$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: L+MYuugOV54lugAlGc8+LkclY2A3AxYt2r1+L9RbtEA= Subject key identifier: BD:1C:63:CD:A7:B8:1F:8E:9F:98:0E:13:04:2B:36:3D:00:33:5F:81 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 31FB0ED3ED03E20CDA9CCF1C37E53C9890908144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 019F Signing time: Wed 25 Mar 2026 16:41:08 +0000 Manifest this update: Wed 25 Mar 2026 16:36:08 +0000 Manifest next update: Thu 26 Mar 2026 18:33:08 +0000 Files and hashes: 1: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: qJ8hiAp79RuEWB/QGh3OriP7phzo/ru7lBdU2cWRYBs=) 4: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: sR62WH97nYoLOUNF2KvRD4SdkLQcNvP4QUYn3/hjJS0=) 5: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fb:0e:d3:ed:03:e2:0c:da:9c:cf:1c:37:e5:3c:98:90:90:81:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Mar 25 16:36:08 2026 GMT Not After : Mar 26 18:33:08 2026 GMT Subject: CN=BD1C63CDA7B81F8E9F980E13042B363D00335F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:4c:af:8b:fb:cb:64:a2:9a:99:88:b5:55: 4d:76:b1:a0:68:7f:a3:ba:82:be:44:a4:d1:81:70: 72:f2:05:43:ad:5c:36:d2:44:85:28:76:79:95:ba: 89:81:2f:f8:92:18:49:8d:12:f5:d2:44:50:fc:67: ac:89:0a:20:db:f4:ef:9f:3d:ba:92:18:1b:90:da: f3:4e:53:55:1b:17:1f:34:61:a8:43:59:86:a3:36: 16:4f:8e:d8:67:a2:e9:01:f0:8b:97:53:40:3b:36: 89:3f:b4:ee:7d:62:71:97:40:f1:7b:39:ff:31:81: 43:94:c3:dd:87:79:7f:af:15:94:84:fe:0d:37:88: 95:4a:a1:28:bd:5b:e8:4c:d6:9b:4d:0a:99:73:67: d6:89:fe:93:21:52:85:f2:3e:d6:29:32:fa:f3:ff: 6b:db:04:c6:d0:fb:bf:54:d1:e2:47:b7:86:4c:99: 29:e5:1a:6d:f3:cd:05:16:38:73:1f:21:4c:12:75: 7f:0d:02:82:1f:87:a9:b6:83:63:54:a7:81:51:6e: 54:76:f1:8c:af:21:cd:e3:7b:1e:4c:4d:a6:de:67: d7:b2:ea:4f:89:6e:6d:4d:46:e8:e8:c6:ea:96:16: 79:bf:27:a0:af:e6:74:a9:18:61:8a:47:0a:0a:f4: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1C:63:CD:A7:B8:1F:8E:9F:98:0E:13:04:2B:36:3D:00:33:5F:81 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f1:cd:0a:b9:f1:3d:0b:53:5e:bd:31:cb:71:98:20:04:a6: 4e:9f:5b:e7:9c:42:12:90:09:fe:56:74:d7:bd:24:cf:ae:83: ed:e9:b5:c5:01:de:d1:15:81:2c:09:c2:ac:bb:6b:6c:e1:cf: 03:fa:fd:19:30:4e:b5:30:b4:49:bb:88:70:94:09:b1:83:bc: c5:02:9f:f1:46:f7:ee:c2:b0:be:aa:8f:6c:ff:9e:ae:23:74: 36:05:14:5d:a9:80:f5:0a:0a:b7:b8:4c:f1:f5:59:01:0b:63: 7e:8d:28:c9:d3:bd:42:7a:2d:33:e2:51:0a:b3:16:51:e1:cf: bd:4b:aa:f5:b8:b7:0a:2d:d1:cb:15:25:b0:d1:f4:fc:4d:2b: 5c:05:a9:98:de:9f:30:f7:51:41:88:a4:79:06:9d:48:da:63: 0e:ca:e6:4f:93:67:f7:91:0f:86:23:68:24:0f:95:d1:ff:61: a7:63:a9:a7:74:ef:a9:56:81:06:92:40:21:38:9d:b2:98:9f: 3b:3b:ca:5c:76:01:ee:08:64:25:0a:53:da:a0:90:f9:19:12: 7d:4c:4e:55:f7:14:0d:2f:44:b4:2f:f0:ab:9d:8b:66:34:30: ff:7a:fa:53:b8:44:e9:aa:b7:96:46:8a:f5:24:11:03:5e:dc: 39:05:92:4d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMfsO0+0D4gzanM8cN+U8mJCQgUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNjAzMjUxNjM2MDhaFw0yNjAzMjYxODMzMDhaMDMxMTAvBgNV BAMTKEJEMUM2M0NEQTdCODFGOEU5Rjk4MEUxMzA0MkIzNjNEMDAzMzVGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUUyvi/vLZKKamYi1VU12saBo f6O6gr5EpNGBcHLyBUOtXDbSRIUodnmVuomBL/iSGEmNEvXSRFD8Z6yJCiDb9O+f PbqSGBuQ2vNOU1UbFx80YahDWYajNhZPjthnoukB8IuXU0A7Nok/tO59YnGXQPF7 Of8xgUOUw92HeX+vFZSE/g03iJVKoSi9W+hM1ptNCplzZ9aJ/pMhUoXyPtYpMvrz /2vbBMbQ+79U0eJHt4ZMmSnlGm3zzQUWOHMfIUwSdX8NAoIfh6m2g2NUp4FRblR2 8YyvIc3jex5MTabeZ9ey6k+Jbm1NRujoxuqWFnm/J6Cv5nSpGGGKRwoK9AedAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvRxjzae4H46fmA4TBCs2PQAzX4EwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/HNCrnxPQtTXr0xy3GY IASmTp9b55xCEpAJ/lZ0170kz66D7em1xQHe0RWBLAnCrLtrbOHPA/r9GTBOtTC0 SbuIcJQJsYO8xQKf8Ub37sKwvqqPbP+eriN0NgUUXamA9QoKt7hM8fVZAQtjfo0o ydO9QnotM+JRCrMWUeHPvUuq9bi3Ci3RyxUlsNH0/E0rXAWpmN6fMPdRQYikeQad SNpjDsrmT5Nn95EPhiNoJA+V0f9hp2Opp3TvqVaBBpJAITidspifOzvKXHYB7ghk JQpT2qCQ+RkSfUxOVfcUDS9EtC/wq52LZjQw/3r6U7hE6aq3lkaK9SQRA17cOQWS TQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:45:14 2026 by rpki-client