$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: DxDsAEug9lLsGxkDb2Xwu1GSjoDOEMcpgK4lEyZ+CPw= Subject key identifier: FA:EF:15:C5:6F:8A:3E:57:49:60:68:F6:93:16:D0:1C:CE:1A:0F:FB Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 2E474856714D0B4C9D86AAB6E89074809093E24B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 03CE Signing time: Wed 25 Mar 2026 03:17:19 +0000 Manifest this update: Wed 25 Mar 2026 03:12:19 +0000 Manifest next update: Thu 26 Mar 2026 07:13:19 +0000 Files and hashes: 1: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: AXmjH0xVCBh5zMiXlalR91O2dk3WHhALgobsluZhr90=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 5: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 07:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:47:48:56:71:4d:0b:4c:9d:86:aa:b6:e8:90:74:80:90:93:e2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Mar 25 03:12:19 2026 GMT Not After : Mar 26 07:13:19 2026 GMT Subject: CN=FAEF15C56F8A3E57496068F69316D01CCE1A0FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:54:e6:a0:c4:67:1f:0b:29:56:76:92:c7: 4b:d3:f9:0c:bb:25:65:2a:1d:ba:e2:25:ad:8c:2a: 6f:2d:f3:31:40:ce:84:c1:98:e6:1b:5f:bc:87:9f: bd:8e:6d:24:ae:d0:7e:17:58:a3:54:b6:63:dd:f4: d3:c3:1e:00:d8:de:59:85:ac:31:7f:5d:2f:c1:c6: 93:46:0a:5f:2b:4f:ad:ec:a3:92:6d:77:6a:31:15: 50:02:5e:78:33:00:db:d5:0b:da:31:bc:33:f6:49: 96:76:24:5e:9b:9a:d3:93:7e:40:9c:a5:6f:ab:88: 3a:ca:a6:50:99:8a:ba:ea:5f:b8:6f:8c:77:b1:ce: 45:ae:55:28:16:fb:16:35:80:7e:82:b3:f8:fe:d0: a1:98:11:1e:14:98:44:b2:e6:48:c8:be:c1:4c:07: e9:b7:c8:a7:e3:01:d7:23:12:5c:68:b0:3a:e5:5f: f3:58:4b:c3:80:f2:42:23:10:3f:85:c0:35:4e:3f: 22:b0:51:91:40:ab:cf:88:eb:50:72:cc:e2:ef:b7: a5:f4:bc:9a:71:fb:8f:1c:0e:5e:15:d7:5b:72:ad: 39:59:1a:ad:81:f2:dc:2e:a6:57:10:17:12:93:a4: 18:f0:35:e1:69:84:6c:a4:3f:cd:bc:c6:21:75:c4: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EF:15:C5:6F:8A:3E:57:49:60:68:F6:93:16:D0:1C:CE:1A:0F:FB X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:36:7e:56:05:4a:41:57:ab:cb:de:07:f3:e0:f3:fb:c5:d4: 92:b1:a6:f2:f9:58:7d:46:59:8b:cd:f4:11:bd:97:46:90:a7: 47:0c:fa:70:0c:14:8d:3b:5e:4c:4b:7e:66:6d:e8:21:d6:df: 34:a6:5b:c0:a9:e0:9b:a1:66:4f:d4:b0:d9:8d:c3:3f:75:87: 6f:74:57:19:a1:7a:96:65:fb:ed:08:b4:66:72:ce:ef:70:20: 7c:d7:06:0f:a2:e9:eb:85:6f:4b:0f:31:bf:91:94:85:07:89: b2:54:18:75:06:2a:aa:a0:eb:74:cd:4e:bd:ad:eb:16:aa:63: 8f:d5:73:94:52:ec:f7:85:d3:a0:08:52:fc:27:87:0c:36:81: 87:ad:aa:9b:23:68:79:9b:ec:57:55:0f:ce:e5:b2:82:b0:93: b2:7e:7a:e6:80:1d:87:dd:06:9b:66:38:9f:89:94:5b:a1:37: cd:45:a5:22:7f:48:97:cf:1f:e1:d1:f4:e8:69:0c:4f:b2:73: 47:45:da:43:37:38:f5:0e:3a:ac:58:dc:e8:73:61:29:9c:7f: 44:fe:4b:b0:32:6a:40:b0:72:12:01:d3:23:f8:28:e0:cc:f1: bb:a3:f7:9b:d9:a7:a0:5a:7d:46:92:ee:10:b2:31:73:d8:b9: 37:e9:48:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULkdIVnFNC0ydhqq26JB0gJCT4kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAzMjUwMzEyMTlaFw0yNjAzMjYwNzEzMTlaMDMxMTAvBgNV BAMTKEZBRUYxNUM1NkY4QTNFNTc0OTYwNjhGNjkzMTZEMDFDQ0UxQTBGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ11TmoMRnHwspVnaSx0vT+Qy7 JWUqHbriJa2MKm8t8zFAzoTBmOYbX7yHn72ObSSu0H4XWKNUtmPd9NPDHgDY3lmF rDF/XS/BxpNGCl8rT63so5Jtd2oxFVACXngzANvVC9oxvDP2SZZ2JF6bmtOTfkCc pW+riDrKplCZirrqX7hvjHexzkWuVSgW+xY1gH6Cs/j+0KGYER4UmESy5kjIvsFM B+m3yKfjAdcjElxosDrlX/NYS8OA8kIjED+FwDVOPyKwUZFAq8+I61ByzOLvt6X0 vJpx+48cDl4V11tyrTlZGq2B8twuplcQFxKTpBjwNeFphGykP828xiF1xNazAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+u8VxW+KPldJYGj2kxbQHM4aD/swHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgNn5W BUpBV6vL3gfz4PP7xdSSsaby+Vh9RlmLzfQRvZdGkKdHDPpwDBSNO15MS35mbegh 1t80plvAqeCboWZP1LDZjcM/dYdvdFcZoXqWZfvtCLRmcs7vcCB81wYPounrhW9L DzG/kZSFB4myVBh1BiqqoOt0zU69resWqmOP1XOUUuz3hdOgCFL8J4cMNoGHraqb I2h5m+xXVQ/O5bKCsJOyfnrmgB2H3QabZjifiZRboTfNRaUif0iXzx/h0fToaQxP snNHRdpDNzj1DjqsWNzoc2EpnH9E/kuwMmpAsHISAdMj+CjgzPG7o/eb2aegWn1G ku4QsjFz2Lk36Ujc -----END CERTIFICATE-----Generated at Wed Mar 25 23:16:53 2026 by rpki-client