$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: IaNseXatSMbkK7pcX21GPHtucB8ZC/wZdWm/MRvg4PU= Subject key identifier: 9C:32:D9:90:14:A9:F1:3B:6B:CF:A4:61:9E:24:4C:9B:9C:DD:F7:FE Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 5172B5BD60329FA70119DF2F3A16BCF2539DDE1F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: 015A Signing time: Thu 26 Mar 2026 01:18:56 +0000 Manifest this update: Thu 26 Mar 2026 01:13:56 +0000 Manifest next update: Fri 27 Mar 2026 02:21:56 +0000 Files and hashes: 1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: Em5jZEM0Z1oJ1UofjCQGnCq9Pql9aI7sK4Y5UkTysUg=) 2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: G0igdqXtM1rNoej9fAtkJq69Cn8VT91eNr/EyQDbrO0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 02:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:72:b5:bd:60:32:9f:a7:01:19:df:2f:3a:16:bc:f2:53:9d:de:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Mar 26 01:13:56 2026 GMT Not After : Mar 27 02:21:56 2026 GMT Subject: CN=9C32D99014A9F13B6BCFA4619E244C9B9CDDF7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:d3:b9:70:72:11:3f:f0:70:26:25:1d:7f: eb:a8:ae:52:2b:bc:3a:14:5f:14:c2:2a:87:74:7d: 8d:24:c0:07:66:8a:77:dc:37:a7:ec:d0:bd:55:e5: 25:8e:68:69:10:4a:40:aa:a0:5e:d8:25:94:8b:d0: 54:89:2b:45:20:93:58:5b:97:87:a2:a0:1e:78:3e: d0:1d:8c:70:53:de:13:62:28:08:0c:e1:a5:8a:cc: 9b:e0:df:b1:5d:f3:3f:ce:23:6b:b8:40:bd:2b:8a: 7b:f3:d4:11:12:e9:51:75:56:80:c6:41:27:cc:e9: 46:7a:73:4f:90:d2:bb:d4:95:d4:3b:26:6b:64:28: 06:17:62:b1:73:05:58:9b:82:df:32:bd:13:9d:52: 36:27:16:67:cf:08:8f:8f:17:b8:c3:af:c6:d6:27: 3c:e4:98:df:3c:f3:3b:51:e7:20:91:bd:7f:43:1a: cc:7b:bd:86:65:0b:6b:e3:08:4c:f5:78:0d:e9:f9: cb:b0:f9:d6:b7:37:ac:84:af:5f:d2:bd:e0:b2:85: d7:dd:32:67:38:64:3a:a0:17:34:57:6c:c5:b7:58: d2:4b:d2:5a:32:84:de:29:d4:ca:a1:12:20:65:26: 10:02:cb:36:a8:09:a1:7d:87:81:08:ab:3d:65:99: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:D9:90:14:A9:F1:3B:6B:CF:A4:61:9E:24:4C:9B:9C:DD:F7:FE X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ba:2e:2a:9c:20:b9:af:05:7d:2e:a6:ab:9c:b6:e2:67:12: 37:95:d9:90:06:f6:e4:1a:6f:6a:9d:16:1e:d2:99:0c:c8:cc: 53:3e:7f:2f:79:cd:c0:88:c8:a0:87:2d:ce:25:c9:df:c7:6e: 03:36:54:c9:0c:7f:9e:c0:c4:a4:3a:f9:e8:05:00:98:10:f3: 51:a5:a4:c0:c1:c8:b9:ae:4e:c8:8f:c8:9e:dd:03:4e:92:95: ad:58:88:f8:f9:11:d7:33:51:18:80:d2:7b:bc:38:25:5f:e3: a3:23:b0:50:14:98:4b:04:c1:93:d6:14:7d:91:e1:1e:f5:89: 70:8a:f1:40:1d:61:a7:4b:56:d6:17:85:86:07:4e:71:a2:cb: fc:2b:4c:6b:4f:57:64:f8:15:bb:39:2e:4a:cb:91:ca:ee:a8: 21:9e:d8:5c:9b:32:e5:ac:4b:1a:dc:86:8a:98:c9:7b:b9:e9: 25:1f:db:3d:2f:38:1a:55:b0:1f:12:04:4a:64:14:70:a5:ce: 61:fb:f3:ae:36:fd:6f:2c:1b:1c:6e:f4:35:4d:f7:07:72:49: 02:76:2f:44:04:d8:c5:1c:5d:bf:73:97:69:58:7c:e9:96:76: 1b:58:3b:c5:58:6c:47:16:8f:58:62:d4:ab:3c:0b:45:94:ea: d5:97:93:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUXK1vWAyn6cBGd8vOha88lOd3h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNjAzMjYwMTEzNTZaFw0yNjAzMjcwMjIxNTZaMDMxMTAvBgNV BAMTKDlDMzJEOTkwMTRBOUYxM0I2QkNGQTQ2MTlFMjQ0QzlCOUNEREY3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJStO5cHIRP/BwJiUdf+uorlIr vDoUXxTCKod0fY0kwAdminfcN6fs0L1V5SWOaGkQSkCqoF7YJZSL0FSJK0Ugk1hb l4eioB54PtAdjHBT3hNiKAgM4aWKzJvg37Fd8z/OI2u4QL0rinvz1BES6VF1VoDG QSfM6UZ6c0+Q0rvUldQ7JmtkKAYXYrFzBVibgt8yvROdUjYnFmfPCI+PF7jDr8bW JzzkmN888ztR5yCRvX9DGsx7vYZlC2vjCEz1eA3p+cuw+da3N6yEr1/SveCyhdfd Mmc4ZDqgFzRXbMW3WNJL0loyhN4p1MqhEiBlJhACyzaoCaF9h4EIqz1lmQgbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnDLZkBSp8Ttrz6RhniRMm5zd9/4wHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnui4q nCC5rwV9LqarnLbiZxI3ldmQBvbkGm9qnRYe0pkMyMxTPn8vec3AiMighy3OJcnf x24DNlTJDH+ewMSkOvnoBQCYEPNRpaTAwci5rk7Ij8ie3QNOkpWtWIj4+RHXM1EY gNJ7vDglX+OjI7BQFJhLBMGT1hR9keEe9YlwivFAHWGnS1bWF4WGB05xosv8K0xr T1dk+BW7OS5Ky5HK7qghnthcmzLlrEsa3IaKmMl7ueklH9s9LzgaVbAfEgRKZBRw pc5h+/OuNv1vLBscbvQ1TfcHckkCdi9EBNjFHF2/c5dpWHzplnYbWDvFWGxHFo9Y YtSrPAtFlOrVl5No -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:50 2026 by rpki-client