$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: DnGB9Pm5nXmLjQj2IK/UhRqjM4L8u+hD/pil4I3Yj5A= Subject key identifier: 59:D0:74:C2:48:23:52:30:E1:55:D0:54:D9:B2:31:4A:3A:A2:B0:01 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 07BEA6C540390C7193DBD55453532C0EE53AA7E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0369 Signing time: Wed 25 Mar 2026 07:22:06 +0000 Manifest this update: Wed 25 Mar 2026 07:17:06 +0000 Manifest next update: Thu 26 Mar 2026 09:41:06 +0000 Files and hashes: 1: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 2: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: YPXYV86zezpYAJEcJKGGoL8rTrkG8OgkvtmBU+JK6kA=) 6: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 7: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 8: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 9: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 09:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:be:a6:c5:40:39:0c:71:93:db:d5:54:53:53:2c:0e:e5:3a:a7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Mar 25 07:17:06 2026 GMT Not After : Mar 26 09:41:06 2026 GMT Subject: CN=59D074C248235230E155D054D9B2314A3AA2B001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:fa:8f:96:77:b1:30:2d:9a:c8:0c:8f:3e: 64:30:c2:bd:0a:29:a8:17:d4:3e:07:e4:20:6f:a2: c2:a9:80:fa:d0:4d:d5:f8:ed:7c:40:fb:de:d6:af: 60:c7:e9:00:65:79:f3:a5:c1:05:10:e0:8b:d0:fd: 69:fb:9d:19:d9:f1:47:b0:6b:ec:93:e4:2e:07:7c: 9d:7e:ea:2c:ef:85:6a:25:46:d2:f4:07:5b:8b:20: 82:a5:6e:e0:df:63:6b:2a:ae:0e:d5:b7:49:28:df: 1c:2d:b2:ba:b0:39:a8:74:6e:b3:72:8e:84:21:99: f0:ee:23:b8:99:7a:8b:b2:99:52:b6:dd:e8:3f:91: 6e:58:4c:18:e9:de:c4:47:53:1d:05:d1:91:f6:35: d5:80:f9:49:58:bd:5c:10:b9:70:f0:08:d7:2b:fa: 5f:5a:33:82:43:e0:22:a0:b8:61:59:3b:dc:dc:c9: f0:ce:3e:22:76:ff:e5:ad:0f:09:7a:a6:bf:70:21: 60:81:10:ad:5c:e8:74:ce:88:1e:96:65:7c:0d:52: 11:d3:aa:bd:e6:79:18:84:a0:61:10:58:28:28:98: af:38:8e:be:ce:1b:30:31:5a:31:30:c2:55:f6:1d: 5e:3a:32:cb:26:5e:33:9b:57:5c:55:86:5a:9e:94: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:74:C2:48:23:52:30:E1:55:D0:54:D9:B2:31:4A:3A:A2:B0:01 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:4e:e8:a3:87:b5:9f:72:83:85:48:4c:85:fb:7b:b9:fd: c7:88:8f:07:6d:fe:0a:a3:a0:44:bd:84:71:24:4f:04:7a:d9: 2d:70:b7:d6:b2:3a:04:1a:23:04:cc:82:4e:67:8b:ee:83:50: 51:bf:2d:f9:71:ac:54:a8:38:dd:d6:6d:f2:95:bf:66:f3:9c: 1d:8f:9d:af:cd:97:81:ff:b3:8f:b7:b9:48:cf:bb:b2:c4:7a: 33:f5:fe:a0:e7:47:73:b3:43:29:08:8a:36:c5:09:3e:be:84: 50:65:be:55:c6:d8:d6:80:3b:9f:5d:fd:84:8b:b7:12:53:3d: 3a:df:28:ef:69:6a:cf:dd:03:10:a5:4a:68:99:57:05:a0:01: 6b:e4:70:28:b1:49:fe:da:52:37:d9:4d:de:9b:6d:a8:a2:1b: 16:a4:a4:90:d1:d5:b5:d9:e3:00:89:62:a3:88:c2:ab:19:23: e3:a0:23:dc:43:9c:44:7e:47:79:b5:25:55:cf:c5:66:06:2a: 52:f8:a7:bf:6e:f7:df:14:77:5b:e5:8f:55:ed:7e:f9:26:4e: 58:9f:20:f2:33:a2:63:01:b9:8e:0b:0a:a1:bc:a5:8e:28:0b: cf:58:17:67:2c:b9:0d:e9:92:66:d2:a1:fa:e1:f8:a1:12:e9: 4d:2d:3e:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB76mxUA5DHGT29VUU1MsDuU6p+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjAzMjUwNzE3MDZaFw0yNjAzMjYwOTQxMDZaMDMxMTAvBgNV BAMTKDU5RDA3NEMyNDgyMzUyMzBFMTU1RDA1NEQ5QjIzMTRBM0FBMkIwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hPqPlnexMC2ayAyPPmQwwr0K KagX1D4H5CBvosKpgPrQTdX47XxA+97Wr2DH6QBlefOlwQUQ4IvQ/Wn7nRnZ8Uew a+yT5C4HfJ1+6izvhWolRtL0B1uLIIKlbuDfY2sqrg7Vt0ko3xwtsrqwOah0brNy joQhmfDuI7iZeouymVK23eg/kW5YTBjp3sRHUx0F0ZH2NdWA+UlYvVwQuXDwCNcr +l9aM4JD4CKguGFZO9zcyfDOPiJ2/+WtDwl6pr9wIWCBEK1c6HTOiB6WZXwNUhHT qr3meRiEoGEQWCgomK84jr7OGzAxWjEwwlX2HV46MssmXjObV1xVhlqelJr9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWdB0wkgjUjDhVdBU2bIxSjqisAEwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAchk7o o4e1n3KDhUhMhft7uf3HiI8Hbf4Ko6BEvYRxJE8EetktcLfWsjoEGiMEzIJOZ4vu g1BRvy35caxUqDjd1m3ylb9m85wdj52vzZeB/7OPt7lIz7uyxHoz9f6g50dzs0Mp CIo2xQk+voRQZb5VxtjWgDufXf2Ei7cSUz063yjvaWrP3QMQpUpomVcFoAFr5HAo sUn+2lI32U3em22oohsWpKSQ0dW12eMAiWKjiMKrGSPjoCPcQ5xEfkd5tSVVz8Vm BipS+Ke/bvffFHdb5Y9V7X75Jk5YnyDyM6JjAbmOCwqhvKWOKAvPWBdnLLkN6ZJm 0qH64fihEulNLT7N -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:41 2026 by rpki-client