$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: HXN/gZwq+nSVjzUs4FpQqOw0AEhEFEwkO/UszW0YT7M= Subject key identifier: CA:84:C4:6D:BA:E3:2C:1D:30:F8:3E:74:45:31:06:66:CF:AF:11:0D Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 66C2060FA38784BC0B0E4E49CFBFB9A51F44B6E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03C1 Signing time: Sat 11 Apr 2026 01:05:55 +0000 Manifest this update: Sat 11 Apr 2026 01:00:55 +0000 Manifest next update: Sun 12 Apr 2026 02:30:55 +0000 Files and hashes: 1: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 2YnQdHxE8rafPPxsODhlQcPFsIaETqaxmNm+bvLUgu0=) 3: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 4: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 5: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 6: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 8: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 9: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 10: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 14: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 15: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 17: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Apr 2026 02:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:06:0f:a3:87:84:bc:0b:0e:4e:49:cf:bf:b9:a5:1f:44:b6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 11 01:00:55 2026 GMT Not After : Apr 12 02:30:55 2026 GMT Subject: CN=CA84C46DBAE32C1D30F83E7445310666CFAF110D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:21:c2:29:3e:57:5f:68:ae:5e:c3:33:31: ef:85:4e:08:c2:24:a8:b8:12:b4:f6:3f:c5:4a:31: e7:ee:45:53:0a:ba:b5:24:2f:9d:43:31:44:63:29: 2a:bf:9e:6a:51:76:b3:cc:fd:e9:be:84:49:2a:57: cd:e5:fc:ac:01:16:da:30:d8:45:a8:4d:db:5e:66: 81:74:98:f8:36:c8:a3:dc:25:ec:76:b3:d9:a9:48: 9a:ec:87:24:90:08:d9:0b:b0:29:53:4f:31:d0:4a: 32:b0:43:1e:a0:48:e5:46:3f:ef:b0:e5:10:9d:44: 1d:03:dc:fb:6a:10:e5:91:db:48:17:98:c4:d8:36: 5f:de:15:b3:a1:e9:a1:ef:be:b4:4c:f8:e2:5b:ad: 7f:10:18:61:94:25:cb:f9:03:06:d1:fb:97:7e:66: 57:c5:22:11:3d:6b:79:cd:7e:04:28:39:93:e9:4a: 91:db:fb:5c:12:92:3e:89:80:5a:73:87:4c:ea:83: 72:19:a5:5a:37:21:2e:35:83:37:59:d0:70:6c:92: dd:4a:3b:72:37:21:b5:c5:36:2f:06:0d:90:20:56: c0:fe:cd:73:cf:6f:2e:10:f8:bd:41:d4:84:5b:c4: a0:7f:f5:86:57:33:f4:a4:58:8f:c6:04:4f:a4:b4: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:C4:6D:BA:E3:2C:1D:30:F8:3E:74:45:31:06:66:CF:AF:11:0D X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:45:34:8a:e4:bd:ba:2f:19:05:42:7d:07:3e:e7:09:4a:1f: 46:e1:e8:b6:b2:90:d4:17:81:ce:64:a6:a8:dc:74:08:07:bf: 15:11:ab:73:fe:9e:30:48:77:81:2c:93:7e:39:c3:c8:2b:24: 2b:b3:bd:77:1d:9a:8a:ff:15:89:1c:c3:c1:a7:fb:1c:bf:05: 6f:e7:ab:67:3b:1b:1f:64:7f:9f:29:01:10:9f:b9:60:e9:1b: 6c:91:c7:a1:a1:76:49:c3:a5:44:70:6c:56:90:27:5b:36:c0: 73:69:07:48:52:2c:2e:2d:f1:ba:e2:05:7d:20:3d:7d:7c:43: b4:8c:93:87:27:24:7e:67:93:f4:55:8f:70:fd:09:79:79:06: 07:8e:ff:72:3c:10:26:0e:96:14:7f:3c:14:dc:30:00:ad:ca: f3:b3:b2:33:b4:bb:fd:f4:5e:df:05:7a:d6:1e:e7:ce:19:c8: f9:24:8b:92:cf:41:f6:32:aa:af:1e:c6:ef:a8:a3:0b:88:69: 19:a6:af:bf:4d:f4:0d:b5:45:c8:72:a7:72:a4:f0:30:60:b0: 56:92:f1:11:04:7a:62:a7:87:9f:0a:6c:b7:4f:d7:46:d6:d4: 9f:f7:0c:7a:81:6b:e5:25:d0:7b:97:64:64:3b:fe:5a:26:43: 71:10:81:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZsIGD6OHhLwLDk5Jz7+5pR9EtuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA0MTEwMTAwNTVaFw0yNjA0MTIwMjMwNTVaMDMxMTAvBgNV BAMTKENBODRDNDZEQkFFMzJDMUQzMEY4M0U3NDQ1MzEwNjY2Q0ZBRjExMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmCHCKT5XX2iuXsMzMe+FTgjC JKi4ErT2P8VKMefuRVMKurUkL51DMURjKSq/nmpRdrPM/em+hEkqV83l/KwBFtow 2EWoTdteZoF0mPg2yKPcJex2s9mpSJrshySQCNkLsClTTzHQSjKwQx6gSOVGP++w 5RCdRB0D3PtqEOWR20gXmMTYNl/eFbOh6aHvvrRM+OJbrX8QGGGUJcv5AwbR+5d+ ZlfFIhE9a3nNfgQoOZPpSpHb+1wSkj6JgFpzh0zqg3IZpVo3IS41gzdZ0HBskt1K O3I3IbXFNi8GDZAgVsD+zXPPby4Q+L1B1IRbxKB/9YZXM/SkWI/GBE+ktIMPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyoTEbbrjLB0w+D50RTEGZs+vEQ0wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzRTSK 5L26LxkFQn0HPucJSh9G4ei2spDUF4HOZKao3HQIB78VEatz/p4wSHeBLJN+OcPI KyQrs713HZqK/xWJHMPBp/scvwVv56tnOxsfZH+fKQEQn7lg6RtskcehoXZJw6VE cGxWkCdbNsBzaQdIUiwuLfG64gV9ID19fEO0jJOHJyR+Z5P0VY9w/Ql5eQYHjv9y PBAmDpYUfzwU3DAArcrzs7IztLv99F7fBXrWHufOGcj5JIuSz0H2MqqvHsbvqKML iGkZpq+/TfQNtUXIcqdypPAwYLBWkvERBHpip4efCmy3T9dG1tSf9wx6gWvlJdB7 l2RkO/5aJkNxEIE6 -----END CERTIFICATE-----Generated at Sat Apr 11 14:55:18 2026 by rpki-client