$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: c/I7T8gsNoROfN5aGv7mAh4LAg5yMjpyS0Lu0O7JYLY= Subject key identifier: EA:99:5B:77:48:F7:08:7E:B2:21:D6:1C:C9:E7:22:53:46:14:84:E1 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 19EAC71172A305782F7843D58CA187D1FAA9EC93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 052F Signing time: Wed 25 Mar 2026 17:54:54 +0000 Manifest this update: Wed 25 Mar 2026 17:49:54 +0000 Manifest next update: Thu 26 Mar 2026 21:49:54 +0000 Files and hashes: 1: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 2: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 3: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 4: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 5: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 6: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 7: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 8: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 9: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 10: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 11: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 12: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 13: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 14: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 15: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 16: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 17: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 18: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 19: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 20: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: +neHv8+/3qXobKwh5ndWogEJP1l4fjQe/SYTPbFLDPA=) 21: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 22: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 23: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 24: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 25: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 26: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 27: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 28: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ea:c7:11:72:a3:05:78:2f:78:43:d5:8c:a1:87:d1:fa:a9:ec:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Mar 25 17:49:54 2026 GMT Not After : Mar 26 21:49:54 2026 GMT Subject: CN=EA995B7748F7087EB221D61CC9E72253461484E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:e2:6c:db:cf:2a:83:f2:e1:50:3c:74:51: 1b:2f:7b:69:64:1c:2e:dd:49:57:9a:a7:d0:d6:f1: 32:6e:93:23:50:ab:7b:f2:4d:42:69:d7:f9:a6:81: 8e:97:68:34:d5:92:c7:7c:94:07:e6:bb:49:62:07: d9:d0:71:ad:4c:ca:cd:00:cf:9c:e3:02:8d:50:5e: 0f:10:02:d0:5c:e9:6e:ed:00:c7:77:6e:93:6c:9e: 6c:a7:3e:08:82:77:7a:1d:18:06:52:77:79:47:dc: 90:af:25:53:91:d2:18:0d:64:35:3e:59:1d:bd:10: 1a:81:00:1a:3b:ff:0f:80:8a:c3:f2:ea:ff:b1:72: 6e:e9:a4:b7:e0:fc:a8:49:d6:9a:c0:b9:5d:4e:9d: c0:69:01:30:32:04:41:e9:64:81:e8:f2:d8:5f:9c: 64:fd:03:45:45:0b:a3:de:50:f5:0c:05:a4:5e:8c: 41:77:82:dc:ef:7e:c0:5b:44:05:c9:85:fc:8a:6e: 3f:ad:02:9d:d5:f8:5d:6e:25:62:07:60:2f:87:4e: ec:ef:13:56:b0:8d:dd:bc:87:bd:12:f3:68:be:f6: 9c:4d:a2:ae:9e:42:54:8f:ec:75:fe:a9:1a:67:25: 0e:e6:94:61:fb:48:c0:57:04:8a:f0:f9:8b:f3:b0: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:99:5B:77:48:F7:08:7E:B2:21:D6:1C:C9:E7:22:53:46:14:84:E1 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:57:94:9e:d8:0a:06:7f:85:71:7e:99:e7:b6:c8:d1:e9:ac: 07:07:2b:5f:2c:fc:39:31:ef:9d:c1:fc:16:06:af:07:5b:62: 4a:00:8c:68:fd:27:8a:ce:a6:b7:4c:e7:41:f6:6d:3f:7d:ba: ff:4d:e2:3c:a7:77:a1:cb:8b:13:f5:bb:98:06:7b:35:69:e8: 1d:4f:16:ba:d0:7e:a0:9b:e6:ec:d1:c3:4a:45:0b:7c:6d:ee: bd:1e:1f:e8:5b:71:bb:f9:a9:5e:6c:2e:b6:cc:d0:4f:80:c3: 20:bb:30:fb:a8:ed:c6:85:2c:d9:7a:6a:c4:dc:fd:58:49:6b: d9:fb:dd:8d:9a:d2:f1:4c:38:71:22:a4:12:6f:86:d2:5f:83: f4:6a:63:cf:75:cb:26:73:8d:74:8c:1c:a3:bb:9e:69:f0:43: ae:18:a7:07:9f:42:a3:49:de:cb:87:b9:aa:e1:cb:90:ac:29: d7:a2:b1:7a:3d:08:62:a8:2a:3a:96:8a:6c:da:23:75:97:84: 6e:4f:e5:68:27:51:04:19:b3:05:a8:ab:79:2d:23:e3:89:50: 40:14:ab:94:9a:a3:e8:fd:33:cc:b5:81:f3:03:46:8b:19:dc: a1:01:56:95:8a:5a:d6:4e:4d:a3:0e:04:b7:b2:11:6b:64:32: 5d:70:e5:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGerHEXKjBXgveEPVjKGH0fqp7JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjAzMjUxNzQ5NTRaFw0yNjAzMjYyMTQ5NTRaMDMxMTAvBgNV BAMTKEVBOTk1Qjc3NDhGNzA4N0VCMjIxRDYxQ0M5RTcyMjUzNDYxNDg0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyeJs288qg/LhUDx0URsve2lk HC7dSVeap9DW8TJukyNQq3vyTUJp1/mmgY6XaDTVksd8lAfmu0liB9nQca1Mys0A z5zjAo1QXg8QAtBc6W7tAMd3bpNsnmynPgiCd3odGAZSd3lH3JCvJVOR0hgNZDU+ WR29EBqBABo7/w+AisPy6v+xcm7ppLfg/KhJ1prAuV1OncBpATAyBEHpZIHo8thf nGT9A0VFC6PeUPUMBaRejEF3gtzvfsBbRAXJhfyKbj+tAp3V+F1uJWIHYC+HTuzv E1awjd28h70S82i+9pxNoq6eQlSP7HX+qRpnJQ7mlGH7SMBXBIrw+YvzsAydAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6plbd0j3CH6yIdYcyeciU0YUhOEwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1eUntgKBn+FcX6Z57bI 0emsBwcrXyz8OTHvncH8FgavB1tiSgCMaP0nis6mt0znQfZtP326/03iPKd3ocuL E/W7mAZ7NWnoHU8WutB+oJvm7NHDSkULfG3uvR4f6Ftxu/mpXmwutszQT4DDILsw +6jtxoUs2XpqxNz9WElr2fvdjZrS8Uw4cSKkEm+G0l+D9Gpjz3XLJnONdIwco7ue afBDrhinB59Co0ney4e5quHLkKwp16Kxej0IYqgqOpaKbNojdZeEbk/laCdRBBmz BaireS0j44lQQBSrlJqj6P0zzLWB8wNGixncoQFWlYpa1k5Now4Et7IRa2QyXXDl +g== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:19 2026 by rpki-client