$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: G8i6729mKKOEBxl44/BA1iTM27lYGBhzQUePMMGJoNQ= Subject key identifier: 94:7D:82:E7:E3:6F:BD:56:D1:6B:9B:5B:AB:49:4E:64:33:45:0D:1C Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 5B2E3FCAB113DB7D6D01F447B67A176DC993D6F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 020A Signing time: Wed 25 Mar 2026 22:58:56 +0000 Manifest this update: Wed 25 Mar 2026 22:53:56 +0000 Manifest next update: Fri 27 Mar 2026 02:00:56 +0000 Files and hashes: 1: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 2: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 3: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 4: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=) 5: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 6: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 7: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 8: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 9: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 10: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 11: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 12: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 13: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: a5EHez9jxYQ7wrSyk1zyfp81NZX3N+4i7KIO+yfx8JE=) 14: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:3f:ca:b1:13:db:7d:6d:01:f4:47:b6:7a:17:6d:c9:93:d6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Mar 25 22:53:56 2026 GMT Not After : Mar 27 02:00:56 2026 GMT Subject: CN=947D82E7E36FBD56D16B9B5BAB494E6433450D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:30:33:60:98:2c:fa:32:54:f4:1d:c3:37: 25:96:8e:94:0b:ab:38:ee:7e:16:7d:be:99:3a:b0: e5:0f:bf:84:83:0e:40:0f:b7:1b:4b:a0:c0:79:d3: c0:64:62:ed:bb:dc:4e:35:3c:7d:47:5b:4e:85:22: 7d:86:20:e5:8a:19:8d:fe:fc:14:33:42:ba:2f:d7: 94:d4:45:9f:60:8d:f2:49:3d:e8:89:5f:89:f4:22: d2:2f:98:c5:f0:8d:97:c8:ca:c6:87:09:9f:57:65: 8d:23:6e:ec:ef:7a:a7:ef:e5:a3:04:36:c4:45:2e: 72:0a:9f:54:11:93:b7:4b:bb:06:e7:66:96:30:a0: 24:76:f7:12:60:da:eb:1d:8c:72:2b:9c:59:6f:7f: 86:d5:f9:ed:67:9b:c0:d9:a6:8c:65:64:80:7c:20: 15:fd:7e:c0:d0:a7:cd:41:35:e4:9e:f4:d2:8d:1a: e1:a6:01:34:96:95:d4:38:2b:5f:82:7c:48:0f:5c: 59:0b:8e:4f:74:82:2a:98:3a:e6:81:48:69:b4:f7: b6:df:1d:b8:fb:8c:a1:ab:19:88:f7:a0:3e:17:bd: 50:b0:85:ad:27:f0:18:7d:a7:3a:80:72:1f:1d:40: 6b:1a:50:06:24:6e:36:b8:a5:26:1e:83:ef:db:58: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7D:82:E7:E3:6F:BD:56:D1:6B:9B:5B:AB:49:4E:64:33:45:0D:1C X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:78:1b:e1:b0:a9:09:65:9c:e0:e8:a7:30:1d:9e:42:5b:0b: 8f:29:0c:27:eb:a8:59:3d:20:02:43:21:51:14:86:eb:7b:b7: 8a:33:f6:e0:b6:0c:54:6f:80:ab:4a:ea:81:05:4c:89:75:a1: 3a:29:06:2a:d6:04:5b:c7:a2:f3:ca:7a:0a:af:22:73:8c:a2: 7c:b7:d8:42:b6:b4:75:0d:b7:e8:8b:30:61:1d:03:61:ee:6f: c3:fe:55:49:3f:dd:46:38:6c:ea:5f:61:5b:d9:1e:f3:76:db: d2:78:b6:05:ca:17:95:ab:29:15:49:df:f8:a4:8a:a3:a9:bb: ed:8b:b3:f9:98:f1:a3:7a:98:29:08:89:01:02:58:02:da:eb: 05:e2:2c:cc:c4:65:16:a4:25:a9:55:86:6b:f8:49:2d:80:34: 41:ca:79:0b:87:30:db:8a:60:08:95:2e:4b:78:f1:69:ca:c0: 7e:48:5f:8d:cc:dd:e5:5f:98:c8:b9:22:2e:d8:a2:13:c7:cb: bb:5c:93:64:ca:1c:df:08:9e:8a:63:94:e5:f2:61:91:6f:d3: ae:cb:ca:49:e1:35:b2:19:67:c8:4e:4d:3a:38:c8:e9:83:bd: 51:af:e2:c5:0b:e9:52:bb:f8:39:77:15:91:c0:e8:5a:dc:3d: 77:d1:2c:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWy4/yrET231tAfRHtnoXbcmT1vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjAzMjUyMjUzNTZaFw0yNjAzMjcwMjAwNTZaMDMxMTAvBgNV BAMTKDk0N0Q4MkU3RTM2RkJENTZEMTZCOUI1QkFCNDk0RTY0MzM0NTBEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pDAzYJgs+jJU9B3DNyWWjpQL qzjufhZ9vpk6sOUPv4SDDkAPtxtLoMB508BkYu273E41PH1HW06FIn2GIOWKGY3+ /BQzQrov15TURZ9gjfJJPeiJX4n0ItIvmMXwjZfIysaHCZ9XZY0jbuzveqfv5aME NsRFLnIKn1QRk7dLuwbnZpYwoCR29xJg2usdjHIrnFlvf4bV+e1nm8DZpoxlZIB8 IBX9fsDQp81BNeSe9NKNGuGmATSWldQ4K1+CfEgPXFkLjk90giqYOuaBSGm097bf Hbj7jKGrGYj3oD4XvVCwha0n8Bh9pzqAch8dQGsaUAYkbja4pSYeg+/bWNIVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlH2C5+NvvVbRa5tbq0lOZDNFDRwwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXgb4bCpCWWc4OinMB2e QlsLjykMJ+uoWT0gAkMhURSG63u3ijP24LYMVG+Aq0rqgQVMiXWhOikGKtYEW8ei 88p6Cq8ic4yifLfYQra0dQ236IswYR0DYe5vw/5VST/dRjhs6l9hW9ke83bb0ni2 BcoXlaspFUnf+KSKo6m77Yuz+Zjxo3qYKQiJAQJYAtrrBeIszMRlFqQlqVWGa/hJ LYA0Qcp5C4cw24pgCJUuS3jxacrAfkhfjczd5V+YyLkiLtiiE8fLu1yTZMoc3wie imOU5fJhkW/TrsvKSeE1shlnyE5NOjjI6YO9Ua/ixQvpUrv4OXcVkcDoWtw9d9Es 3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:50:38 2026 by rpki-client