$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: T2jDzOAy/uHAFKZGbayZXr/OQJYjLmcKUKVwSuAdqAU= Subject key identifier: E1:DD:AD:79:A8:05:B8:1F:AB:5A:08:65:9B:87:6A:94:6C:9B:51:A0 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 7297952DAE976BDE5EC85BD8801F39711DC7E165 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 7C Signing time: Thu 26 Mar 2026 01:27:56 +0000 Manifest this update: Thu 26 Mar 2026 01:22:56 +0000 Manifest next update: Fri 27 Mar 2026 05:00:56 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: Aw/30j6rQ2ilAdLjFLDJfHo5ztp0WPDa9ac3ECCkf4w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:97:95:2d:ae:97:6b:de:5e:c8:5b:d8:80:1f:39:71:1d:c7:e1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Mar 26 01:22:56 2026 GMT Not After : Mar 27 05:00:56 2026 GMT Subject: CN=E1DDAD79A805B81FAB5A08659B876A946C9B51A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:3d:35:10:ea:36:10:e2:25:ad:26:83:52: 69:1f:b9:f6:82:10:63:8b:f7:33:c8:c1:2b:38:c5: ed:dc:27:6f:3d:94:ef:56:0e:5f:85:a1:24:61:43: e8:26:9a:b9:33:3c:6f:a2:cb:d2:84:f1:b1:2d:78: 30:e3:aa:21:d2:e1:c8:10:54:56:e7:95:bf:27:3d: ce:7d:2b:6a:b4:cb:96:0b:bb:5b:d7:db:b9:27:7e: ec:a0:85:e5:2e:55:c4:89:0d:34:26:33:cf:a3:86: c3:7c:92:ef:d3:4c:dd:c3:aa:c8:e9:ef:ec:02:1b: 41:7c:2f:56:8c:84:8d:ed:70:a5:7c:6a:64:51:57: 08:a1:72:25:8e:b0:61:4d:36:a0:ef:9e:a1:57:bc: e1:ce:10:13:ce:8f:53:a6:8c:ff:5e:21:1f:17:0e: f2:96:63:05:01:2d:89:9e:63:b0:66:1b:ce:78:d8: 30:fb:95:41:2d:a9:3a:d7:b8:80:44:b6:26:a4:3b: 7d:42:23:37:c2:fc:51:31:af:17:e5:41:cc:d4:46: cb:b8:a9:c0:bd:64:d7:b7:68:77:45:cb:ac:6d:34: 73:15:2e:a5:65:16:42:7f:1c:73:30:79:7b:ce:5f: d3:22:0c:9e:d7:d9:16:bd:a1:7f:77:ff:77:87:79: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DD:AD:79:A8:05:B8:1F:AB:5A:08:65:9B:87:6A:94:6C:9B:51:A0 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:74:0c:05:c6:4a:02:79:4d:63:9b:30:56:0b:2e:b0:a2:1c: ce:0a:77:f7:0b:70:6c:99:f0:fc:0c:40:59:e1:a8:54:e8:b8: 03:3e:56:df:f2:df:ff:e2:9f:bf:35:2c:fd:3d:b4:b2:e9:f6: f2:df:7f:24:d2:cd:bc:7a:e6:da:0c:6f:be:a8:b1:ab:f3:e6: 27:aa:e8:40:eb:bc:dd:47:bc:68:c9:ea:53:91:82:0c:6a:7d: 26:e0:bb:90:a5:00:d0:2b:c2:c8:5d:35:d1:54:3e:ed:5e:70: 23:4a:55:62:41:c2:07:13:30:10:50:11:7c:c0:c1:34:13:d9: 93:a6:33:bf:8d:d8:e9:2c:e1:d0:52:4b:8a:a9:a7:b2:b7:2a: 76:9a:a9:31:51:6d:9c:6f:c1:2c:40:10:61:c6:85:0c:fe:25: b5:c3:80:f6:ec:bf:ef:24:b5:4f:cc:24:36:f6:ef:60:40:66: 04:6b:e8:84:98:fc:69:df:b9:6d:3c:7d:5b:1a:c2:79:d3:6a: 47:47:ff:89:f4:d8:3c:75:4c:b3:1a:76:9b:03:9f:86:5d:ac: 21:e0:52:52:a4:c6:c1:ed:dd:bd:8b:6a:27:63:61:b5:87:9e: 48:ff:89:c1:85:0c:51:1b:9e:7d:07:08:75:4b:75:87:3c:47: 92:19:05:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcpeVLa6Xa95eyFvYgB85cR3H4WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjAzMjYwMTIyNTZaFw0yNjAzMjcwNTAwNTZaMDMxMTAvBgNV BAMTKEUxRERBRDc5QTgwNUI4MUZBQjVBMDg2NTlCODc2QTk0NkM5QjUxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJz01EOo2EOIlrSaDUmkfufaC EGOL9zPIwSs4xe3cJ289lO9WDl+FoSRhQ+gmmrkzPG+iy9KE8bEteDDjqiHS4cgQ VFbnlb8nPc59K2q0y5YLu1vX27knfuygheUuVcSJDTQmM8+jhsN8ku/TTN3Dqsjp 7+wCG0F8L1aMhI3tcKV8amRRVwihciWOsGFNNqDvnqFXvOHOEBPOj1OmjP9eIR8X DvKWYwUBLYmeY7BmG8542DD7lUEtqTrXuIBEtiakO31CIzfC/FExrxflQczURsu4 qcC9ZNe3aHdFy6xtNHMVLqVlFkJ/HHMweXvOX9MiDJ7X2Ra9oX93/3eHeTfBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4d2teagFuB+rWghlm4dqlGybUaAwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFdAwF xkoCeU1jmzBWCy6wohzOCnf3C3BsmfD8DEBZ4ahU6LgDPlbf8t//4p+/NSz9PbSy 6fby338k0s28eubaDG++qLGr8+YnquhA67zdR7xoyepTkYIMan0m4LuQpQDQK8LI XTXRVD7tXnAjSlViQcIHEzAQUBF8wME0E9mTpjO/jdjpLOHQUkuKqaeytyp2mqkx UW2cb8EsQBBhxoUM/iW1w4D27L/vJLVPzCQ29u9gQGYEa+iEmPxp37ltPH1bGsJ5 02pHR/+J9Ng8dUyzGnabA5+GXawh4FJSpMbB7d29i2onY2G1h55I/4nBhQxRG559 Bwh1S3WHPEeSGQVT -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:36 2026 by rpki-client