$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json) Hash identifier: hA90HXfhO8CJ1vYkFR6FYc4Wx2kZOael2G2Pac9HgBs= Subject key identifier: 7B:39:24:9E:9D:B7:49:F8:1E:65:12:80:A1:85:D2:4A:66:60:1A:70 Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409 Certificate serial: 1E2C5194B726695006191D09345E651F5B419701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft Manifest number: 0319 Signing time: Sat 28 Mar 2026 16:55:58 +0000 Manifest this update: Sat 28 Mar 2026 16:50:58 +0000 Manifest next update: Sun 29 Mar 2026 20:16:58 +0000 Files and hashes: 1: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=) 2: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=) 3: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: cA/tzkGewh/ovJGfSjiz099nsoKjCdqIfg5tCY7D1Uw=) 4: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=) 5: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 20:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2c:51:94:b7:26:69:50:06:19:1d:09:34:5e:65:1f:5b:41:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409 Validity Not Before: Mar 28 16:50:58 2026 GMT Not After : Mar 29 20:16:58 2026 GMT Subject: CN=7B39249E9DB749F81E651280A185D24A66601A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:55:b7:5b:a7:5c:9a:c2:ab:57:3c:cd:1c: 83:85:7c:ce:35:b4:37:ba:bb:d1:33:f7:ba:bf:b2: 2f:9d:a2:d7:bd:3e:cf:99:60:08:7c:b7:34:8e:46: 91:82:ef:30:24:3a:c2:33:ab:ce:84:c5:93:27:2d: d7:9d:6b:ba:ef:d4:d0:9d:0b:1e:3c:5c:6e:69:40: 8b:82:bc:f9:8a:79:fd:6b:05:23:d1:9a:1c:97:55: 25:d1:07:16:98:43:d7:a0:50:e0:7d:b7:94:ac:76: 52:16:3b:c0:d1:06:e5:30:4c:11:ed:4d:6d:06:98: f0:89:d3:87:d6:4d:f8:36:77:be:97:9a:a2:94:f6: b2:9d:a6:3d:a1:2e:38:b1:d9:37:75:af:7b:dc:f6: 1a:65:14:b9:8f:8c:5d:7b:4d:da:5d:21:8d:c4:9d: 1a:e2:6c:50:07:fb:26:0d:7b:76:a9:0e:c3:3a:e0: a6:29:65:94:fe:97:be:9b:cc:ba:24:be:b7:88:25: 2e:c2:67:70:60:a9:6b:93:3b:84:09:16:a3:43:2a: 6a:0d:7d:60:f6:ca:84:85:b2:9a:b0:fb:1a:7f:72: 20:36:c9:cf:f1:79:6b:cd:69:1c:7c:ea:bd:1a:86: 79:89:e1:a8:ef:a0:01:ca:d9:d0:f8:e4:60:0c:13: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:39:24:9E:9D:B7:49:F8:1E:65:12:80:A1:85:D2:4A:66:60:1A:70 X509v3 Authority Key Identifier: keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ce:20:49:49:00:61:99:67:5a:a7:c6:f7:7e:8f:7d:06:de: 80:2c:b2:36:41:6d:cb:b8:ff:96:1e:b7:65:45:27:9b:a8:67: 96:ec:72:ca:59:7c:03:c2:be:4f:7a:81:f7:a8:28:1e:9f:c7: 0e:2d:62:4e:9d:f1:da:42:98:30:63:11:5c:b0:66:17:f7:af: 20:50:b8:b7:33:a9:74:2c:28:ee:eb:86:2c:af:4f:48:59:63: 20:c9:0a:f5:e1:7a:0b:f3:ac:3d:4a:2f:f1:28:18:73:e0:05: 50:98:d3:3e:7d:07:3f:e8:e0:5b:ad:be:ba:9e:3f:8e:a8:62: 87:5c:75:28:3b:3f:60:18:0e:74:53:09:af:4c:b5:41:73:72: 86:d2:50:73:5f:91:90:91:27:d0:a6:d7:43:fe:9f:7a:25:5e: d4:3e:92:b1:d5:27:79:59:b3:f6:ab:ed:3f:96:01:84:f4:62: cc:b0:53:9d:66:f5:46:0d:7f:e0:58:e1:46:58:7a:ca:f7:bb: 79:b0:0b:b8:82:b8:c4:ee:ee:d4:33:1c:5d:5e:a6:fa:51:d0: e0:ed:95:73:46:63:bf:73:16:d0:b9:8c:6d:73:80:99:63:a4: 2b:c7:f0:76:cf:a6:3c:cc:89:6a:5a:81:fb:2f:33:cf:99:44: c3:ea:bb:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHixRlLcmaVAGGR0JNF5lH1tBlwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3YmMyOGM5MmEyMjlhNWFjNzhjMGRlMjg3ZDg5Y2Uz NzcyNjQwOTAeFw0yNjAzMjgxNjUwNThaFw0yNjAzMjkyMDE2NThaMDMxMTAvBgNV BAMTKDdCMzkyNDlFOURCNzQ5RjgxRTY1MTI4MEExODVEMjRBNjY2MDFBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RFW3W6dcmsKrVzzNHIOFfM41 tDe6u9Ez97q/si+dote9Ps+ZYAh8tzSORpGC7zAkOsIzq86ExZMnLdeda7rv1NCd Cx48XG5pQIuCvPmKef1rBSPRmhyXVSXRBxaYQ9egUOB9t5SsdlIWO8DRBuUwTBHt TW0GmPCJ04fWTfg2d76XmqKU9rKdpj2hLjix2Td1r3vc9hplFLmPjF17TdpdIY3E nRribFAH+yYNe3apDsM64KYpZZT+l76bzLokvreIJS7CZ3BgqWuTO4QJFqNDKmoN fWD2yoSFspqw+xp/ciA2yc/xeWvNaRx86r0ahnmJ4ajvoAHK2dD45GAME2NBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUezkknp23SfgeZRKAoYXSSmZgGnAwHwYDVR0j BBgwFoAUVHvCjJKiKaWseMDeKH2JzjdyZAkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY0OWQ3ZjctYmIzZi00MTg3LWJlMjktNTllZjJkODkw MzlhLzAvNTQ3QkMyOEM5MkEyMjlBNUFDNzhDMERFMjg3RDg5Q0UzNzcyNjQwOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZIdkNqSktpS2FXc2VNRGVLSDJKempk eVpBay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQ5ZDdmNy1i YjNmLTQxODctYmUyOS01OWVmMmQ4OTAzOWEvMC81NDdCQzI4QzkyQTIyOUE1QUM3 OEMwREUyODdEODlDRTM3NzI2NDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsc4gSUkAYZlnWqfG936P fQbegCyyNkFty7j/lh63ZUUnm6hnluxyyll8A8K+T3qB96goHp/HDi1iTp3x2kKY MGMRXLBmF/evIFC4tzOpdCwo7uuGLK9PSFljIMkK9eF6C/OsPUov8SgYc+AFUJjT Pn0HP+jgW62+up4/jqhih1x1KDs/YBgOdFMJr0y1QXNyhtJQc1+RkJEn0KbXQ/6f eiVe1D6SsdUneVmz9qvtP5YBhPRizLBTnWb1Rg1/4FjhRlh6yve7ebALuIK4xO7u 1DMcXV6m+lHQ4O2Vc0Zjv3MW0LmMbXOAmWOkK8fwds+mPMyJalqB+y8zz5lEw+q7 bg== -----END CERTIFICATE-----Generated at Sun Mar 29 12:49:27 2026 by rpki-client