$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: 5CU/WU+cPu417a5GtXK724abwqlCiHIns1YtC205ZYk= Subject key identifier: 99:67:E1:1C:1D:95:D2:A3:D5:47:39:85:03:A3:5E:95:6F:77:DF:94 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 462EADFEF0A4D5BC21A3A9F941DE09E195FEC4B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 012A Signing time: Wed 25 Mar 2026 07:27:44 +0000 Manifest this update: Wed 25 Mar 2026 07:21:26 +0000 Manifest next update: Thu 26 Mar 2026 10:27:26 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 2: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: FUqMzowYPr9qOc/HcwhBMagE5aMnF5L1nbVcUDpruKI=) 4: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2e:ad:fe:f0:a4:d5:bc:21:a3:a9:f9:41:de:09:e1:95:fe:c4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Mar 25 07:21:26 2026 GMT Not After : Mar 26 10:27:26 2026 GMT Subject: CN=9967E11C1D95D2A3D547398503A35E956F77DF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:2e:02:03:63:ad:6b:36:5c:2b:7f:a7:bb: 15:54:81:28:80:a5:e5:22:6f:3d:e9:20:be:71:f2: 7a:9b:d8:31:d4:e6:eb:43:1a:bb:39:2c:74:b8:65: 28:f1:d6:ba:a4:79:8f:58:59:e8:1e:2c:97:61:70: 52:85:9f:db:db:9b:30:6d:4c:cb:ec:04:5e:35:7e: 99:d8:33:2d:5f:1f:b5:e4:89:45:fe:31:9f:c4:99: 88:5c:1c:46:d3:7a:f7:88:2d:40:0f:6c:7d:cb:27: a4:81:7d:b7:19:97:58:21:c1:89:32:1f:b6:f2:a4: 3a:65:c3:58:de:3c:a2:df:c5:b0:93:92:53:f8:a1: 05:2f:45:3d:2c:88:23:75:ca:37:4e:c9:1e:ae:f6: 96:b6:89:82:f1:b7:94:ec:ee:4f:19:c5:7f:1a:54: 80:dc:fd:ce:84:d9:fc:fc:f8:10:f3:f4:e4:17:55: 50:46:3f:44:ec:78:f5:da:60:1d:69:40:e1:14:be: e4:8a:88:7f:3b:a2:83:f6:02:38:a9:36:d6:e5:26: 23:8c:04:cc:2b:c2:fa:f9:13:dd:1c:0f:d7:49:cb: b5:9c:54:d7:7f:f3:43:ab:e1:20:e5:13:29:3b:de: 51:02:89:1e:f6:1c:59:af:5c:a4:e2:86:e1:c5:d2: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:E1:1C:1D:95:D2:A3:D5:47:39:85:03:A3:5E:95:6F:77:DF:94 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0b:c8:88:e2:89:94:df:33:db:08:41:be:85:e8:ed:8b:5f: 46:1d:ff:4f:7e:f3:e0:30:e3:32:63:83:47:cc:1e:65:d5:3c: 59:2f:6f:69:b8:fa:79:66:6d:ef:40:a9:07:54:c7:af:cd:77: b7:f9:1f:7d:69:1e:23:23:a0:79:b6:bc:71:7c:f3:a9:4d:64: 09:74:e9:76:19:87:88:b7:49:00:1f:cc:bd:16:4c:5d:9a:0e: 56:39:8b:31:b9:c6:c6:fd:33:13:49:bd:10:21:62:0c:de:c9: dd:51:68:8f:7b:9a:f9:00:7d:fc:21:81:02:81:a8:bc:2d:ce: 41:0a:4c:66:9f:27:7b:91:76:57:73:c3:a9:70:fc:63:17:7d: b0:79:4d:b5:1e:e4:dc:a5:a4:7b:02:72:5c:39:3a:40:8d:de: 76:b1:33:02:e2:b6:82:0f:40:d9:83:16:05:35:d0:15:d0:5c: 6d:c5:fd:2d:91:31:8c:ef:44:69:18:dd:f0:70:a2:5b:c5:96: 31:9a:35:df:41:89:2c:52:20:45:63:61:89:3e:5b:ce:9b:d3: 66:bb:c8:4c:81:ce:e6:75:dc:a3:09:f3:5d:51:11:3a:d8:60: 3e:3e:3a:35:90:29:fc:2f:a0:e5:24:82:f5:10:3b:34:4a:c5: 0e:7b:ab:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURi6t/vCk1bwho6n5Qd4J4ZX+xLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjAzMjUwNzIxMjZaFw0yNjAzMjYxMDI3MjZaMDMxMTAvBgNV BAMTKDk5NjdFMTFDMUQ5NUQyQTNENTQ3Mzk4NTAzQTM1RTk1NkY3N0RGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQji4CA2OtazZcK3+nuxVUgSiA peUibz3pIL5x8nqb2DHU5utDGrs5LHS4ZSjx1rqkeY9YWegeLJdhcFKFn9vbmzBt TMvsBF41fpnYMy1fH7XkiUX+MZ/EmYhcHEbTeveILUAPbH3LJ6SBfbcZl1ghwYky H7bypDplw1jePKLfxbCTklP4oQUvRT0siCN1yjdOyR6u9pa2iYLxt5Ts7k8ZxX8a VIDc/c6E2fz8+BDz9OQXVVBGP0TsePXaYB1pQOEUvuSKiH87ooP2AjipNtblJiOM BMwrwvr5E90cD9dJy7WcVNd/80Or4SDlEyk73lECiR72HFmvXKTihuHF0rPVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmWfhHB2V0qPVRzmFA6NelW9335QwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWC8iI 4omU3zPbCEG+hejti19GHf9PfvPgMOMyY4NHzB5l1TxZL29puPp5Zm3vQKkHVMev zXe3+R99aR4jI6B5trxxfPOpTWQJdOl2GYeIt0kAH8y9Fkxdmg5WOYsxucbG/TMT Sb0QIWIM3sndUWiPe5r5AH38IYECgai8Lc5BCkxmnyd7kXZXc8OpcPxjF32weU21 HuTcpaR7AnJcOTpAjd52sTMC4raCD0DZgxYFNdAV0Fxtxf0tkTGM70RpGN3wcKJb xZYxmjXfQYksUiBFY2GJPlvOm9Nmu8hMgc7mddyjCfNdURE62GA+Pjo1kCn8L6Dl JIL1EDs0SsUOe6sI -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:12 2026 by rpki-client