$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: HvvXNQnsu84py7BflUH/81j67yb3dk5lRLeo6HkiMNc= Subject key identifier: 2F:46:B2:EA:8B:CF:9E:BA:6D:ED:4B:D9:80:74:22:96:F8:C8:54:50 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 7C2EEA7B89FFF4B128534A78158F87F696FDF042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 060B Signing time: Mon 16 Mar 2026 22:00:42 +0000 Manifest this update: Mon 16 Mar 2026 21:55:42 +0000 Manifest next update: Tue 17 Mar 2026 22:03:42 +0000 Files and hashes: 1: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 2: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 3: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 4: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 4dTQDdD2uyIwD8llPEDOTlfaHewJV0DOo3ivGCF8VRM=) 5: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 6: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 8: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 9: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 19:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2e:ea:7b:89:ff:f4:b1:28:53:4a:78:15:8f:87:f6:96:fd:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Mar 16 21:55:42 2026 GMT Not After : Mar 17 22:03:42 2026 GMT Subject: CN=2F46B2EA8BCF9EBA6DED4BD980742296F8C85450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:b7:ca:69:be:a8:62:8e:fd:46:1c:cc:25: 78:34:8f:c2:e2:aa:40:95:0e:98:33:7d:8c:97:68: 88:84:2d:93:ca:bb:69:b9:4f:38:53:db:93:7d:a3: 0c:e0:83:a5:f8:51:8a:3e:40:09:5a:ac:fd:0a:44: 20:ae:38:bb:8a:a3:2d:9d:8a:36:7e:01:47:82:fd: ed:73:be:ab:54:69:46:ec:49:6d:1c:48:c9:d0:af: d5:1b:ba:4e:0a:2f:ff:70:ad:0e:e7:32:44:5f:00: 44:6d:5f:be:7f:53:f7:a5:8e:71:43:8c:29:b2:ff: bc:99:d5:29:f7:b1:b2:1c:0d:8d:d0:f7:7e:07:28: 55:7a:7b:af:7e:3e:8b:1a:f2:da:6e:96:aa:75:15: 71:3d:85:8b:a6:ea:cc:fe:b0:38:7c:54:c8:91:a9: ec:07:cc:26:22:54:c0:5b:ed:4b:be:f8:58:7e:9e: b9:d2:f6:49:31:9b:08:e7:ff:a9:dc:6f:5d:27:7d: b1:4f:3c:c7:a5:fa:5f:ed:e7:d7:dd:c0:79:e8:d2: 82:a7:85:45:b7:64:8b:42:ee:38:af:41:db:0e:09: f3:62:a4:0d:b8:f4:96:b7:18:b8:9a:94:82:ef:ca: ad:1c:14:58:cb:36:b7:ff:b7:55:d8:be:fa:d2:c0: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:B2:EA:8B:CF:9E:BA:6D:ED:4B:D9:80:74:22:96:F8:C8:54:50 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:86:bf:b6:40:fb:1d:b2:60:5e:c9:67:70:74:e9:82:51:52: 76:a3:b7:91:90:b3:46:31:dd:b4:d1:79:4c:eb:fa:5e:67:55: 13:db:7a:60:3a:06:08:5f:c4:3d:a4:b3:eb:f2:1b:63:8e:d8: f5:9b:7c:73:b9:7f:b2:01:d8:03:20:0d:ad:c2:6f:a2:18:fe: 0d:06:20:9a:a4:ad:46:31:f2:ed:e4:e0:28:0c:c6:0b:a7:b0: c0:b3:98:cc:d3:c6:06:a7:8d:b3:b7:39:86:76:ca:26:01:63: c5:f4:50:07:c4:d5:f2:41:47:43:70:92:08:9c:b5:8f:08:e0: eb:2d:c7:02:80:72:26:99:17:69:d1:bd:84:78:bc:c2:8d:fc: ae:cd:98:fc:8e:0f:11:27:16:00:b4:2a:22:50:5e:c1:47:56: 83:8f:19:70:01:b0:83:59:17:2e:33:af:c2:b8:39:6a:fc:40: 97:7d:54:48:20:98:95:0f:f4:f8:eb:26:fa:36:17:ba:2a:b5: 4b:bd:43:0f:a0:1f:67:b6:0d:02:be:f7:28:9a:24:6f:4c:3a: 9f:4e:f0:e5:40:5d:e2:7f:6d:a2:f9:49:99:5c:e9:4e:b6:ae: ac:6d:88:39:e8:35:4e:7f:e7:78:5c:a9:cb:c5:30:0f:f3:19: 49:de:e0:da -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfC7qe4n/9LEoU0p4FY+H9pb98EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjAzMTYyMTU1NDJaFw0yNjAzMTcyMjAzNDJaMDMxMTAvBgNV BAMTKDJGNDZCMkVBOEJDRjlFQkE2REVENEJEOTgwNzQyMjk2RjhDODU0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuArfKab6oYo79RhzMJXg0j8Li qkCVDpgzfYyXaIiELZPKu2m5TzhT25N9owzgg6X4UYo+QAlarP0KRCCuOLuKoy2d ijZ+AUeC/e1zvqtUaUbsSW0cSMnQr9Ubuk4KL/9wrQ7nMkRfAERtX75/U/eljnFD jCmy/7yZ1Sn3sbIcDY3Q934HKFV6e69+Posa8tpulqp1FXE9hYum6sz+sDh8VMiR qewHzCYiVMBb7Uu++Fh+nrnS9kkxmwjn/6ncb10nfbFPPMel+l/t59fdwHno0oKn hUW3ZItC7jivQdsOCfNipA249Ja3GLialILvyq0cFFjLNrf/t1XYvvrSwLWFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL0ay6ovPnrpt7UvZgHQilvjIVFAwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4a/tkD7HbJgXslncHTp glFSdqO3kZCzRjHdtNF5TOv6XmdVE9t6YDoGCF/EPaSz6/IbY47Y9Zt8c7l/sgHY AyANrcJvohj+DQYgmqStRjHy7eTgKAzGC6ewwLOYzNPGBqeNs7c5hnbKJgFjxfRQ B8TV8kFHQ3CSCJy1jwjg6y3HAoByJpkXadG9hHi8wo38rs2Y/I4PEScWALQqIlBe wUdWg48ZcAGwg1kXLjOvwrg5avxAl31USCCYlQ/0+Osm+jYXuiq1S71DD6AfZ7YN Ar73KJokb0w6n07w5UBd4n9tovlJmVzpTraurG2IOeg1Tn/neFypy8UwD/MZSd7g 2g== -----END CERTIFICATE-----Generated at Tue Mar 17 04:18:45 2026 by rpki-client