$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: F44N4kQr7msJ945cjP9XhSXuJLVKQCNgO12A3L0izrU= Subject key identifier: 05:EF:D3:14:4D:76:02:04:94:64:16:50:46:A2:67:EA:6E:78:1B:94 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 4715FB52DF4500DDF83840BC3B35EB4309019052 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03B3 Signing time: Tue 31 Mar 2026 17:53:33 +0000 Manifest this update: Tue 31 Mar 2026 17:48:33 +0000 Manifest next update: Wed 01 Apr 2026 20:51:33 +0000 Files and hashes: 1: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 2: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 4: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 5: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 6: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 7: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 8: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 45uORoOLdrsbrRJrZ/EidVDdj7jzx6mrh2swcrXda+w=) 9: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 10: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 11: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 12: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 14: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 15: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 16: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 17: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Apr 2026 20:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:15:fb:52:df:45:00:dd:f8:38:40:bc:3b:35:eb:43:09:01:90:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 31 17:48:33 2026 GMT Not After : Apr 1 20:51:33 2026 GMT Subject: CN=05EFD3144D7602049464165046A267EA6E781B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:83:fe:e8:e4:99:91:19:21:3a:18:c8:da: 07:d3:c0:a1:4f:12:7e:90:0f:15:ef:2f:34:f0:62: a9:37:05:2f:83:a8:8d:e2:ff:08:f9:f3:33:81:ee: 5f:60:0b:6c:e2:a2:bb:6a:bd:79:51:75:c5:69:4d: 52:83:7b:f7:98:ac:d1:2a:ee:18:8c:f9:31:d4:b9: 50:95:af:29:d5:5b:c7:cf:35:c3:bb:3f:69:c8:b2: 31:cb:89:bb:ac:cf:11:9c:bc:fb:e5:97:e8:53:0c: 3b:51:30:91:8e:58:04:db:c6:e8:38:02:a1:f9:b9: df:8e:8a:da:bf:a4:21:1c:96:7c:dd:65:67:38:97: 5a:56:78:52:9b:47:c7:2b:ea:93:8a:67:da:2c:a8: 85:a1:c9:72:70:1c:b6:66:8f:ee:21:97:3f:5c:fa: 2f:1d:c1:5c:2f:12:5d:ab:61:84:f8:0c:f8:98:91: 12:0c:30:d4:43:58:95:87:b3:2d:a8:b0:ca:e6:23: 28:7a:14:02:dd:46:81:82:66:f8:64:b7:ce:c6:c6: a5:bf:8c:bc:00:41:03:be:d9:0a:71:af:b0:bc:3e: d4:09:32:7f:b3:5d:c3:ea:6a:b9:21:6b:aa:7a:e3: 3b:7f:3e:5c:5d:ca:e3:e2:b5:38:45:1b:17:fc:26: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EF:D3:14:4D:76:02:04:94:64:16:50:46:A2:67:EA:6E:78:1B:94 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:b6:e2:08:7e:24:8a:35:d3:0f:61:92:15:af:f3:97:b1: d5:25:5e:5a:67:22:82:75:e6:b2:29:84:a9:b0:e5:62:9f:a0: e4:98:f0:df:7e:19:97:8f:69:db:71:56:bd:08:2d:8e:e9:50: 1f:63:22:06:81:3d:02:f2:5a:c7:54:76:72:49:d1:7b:e1:34: 56:64:16:49:2f:84:c7:67:bc:bd:b8:6d:75:a8:8e:d4:f9:1f: 7d:86:eb:7e:70:de:e1:48:25:df:85:d8:a4:ea:e9:27:43:4f: aa:77:db:16:a9:52:94:d6:86:7a:61:f0:30:12:43:38:92:6d: 4d:a7:c0:18:cf:5a:7a:a3:c2:8b:b5:15:c7:4d:37:1a:70:c4: bd:e4:56:05:62:f0:98:eb:a8:c0:62:d9:12:76:d9:19:55:8d: f2:27:d4:d5:62:26:fc:82:4e:d5:c5:3b:f5:d3:fd:c1:7e:14: 46:aa:25:21:11:73:13:14:f5:30:cc:c5:b3:a1:38:0f:7e:26: ca:33:4f:89:66:ba:eb:3f:90:d6:d1:29:b5:74:f6:ce:7d:67: f7:b2:1f:b5:db:d2:92:59:1a:b2:07:4d:c6:50:94:b7:78:77: 87:a7:9c:18:20:6d:27:de:53:13:26:af:26:eb:5a:0a:b9:0f: d5:f7:54:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURxX7Ut9FAN34OEC8OzXrQwkBkFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMzExNzQ4MzNaFw0yNjA0MDEyMDUxMzNaMDMxMTAvBgNV BAMTKDA1RUZEMzE0NEQ3NjAyMDQ5NDY0MTY1MDQ2QTI2N0VBNkU3ODFCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ74P+6OSZkRkhOhjI2gfTwKFP En6QDxXvLzTwYqk3BS+DqI3i/wj58zOB7l9gC2ziortqvXlRdcVpTVKDe/eYrNEq 7hiM+THUuVCVrynVW8fPNcO7P2nIsjHLibuszxGcvPvll+hTDDtRMJGOWATbxug4 AqH5ud+Oitq/pCEclnzdZWc4l1pWeFKbR8cr6pOKZ9osqIWhyXJwHLZmj+4hlz9c +i8dwVwvEl2rYYT4DPiYkRIMMNRDWJWHsy2osMrmIyh6FALdRoGCZvhkt87GxqW/ jLwAQQO+2Qpxr7C8PtQJMn+zXcPqarkha6p64zt/PlxdyuPitThFGxf8JoapAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBe/TFE12AgSUZBZQRqJn6m54G5QwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQRLbi CH4kijXTD2GSFa/zl7HVJV5aZyKCdeayKYSpsOVin6DkmPDffhmXj2nbcVa9CC2O 6VAfYyIGgT0C8lrHVHZySdF74TRWZBZJL4THZ7y9uG11qI7U+R99hut+cN7hSCXf hdik6uknQ0+qd9sWqVKU1oZ6YfAwEkM4km1Np8AYz1p6o8KLtRXHTTcacMS95FYF YvCY66jAYtkSdtkZVY3yJ9TVYib8gk7VxTv10/3BfhRGqiUhEXMTFPUwzMWzoTgP fibKM0+JZrrrP5DW0Sm1dPbOfWf3sh+129KSWRqyB03GUJS3eHeHp5wYIG0n3lMT Jq8m61oKuQ/V91Qb -----END CERTIFICATE-----Generated at Wed Apr 1 04:38:26 2026 by rpki-client