$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json) Hash identifier: z2DW/8SZ7YScff2GTg481g6B61ByEdKwxPr+kBYKk/g= Subject key identifier: B2:E4:96:A1:A5:BB:8C:4A:6E:57:56:0A:6D:BE:C1:EE:BB:F4:95:CE Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 58F8679BB3553523C3241E3BC2E00D30337FDE15 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 06:35:50 +0000 Manifest this update: Thu 26 Mar 2026 06:30:50 +0000 Manifest next update: Fri 27 Mar 2026 08:20:50 +0000 Files and hashes: 1: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=) 2: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=) 3: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: cxp+h5ZBzmVI8/drvsL+CHNwyScLOwGE+YgFV9HlWS4=) 4: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=) 5: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=) 6: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=) 7: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=) 8: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=) 9: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=) 10: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=) 11: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=) 12: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f8:67:9b:b3:55:35:23:c3:24:1e:3b:c2:e0:0d:30:33:7f:de:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Mar 26 06:30:50 2026 GMT Not After : Mar 27 08:20:50 2026 GMT Subject: CN=B2E496A1A5BB8C4A6E57560A6DBEC1EEBBF495CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:73:19:db:0a:4d:60:51:9e:4d:bf:19:f1: c3:5d:57:79:20:e2:25:6e:72:e3:47:a5:af:70:7d: ab:25:12:71:2c:c9:60:18:f5:82:f1:21:a2:db:4c: 2b:4f:fc:71:dd:65:26:82:ab:61:0c:3d:6d:36:4c: a8:d1:4b:fe:06:c1:e3:f3:13:31:f3:82:79:81:76: 84:fe:5e:bd:8b:8b:5b:0a:17:69:28:f7:05:ac:6b: be:8a:71:dd:47:37:a7:fb:c0:72:7c:11:6d:a1:e9: 35:3e:5e:dd:48:08:d9:18:4f:b6:cb:dc:b7:85:d9: 31:37:fe:d0:44:b8:d2:47:5b:b3:cc:9a:9c:ea:71: 57:36:74:89:81:7d:fc:2d:b1:af:84:0e:f6:f6:ba: 9d:fc:26:63:71:90:2c:a9:ac:0a:98:63:c1:4b:ba: 76:bb:4e:d7:a7:05:ce:ee:88:d9:9f:02:74:f6:6f: 74:8f:f9:da:a2:f9:e0:75:4c:27:d7:26:ff:9c:1f: e2:39:bb:4c:81:72:1c:8c:93:42:ae:0b:99:0b:87: 64:38:17:6e:38:92:af:3c:3e:f3:29:ff:33:72:50: b2:f2:6f:99:df:22:af:ce:1e:c1:4a:c8:82:10:3a: ce:29:78:92:c2:a2:f2:8d:a4:cf:5d:c3:03:c5:21: 9c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:96:A1:A5:BB:8C:4A:6E:57:56:0A:6D:BE:C1:EE:BB:F4:95:CE X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5a:70:1e:d1:f0:6b:e4:b1:4f:96:d8:9e:98:30:48:8f:fa: b9:2a:e1:3e:a0:58:2f:a9:f6:93:d8:20:f6:4a:7c:db:42:cd: e5:69:15:b6:cd:09:54:ed:69:3a:a5:8d:1f:9d:56:6e:eb:b5: 7b:3f:34:89:87:4d:a1:bb:d6:00:70:f9:4c:2d:df:3e:fe:f5: e1:97:51:8e:fb:54:0a:cd:37:4d:c9:d3:9e:0d:36:9e:a4:d8: 78:83:0d:29:92:dc:5c:9e:1e:a9:c8:02:a6:43:74:59:95:ba: 03:9a:ba:05:7f:9b:5f:59:96:64:ec:42:5d:c7:37:13:fb:22: e1:e5:81:00:8c:2e:57:26:d3:9a:27:6a:17:93:6d:0d:70:fd: 9c:11:e0:f1:9a:33:06:2c:87:56:56:cf:9c:46:37:8a:fd:bd: 84:47:e7:3f:65:e8:fa:8d:6c:b5:71:bd:d4:a8:0d:8a:9e:e4: 09:da:c2:19:20:c8:93:6e:bc:5a:4c:16:5f:0d:64:8e:97:28: 98:0d:9b:d8:58:96:2b:48:03:63:f4:f9:73:0d:98:16:3f:98: be:c5:a7:a9:8b:10:75:42:c3:d7:85:06:0c:8a:60:d1:e7:59: 81:f9:f5:81:9f:4c:40:74:60:16:a4:83:95:63:ce:9e:f3:c1: 3c:8d:8f:51 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWPhnm7NVNSPDJB47wuANMDN/3hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAzMjYwNjMwNTBaFw0yNjAzMjcwODIwNTBaMDMxMTAvBgNV BAMTKEIyRTQ5NkExQTVCQjhDNEE2RTU3NTYwQTZEQkVDMUVFQkJGNDk1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpznMZ2wpNYFGeTb8Z8cNdV3kg 4iVucuNHpa9wfaslEnEsyWAY9YLxIaLbTCtP/HHdZSaCq2EMPW02TKjRS/4GwePz EzHzgnmBdoT+Xr2Li1sKF2ko9wWsa76Kcd1HN6f7wHJ8EW2h6TU+Xt1ICNkYT7bL 3LeF2TE3/tBEuNJHW7PMmpzqcVc2dImBffwtsa+EDvb2up38JmNxkCyprAqYY8FL una7TtenBc7uiNmfAnT2b3SP+dqi+eB1TCfXJv+cH+I5u0yBchyMk0KuC5kLh2Q4 F244kq88PvMp/zNyULLyb5nfIq/OHsFKyIIQOs4peJLCovKNpM9dwwPFIZwvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsuSWoaW7jEpuV1YKbb7B7rv0lc4wHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5 OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvWnAe 0fBr5LFPltiemDBIj/q5KuE+oFgvqfaT2CD2SnzbQs3laRW2zQlU7Wk6pY0fnVZu 67V7PzSJh02hu9YAcPlMLd8+/vXhl1GO+1QKzTdNydOeDTaepNh4gw0pktxcnh6p yAKmQ3RZlboDmroFf5tfWZZk7EJdxzcT+yLh5YEAjC5XJtOaJ2oXk20NcP2cEeDx mjMGLIdWVs+cRjeK/b2ER+c/Zej6jWy1cb3UqA2KnuQJ2sIZIMiTbrxaTBZfDWSO lyiYDZvYWJYrSANj9PlzDZgWP5i+xaepixB1QsPXhQYMimDR51mB+fWBn0xAdGAW pIOVY86e88E8jY9R -----END CERTIFICATE-----Generated at Thu Mar 26 11:00:52 2026 by rpki-client