$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: 84n4hywnPfgKIci7oT7Cx3EJAIzfUubxC9iNspHD1wc= Subject key identifier: 03:E9:D0:7A:85:ED:29:FB:C8:DE:0B:7A:14:02:C5:6A:37:5B:FE:CA Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 3A03046DCA976FD531BBE28D8885A5E9E2736FDB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 023D Signing time: Wed 25 Mar 2026 22:27:08 +0000 Manifest this update: Wed 25 Mar 2026 22:22:08 +0000 Manifest next update: Fri 27 Mar 2026 01:28:08 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: MkW6nbNQYN+00m/SQ0JIyROi9SH4JZ7HJWU8rhzbAXo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:03:04:6d:ca:97:6f:d5:31:bb:e2:8d:88:85:a5:e9:e2:73:6f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Mar 25 22:22:08 2026 GMT Not After : Mar 27 01:28:08 2026 GMT Subject: CN=03E9D07A85ED29FBC8DE0B7A1402C56A375BFECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:42:97:ff:56:ed:a0:be:95:71:03:3a:b7: 9c:bb:5e:dc:a0:fc:1b:a9:b8:e1:44:0a:9e:2e:25: 76:4d:2f:73:23:ac:a1:f8:97:4f:b9:c4:0f:42:ce: 4d:d1:6a:10:81:80:0d:87:5e:28:7b:0f:58:db:86: 0f:f1:bf:55:35:cd:73:a8:c8:45:17:83:16:30:43: 3a:d5:03:ba:f4:dd:b3:e9:2e:e0:ae:25:cc:03:6a: d7:11:5c:c5:88:e4:09:af:79:01:61:22:70:7d:f7: 20:84:2f:c8:b9:c2:d1:95:b5:22:b1:43:0d:70:28: 27:f2:d0:e9:be:1d:e0:d9:9a:ef:0e:0d:2a:aa:53: c9:fc:af:c8:d7:c7:8b:08:fd:b2:aa:c3:59:d0:fa: 8d:82:ce:da:ce:4d:03:d9:8c:be:f9:93:1b:50:18: 66:5c:0b:03:e7:b7:d6:2b:14:fe:53:a9:20:82:b1: 86:86:ee:7d:80:0d:71:bb:73:9d:14:78:e7:6a:ff: 9e:e9:96:5a:ca:fc:0a:e9:fa:e8:0e:65:75:c6:d9: 06:07:00:a4:bd:6b:f5:28:be:3b:90:fb:97:19:f3: 3b:9f:70:85:eb:fa:fa:3b:d4:db:e3:82:9b:98:e5: 44:ca:bf:9e:5e:dc:33:de:80:f9:f8:5e:d6:08:ea: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:D0:7A:85:ED:29:FB:C8:DE:0B:7A:14:02:C5:6A:37:5B:FE:CA X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:df:5e:bc:76:d7:1c:3e:63:24:b1:9b:9f:2d:63:96:0d:79: b4:ec:7e:c9:88:3a:cc:80:83:b0:c6:ec:10:3f:bd:9e:e6:5f: 3c:0a:f0:20:5f:be:ca:e9:6f:15:82:ce:fd:7d:8f:af:42:7e: 97:95:a0:0d:fc:1e:2c:71:93:0a:e0:1e:11:4c:5a:c0:1f:57: da:cf:f4:81:a1:cd:b0:83:da:0b:3a:ee:d0:d1:d6:17:75:1d: 91:a5:87:d6:6b:6a:91:05:83:ce:66:13:2f:ba:0b:e8:a0:9b: 0c:5f:2e:83:f7:bd:76:c8:ba:0a:ea:11:42:1c:72:ce:a1:c0: 3f:d1:4b:1a:a4:2c:56:e6:36:db:ea:76:9d:24:23:a4:3d:9a: 94:9a:5e:db:b4:ed:3e:da:97:be:33:cc:10:55:ac:78:94:dc: 1a:93:ed:98:4a:12:ba:57:cb:5c:db:0c:d0:6f:e5:ee:41:43: 46:52:95:a4:23:ca:a6:cb:ed:dc:9e:74:16:60:6b:82:b4:33: f4:8e:73:88:6f:68:b7:87:30:9e:b6:1b:d0:96:74:92:76:0e: 37:b3:4f:ca:89:b4:dc:96:d6:ea:6c:2f:26:1d:9c:d4:cc:d5: 55:57:3e:42:40:f7:28:44:f5:55:a5:21:a7:4c:78:f9:c6:e6: 1b:61:73:de -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOgMEbcqXb9Uxu+KNiIWl6eJzb9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjAzMjUyMjIyMDhaFw0yNjAzMjcwMTI4MDhaMDMxMTAvBgNV BAMTKDAzRTlEMDdBODVFRDI5RkJDOERFMEI3QTE0MDJDNTZBMzc1QkZFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrk0KX/1btoL6VcQM6t5y7Xtyg /BupuOFECp4uJXZNL3MjrKH4l0+5xA9Czk3RahCBgA2HXih7D1jbhg/xv1U1zXOo yEUXgxYwQzrVA7r03bPpLuCuJcwDatcRXMWI5AmveQFhInB99yCEL8i5wtGVtSKx Qw1wKCfy0Om+HeDZmu8ODSqqU8n8r8jXx4sI/bKqw1nQ+o2CztrOTQPZjL75kxtQ GGZcCwPnt9YrFP5TqSCCsYaG7n2ADXG7c50UeOdq/57pllrK/Arp+ugOZXXG2QYH AKS9a/UovjuQ+5cZ8zufcIXr+vo71NvjgpuY5UTKv55e3DPegPn4XtYI6uMjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA+nQeoXtKfvI3gt6FALFajdb/sowHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj3168 dtccPmMksZufLWOWDXm07H7JiDrMgIOwxuwQP72e5l88CvAgX77K6W8Vgs79fY+v Qn6XlaAN/B4scZMK4B4RTFrAH1faz/SBoc2wg9oLOu7Q0dYXdR2RpYfWa2qRBYPO ZhMvugvooJsMXy6D9712yLoK6hFCHHLOocA/0UsapCxW5jbb6nadJCOkPZqUml7b tO0+2pe+M8wQVax4lNwak+2YShK6V8tc2wzQb+XuQUNGUpWkI8qmy+3cnnQWYGuC tDP0jnOIb2i3hzCethvQlnSSdg43s0/KibTcltbqbC8mHZzUzNVVVz5CQPcoRPVV pSGnTHj5xuYbYXPe -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:55 2026 by rpki-client