$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: VTAVgDh1sTfM+jJf3F/OGnTCosKH4PDyumOknoO1hf4= Subject key identifier: 59:CB:6A:F0:FC:C9:A1:E6:CC:42:2D:D6:A7:32:69:55:8F:9F:42:EF Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 107F86B4BBA2E1B51E46B1B55675A8CECF81ACAE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 52 Signing time: Fri 27 Mar 2026 19:55:08 +0000 Manifest this update: Fri 27 Mar 2026 19:50:08 +0000 Manifest next update: Sat 28 Mar 2026 20:21:08 +0000 Files and hashes: 1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: mM8p78yYMMLHpo8LkcpyCHmWQlG1j/ST+IcG0vGLIz0=) 2: 3138352e33382e32362e302f32342d3234203d3e20323033303736.roa (hash: sDu6cSq1jkixXmJL543CieEIPCSsRynaX7T0t0iTsp4=) 3: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) 4: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 5: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 6: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 7: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 8: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 9: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 20:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7f:86:b4:bb:a2:e1:b5:1e:46:b1:b5:56:75:a8:ce:cf:81:ac:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Mar 27 19:50:08 2026 GMT Not After : Mar 28 20:21:08 2026 GMT Subject: CN=59CB6AF0FCC9A1E6CC422DD6A73269558F9F42EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:fd:41:ff:4b:84:f1:fe:e1:5f:d2:3b:ae: 84:f7:f8:d9:f4:bf:79:86:b5:58:b3:81:0a:33:14: 0b:b6:35:0e:b2:53:ea:10:c1:48:41:d4:00:50:a4: 7d:11:bd:42:d5:fa:3f:0c:b0:15:ae:b0:c6:2f:4b: d0:12:40:84:db:97:74:59:3f:9f:dd:4b:c6:56:a1: f1:b4:c4:e9:aa:14:43:fb:77:26:26:d0:30:31:0f: 61:aa:dd:ad:83:ca:7c:b1:83:7d:72:63:4c:55:42: 6e:fc:e2:bd:5d:11:af:e2:b2:1c:53:1c:e1:c6:21: 1b:a1:7b:c9:4b:49:a0:9d:c5:35:09:c1:2d:26:22: c3:72:3f:ab:ee:f6:69:31:5b:3f:de:b3:d3:bb:3c: 2c:1e:3a:96:ae:5b:28:50:74:f3:e5:e3:ed:6d:fa: 07:0b:86:ca:1b:f5:74:f0:5e:38:bc:0c:21:4d:34: a7:5c:e5:55:8c:42:d4:f7:63:eb:06:80:ac:ea:a0: ab:7c:48:1e:e2:f9:fa:f7:e4:b8:7c:89:d6:3a:eb: c7:90:d7:a6:5a:e7:cb:8a:e8:e3:71:e0:00:12:e0: 68:bc:a4:e5:0d:c8:8c:22:7b:5d:22:81:00:4b:78: c6:9c:8a:ad:d6:48:ad:84:2c:d0:39:7f:7b:f7:a9: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:6A:F0:FC:C9:A1:E6:CC:42:2D:D6:A7:32:69:55:8F:9F:42:EF X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ab:92:4f:ec:2a:cb:1f:7d:eb:f4:bb:07:b0:0b:7b:40:f0: cc:a3:38:a6:57:a9:c4:39:ec:6a:3e:cd:3c:04:3d:54:8c:cb: f6:a2:8a:34:03:35:14:74:95:4a:2a:0b:15:6e:94:e3:64:0c: 4d:1f:23:1d:84:0e:ad:17:fd:77:3b:72:58:fe:d0:bb:5c:8c: 41:36:19:25:1f:89:91:c5:f9:3b:60:ea:e6:3e:bf:61:0b:a9: 00:a1:6e:93:a3:ca:06:8d:24:c5:4f:b7:cc:67:96:c1:18:7d: d9:60:a9:b0:3e:32:4a:9d:db:44:2c:11:72:49:6c:09:43:81: e8:07:fd:0b:d4:da:68:c9:40:10:50:b3:8e:27:36:7c:88:70: 2e:26:5d:d9:e9:96:c6:84:12:2d:34:ca:15:36:b8:76:aa:7b: 15:5c:f6:e1:29:f9:ec:8b:d3:6d:dd:64:e1:81:c8:31:59:99: 68:16:a4:17:83:20:7f:a6:11:de:af:9d:a6:7e:ff:1d:f8:8d: 96:2b:55:38:9a:9d:85:b7:a8:0f:80:ba:32:9e:e6:ce:bc:18: 41:6c:b9:ea:b5:d7:b4:7f:85:83:29:56:0c:01:b6:0d:03:a2: a6:d5:7e:d7:02:00:8e:d0:ad:2a:b0:1f:1c:c9:84:9b:7d:15: 6b:73:60:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEH+GtLui4bUeRrG1VnWozs+BrK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjAzMjcxOTUwMDhaFw0yNjAzMjgyMDIxMDhaMDMxMTAvBgNV BAMTKDU5Q0I2QUYwRkNDOUExRTZDQzQyMkRENkE3MzI2OTU1OEY5RjQyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpv1B/0uE8f7hX9I7roT3+Nn0 v3mGtVizgQozFAu2NQ6yU+oQwUhB1ABQpH0RvULV+j8MsBWusMYvS9ASQITbl3RZ P5/dS8ZWofG0xOmqFEP7dyYm0DAxD2Gq3a2Dynyxg31yY0xVQm784r1dEa/ishxT HOHGIRuhe8lLSaCdxTUJwS0mIsNyP6vu9mkxWz/es9O7PCweOpauWyhQdPPl4+1t +gcLhsob9XTwXji8DCFNNKdc5VWMQtT3Y+sGgKzqoKt8SB7i+fr35Lh8idY668eQ 16Za58uK6ONx4AAS4Gi8pOUNyIwie10igQBLeMaciq3WSK2ELNA5f3v3qQlZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWctq8PzJoebMQi3WpzJpVY+fQu8wHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSq5JP 7CrLH33r9LsHsAt7QPDMozimV6nEOexqPs08BD1UjMv2ooo0AzUUdJVKKgsVbpTj ZAxNHyMdhA6tF/13O3JY/tC7XIxBNhklH4mRxfk7YOrmPr9hC6kAoW6To8oGjSTF T7fMZ5bBGH3ZYKmwPjJKndtELBFySWwJQ4HoB/0L1NpoyUAQULOOJzZ8iHAuJl3Z 6ZbGhBItNMoVNrh2qnsVXPbhKfnsi9Nt3WThgcgxWZloFqQXgyB/phHer52mfv8d +I2WK1U4mp2Ft6gPgLoynubOvBhBbLnqtde0f4WDKVYMAbYNA6Km1X7XAgCO0K0q sB8cyYSbfRVrc2A6 -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:45 2026 by rpki-client