$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: juMgSrFdXbTOhlTQhVcBZ3EijQouOnED62HxmBRh7PE= Subject key identifier: BA:60:3A:31:D1:C8:86:9E:8F:4B:72:6A:17:4B:14:B0:AF:BA:1D:A1 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 0DAD57C7F2ACEF2700E5F1B9FF5760D0427B07F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0574 Signing time: Wed 25 Mar 2026 17:46:54 +0000 Manifest this update: Wed 25 Mar 2026 17:41:54 +0000 Manifest next update: Thu 26 Mar 2026 19:35:54 +0000 Files and hashes: 1: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 3: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 4: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 5: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 6: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 7: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) 9: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 10: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: xnQprPJSWSXL2g/fE5+WsAdzQGOxccLA8HNc6NyjGtI=) 11: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 12: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 13: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ad:57:c7:f2:ac:ef:27:00:e5:f1:b9:ff:57:60:d0:42:7b:07:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Mar 25 17:41:54 2026 GMT Not After : Mar 26 19:35:54 2026 GMT Subject: CN=BA603A31D1C8869E8F4B726A174B14B0AFBA1DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:3d:cf:87:b8:60:24:c5:7e:0f:6d:dd:47: 6f:e9:68:63:c1:ed:bb:ed:d9:0f:6d:1f:9c:d6:af: 12:b9:86:99:30:ca:15:32:9c:3d:49:82:b0:3a:37: 46:66:f2:53:9e:a9:82:3e:e5:a0:4c:eb:cb:9d:47: 29:b7:36:1f:17:e4:56:35:19:9e:43:02:d7:4f:8e: 3e:02:6f:3e:d4:ac:f3:62:a5:09:7a:03:be:84:6c: aa:f9:37:80:5b:3d:68:9a:e3:2a:2d:2c:3d:f7:8e: 80:c1:8c:15:24:1f:27:29:88:69:34:04:49:f1:ba: c7:b4:8e:f7:38:06:25:1b:76:ae:98:99:67:f4:b0: b3:79:fa:57:95:15:0f:ca:23:03:7d:a6:d3:1d:17: b6:62:99:67:fc:37:38:0a:5d:81:e0:78:42:64:3e: a2:35:1f:d7:1f:d5:72:a3:37:d2:8a:46:0f:72:ae: ed:68:26:c2:f4:24:ff:c8:ae:f2:80:1f:3c:b3:2b: ef:5a:5f:13:88:dc:31:47:ad:59:cd:e1:b4:c8:e9: 15:26:78:de:4a:c1:dc:a9:3a:16:2e:da:54:bd:3a: 2c:94:44:02:30:e4:a9:4e:85:33:6c:66:d6:30:28: f4:fd:7a:59:0c:f6:15:c8:23:30:c8:62:fd:f0:8b: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:3A:31:D1:C8:86:9E:8F:4B:72:6A:17:4B:14:B0:AF:BA:1D:A1 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:0a:81:d4:89:75:03:92:6a:42:80:f6:c4:dd:b8:b1:a6: 0c:c5:68:09:99:4d:bb:a6:9f:79:40:75:51:82:c7:eb:24:e8: 61:92:31:e6:9e:74:02:aa:29:f7:83:df:12:3b:62:d1:d9:b4: 59:57:0b:ce:75:e4:5d:c4:63:0e:72:e8:da:90:b1:1c:29:49: 64:92:65:46:4b:72:ff:d0:50:d1:c3:af:21:c8:60:59:e5:01: 89:3c:5d:1c:6a:5e:e0:79:76:8b:1c:cc:ef:93:e0:3a:73:67: c4:35:0f:f7:9e:2b:39:d8:74:99:b5:7f:97:47:13:91:72:91: 63:18:22:40:59:4d:a4:f2:6a:f0:c0:06:79:c5:a4:1a:a8:c2: 6d:0e:49:b5:63:9b:67:11:45:1f:57:71:6e:f4:53:00:1c:58: 29:ed:33:53:1e:69:2d:58:7f:1f:68:aa:93:e0:e1:95:5e:21: f6:05:f5:b0:ae:f5:35:03:b6:d2:8e:6e:04:e9:4e:cb:b9:89: 0d:bb:c2:ca:ad:5c:50:84:2f:02:24:f4:89:5b:8d:18:b1:28: 11:05:83:68:f0:4b:ea:36:c0:d1:c8:cb:4b:89:e4:10:26:8b: 25:3d:71:3e:2e:53:c7:5b:6f:2c:cf:bc:c7:0a:c5:79:75:45: 54:77:a5:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDa1Xx/Ks7ycA5fG5/1dg0EJ7B/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjAzMjUxNzQxNTRaFw0yNjAzMjYxOTM1NTRaMDMxMTAvBgNV BAMTKEJBNjAzQTMxRDFDODg2OUU4RjRCNzI2QTE3NEIxNEIwQUZCQTFEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qD3Ph7hgJMV+D23dR2/paGPB 7bvt2Q9tH5zWrxK5hpkwyhUynD1JgrA6N0Zm8lOeqYI+5aBM68udRym3Nh8X5FY1 GZ5DAtdPjj4Cbz7UrPNipQl6A76EbKr5N4BbPWia4yotLD33joDBjBUkHycpiGk0 BEnxuse0jvc4BiUbdq6YmWf0sLN5+leVFQ/KIwN9ptMdF7ZimWf8NzgKXYHgeEJk PqI1H9cf1XKjN9KKRg9yru1oJsL0JP/IrvKAHzyzK+9aXxOI3DFHrVnN4bTI6RUm eN5KwdypOhYu2lS9OiyURAIw5KlOhTNsZtYwKPT9elkM9hXIIzDIYv3wi6xbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUumA6MdHIhp6PS3JqF0sUsK+6HaEwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZQKgdSJdQOSakKA9sTd uLGmDMVoCZlNu6afeUB1UYLH6yToYZIx5p50Aqop94PfEjti0dm0WVcLznXkXcRj DnLo2pCxHClJZJJlRkty/9BQ0cOvIchgWeUBiTxdHGpe4Hl2ixzM75PgOnNnxDUP 954rOdh0mbV/l0cTkXKRYxgiQFlNpPJq8MAGecWkGqjCbQ5JtWObZxFFH1dxbvRT ABxYKe0zUx5pLVh/H2iqk+DhlV4h9gX1sK71NQO20o5uBOlOy7mJDbvCyq1cUIQv AiT0iVuNGLEoEQWDaPBL6jbA0cjLS4nkECaLJT1xPi5Tx1tvLM+8xwrFeXVFVHel cA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:56 2026 by rpki-client