$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: 5/AHnnprlHcY/FIodgz8I5RTzFZeqRlZEU+UPeKM8Og= Subject key identifier: 3B:8D:D3:40:7E:5A:CF:60:EF:39:2B:79:FA:E9:86:13:2E:D8:74:5F Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 1B0C0401B2B5F6D65F0CA1B46D2B0617D60DC40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: 01D6 Signing time: Thu 26 Mar 2026 12:43:43 +0000 Manifest this update: Thu 26 Mar 2026 12:38:43 +0000 Manifest next update: Fri 27 Mar 2026 13:33:43 +0000 Files and hashes: 1: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: x6k0tJRGbN+u19JZCKx4Pi/W+g8CiSFBJO5w1+jRs58=) 2: 39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa (hash: ppvL8ONO4VguHbFDU1oqqBQJIOG4rM+WNvZk8GO+7nk=) 3: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=) 4: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=) 5: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=) 6: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=) 7: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=) 8: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=) 9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=) 10: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=) 11: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=) 12: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=) 13: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=) 14: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=) 15: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=) 16: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: 7k+RlsbEAvDIHt5Is/doveA233QJ/dZMJOIDSEPgfCs=) 17: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:04:01:b2:b5:f6:d6:5f:0c:a1:b4:6d:2b:06:17:d6:0d:c4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Mar 26 12:38:43 2026 GMT Not After : Mar 27 13:33:43 2026 GMT Subject: CN=3B8DD3407E5ACF60EF392B79FAE986132ED8745F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:42:24:fb:1d:56:9a:61:50:15:b8:9c:87: 7e:80:37:1d:74:21:60:b6:dd:72:44:ef:6b:52:26: 02:32:f9:d3:51:5b:a5:e0:f9:2a:5e:17:fb:8e:f7: de:a8:7b:9b:ae:bc:44:df:ed:70:01:ea:bd:29:93: 05:af:4f:29:a6:de:94:9f:6b:5e:9c:f8:df:34:42: 18:14:9f:5c:79:7f:bc:e6:2f:1d:9d:1c:aa:93:19: 9c:aa:29:45:74:fd:80:27:89:3d:e0:75:76:be:93: 17:57:b8:6d:1d:99:a2:e5:68:13:c4:ae:b5:14:a8: 60:16:ff:9b:43:5a:00:fc:8c:e6:54:03:bd:a5:06: 22:ab:15:e9:0c:c6:be:57:72:68:14:79:31:dd:68: be:c3:1d:04:1c:3f:a9:4e:dd:7e:35:56:06:cd:cf: 9f:d4:98:c3:75:e8:c3:4e:9a:72:31:22:dd:fe:47: 4c:b5:98:9c:81:2a:44:a2:95:23:e1:36:81:0a:d9: ad:5f:72:6a:f3:0d:06:9b:f7:fd:30:7d:34:35:fc: f9:5b:86:73:02:5b:f6:af:25:95:70:9b:e3:d9:3d: b1:63:df:14:d0:1a:6a:44:45:6a:c2:53:76:d7:5b: 87:e7:78:88:4e:64:8e:ab:86:33:d3:9c:95:b3:a0: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8D:D3:40:7E:5A:CF:60:EF:39:2B:79:FA:E9:86:13:2E:D8:74:5F X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fb:d9:e9:e6:09:47:3c:3d:90:3c:7c:3b:e0:cf:55:4f:56: cb:a4:c9:4f:cd:8f:ea:87:19:c4:22:bd:ab:81:27:1e:b7:d4: ee:a9:19:26:40:aa:1d:f2:dc:33:51:c0:f9:e3:27:26:01:92: 25:f6:a1:06:a0:e0:fc:ad:d6:84:0e:a1:ba:5a:28:53:84:e4: 69:34:6e:fb:c1:f6:16:fe:61:07:71:69:97:2d:84:d6:34:30: d1:61:12:dc:c9:c0:c9:28:fd:a0:e2:ea:e8:dc:47:f2:62:af: 07:2d:df:73:4d:33:22:31:0c:5a:5c:2b:0a:88:3c:56:9c:22: 5e:12:ee:40:0b:07:15:fe:e1:2a:2b:26:2d:83:93:ff:0f:ab: 47:72:97:e2:7d:7a:0e:f6:fc:1f:4d:ab:87:ae:90:da:fa:71: 64:0f:2f:e8:49:0f:a3:54:f2:68:36:e2:56:88:3f:d1:37:e5: 2f:77:74:8d:84:b4:b9:9e:2d:48:14:35:8e:cc:be:f9:dc:e5: 8d:66:58:5c:bf:7d:6e:7f:93:7f:22:3a:e2:ed:98:00:5e:a7: 0f:1c:47:88:9b:d0:8e:6f:5c:ec:81:ef:9f:11:52:73:f4:6e: b3:0c:da:73:30:5f:dc:6c:c6:da:e0:d7:52:be:62:0e:5e:3a: dd:ca:20:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGwwEAbK19tZfDKG0bSsGF9YNxA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNjAzMjYxMjM4NDNaFw0yNjAzMjcxMzMzNDNaMDMxMTAvBgNV BAMTKDNCOEREMzQwN0U1QUNGNjBFRjM5MkI3OUZBRTk4NjEzMkVEODc0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiK0Ik+x1WmmFQFbich36ANx10 IWC23XJE72tSJgIy+dNRW6Xg+SpeF/uO996oe5uuvETf7XAB6r0pkwWvTymm3pSf a16c+N80QhgUn1x5f7zmLx2dHKqTGZyqKUV0/YAniT3gdXa+kxdXuG0dmaLlaBPE rrUUqGAW/5tDWgD8jOZUA72lBiKrFekMxr5XcmgUeTHdaL7DHQQcP6lO3X41VgbN z5/UmMN16MNOmnIxIt3+R0y1mJyBKkSilSPhNoEK2a1fcmrzDQab9/0wfTQ1/Plb hnMCW/avJZVwm+PZPbFj3xTQGmpERWrCU3bXW4fneIhOZI6rhjPTnJWzoGP7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUO43TQH5az2DvOSt5+umGEy7YdF8wHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/vZ6eYJRzw9kDx8O+DP VU9Wy6TJT82P6ocZxCK9q4EnHrfU7qkZJkCqHfLcM1HA+eMnJgGSJfahBqDg/K3W hA6hulooU4TkaTRu+8H2Fv5hB3Fply2E1jQw0WES3MnAySj9oOLq6NxH8mKvBy3f c00zIjEMWlwrCog8VpwiXhLuQAsHFf7hKismLYOT/w+rR3KX4n16Dvb8H02rh66Q 2vpxZA8v6EkPo1TyaDbiVog/0TflL3d0jYS0uZ4tSBQ1jsy++dzljWZYXL99bn+T fyI64u2YAF6nDxxHiJvQjm9c7IHvnxFSc/RuswzaczBf3GzG2uDXUr5iDl463cog Tg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:49 2026 by rpki-client