$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: htpXsCfQ2N+E5wTTESoqkTktyMBhuXuZX2T3VbtuQEM= Subject key identifier: 10:62:73:90:9A:D6:72:01:3D:A9:53:A6:0F:8A:09:30:1D:A1:A6:EC Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 6F3135E5606DE48CB552D7FA2CBEC1E8F8144A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0646 Signing time: Wed 25 Mar 2026 19:51:33 +0000 Manifest this update: Wed 25 Mar 2026 19:46:33 +0000 Manifest next update: Thu 26 Mar 2026 22:01:33 +0000 Files and hashes: 1: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=) 2: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=) 3: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 4: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=) 5: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=) 6: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 7: 36322e3139322e3137352e302f32342d3234203d3e20383334.roa (hash: CXFu2Cq4l1Pt5CpsrjXvO3i0tuOhdICytPNG5W/Eh0Q=) 8: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=) 9: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 10: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 11: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 12: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=) 13: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 14: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=) 15: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 16: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 17: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: vzJggFyjRM8OYjs2cpHS5MDsncLCeBdXwYjQL/6s5z0=) 18: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 19: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=) 20: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=) 21: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=) 22: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:31:35:e5:60:6d:e4:8c:b5:52:d7:fa:2c:be:c1:e8:f8:14:4a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Mar 25 19:46:33 2026 GMT Not After : Mar 26 22:01:33 2026 GMT Subject: CN=106273909AD672013DA953A60F8A09301DA1A6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:93:b5:75:cf:81:02:2a:68:ff:8d:7e:3a: 02:50:db:a0:3c:0e:58:b6:0b:86:92:c0:a0:00:5a: dc:dd:91:8c:67:93:f1:f7:27:9e:a3:95:22:a9:ac: 51:21:8d:63:0a:1f:e5:90:cf:c9:df:a5:41:07:7d: 2e:a8:7a:47:92:e6:84:e6:46:5a:28:cd:f3:0e:2e: 90:27:84:03:2a:86:9f:96:03:36:1e:32:43:82:f6: 76:f0:66:9d:21:dd:c0:f3:ce:4a:f3:18:2d:d9:f6: 2f:a8:00:fc:b0:ff:c2:8a:54:0b:96:23:6a:5f:e9: 76:df:c7:9e:2f:0e:82:a5:79:91:7d:d5:9c:ea:71: 18:c1:33:9b:01:62:83:2c:b5:8e:e6:a5:8a:9f:c1: c8:94:e6:67:3b:10:2a:fe:4b:5f:41:10:ce:73:bb: 63:e8:d7:0f:6c:53:4a:ed:ef:b2:22:06:da:ee:6e: 8d:55:c1:a6:b6:63:10:80:d5:35:cd:bc:df:51:79: 8f:82:e9:86:58:22:c8:7b:1b:38:c8:54:5a:9a:ee: 93:56:db:7e:89:7f:f3:db:b5:f6:55:bb:76:83:c0: 48:c4:1a:92:2d:19:bb:8c:71:08:2b:b2:f8:a7:53: f6:00:32:e5:b3:2f:22:01:39:ec:10:0c:08:16:ef: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:73:90:9A:D6:72:01:3D:A9:53:A6:0F:8A:09:30:1D:A1:A6:EC X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f1:af:02:f1:5c:d0:3f:66:ff:c0:e1:5d:21:9e:b9:d0:ad: 68:34:9a:2e:95:df:95:1f:1d:78:d5:9b:e9:30:16:00:d1:81: 49:b3:47:1a:31:76:0f:7c:96:ff:2d:53:d0:b1:8f:1b:06:de: 1c:98:ca:40:43:92:05:77:33:8b:8a:2a:fc:0c:e3:77:ab:b5: 2e:07:f8:eb:ce:e9:70:70:20:2b:e0:dd:02:81:20:d6:94:1d: 8c:bc:53:95:18:11:34:c1:ad:de:ed:fb:db:a9:43:3e:d8:b1: 76:9c:76:59:83:21:ab:c1:a2:d0:54:d6:6b:49:3b:a7:f1:16: 91:7c:77:26:e8:5b:c8:ce:ee:7d:a4:ff:fb:fb:89:b5:30:14: 69:59:1a:e2:6d:b8:b8:78:bd:55:44:72:69:12:18:cb:09:a4: 53:3d:d8:41:6a:82:2e:ac:e6:b3:a7:2a:c1:cd:32:0f:c4:7d: 36:52:7d:31:21:0d:94:32:42:ba:a6:8b:e9:c9:65:9b:fb:75: 2c:97:f0:e2:41:69:f8:be:d9:5a:18:3d:31:c6:5e:55:05:05: 02:a2:fd:b0:ad:56:f5:a0:ff:06:c2:b0:0f:e9:2b:14:6b:56: a6:0e:4b:b6:94:96:ce:52:fc:90:11:9d:90:a6:94:ef:ff:10: 9b:d1:22:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbzE15WBt5Iy1Utf6LL7B6PgUSnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNjAzMjUxOTQ2MzNaFw0yNjAzMjYyMjAxMzNaMDMxMTAvBgNV BAMTKDEwNjI3MzkwOUFENjcyMDEzREE5NTNBNjBGOEEwOTMwMURBMUE2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdpO1dc+BAipo/41+OgJQ26A8 Dli2C4aSwKAAWtzdkYxnk/H3J56jlSKprFEhjWMKH+WQz8nfpUEHfS6oekeS5oTm RloozfMOLpAnhAMqhp+WAzYeMkOC9nbwZp0h3cDzzkrzGC3Z9i+oAPyw/8KKVAuW I2pf6Xbfx54vDoKleZF91ZzqcRjBM5sBYoMstY7mpYqfwciU5mc7ECr+S19BEM5z u2Po1w9sU0rt77IiBtrubo1Vwaa2YxCA1TXNvN9ReY+C6YZYIsh7GzjIVFqa7pNW 236Jf/PbtfZVu3aDwEjEGpItGbuMcQgrsvinU/YAMuWzLyIBOewQDAgW73+pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEGJzkJrWcgE9qVOmD4oJMB2hpuwwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/GvAvFc0D9m/8DhXSGe udCtaDSaLpXflR8deNWb6TAWANGBSbNHGjF2D3yW/y1T0LGPGwbeHJjKQEOSBXcz i4oq/Azjd6u1Lgf4687pcHAgK+DdAoEg1pQdjLxTlRgRNMGt3u3726lDPtixdpx2 WYMhq8Gi0FTWa0k7p/EWkXx3JuhbyM7ufaT/+/uJtTAUaVka4m24uHi9VURyaRIY ywmkUz3YQWqCLqzms6cqwc0yD8R9NlJ9MSENlDJCuqaL6cllm/t1LJfw4kFp+L7Z Whg9McZeVQUFAqL9sK1W9aD/BsKwD+krFGtWpg5LtpSWzlL8kBGdkKaU7/8Qm9Ei 2w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:34 2026 by rpki-client