$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: 7rmq/eLqyl8hWVpjf9tEaINz7OSC7GJxD2k6OwX+koQ= Subject key identifier: 6D:EE:C3:03:A3:01:F2:D4:4D:0B:E9:E3:FA:7B:C4:E1:D3:93:3B:88 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 47E6C6F8C5DA08B4548914BF7DD26473602BD652 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 55 Signing time: Wed 25 Mar 2026 14:00:33 +0000 Manifest this update: Wed 25 Mar 2026 13:55:33 +0000 Manifest next update: Thu 26 Mar 2026 17:44:33 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: j658dNKXZndelhU9HTbdIRQqY/NmJbyuWtzTtghdaK8=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e203533383038.roa (hash: u1C6r96nrZzsP725w3rwf3Ro6iVU6GABz5hYSkgtUzk=) 3: 326130663a316363353a323630303a3a2f34302d3438203d3e203434333234.roa (hash: cDN3mdERPdV9IfirHT4t4rSQ9VN0hgzy5abYthSlLfc=) 4: 326130663a316363353a323630303a3a2f34302d3438203d3e203430393239.roa (hash: AqtXmTicudA3Fkf+9R1A3gsAjXpjiZwqZjr19JM/uqo=) 5: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e6:c6:f8:c5:da:08:b4:54:89:14:bf:7d:d2:64:73:60:2b:d6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Mar 25 13:55:33 2026 GMT Not After : Mar 26 17:44:33 2026 GMT Subject: CN=6DEEC303A301F2D44D0BE9E3FA7BC4E1D3933B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:d4:87:ee:f0:4a:96:56:be:4e:07:77:8a: 6d:d4:27:0f:b3:8a:99:b5:e8:10:00:d3:ab:c3:9b: bf:ca:87:3f:ca:31:1e:be:09:3a:17:aa:18:f3:cc: 56:92:ed:16:12:1a:5d:02:13:f2:24:42:90:a4:64: c4:04:50:8b:67:46:47:c3:39:0a:ee:57:d5:1d:21: 4e:6f:a2:38:d1:a4:a0:37:82:f9:55:4a:50:c9:2d: 03:bc:12:1f:1e:37:59:d3:79:6d:34:62:08:03:fb: 84:73:57:be:85:09:d6:5d:a4:0e:c6:e1:2b:7d:51: 88:b5:43:be:d8:e3:1c:00:63:72:78:52:23:e0:51: 99:4f:72:c8:9e:a3:08:20:f5:d2:e0:30:73:36:4c: cb:6a:e9:35:ff:0b:d3:17:f5:43:62:69:30:ba:9d: 1b:5e:28:f3:3a:78:f6:f0:53:a0:f6:5f:b8:48:4f: f7:3a:9d:97:76:eb:b0:d6:3a:33:e1:17:89:69:d9: 83:7b:f8:4c:69:11:0c:bf:2a:c5:41:5c:49:9f:4d: ad:98:df:7e:6e:63:c2:50:41:3f:a7:8a:21:b3:d4: a3:79:ea:7f:b3:5d:ca:31:16:6f:32:9a:73:db:87: 0b:d2:a2:50:5f:c6:fc:db:57:2e:74:a4:1a:27:8a: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EE:C3:03:A3:01:F2:D4:4D:0B:E9:E3:FA:7B:C4:E1:D3:93:3B:88 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:35:1c:df:7f:38:56:fb:f5:26:d0:93:21:0c:74:fb:1f:be: f1:38:1f:c7:cf:b6:ee:c8:22:e4:bd:aa:4d:0c:aa:28:44:ac: c3:f9:3f:a2:5e:4c:5a:3c:79:59:48:75:17:9a:33:f9:fa:6f: ce:e0:c5:6f:fa:f2:fb:03:42:78:77:18:6e:08:d0:f0:e3:e3: 09:bd:4b:0b:7b:8c:20:43:0e:7e:a7:09:c9:e4:a6:d6:6d:ee: 7b:11:54:3b:b2:6e:35:0c:fe:67:87:6e:51:9b:8a:a1:10:ae: 67:5d:c7:e1:be:26:c5:5b:0d:a8:13:2a:75:7a:db:af:3f:4f: c2:6c:32:c1:ef:71:9b:3f:68:cd:92:5b:1a:4d:bc:4c:be:71: 32:32:e6:92:97:f4:32:6b:e7:a4:64:c0:16:8a:ff:45:d6:1c: 10:17:82:a0:41:12:69:39:8d:2e:eb:72:37:83:ce:08:34:81: 23:27:37:d0:af:2e:cc:5b:2e:b3:9c:de:30:49:ab:7b:e0:8c: a7:b1:1f:56:68:fc:df:53:e5:dd:c8:61:ad:9f:36:99:af:67: 6f:eb:60:a7:4b:21:7a:fe:78:a9:c3:be:d1:c0:25:50:55:0b: 63:0f:a3:5e:64:04:75:be:91:98:8c:b2:e4:19:7c:3a:47:dc: 43:da:e3:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR+bG+MXaCLRUiRS/fdJkc2Ar1lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjAzMjUxMzU1MzNaFw0yNjAzMjYxNzQ0MzNaMDMxMTAvBgNV BAMTKDZERUVDMzAzQTMwMUYyRDQ0RDBCRTlFM0ZBN0JDNEUxRDM5MzNCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+dSH7vBKlla+Tgd3im3UJw+z ipm16BAA06vDm7/Khz/KMR6+CToXqhjzzFaS7RYSGl0CE/IkQpCkZMQEUItnRkfD OQruV9UdIU5vojjRpKA3gvlVSlDJLQO8Eh8eN1nTeW00YggD+4RzV76FCdZdpA7G 4St9UYi1Q77Y4xwAY3J4UiPgUZlPcsieowgg9dLgMHM2TMtq6TX/C9MX9UNiaTC6 nRteKPM6ePbwU6D2X7hIT/c6nZd267DWOjPhF4lp2YN7+ExpEQy/KsVBXEmfTa2Y 335uY8JQQT+niiGz1KN56n+zXcoxFm8ymnPbhwvSolBfxvzbVy50pBonig7lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbe7DA6MB8tRNC+nj+nvE4dOTO4gwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYNRzf fzhW+/Um0JMhDHT7H77xOB/Hz7buyCLkvapNDKooRKzD+T+iXkxaPHlZSHUXmjP5 +m/O4MVv+vL7A0J4dxhuCNDw4+MJvUsLe4wgQw5+pwnJ5KbWbe57EVQ7sm41DP5n h25Rm4qhEK5nXcfhvibFWw2oEyp1etuvP0/CbDLB73GbP2jNklsaTbxMvnEyMuaS l/Qya+ekZMAWiv9F1hwQF4KgQRJpOY0u63I3g84INIEjJzfQry7MWy6znN4wSat7 4IynsR9WaPzfU+XdyGGtnzaZr2dv62CnSyF6/nipw77RwCVQVQtjD6NeZAR1vpGY jLLkGXw6R9xD2uO2 -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:54 2026 by rpki-client