$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: AgyUCBNn+LkabG7Wq+wRvTAQwkVvcdsir0r7VzE0jH8= Subject key identifier: BE:52:20:F7:6E:57:4B:8C:46:EA:7A:B1:DF:62:92:FE:7F:D2:5E:CC Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2F49FEA748D54C23DD2C02A765CE3AF467D790E4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0422 Signing time: Thu 13 Aug 2026 00:57:46 +0000 Manifest this update: Thu 13 Aug 2026 00:52:46 +0000 Manifest next update: Fri 14 Aug 2026 01:54:46 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow=) 2: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 3: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c=) 4: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 5: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 6: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: bFr0JefbJIZxEOht8Ik3YwGb0RzX+/7LPj0YIUw8vsY=) 7: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 11: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=) 12: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 13: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog=) 15: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 16: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 5vg//wNVRc4UASoUqb5uX0P/AnU0Ro0qvgJWu8grY+s=) 17: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:fe:a7:48:d5:4c:23:dd:2c:02:a7:65:ce:3a:f4:67:d7:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 13 00:52:46 2026 GMT Not After : Aug 14 01:54:46 2026 GMT Subject: CN=BE5220F76E574B8C46EA7AB1DF6292FE7FD25ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d3:a8:ed:89:d0:c8:b8:68:2a:10:82:db:08: 94:5c:5f:ce:22:0b:eb:77:89:5c:67:19:f3:56:09: 4f:12:11:e4:4f:35:ed:4d:8d:45:5c:53:90:e6:f4: cd:76:86:d1:e2:63:4c:fe:d5:a5:22:af:ed:00:1d: 25:23:e6:d8:7e:cf:28:03:eb:ef:43:7e:50:c4:e6: 81:bb:a6:0a:c5:fa:28:97:7e:2f:81:27:4e:b0:14: f0:3f:7e:e7:e3:ee:6d:2e:3a:3d:29:fe:44:cb:7b: 90:f7:be:35:28:94:69:a1:c4:13:4d:b7:31:25:7e: 4b:ec:29:5c:0a:01:e0:50:02:75:9e:4a:55:2e:4f: e1:45:10:9e:00:67:90:b7:bf:5b:88:51:e1:79:05: 1e:5b:26:bf:24:f7:74:2a:1b:3d:b9:c4:19:e5:f2: 70:e3:c6:ca:27:68:c2:90:9d:6a:b7:89:aa:be:cd: 80:73:53:93:fe:2f:e2:96:f4:ed:4d:1f:03:59:57: a9:55:4a:bd:98:fe:9a:d9:31:9a:4d:75:9a:69:e2: 2e:35:6e:90:13:27:9f:f6:30:a3:fc:1b:e3:11:5d: 67:42:b4:b3:27:16:ee:7b:2a:2f:f3:80:8a:4c:ba: 22:0f:fe:72:72:b4:8b:f0:4b:8e:a7:4e:2f:e4:79: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:20:F7:6E:57:4B:8C:46:EA:7A:B1:DF:62:92:FE:7F:D2:5E:CC X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d8:fd:b3:3e:a0:a8:c5:71:54:5c:7d:df:4a:ce:3a:61:27: dc:83:2d:b3:6e:04:f0:5b:1b:7b:45:2c:08:27:28:b0:8a:d4: e0:ae:57:95:7c:ac:67:c9:f7:7c:e7:1b:34:6b:97:83:96:d5: ce:f4:27:b9:f3:a1:06:5f:45:cf:86:a3:97:ff:27:a3:70:2a: 51:ad:f7:e4:ba:03:ce:c3:c7:a9:61:ce:04:39:67:26:50:40: 06:1a:98:84:dd:d5:bd:3c:41:71:1d:9e:ff:78:25:9c:7d:c3: 85:fc:20:6b:09:e7:6d:f7:67:f3:30:a8:3b:75:96:fd:87:c3: f0:c3:64:1f:13:fe:a9:3e:b3:a6:3a:e1:b1:f3:1e:96:d1:5c: 9c:ab:b2:fb:1b:7e:49:c1:1f:dd:29:a4:61:80:84:a8:94:2f: 12:2e:3c:26:f8:91:4d:43:30:ea:b6:17:fc:b7:f7:89:2a:56: be:2d:05:75:0b:35:52:71:e2:63:0a:4f:a6:20:69:a9:c3:5b: aa:78:88:8a:78:cf:16:5b:ba:49:b5:6f:fa:86:2b:c8:a1:29: e5:48:b1:dd:3f:09:43:54:df:6f:96:93:da:0e:22:ce:51:ea: 2b:f3:48:d7:63:58:4b:b4:53:b6:8e:3d:5f:79:9b:7a:c8:84: 65:c1:b4:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL0n+p0jVTCPdLAKnZc469GfXkOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA4MTMwMDUyNDZaFw0yNjA4MTQwMTU0NDZaMDMxMTAvBgNV BAMTKEJFNTIyMEY3NkU1NzRCOEM0NkVBN0FCMURGNjI5MkZFN0ZEMjVFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn06jtidDIuGgqEILbCJRcX84i C+t3iVxnGfNWCU8SEeRPNe1NjUVcU5Dm9M12htHiY0z+1aUir+0AHSUj5th+zygD 6+9DflDE5oG7pgrF+iiXfi+BJ06wFPA/fufj7m0uOj0p/kTLe5D3vjUolGmhxBNN tzElfkvsKVwKAeBQAnWeSlUuT+FFEJ4AZ5C3v1uIUeF5BR5bJr8k93QqGz25xBnl 8nDjxsonaMKQnWq3iaq+zYBzU5P+L+KW9O1NHwNZV6lVSr2Y/prZMZpNdZpp4i41 bpATJ5/2MKP8G+MRXWdCtLMnFu57Ki/zgIpMuiIP/nJytIvwS46nTi/ked7zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvlIg925XS4xG6nqx32KS/n/SXswwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCy2P2z PqCoxXFUXH3fSs46YSfcgy2zbgTwWxt7RSwIJyiwitTgrleVfKxnyfd85xs0a5eD ltXO9Ce586EGX0XPhqOX/yejcCpRrffkugPOw8epYc4EOWcmUEAGGpiE3dW9PEFx HZ7/eCWcfcOF/CBrCedt92fzMKg7dZb9h8Pww2QfE/6pPrOmOuGx8x6W0Vycq7L7 G35JwR/dKaRhgISolC8SLjwm+JFNQzDqthf8t/eJKla+LQV1CzVSceJjCk+mIGmp w1uqeIiKeM8WW7pJtW/6hivIoSnlSLHdPwlDVN9vlpPaDiLOUeor80jXY1hLtFO2 jj1feZt6yIRlwbQP -----END CERTIFICATE-----Generated at Thu Aug 13 12:14:06 2026 by rpki-client