$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: PlN3OCyinLCXMGTeJPu1kcE+YYlf/mRkcW9PyYfqi44= Subject key identifier: FA:8D:B7:53:1A:4E:F6:F9:0C:1D:90:B4:F0:CA:F7:26:49:FF:7C:7F Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 5F0CF3961EEE1D1164FB4409572155669FE0CB65 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: BB Signing time: Wed 25 Mar 2026 08:02:01 +0000 Manifest this update: Wed 25 Mar 2026 07:57:01 +0000 Manifest next update: Thu 26 Mar 2026 11:49:01 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: A/lLG7+CFyCm5IwyuMV2/RuFRN2SxEgsmeCBiIfT3D8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 11:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0c:f3:96:1e:ee:1d:11:64:fb:44:09:57:21:55:66:9f:e0:cb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Mar 25 07:57:01 2026 GMT Not After : Mar 26 11:49:01 2026 GMT Subject: CN=FA8DB7531A4EF6F90C1D90B4F0CAF72649FF7C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:8b:59:92:1f:33:ea:06:9c:51:81:e5:6d: 97:bb:40:99:c6:2a:69:19:51:26:fc:79:82:b3:f4: 6c:cb:e7:fa:6e:46:3f:96:62:c6:0f:2f:fd:4d:05: 40:94:b1:3d:21:20:9e:f6:18:bc:0a:62:1b:44:f1: f8:d7:96:0b:cb:60:48:88:04:4b:80:c6:4b:3d:2e: 4d:77:84:95:3e:31:08:8e:bd:95:2e:5c:84:84:8e: 7d:c8:6c:39:3b:6b:75:90:36:e7:ad:79:f6:71:ed: c6:15:f3:36:c8:b9:99:b1:8a:7a:6d:01:e2:8b:84: a9:78:87:80:73:0a:44:45:55:f1:44:94:8a:60:ba: 6f:14:3c:2b:e0:45:7b:6a:8f:68:1c:29:97:99:6e: 28:da:8b:ff:dd:0c:75:f1:e0:8d:1c:26:ed:a6:f3: 21:0c:77:92:22:1d:ad:a5:c5:82:e3:a7:c6:7b:de: 63:90:98:41:bb:35:d8:e9:0b:38:57:18:14:15:de: 24:0b:28:be:54:c6:76:44:cd:b6:ec:94:0e:0a:f3: a9:fe:27:22:38:c0:b5:ab:19:ab:a5:d4:2f:e0:2d: 13:8f:8b:02:0b:29:75:41:ce:c3:18:49:fc:d3:aa: dd:fb:fe:5c:c0:ee:90:53:9d:ae:1b:e9:ca:45:4d: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8D:B7:53:1A:4E:F6:F9:0C:1D:90:B4:F0:CA:F7:26:49:FF:7C:7F X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b7:f2:e7:9c:91:d7:53:d4:51:bb:6a:48:34:29:c0:f2:2f: 87:12:b1:39:ae:fd:63:ed:b6:9b:a8:39:39:50:df:9d:e2:90: e1:86:d2:da:f0:0d:12:b2:8f:ba:cd:b1:cb:8f:41:9b:7a:9f: 8c:57:8b:91:f1:9d:d8:93:37:16:3d:8f:75:3a:35:7c:57:60: 8a:d8:26:a5:ad:2f:59:a5:29:f4:69:31:bb:f1:9b:97:32:5f: b0:22:4d:60:1b:c4:1e:d3:d6:cc:c9:98:94:50:43:42:14:32: b3:c4:73:67:4b:9d:2b:8f:e8:f8:c5:5b:2d:4e:47:37:21:27: ca:3b:c2:8f:ba:75:ab:43:82:30:87:9a:10:32:68:fb:b1:6f: 0a:e4:b3:7f:36:3a:2c:2d:43:eb:f7:1d:4b:e7:74:39:25:ad: 96:0b:68:e3:96:12:ff:77:a9:f5:73:7d:bd:f3:aa:e6:45:fc: f1:e2:a4:28:b1:6c:4c:5d:11:f5:a0:e6:e2:64:67:b2:bf:04: e4:b4:90:0b:e2:5a:fc:e1:41:32:6c:2b:5b:42:05:b2:74:76: 15:02:19:68:3c:a4:58:1f:de:e3:8c:2b:cc:ad:11:fd:82:18: b0:99:7a:4b:79:7d:55:ca:e5:d3:3b:13:d6:d2:6d:76:f5:d7: 7d:03:d0:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXwzzlh7uHRFk+0QJVyFVZp/gy2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAzMjUwNzU3MDFaFw0yNjAzMjYxMTQ5MDFaMDMxMTAvBgNV BAMTKEZBOERCNzUzMUE0RUY2RjkwQzFEOTBCNEYwQ0FGNzI2NDlGRjdDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZF4tZkh8z6gacUYHlbZe7QJnG KmkZUSb8eYKz9GzL5/puRj+WYsYPL/1NBUCUsT0hIJ72GLwKYhtE8fjXlgvLYEiI BEuAxks9Lk13hJU+MQiOvZUuXISEjn3IbDk7a3WQNuetefZx7cYV8zbIuZmxinpt AeKLhKl4h4BzCkRFVfFElIpgum8UPCvgRXtqj2gcKZeZbijai//dDHXx4I0cJu2m 8yEMd5IiHa2lxYLjp8Z73mOQmEG7NdjpCzhXGBQV3iQLKL5UxnZEzbbslA4K86n+ JyI4wLWrGaul1C/gLROPiwILKXVBzsMYSfzTqt37/lzA7pBTna4b6cpFTdIrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+o23UxpO9vkMHZC08Mr3Jkn/fH8wHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBt/Ln nJHXU9RRu2pINCnA8i+HErE5rv1j7babqDk5UN+d4pDhhtLa8A0Sso+6zbHLj0Gb ep+MV4uR8Z3YkzcWPY91OjV8V2CK2CalrS9ZpSn0aTG78ZuXMl+wIk1gG8Qe09bM yZiUUENCFDKzxHNnS50rj+j4xVstTkc3ISfKO8KPunWrQ4Iwh5oQMmj7sW8K5LN/ NjosLUPr9x1L53Q5Ja2WC2jjlhL/d6n1c32986rmRfzx4qQosWxMXRH1oObiZGey vwTktJAL4lr84UEybCtbQgWydHYVAhloPKRYH97jjCvMrRH9ghiwmXpLeX1VyuXT OxPW0m129dd9A9CQ -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:48 2026 by rpki-client