$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: au/VbzIvSuCpUqfbbff8HQJQHGg8qBMO2ZxJXrhAuQo= Subject key identifier: DE:35:31:CD:D9:9A:C7:C6:8D:FF:77:D2:4C:29:E1:E6:95:AC:3C:80 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 24A7CEFCCED716CBB3B87832472B2CB283C3A407 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 038D Signing time: Tue 03 Mar 2026 17:11:43 +0000 Manifest this update: Tue 03 Mar 2026 17:06:43 +0000 Manifest next update: Wed 04 Mar 2026 17:31:43 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 3: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 5: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 6: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 7: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 8: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 9: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: t2UG1wTCYyHYc67fKuJWjam/HXzpug+jHY/GfH/APqo=) 11: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 12: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 14: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 16: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 17: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Mar 2026 15:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a7:ce:fc:ce:d7:16:cb:b3:b8:78:32:47:2b:2c:b2:83:c3:a4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 3 17:06:43 2026 GMT Not After : Mar 4 17:31:43 2026 GMT Subject: CN=DE3531CDD99AC7C68DFF77D24C29E1E695AC3C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:cd:e9:2c:b3:63:35:17:25:ca:c3:02:e7: ea:9d:89:df:62:79:f7:ec:43:a7:f1:8e:73:b9:2a: c0:b4:91:e3:5f:c1:50:ba:90:7b:50:8f:c7:46:02: b1:3a:8a:39:8d:8b:87:b3:a8:cd:8a:9b:10:e9:1e: 95:85:f6:04:24:06:ab:8d:09:78:a6:6c:4a:c1:91: 38:ff:51:8e:59:ae:26:4b:e2:60:49:e3:a2:4b:b1: 65:95:27:33:27:4d:83:6c:74:51:8d:37:bc:83:d2: 92:62:2a:35:bf:fa:0a:71:b0:9e:8f:1a:72:61:7c: bc:dc:0d:b9:aa:60:5e:89:00:ef:5c:8e:3a:78:1d: ef:6e:16:e3:23:f0:f7:54:0a:9c:07:cb:64:ab:01: 57:e4:fe:85:fa:84:21:f5:22:a9:ff:cd:16:23:87: 7f:af:df:cf:91:c8:90:8f:6e:05:9c:21:68:b5:ac: 4a:8e:fb:eb:dc:39:78:08:6c:f2:1f:db:bb:01:72: 49:98:ab:ce:75:64:b8:83:33:e5:e1:34:b3:f5:1a: e8:b2:fd:06:a7:fe:b5:c0:8d:66:e6:ce:0c:d3:47: c3:11:53:11:0e:02:7f:aa:a2:a1:1d:df:8a:21:a3: 2e:2e:e5:82:98:cc:1e:ca:14:20:39:32:cd:ad:ef: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:35:31:CD:D9:9A:C7:C6:8D:FF:77:D2:4C:29:E1:E6:95:AC:3C:80 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:f2:f6:0d:51:70:49:1c:eb:8c:a2:70:8d:4b:5f:68:2b: 22:d7:cb:2d:49:5d:e5:24:db:94:7d:20:2f:5a:f8:0a:8f:51: 16:dc:1e:ef:a0:53:fb:93:02:2f:98:56:d0:ae:a0:fc:0a:a9: da:f7:88:10:8f:72:28:81:65:42:43:64:8a:9f:68:ff:f3:8f: 90:d6:1f:2e:2a:9d:f2:af:3d:ea:a1:da:00:6b:d1:f6:82:d6: 3c:40:dd:e6:be:37:b6:15:ec:d5:7d:3b:30:4a:58:f3:e4:a8: e2:8c:ee:05:fa:5d:a5:ad:c7:d7:cd:1a:28:ac:39:71:a9:c8: 2c:01:24:22:95:0a:c5:5c:95:9a:e0:c1:52:b3:0a:32:cb:b3: 84:d2:6c:bd:c0:39:92:ec:18:1d:11:53:54:dc:3c:d8:5b:2d: 9e:c7:61:bc:ac:16:2c:d7:55:e8:26:a4:91:2b:cb:58:b1:c8: b2:5a:2f:f5:50:65:4c:7d:96:10:20:16:9a:e1:a7:7d:b1:fb: 50:ba:77:83:e1:77:18:04:a6:dc:4b:c2:85:20:6c:0a:2b:ab: 55:62:57:d9:b7:d7:73:12:21:b1:a3:11:0e:a9:ee:cf:8e:24: c3:a4:c1:bf:fc:8c:95:b6:b3:3c:12:db:d9:31:5f:d0:28:17: 37:97:8b:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJKfO/M7XFsuzuHgyRysssoPDpAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMDMxNzA2NDNaFw0yNjAzMDQxNzMxNDNaMDMxMTAvBgNV BAMTKERFMzUzMUNERDk5QUM3QzY4REZGNzdEMjRDMjlFMUU2OTVBQzNDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1483pLLNjNRclysMC5+qdid9i effsQ6fxjnO5KsC0keNfwVC6kHtQj8dGArE6ijmNi4ezqM2KmxDpHpWF9gQkBquN CXimbErBkTj/UY5ZriZL4mBJ46JLsWWVJzMnTYNsdFGNN7yD0pJiKjW/+gpxsJ6P GnJhfLzcDbmqYF6JAO9cjjp4He9uFuMj8PdUCpwHy2SrAVfk/oX6hCH1Iqn/zRYj h3+v38+RyJCPbgWcIWi1rEqO++vcOXgIbPIf27sBckmYq851ZLiDM+XhNLP1Guiy /Qan/rXAjWbmzgzTR8MRUxEOAn+qoqEd34ohoy4u5YKYzB7KFCA5Ms2t72sXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3jUxzdmax8aN/3fSTCnh5pWsPIAwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzTvL2 DVFwSRzrjKJwjUtfaCsi18stSV3lJNuUfSAvWvgKj1EW3B7voFP7kwIvmFbQrqD8 Cqna94gQj3IogWVCQ2SKn2j/84+Q1h8uKp3yrz3qodoAa9H2gtY8QN3mvje2FezV fTswSljz5KjijO4F+l2lrcfXzRoorDlxqcgsASQilQrFXJWa4MFSswoyy7OE0my9 wDmS7BgdEVNU3DzYWy2ex2G8rBYs11XoJqSRK8tYsciyWi/1UGVMfZYQIBaa4ad9 sftQuneD4XcYBKbcS8KFIGwKK6tVYlfZt9dzEiGxoxEOqe7PjiTDpMG//IyVtrM8 EtvZMV/QKBc3l4t+ -----END CERTIFICATE-----Generated at Tue Mar 3 23:33:09 2026 by rpki-client