$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: wWZrSkpeNYHRQOuk0CFuvM3aQWNoRwRrVSzJ72eutvU= Subject key identifier: B7:C0:EA:A9:88:68:55:EF:A7:ED:DC:B5:34:E0:B2:5B:AC:14:4C:97 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 64A2C793EB9F22D64CE963BE4C689693E8A9E7B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03B7 Signing time: Fri 03 Apr 2026 17:43:39 +0000 Manifest this update: Fri 03 Apr 2026 17:38:39 +0000 Manifest next update: Sat 04 Apr 2026 19:13:39 +0000 Files and hashes: 1: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 3: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 5: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 7: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 8: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 10: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 11: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 13: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 16: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: Axhu4fGMdXAEta1JD4emMopddSPOJVZz+zdptdG1GT8=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Apr 2026 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a2:c7:93:eb:9f:22:d6:4c:e9:63:be:4c:68:96:93:e8:a9:e7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 3 17:38:39 2026 GMT Not After : Apr 4 19:13:39 2026 GMT Subject: CN=B7C0EAA9886855EFA7EDDCB534E0B25BAC144C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:31:51:2e:c0:42:ba:af:82:8d:2e:30:ca: 71:ec:40:34:2d:9f:00:0b:ab:86:84:73:7a:8a:5a: 67:5d:0a:98:46:07:a4:99:1f:7b:2e:d6:f0:76:c1: 97:fa:21:c6:de:7c:f3:89:9f:eb:65:6d:be:61:ee: f8:e6:70:c7:ef:b4:20:de:0e:8a:12:ab:4f:3b:0c: 37:01:19:ed:15:34:79:f5:b8:80:a1:6f:8f:b0:b3: aa:a4:5b:d2:34:25:5d:69:1c:6e:a7:91:1d:18:e0: 37:bb:38:4f:65:c5:30:b1:c6:3f:11:06:fe:a3:88: ee:5e:0a:74:47:88:ec:57:fc:5e:83:37:5c:42:bb: 79:48:54:60:d8:f4:d4:39:ad:d0:b6:93:44:09:6a: ad:8e:8b:08:bb:e4:eb:cd:26:46:20:e7:b6:fb:ef: e9:bb:b7:d7:9c:c8:79:ab:67:68:f4:0b:1d:5e:a4: 3d:90:30:55:b6:06:25:ed:60:50:4e:19:f1:0b:39: 61:1e:d6:21:b4:bb:26:8a:92:44:80:95:16:e1:ce: 23:8a:32:df:26:32:99:0e:63:d9:ef:ce:e8:dd:d9: 8b:7b:fe:0a:f6:87:cf:7e:a2:ce:dc:63:b6:b2:ec: 45:2f:33:5e:00:3f:20:fb:ae:8c:58:18:d4:58:de: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:EA:A9:88:68:55:EF:A7:ED:DC:B5:34:E0:B2:5B:AC:14:4C:97 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:50:7d:5e:46:0b:ce:bf:46:18:f9:46:96:66:60:d2:77:99: be:1d:f0:5a:e5:5e:88:ec:64:27:e7:2c:fe:d6:04:32:54:c7: 3e:39:a9:44:0a:01:8a:7c:88:a7:87:d1:d3:c7:b3:ba:f7:78: 51:15:00:7d:98:64:35:ec:3d:09:29:92:a3:d5:98:bf:16:ca: 96:25:60:c7:4c:a0:9d:ab:a9:60:00:f0:31:7c:a9:a8:ca:9a: 25:0c:69:48:14:3d:1e:5d:d8:17:15:a7:7a:06:a8:2c:0c:86: 3d:a1:d0:51:a4:c6:0c:9b:04:ed:1e:38:a8:ef:4c:19:a0:79: d0:0e:88:13:a7:54:9b:9d:a4:37:dd:97:1e:a3:f7:7b:c2:31: 70:f5:6d:e9:2c:eb:4c:52:02:05:93:5e:c3:65:54:94:55:a7: a5:f0:4d:5b:55:32:ca:14:17:d7:fc:0a:20:31:bd:0d:fa:be: bd:4d:b9:d8:71:42:d0:2c:44:14:69:a7:89:8c:ab:21:cd:71: 2f:17:a5:4e:c4:20:8d:1c:5c:7b:de:1e:ed:fa:67:c7:f0:01: a7:82:52:76:49:1e:aa:cc:a6:ac:c0:62:18:ab:72:4e:9b:9d: b5:07:c1:ce:05:cf:af:2c:7d:af:89:0b:d4:d3:aa:86:8c:70: c9:dd:e8:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZKLHk+ufItZM6WO+TGiWk+ip57EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA0MDMxNzM4MzlaFw0yNjA0MDQxOTEzMzlaMDMxMTAvBgNV BAMTKEI3QzBFQUE5ODg2ODU1RUZBN0VERENCNTM0RTBCMjVCQUMxNDRDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BjFRLsBCuq+CjS4wynHsQDQt nwALq4aEc3qKWmddCphGB6SZH3su1vB2wZf6IcbefPOJn+tlbb5h7vjmcMfvtCDe DooSq087DDcBGe0VNHn1uIChb4+ws6qkW9I0JV1pHG6nkR0Y4De7OE9lxTCxxj8R Bv6jiO5eCnRHiOxX/F6DN1xCu3lIVGDY9NQ5rdC2k0QJaq2Oiwi75OvNJkYg57b7 7+m7t9ecyHmrZ2j0Cx1epD2QMFW2BiXtYFBOGfELOWEe1iG0uyaKkkSAlRbhziOK Mt8mMpkOY9nvzujd2Yt7/gr2h89+os7cY7ay7EUvM14APyD7roxYGNRY3ojPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt8DqqYhoVe+n7dy1NOCyW6wUTJcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJUH1e RgvOv0YY+UaWZmDSd5m+HfBa5V6I7GQn5yz+1gQyVMc+OalECgGKfIinh9HTx7O6 93hRFQB9mGQ17D0JKZKj1Zi/FsqWJWDHTKCdq6lgAPAxfKmoypolDGlIFD0eXdgX Fad6BqgsDIY9odBRpMYMmwTtHjio70wZoHnQDogTp1SbnaQ33Zceo/d7wjFw9W3p LOtMUgIFk17DZVSUVael8E1bVTLKFBfX/AogMb0N+r69TbnYcULQLEQUaaeJjKsh zXEvF6VOxCCNHFx73h7t+mfH8AGnglJ2SR6qzKaswGIYq3JOm521B8HOBc+vLH2v iQvU06qGjHDJ3eg6 -----END CERTIFICATE-----Generated at Sat Apr 4 05:31:33 2026 by rpki-client