$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: i5wjmyp8YqywSu1PHyt0XZQT/CJucAy2D+qBYMwn+s4= Subject key identifier: 9F:52:91:4E:37:7F:F4:AF:1E:FC:38:20:E2:13:E1:50:98:0D:45:49 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2EA2E633A14DA610640A36A98605AADC6C336F2A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0396 Signing time: Tue 10 Mar 2026 06:28:41 +0000 Manifest this update: Tue 10 Mar 2026 06:23:41 +0000 Manifest next update: Wed 11 Mar 2026 07:59:41 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 3: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 4: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 6: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 8: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 10: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 14: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: l8KyrNdAgqwdOaAu1gEyaQTcDzlMAh/cCX24v9VvOlk=) 15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 16: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 17: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 06:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a2:e6:33:a1:4d:a6:10:64:0a:36:a9:86:05:aa:dc:6c:33:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 10 06:23:41 2026 GMT Not After : Mar 11 07:59:41 2026 GMT Subject: CN=9F52914E377FF4AF1EFC3820E213E150980D4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:a2:34:67:51:ac:47:9a:1e:14:aa:79:e3: 03:e1:50:9a:89:4b:87:16:c8:17:bd:6a:86:9a:b6: b8:1a:32:fd:c2:c0:84:d3:47:65:ae:26:2b:b5:94: 23:88:c1:ad:2b:46:11:76:89:40:84:8e:9d:1a:6c: f4:a4:4b:fe:23:26:9d:fb:22:9c:17:05:6b:c4:9c: d9:8f:35:25:c1:85:0d:cc:7c:84:3b:a7:15:f9:7b: e6:bc:97:c0:c3:70:a4:fd:43:05:a6:61:67:0a:77: ec:a5:01:bf:b9:ea:10:de:78:f3:12:58:7c:1c:ab: d7:13:12:42:e7:5a:0e:36:07:01:81:a9:f1:8e:94: 35:6e:09:cc:6c:05:50:6e:c4:86:bd:a4:67:71:41: 5d:24:00:1b:06:2d:2a:27:76:88:e0:b2:1a:9c:e6: f7:4a:1c:99:f8:90:19:22:3b:77:48:86:30:f7:a1: eb:98:cc:9d:ee:d3:76:dc:0c:99:c6:03:31:8b:6b: 13:05:b2:22:be:03:9b:cf:70:0d:17:ef:13:28:0e: b4:18:69:b5:a6:d4:06:37:b5:01:78:77:e3:38:9f: 6f:08:fe:d7:a6:a5:d4:e9:d2:e6:34:f7:0d:1e:65: f5:bd:73:d4:1a:6f:74:c9:6a:65:3e:90:81:56:7c: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:91:4E:37:7F:F4:AF:1E:FC:38:20:E2:13:E1:50:98:0D:45:49 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:81:c0:01:ae:c1:8c:5b:64:dc:0f:e5:84:3d:49:18:db:df: 70:26:15:fb:76:45:1a:f5:a8:5a:cb:29:a0:03:bc:95:c5:ae: 85:f3:4f:32:1a:eb:34:ad:66:bd:da:c2:85:49:71:b9:5b:55: 8e:28:3c:47:84:29:b8:ee:dd:f4:f6:46:e5:6e:72:d6:d1:d4: 3b:38:d7:77:02:a8:69:8e:7d:25:e8:1c:2c:de:33:ce:dc:b3: 55:40:43:61:84:91:5d:c6:c8:12:a7:18:5f:a7:d8:a3:c3:7e: 7c:69:13:12:85:b6:89:6f:eb:30:d7:b7:55:27:77:44:ad:13: e2:03:52:25:7b:e4:bf:02:50:5b:9c:92:ce:b9:1e:66:ad:86: 6a:1e:0a:c4:da:e4:b0:8f:05:0b:71:6a:97:c2:7f:61:51:80: 3f:36:5c:87:6b:70:f9:46:35:c0:27:c8:c3:e5:44:89:bb:7c: d0:3e:6c:0f:19:f4:27:ff:39:d5:af:71:1d:c6:1a:d7:ad:50: fd:e0:b7:81:67:63:7a:79:9a:bb:d4:bd:36:ad:d5:60:dd:5a: f4:97:92:53:b7:b6:1b:c1:2a:43:af:1a:84:5b:48:db:63:f3: 75:ac:86:ab:cf:cf:08:25:3a:61:b0:18:e2:f7:5d:5d:aa:84: 2f:a0:de:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULqLmM6FNphBkCjaphgWq3GwzbyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMTAwNjIzNDFaFw0yNjAzMTEwNzU5NDFaMDMxMTAvBgNV BAMTKDlGNTI5MTRFMzc3RkY0QUYxRUZDMzgyMEUyMTNFMTUwOTgwRDQ1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEKI0Z1GsR5oeFKp54wPhUJqJ S4cWyBe9aoaatrgaMv3CwITTR2WuJiu1lCOIwa0rRhF2iUCEjp0abPSkS/4jJp37 IpwXBWvEnNmPNSXBhQ3MfIQ7pxX5e+a8l8DDcKT9QwWmYWcKd+ylAb+56hDeePMS WHwcq9cTEkLnWg42BwGBqfGOlDVuCcxsBVBuxIa9pGdxQV0kABsGLSondojgshqc 5vdKHJn4kBkiO3dIhjD3oeuYzJ3u03bcDJnGAzGLaxMFsiK+A5vPcA0X7xMoDrQY abWm1AY3tQF4d+M4n28I/tempdTp0uY09w0eZfW9c9Qab3TJamU+kIFWfLjdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn1KRTjd/9K8e/Dgg4hPhUJgNRUkwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9gcAB rsGMW2TcD+WEPUkY299wJhX7dkUa9ahayymgA7yVxa6F808yGus0rWa92sKFSXG5 W1WOKDxHhCm47t309kblbnLW0dQ7ONd3Aqhpjn0l6Bws3jPO3LNVQENhhJFdxsgS pxhfp9ijw358aRMShbaJb+sw17dVJ3dErRPiA1Ile+S/AlBbnJLOuR5mrYZqHgrE 2uSwjwULcWqXwn9hUYA/NlyHa3D5RjXAJ8jD5USJu3zQPmwPGfQn/znVr3EdxhrX rVD94LeBZ2N6eZq71L02rdVg3Vr0l5JTt7YbwSpDrxqEW0jbY/N1rIarz88IJTph sBji911dqoQvoN7L -----END CERTIFICATE-----Generated at Tue Mar 10 09:41:09 2026 by rpki-client