$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: 0M6WeQeucXDLHixg5qtgpOrjuubEwFKuTK09jNfQKlA= Subject key identifier: 19:69:6F:90:CB:76:E6:1A:59:D5:7B:89:00:E3:E0:B7:EB:8F:3F:08 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 5C53660E4D7BC49F4A961ADC5904009C0F71C2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 052F Signing time: Fri 20 Mar 2026 23:19:27 +0000 Manifest this update: Fri 20 Mar 2026 23:14:27 +0000 Manifest next update: Sun 22 Mar 2026 01:29:27 +0000 Files and hashes: 1: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 2: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 3: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 4: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 5: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 6: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: dFj/a7k8dMhELvL3dokkBlDl70V7dOk+UeMaCoQ+KSE=) 7: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 8: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 9: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 10: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 11: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 12: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 13: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 14: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 15: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:53:66:0e:4d:7b:c4:9f:4a:96:1a:dc:59:04:00:9c:0f:71:c2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Mar 20 23:14:27 2026 GMT Not After : Mar 22 01:29:27 2026 GMT Subject: CN=19696F90CB76E61A59D57B8900E3E0B7EB8F3F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:51:f6:21:81:77:b6:fe:f4:42:37:f0:4a: fc:a7:8b:0f:fa:c4:52:48:02:7e:52:83:c2:5a:34: 92:bc:2a:27:8c:4e:37:81:23:a3:c3:cd:a4:03:d8: 35:49:f3:67:92:2b:de:ac:14:a9:f0:7a:f4:d1:64: c2:10:8d:c5:e8:88:8b:2c:b5:00:91:8b:86:5f:a7: 94:47:c1:75:7d:51:ff:31:05:dc:93:ae:19:12:62: 90:b2:81:ed:a7:df:1e:54:09:7f:86:17:af:34:c1: 35:7e:e4:90:9b:33:4e:b9:41:6c:4b:3b:83:dd:37: 4c:c1:18:1f:1e:1b:21:98:1d:36:fb:e7:bd:91:61: 13:89:ce:a6:b7:08:72:47:b3:6f:52:99:1d:a0:20: ed:21:0b:77:a1:23:17:d5:79:93:43:c0:f3:8d:a7: 5d:ef:e3:72:46:d1:ae:c8:3d:98:c4:a8:e6:89:c9: 4c:72:3f:ab:6e:7b:dc:46:8b:69:67:c4:4a:63:35: 19:6a:67:97:9f:a1:f5:2e:38:61:13:a0:92:ed:ca: 9c:07:6d:ce:c0:90:f4:e4:f4:24:d8:c6:db:66:f3: 8e:46:c7:6a:20:77:3f:d8:4c:61:09:a3:cb:31:e2: 8e:2d:7e:0a:90:4d:90:bb:bf:2c:f8:d2:f5:d1:67: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:69:6F:90:CB:76:E6:1A:59:D5:7B:89:00:E3:E0:B7:EB:8F:3F:08 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:af:16:55:59:e6:4a:17:29:17:7b:46:0b:34:1b:5b:7b:57: d5:40:4c:db:ba:f3:d9:ad:87:e7:f4:72:56:82:b8:48:09:4b: 89:e0:23:f3:22:c4:59:13:65:a8:f2:4f:3b:15:dc:ba:ad:ce: cc:ab:98:7e:7e:0c:e5:24:f4:f1:8e:22:4f:b3:17:9b:bb:e1: 67:a2:9a:7a:7b:26:7f:c8:30:58:73:ed:77:fb:8b:3d:6e:f0: 1c:a9:51:b3:e1:bf:a1:cf:4f:03:7a:48:fc:ef:b0:7a:fa:8b: 04:98:2e:e1:5f:22:81:ca:00:69:7a:47:2c:25:3a:d7:74:b1: d1:5a:53:ec:9a:f1:b4:0d:1c:72:f6:14:b3:e6:53:d5:53:c7: 06:6d:01:f5:bb:65:e6:2d:0b:d4:87:16:3e:0a:dc:ef:44:83: d7:00:8f:cf:45:7e:fe:02:e5:3f:bf:ed:33:7d:2b:d7:3f:cb: c6:1d:9d:bd:40:52:4b:75:e4:a6:7e:02:df:bb:72:17:d8:9c: 07:9c:b1:38:91:df:70:57:1e:99:05:db:11:fc:07:fa:c3:66: 2c:2d:03:30:8d:8f:15:b8:5e:5c:f3:e3:ac:60:a9:80:d7:b9: c1:3a:15:b9:06:3c:95:fc:c7:37:b7:da:90:8a:e6:a6:17:28: 19:7f:46:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXFNmDk17xJ9KlhrcWQQAnA9xwuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjAzMjAyMzE0MjdaFw0yNjAzMjIwMTI5MjdaMDMxMTAvBgNV BAMTKDE5Njk2RjkwQ0I3NkU2MUE1OUQ1N0I4OTAwRTNFMEI3RUI4RjNGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZFH2IYF3tv70QjfwSvyniw/6 xFJIAn5Sg8JaNJK8KieMTjeBI6PDzaQD2DVJ82eSK96sFKnwevTRZMIQjcXoiIss tQCRi4Zfp5RHwXV9Uf8xBdyTrhkSYpCyge2n3x5UCX+GF680wTV+5JCbM065QWxL O4PdN0zBGB8eGyGYHTb7572RYROJzqa3CHJHs29SmR2gIO0hC3ehIxfVeZNDwPON p13v43JG0a7IPZjEqOaJyUxyP6tue9xGi2lnxEpjNRlqZ5efofUuOGEToJLtypwH bc7AkPTk9CTYxttm845Gx2ogdz/YTGEJo8sx4o4tfgqQTZC7vyz40vXRZ6ajAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGWlvkMt25hpZ1XuJAOPgt+uPPwgwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq8WVVnmShcpF3tGCzQb W3tX1UBM27rz2a2H5/RyVoK4SAlLieAj8yLEWRNlqPJPOxXcuq3OzKuYfn4M5ST0 8Y4iT7MXm7vhZ6Kaensmf8gwWHPtd/uLPW7wHKlRs+G/oc9PA3pI/O+wevqLBJgu 4V8igcoAaXpHLCU613Sx0VpT7JrxtA0ccvYUs+ZT1VPHBm0B9btl5i0L1IcWPgrc 70SD1wCPz0V+/gLlP7/tM30r1z/Lxh2dvUBSS3Xkpn4C37tyF9icB5yxOJHfcFce mQXbEfwH+sNmLC0DMI2PFbheXPPjrGCpgNe5wToVuQY8lfzHN7fakIrmphcoGX9G GQ== -----END CERTIFICATE-----Generated at Sat Mar 21 06:11:32 2026 by rpki-client