8d:0f:11:7d: 07:b3:5d:2a:3f:20:8e:e6:a5:67:31:c8:4f:65:7b:07:b5:05: e2:f2:21:b6:42:0b:d6:cb:c8:5b:57:69:e7:8f:53:54:20:eb: 1d:c0:86:e6:68:a1:71:5e:3c:61:9c:3a:dc:41:fb:3e:31:0a: 61:b4:ef:64:9e:94:38:d0:5a:a0:67:dd:d3:50:17:af:c5:e0: 60:10:60:46:0f:e6:03:39:b0:c2:eb:43:95:e5:0b:19:87:90: 52:8b:86:52:96:54:05:16:c0:6b:24:b7:76:c9:5c:45:1e:9a: 36:6d:ab:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQSzViJrulCPUiuwQaUD0+WS/3h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMTQyMTA4MTVaFw0yNjAzMTYwMTAzMTVaMDMxMTAvBgNV BAMTKDM0NzZCNzM4MDVFMDMzNDFFQ0U3OUJCNURBQUUyNjA0RDQ4RDFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzA8VyV3Ysa+tIA3a6KzgZUXIK IgmfQbgj07mPLsB2Vb7eHlr7pQoXUAVlvvl9g8WCl5iDQEHcfKkMpko8UKmAAbXL TX6RvZdr14dvvLtW2CKEfs1DF17N7AaLZ0g5WKBv2JePOwtCAvP6dwKFQc2oFsem N4CtnDBBwzHSMJi9B4QXJVQTNuPnMICHSPHcIHcqAd1sJhWXTQU43sYCWbuc0mKs 4iq+qT7wtclnECnMv97GPWRFSaQj6YDBTEqtDAevUY7kIY48rCBaj3Gh0wbn0bQw s41mAV3aWlC0zyiRF71Zcth008wsQ2NxtXKM0uL173+ZzD8dfUfvUfDBYa8dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNHa3OAXgM0Hs55u12q4mBNSNG08wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkDPl4 8H7OsdL0ZVixgkAyr6tLrKWabRXkgf5+YC0ICa0Q9adwn76MVBR7DsKPA1falf2K dtAvfpP9oM736uK+7G28LqZijF1YUxlBTZW28Awn1GcKAzMrXhA7QfH+uIdhOAuU rq5lIF6mta+ERn/VXuJtj6Tp1EDZaA/BLq5AJ+StR3tyw48Vo3VAeI0PEX0Hs10q PyCO5qVnMchPZXsHtQXi8iG2QgvWy8hbV2nnj1NUIOsdwIbmaKFxXjxhnDrcQfs+ MQphtO9knpQ40FqgZ93TUBevxeBgEGBGD+YDObDC60OV5QsZh5BSi4ZSllQFFsBr JLd2yVxFHpo2bavN -----END CERTIFICATE-----Generated at Sun Mar 15 01:10:22 2026 by rpki-client