$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json) Hash identifier: utMM4vwD2vKvBS534l0/rC/0rRaRepIPJpIiBffuQNk= Subject key identifier: 0D:45:01:01:F5:93:B7:6D:8B:D1:D0:49:4A:5D:D0:30:17:AE:02:A5 Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 765509DBFC8E24EB4882CBA81209C2926A5A3193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft Manifest number: 51 Signing time: Wed 25 Mar 2026 23:27:08 +0000 Manifest this update: Wed 25 Mar 2026 23:22:08 +0000 Manifest next update: Fri 27 Mar 2026 01:55:08 +0000 Files and hashes: 1: 3139332e32342e312e302f32342d3234203d3e203633313939.roa (hash: 1Lzj3CDpDvCfZvv2HFemfqnFSTbx9h8ExNHpj1MEQno=) 2: 3139332e32342e312e302f32342d3234203d3e203332383738.roa (hash: jrRiDyxuR6Y4UYjX7YX3ahpfr+PzoLBKEUrFS+P5Bgw=) 3: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=) 4: 3139332e32342e312e302f32342d3234203d3e20313938303837.roa (hash: xqDNmc2DsmlGnt/1Pyc+CoYv437wXLEjNSBfRTcYo48=) 5: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: EdEA+0PJXveoSIwPu/n+FPugFY/zFh9wyRop4FSYZsw=) 6: 3139332e32342e312e302f32342d3234203d3e203236373639.roa (hash: hWxkzR8ONtTYSmmBfJjY2JeiO+vwIeT6zjeMYES2dHU=) 7: 3139332e32342e342e302f32342d3234203d3e203539343332.roa (hash: 2szFDzNMiU++d5K+UAqAdfyAdV0l7//47s1tM+CWoPQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:55:09:db:fc:8e:24:eb:48:82:cb:a8:12:09:c2:92:6a:5a:31:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Mar 25 23:22:08 2026 GMT Not After : Mar 27 01:55:08 2026 GMT Subject: CN=0D450101F593B76D8BD1D0494A5DD03017AE02A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:e8:7b:7e:f0:55:b4:74:95:c2:d2:81:c9: 50:67:a3:5d:d9:9c:8d:27:ae:0c:60:a0:f1:21:b0: 09:1b:1f:7b:56:2e:69:7a:19:a1:8e:ea:20:bf:82: e8:6a:fe:6f:74:0e:d2:5e:d4:25:eb:4b:65:fa:3d: 1f:e3:37:38:e0:51:c6:19:fa:13:42:3d:c2:bf:8e: 10:de:de:3a:f1:b0:22:07:8c:94:e3:5c:26:44:9d: f0:55:bf:a1:00:b7:20:00:b3:3b:c1:d0:47:38:6b: 2e:07:74:57:eb:7d:9d:09:ea:7f:67:12:86:30:b5: ec:65:1c:bb:36:57:ed:48:56:97:5a:a0:b4:38:1e: 29:28:3d:5c:fb:49:ce:6e:a4:35:9e:49:49:88:55: 0f:e8:93:33:74:27:9e:ca:3c:5f:04:9f:27:18:47: 7e:37:0a:9d:1f:d7:27:27:ca:71:54:6f:e3:cf:44: 55:4c:ec:76:49:51:a3:f6:67:53:27:1e:f3:e5:20: b1:df:0d:fb:9a:b0:3e:04:13:48:c4:4d:aa:f4:61: c5:85:14:28:d3:ab:d4:d3:90:f8:45:88:4a:bf:e0: 75:40:fc:51:86:f0:5a:f6:2c:ac:8f:4a:36:d3:db: 18:65:17:dd:f8:9a:d0:c6:d2:87:d6:ae:23:51:be: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:01:01:F5:93:B7:6D:8B:D1:D0:49:4A:5D:D0:30:17:AE:02:A5 X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fa:f4:21:40:39:db:0e:16:0f:c5:d3:be:21:f0:7a:f4:fd: 0d:3f:27:a3:51:e6:a6:9d:2c:0f:75:6c:b9:8a:d8:fc:cf:99: 02:fb:7b:f1:b5:fb:6a:0f:c6:d4:2b:83:21:b7:4c:d6:d7:fc: 93:fc:eb:9d:97:cf:80:b2:a3:1c:87:13:bb:24:4d:dc:88:20: 91:73:b7:8b:84:2b:d2:15:5a:3f:46:df:ad:8a:e3:2f:96:2a: c2:07:62:f8:27:e2:66:58:00:e0:b7:b3:c7:cb:75:f1:fa:25: f8:46:76:f8:38:8d:a1:17:cd:25:b0:9d:dd:4c:33:dc:95:e4: 8c:2c:99:da:f9:29:77:e9:b8:fb:de:2b:cb:a8:d5:26:0b:ab: bf:d4:49:d2:a8:62:3c:36:bf:76:c0:b5:40:c8:64:ed:50:9e: 45:35:84:b3:55:29:b8:58:af:13:28:f6:d3:d3:82:37:1d:52: 81:ff:dc:a6:71:ed:e3:5e:56:3c:22:ff:7a:e8:06:54:29:d9: 45:b2:e1:86:68:32:6e:65:d0:8f:7f:e3:f5:1a:fa:87:61:9b: ec:68:c4:27:38:12:92:20:f3:2d:6c:6d:2d:ee:26:b4:4b:27: cf:45:24:6e:45:12:e2:3e:a3:f5:4a:af:60:9e:ea:cc:6d:e6: 10:c1:ef:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdlUJ2/yOJOtIgsuoEgnCkmpaMZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAzMjUyMzIyMDhaFw0yNjAzMjcwMTU1MDhaMDMxMTAvBgNV BAMTKDBENDUwMTAxRjU5M0I3NkQ4QkQxRDA0OTRBNUREMDMwMTdBRTAyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2uh7fvBVtHSVwtKByVBno13Z nI0nrgxgoPEhsAkbH3tWLml6GaGO6iC/guhq/m90DtJe1CXrS2X6PR/jNzjgUcYZ +hNCPcK/jhDe3jrxsCIHjJTjXCZEnfBVv6EAtyAAszvB0Ec4ay4HdFfrfZ0J6n9n EoYwtexlHLs2V+1IVpdaoLQ4HikoPVz7Sc5upDWeSUmIVQ/okzN0J57KPF8EnycY R343Cp0f1ycnynFUb+PPRFVM7HZJUaP2Z1MnHvPlILHfDfuasD4EE0jETar0YcWF FCjTq9TTkPhFiEq/4HVA/FGG8Fr2LKyPSjbT2xhlF934mtDG0ofWriNRvuBvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDUUBAfWTt22L0dBJSl3QMBeuAqUwHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NWU2NDhjMy0x NDgxLTQ3OGYtODNlMi1iMjUxMjdmYTk1Y2QvMC8xRjg0QTI0ODFEMjgwREUwQTEw MzU5ODI3NkRCMEM5NTQxOTNDNzU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfr0IUA52w4WD8XTviHw evT9DT8no1Hmpp0sD3VsuYrY/M+ZAvt78bX7ag/G1CuDIbdM1tf8k/zrnZfPgLKj HIcTuyRN3IggkXO3i4Qr0hVaP0bfrYrjL5Yqwgdi+CfiZlgA4Lezx8t18fol+EZ2 +DiNoRfNJbCd3Uwz3JXkjCyZ2vkpd+m4+94ry6jVJgurv9RJ0qhiPDa/dsC1QMhk 7VCeRTWEs1UpuFivEyj209OCNx1Sgf/cpnHt415WPCL/eugGVCnZRbLhhmgybmXQ j3/j9Rr6h2Gb7GjEJzgSkiDzLWxtLe4mtEsnz0UkbkUS4j6j9UqvYJ7qzG3mEMHv IA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:33:26 2026 by rpki-client